Mirror of git.yoctoproject.org/meta-virtualization https://git.enea.com/cgit/linux/meta-virtualization.git/atom?h=master 2026-03-19T13:25:15+00:00 2026-03-19T13:25:15+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2026-03-19T03:25:15+00:00 urn:sha1:6f733ac63f82cf6fdd58e2c36342495b1810c2d1 Bumping kubernetes to version v1.35.2-20-gb6f632ba56e, which comprises the following commits: b57e146aec7 cmd/kubeadm: ignore EINVAL error during unmount af6488c9d55 Use localhost image reference in PodObservedGenerationTracking test 61003ad140a drop publishing rules from dependencies.yaml on release branch b9be60a8c53 start scheduler after creating binding/non-binding slices 659d489e8dd dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first 02115b6ee1f Update CHANGELOG/CHANGELOG-1.35.md for v1.35.2 fdc9d74cbf2 Release commit for Kubernetes v1.35.2 1c0c911c3ca kubeadm: do not add learner member to etcd client endpoints d05c5065395 Fix flake TestDeviceTaintRule test by adjusting event hanlder status update logic Co-authored-by: Pohly <patrick.ohly@intel.com> 69d9b9ba0c4 Bump images and versions to go 1.25.7 and distroless iptables 2371267d2f2 add dockerized go cache to `make clean` de51841dbf7 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.1 8fea90b4524 Release commit for Kubernetes v1.35.1 bd399917375 fake client-go: un-deprecate NewSimpleClientset 9bfc5ec55a7 Apparently some EC2 images we use do not have /proc/net/nf_conntrack 33b34518bae test: cleanup from review 9aad4027810 test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments 701cf03e7bb test: Read /proc/net/nf_conntrack instead of using conntrack binary f12bff04ab6 csi: raise kubelet CSI init backoff to cover ~140s DNS delays 0ac5e229e14 test(ut/dra): add unit test for pod requesting prepared and new claims fe7f31bdcb1 test(e2e/dra): add test for pod requesting allocated and new claims 261b29aaa2f DRA integration: more pods per node, more parallelism 4885212b5b9 DRA integration: add "uses all resources" test 82b2a9d543f DRA scheduler: fix another root cause of double device allocation f296d4a9a46 DRA scheduler: fix one root cause of double device allocation a1f4382971f fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging a77bd451173 fix(expansion):Resolve the issue of UTF-8 characters being truncated, resulting in invalid UTF-8 06a4889419e Bump images and versions to go 1.25.6 and distroless iptables 1d79222fd52 kubelet(dra): fix multiple claims handling 0a9d14b01c4 Fix flaky TestApplyCRDuringCRDFinalization test 6d23c3f5403 Fix for preferred dualstack and required dualstack in winkernel proxier. ecc28f9d84a kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join' 72a5892dca9 kubectl: Fix panic in exec terminal size queue 353648793e1 bump go to 1.25.6 for CVE fixes 41e2e598dc9 kubeadm: fix a bug where kubeadm upgrade is failed if the content of the `kubeadm-flags.env` file is `KUBELET_KUBEADM_ARGS=""` 870c561aeea Fixes the flaky test (Issue #132953) 646e656a561 Switch ipvs and winkernel back to more regular forced syncs 69e322920ef mark QuotaMonitor as not running and invalidate monitors list 923cb5be10e Add unit test with CSIDriver.SELinuxMount=false 1f001b78805 Added e2e tests with disabled SELinux 2aeedbd767b Use only enqueuePod to add pods to the controller queue 44b1306e553 Fix policy of Pods with unknown SELinux label b1c7820806d selinux: add e2e test with a completed pod 7d9af54b956 Add new unit tests 6edce1ddecb Rework unit tests to builder pattern b84206f5af2 selinux: Do not report conflits with finished pods 9993d83107f refactoring: use a common function to enqueue Pod 802ed9eaa9f add StatefulSetAvailabilityCheck test 04da1f09e5d replace "k8s.io/klog/v2/ktesting" with "k8s.io/kubernetes/test/utils/ktesting" f8578e8d8b7 schedule pod availability checks at the correct time in StatefulSets e7c2ecf799f wire now (time) to the availability checks in the StatefulSet controller c52a5384b91 Fix race condition in DRA health e2e test pod status update 28fffe71c46 kubeadm: always retry Patch() Node API calls 2a663d9a3a2 Disable SchedulerAsyncAPICalls in v1.35 due to performance issues 62b0580535f kubeadm: do not sort extraArgs alpha-numerically 778b9a97713 Update vendored hnslib to v0.1.2 624047b4f31 refactor: Ensure metricIdentifier uses scheme for kind resolution b9d3560f7ea Fix apiserver_watch_events_sizes metric. 5345aa5a9b4 hack/lib/util.sh: support uutils' `date` command e63eccd82f1 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0 66452049f3d Release commit for Kubernetes v1.35.0 ea0dce1df19 CHANGELOG: Update directory for v1.32.11 release f58f81d9175 local-up-cluster.sh: support more recent containerd like 2.2 04d87a4b6e7 CHANGELOG: Update directory for v1.33.7 release f887a29fe22 CHANGELOG: Update directory for v1.34.3 release 612122f1d79 CHANGELOG: Update directory for v1.35.0-rc.1 release 91b0dfb7a49 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0-rc.1 08b536721bb Release commit for Kubernetes v1.35.0-rc.1 8d4237fde8a kubelet: Fix nil panic in podcertificatemanager 2c811fdd3a1 etcd: Update etcd to v3.6.6 dede2886a84 update publishing rules eae2a1bd5f5 Bump images and versions to go 1.25.5 and distroless iptables 3f42ca14011 downgrade reflector watchlist fallback log to V(4) 91e221b0471 DRA upgrade/downgrade: roll over only after -alpha.0 91368adbb55 Use transformer in consistency checker 76da8d6de02 Add unit tests for Data Consistency Detector 88c20d46a4e [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it c6fa10dbb7c add release-1.35 publishing bot rules 03066850f63 remove TestEtcdSupportedVersionLength, no longer relevant aa54ffa485a fix etcd versions after rotation 4a944d1a3fa add skew -2 version in SupportedEtcdVersion 51f614a1562 ipallocator: handle errors correctly de1b8e076a3 Fix MAP failure on objects with duplicate list items 76b76c2d523 CHANGELOG: Update directory for v1.35.0-rc.0 release 496077da56d Release commit for Kubernetes v1.35.0-rc.0 f8be8d320f3 drop rules for release-1.31 as it is EOL 7e3e9b6a64b update publishing rules 5302b929ae5 Bump golang.org/x/crypto to v0.45.0 fcdc4e24950 Remove TestWatchStreamSeparation from storage/cacher related tests 3661554f872 Bump images and versions to go 1.25.4 and distroless iptables dae1dbc1ff1 KEP-5311 - Revert RelaxedServiceNameValidation promote to beta 6bf802807b7 Make unique signerName per pod certificate test d80e73c0a9f cleanup: removed uncached client plumbing, keeping the sequencing fix for quota validation c33c0464db3 DRA: Fix flaky integration test 950dfd612b4 test: add test for Ingress Update ac90e6a809a Fix: Check defaultBackend in allowRelaxedServiceNameValidation 5ed9501d3cc Fallback to live ns lookup on admission if lister cannot find namespace 4cf195304ca CHANGELOG: Update directory for v1.35.0-beta.0 release 3e19cc51601 Address review comments 04eb121d32e Fix failing scheduler_perf test cases that don't set any feature gate f60f5b24605 Refactor: Contextualize CRDFinalizer to fix goroutine leak e08c1e4ce35 Fix alpha API warnings for patch version differences a66c025dc9e test/e2e_node: Update procMount test to use Restricted PSA level f76d0e5aa48 test/e2e: replace forbidden gomega.BeTrue usage with Eventually(...).Should(Succeed()) 216aaf76cba vendor: update vendor and license metadata after replacing BeTrue usage in csi tests cee5b837da9 Resolve lint restriction on BeTrue by introducing Succeed() with contextual error messages 854e67bb51e KEP 5598: Opportunistic Batching (#135231) c68b35c4c75 Update vendored dependencies 1ce140d1055 update github.com/opencontainers/selinux to v1.13.0 f33a6e5a925 CHANGELOG: Update directory for v1.32.10 release ea83385231f CHANGELOG: Update directory for v1.31.14 release b6e83d29fc6 CHANGELOG: Update directory for v1.33.6 release 4b20e5c3fe3 CHANGELOG: Update directory for v1.34.2 release 71ddb98ae4d Remove image volume e2e test because CI has containerd < 2.1 5ac2ffcc1e3 Enabling NodeDeclaredFeatures in unit tests 0e883083bf9 Add InPlacePodLevelResourcesVerticalScaling declared feature. 10b73f8ef9f Test fixes 21920bb37e9 Test fixes 0f88a9a17e4 verioned_feature_list update 8920eb91077 Unit test for AddPod with PLR resources 66248c262c3 Unit tests for allocation manager 1733d8fc8c8 e2e tests edc3b77cf8a Kubelet changes and unit tests 11ff4efcdeb Kubelet changes to support IPPR + PodLevelResources 7645eb70e92 Scheduler changes to support pod level resources in place resize 84776abaff4 Modifying validation logic and pod strategy for PodResize to accommodate for Pod Level Resources resize b8777c32633 Generated files from API changes efc3126b768 Adding Resources and AllocatedResoures fields to the list of expected fields in PodStatus in admission test 69c1fd72aa0 API changes for Pod Level IPPR related PodStatus fields 6d301342569 Adding InPlacePodLevelResourcesVerticalScaling feature gate d26b44540e3 move Ensure Secret-Pulled Images feature to beta 805eb885e3e node e2e: add tests for Ensure Secret Image Pulls default policy 0b47a378611 Keep pod in running state and prune past container status from runtime 2f55207dffd Fix volume performance tests with performance constraints 094b1bf0188 fix [sig-node] Container Runtime blackbox test when running a container with a new image [Serial] should be able to pull from private registry with secret [NodeConformance] 2c81b6e8adc fix: replace BeTrue with BeTrueBecause for better failure message bb822259984 ImagePulledRecord API: don't serialize nulls 99ceb201738 kubelet/image-manager: pulled images records storage version migration 6fd9878056c kubeletconfig: copy ImagePullIntent, ImagePulledRecord to v1beta1 aceb89debc2 KEP-5471: Extend tolerations operators (#134665) aac951d9022 Add dependency for NodeDeclaredFeatures 97c3f575b98 Refactor validation 2eb1eeeabf0 add disruptive tests 83c5cd5526f Implement restartPod action fab280950da Add client-go credential plugin to kuberc d979816a40d Fix e2e test cases for EnvFiles d82fa1eb98c test: use localhost and HostNetwork for registry, mark test as disruptive 8d0fb17a18f e2e test registry: force IPv4 localhost IP ad0a3de152c node-conformance-e2e: restart the kubelet after loading credential config 1225ce509e6 scheduler: KEP-5007 add integration tests 368e699ed2e scheduler: KEP-5007 move BindingConditions integration tests to separate file e88aa1e04d7 Integration tests for setting and clearing NominatedNodeName 9c5959e9de8 Fix failing test for pod group scheduling timeout on Windows 3b3e4dd2c48 fix missing major.minor in golang: upstream version e6d95a7b381 Promote NominatedNodeNameForExpectation and ClearingNominatedNodeNameAfterBinding feature gates to beta b5dae0ffaa0 DRA: Update e2e tests for Partitionable Devices 4d29f88c886 DRA: Update integration tests for Partitionable Devices 7861714e6cc DRA: Add validation in resourceslicecontroller for Partitionable Devices 38b5750e33a DRA: Update allocator for Partitionable Devices c7b277a32e1 KEP 4639: Move ImageVolume to on by default beta 6689fa7b006 DRA: Update ResourceSlice max size tests for Partitionable Devices 93fc7422ee8 DRA: Update validation for Partitionable Devices ef3f6a25075 Run make update e73fd4204d8 DRA: Update types for Partitionable Devices f8ccc4c4d78 dra scheduler plugin: refactor extendeddynamicresources.go for readibility b9e59e8ea9a test: Add integration tests for peer-aggregated discovery 8f2c0a9a60f kube-apiserver: Enable peer proxy and peer-aggregated discovery 2f5f1749e5d apiserver: Add peer proxy and peer-aggregated discovery support c72f9f73d92 discovery/aggregated: Add invalidation callback support 6b8f7938889 discovery/aggregated: Add peer-aggregated discovery handler d6907457723 peerproxy: Refactor into separate files and add exclusion filter 6a07342d37a discovery: Add profile-based content negotiation 3b89deb6b37 util/sort: Add MergePreservingRelativeOrder for topological sorting 3be9af427fa Fix revert conflict e6574b416fd Revert "Unit test for emulated storage version selection" e8176f6f9f4 Revert "Don't pick versions that have a replacement as storage version" 2d3e0639230 mark device manager as haelthy before it started for the first time da9f1d8eed7 dra scheduler plugin: move extended resources functions into separate file b07c8698b9f test: add retry to getMetricsFromNode fbe8d4c63cf upgrade go to 1.25.4 1c4cab9dda8 DRA scheduler unit test: fix race with ResourceSlice informer 789f06544de DRA allocator: fix result logging fc404b6a3d8 Cache DRA state for scoring extended resources f86a456ea3d Switch kube-proxy/server.go to context-aware logging APIs (HandleErrorWithContext, UntilWithContext) e986000e6a7 KEP-5607: Allow hostNetwork pods to use user namespaces 54702182c2d graduate PodTopologyLabelsAdmission feature gate to Beta and on by default d25c5251f94 Fix the DRA extended quota test bf7dbb129fb DRA: test performance for scoring extended resources a9dcc8e2c94 Fix sending OnFinish to in-flight async API calls in scheduler 6b764d555f1 test: update MutableCSINodeAllocatableCount tests for the new attacher da1981248e3 test: update CSI manifests 049cb8558e8 Add integration test for gang scheduling 4a067cc022e Add read Workload permissions to kube-scheduler c086bdeaa22 Add integration tests for gang queueing 8d67173de0d Implement Gang scheduling in kube-scheduler 5d1f9107ef8 test: fix sed in update-hostpath.sh a3093a95f26 test: don't remove group snapshot script 54b6ab67479 e2e: Add tests for Workload API 02acdd60574 kubectl: Add Workload to kubectl describe pod 078f462a955 api: Workload API and Pod WorkloadReference generated files 96392746769 api: Create Workload API 9677ac4c0be api: Add WorkloadReference to Pod spec b6006528e1e Add feature gates dfaed0586f2 test: skip snapshot-metadata sidedcar in update-hostpath.sh 6da8d6e94d4 remove deprecated Ingress api from describe edbc32fa602 DRA: implement scoring for extended resources fc9f02e2541 refactor: rename and suitable docstring 8be985d4fab kubelet: fix concurrent map write error when creating a pod with empty volumes when the LocalStorageCapacityIsolationFSQuotaMonitoring feature-gate is enabled a02748c1243 kubelet: delay looking up pod image pull credentials until necessary 95a59d0cfb5 DRA scheduler_perf: write JSON where perf-dash expects it 1499524e8e9 E2E node: temporarily disable flaky "pull from private registry" 78a8c2e6a35 mention MutablePVNodeAffinity in the API doc 3882f0cf177 allow PV.Spec.NodeAffinity update b622363659b add feature gate MutablePVNodeAffinity ee481b97e0b fix sorting logic after after normalizing errors 71c02338df3 Fix the failing e2e test case in Standalone mode. a2dfa0fd731 run gofmt to fix formatting issue 6b949e79931 Add integration test for admission controller. c06297b3298 Add integration test for kube-scheduler plugin. 540ffbd7230 feat(usecase): Introduce IPPR with static CPU policy support to use node declared features framework. e7a42e8e8e0 feat(admission): Add NodeDeclaredFeatures admission plugin 649d9c532a5 feat(scheduler): Add NodeDeclaredFeatures scheduler plugin. 192d93f7cb9 add e2e tests for static pod and standalone mode 879d81ff062 promote EnvFiles to beta 0976b6ada37 Improve env file syntax 47fb373c317 run update-codegen.sh a5a2cfdb353 fix(validation-gen): Correct ratcheting for uncorrelated old values c30b75b0085 feat: Implement node declared features reporting and validation. 3c22291a4b0 autogenerated files from "make update" e1f181e3632 feat: Add common library for declared feature discovery, inference and matching. c9327d00b11 feat: Add NodeDeclaredFeatures feature gate and API fields. 801de96635b DRA: ConsumableCapacity update allocating and registry test cases 870062df4f1 adjusts DRA extended resource quota to include devices usages from regular resource claims 66769823160 fixed non-sidecar init container device requests and mappings 4eb0d39bf51 emit more events when the pod resize status changes 481f30bd645 hack/update-conformance-yaml.sh 30965ea3ce6 drop MinimumKubeletVersion for unsupported kubelet versions da6d15adf6b Fix NPE in CEl accessors of additionalProperties=true objects 030d72959e8 feat(validation-gen): Refactor testscheme and add ratcheting bug tests 499bff4ca46 Revert "controller: duplicate utility method cleanup" 5a7c90fb767 Allow mutable scheduling directives for suspended Jobs 60744fc8b9c DRA device taint eviction: track evicting rules 95279872936 DRA device taint eviction: use NOP queue during simulation eaee6b6bce0 DRA device taints: add separate feature gate for rules 8d823b65236 add minimum kubelet version for ippr tests eea7c1403fa [DRA] Add ShareID to kubelet plugin API 3f8444210cb Add e2e tests, metrics and events for podcertificaterequests v1beta1 53df4f9be69 CHANGELOG: Update directory for v1.35.0-alpha.3 release fbfeb33231f DRA: Add scoring for Prioritized List feature 374baacf92c Check HealthCheckTimeout in updateHealthInfo comparison a49bc6f2fbb kube-proxy/winkernel: fix stale RemoteEndpoints due to premature clearing of terminatedEndpoints map. 79dc7908ff3 Fix potential dryrun failure when NodeLocalCRISocket reaches GA 7db53119521 feat: Add MutablePodResourcesForSuspendedJobs feature gate 949be1d132b fixed comments due to switch from class name to class for GetDeviceClass c77a39c06fe Address review comments and fix failing tests 320987ead3a Addressed comments 902c2e0c150 Fix lint errors in dynamicresources_test.go 396a7c1a12a test/e2e/node: add minimum kubelet version to some pod tests c5b14939253 Add test case for claim creation failure in DRAExtendedResources ea7561b243a Implement scheduler_resourceclaim_creates_total metrics for DRAExtendedResources 5102591a6b9 Refactor resource claim metrics to use structured labels and add "source" dimension. 9cad3f87876 Introduce kuberc view/set commands under kubectl alpha (#135003) 326b7eaa526 e2e/storage: deflake CSI Mock volume expansion quota validation 18967f53ddd enable commentstart check on adminssion API group 3b0913c8666 fix test case 693f42bfc16 KEP-3619: deleted unused SupplementalGroupsPolicy in e2e/feature 120bcee0578 KE-3619: fix emulation version in unit tests d12663248d5 KEP-3619: fix removal version for SupplementalGroupsPolicy feature 0aea256ef96 revert of 8f0a6583ca81a64475e69a8b6b4d06bbe0c2ac67 4acafd92452 [DRA] Fix unexpected errors on ResourceClaim strategy update 9ca74a33595 test: register kube features in unit tests 024382658b6 controller/volume/vacprotection: Improve goroutine mgmt e08d03b1b5c controller/volume/selinuxwarning: Improve goroutine mgmt 1e6ad423bf1 controller/volume/pvprotection: Improve goroutine mgmt 0caae6f7041 controller/volume/pvcprotection: Improve goroutine mgmt ed74779a0f9 controller/volume/persistentvolume: Improve goroutine mgmt 8eab454e38e controller/volume/expand: Improve goroutine mgmt 27774052abd controller/volume/ephemeral: Improve goroutine mgmt 12205df76de controller/volume/attachdetach: Improve goroutine mgmt 9d4ff6ecf2b controller/tainteviction: Improve goroutine mgmt d2a443db75e controller/serviceaccount: Improve goroutine mgmt c641df792b6 controller/resourcequota: Improve goroutine mgmt d908a470a55 controller/garbagecollector: Improve goroutine mgmt 90f0fd09f20 provision 10G disks for testing pvc instead of 1 byte or 1GB 90d32919ee5 chore: cleanup unneeded imports 2a3f66d3f6b KEP-5284: Implement Constrained Impersonation 8200f9a22c7 add missing apiversion to run_group_snapshot_e2e.sh 3f45a675fc7 DRA integration: test eviction through DeviceTaintRule bbf8bc766e3 DRA device taints: DeviceTaintRule status 0689b628c7d generated files f4a453389d2 DRA device taint eviction: configurable number of workers 256591520a5 feat: add OWNERS files for flagz server and api with approvers and reviewers 09dfeeb9881 test: add integration test for /flagz endpoint in scheduler ba059168c35 test: add integration test for /flagz endpoint in KCM 16db8e2375f feat: add integration test for /flagz kube-apiserver endpoint 2422bc0bb8c feat: Implement structured /flagz endpoint b3222498fdb added comments, and refactoring to make it explicit and easier to understand. a181fd2eb81 removed NodeAffinity in the test cases as it is not needed 336a3e92757 Update pkg/scheduler/framework/plugins/nodevolumelimits/csi_manager.go 611b4c1408f Adding batch handling for popping items from RealFIFO c67937dd352 switched from storing name to storing a pointer to the device class. c438f8a983c scheduler: Add BindingTimeout args to DynamicResources plugin a9ff1b19c18 remove deprecated IngressClass api from describe 372328f2814 reverted the inititial device class change 2e479e00f4e refactored the hint function, added test cases ed62db7acf3 e2e registry: run as pods even in seemingly in-cluster pull tests a275785bd4f node conformance e2e: log fake registry creds on test failure fba24a8e715 node-conformance-e2e: finite wait for pod status 5cdb983c2e3 fetch node synchronously on node affinity failure 27a81144b22 Add checkpoint for groupsnapshot data consistency (#134637) 002774c3157 Address review comments bbbe23dac7c Reapply "prepare DRA kind config for kubeadm v1beta4" f1bd4f509eb refactor updateUnfinishedWork into separate function to use defer unlock 9113013eb89 Introduce --as-user-extra persistent flag in kubectl (#134378) 82d3c07f0ed test/e2e/apimachinery/watchlist: run WatchList test on most jobs ca8847149e3 client-go/features: enable WatchListClient for 1.35 release 0639f7f40e0 Allow PSA controller tests to handle failure cases as errors a079e1ed256 kubeadm: add 'HTTPEndpoints' field to 'ClusterConfiguration.Etcd.ExternalEtcd' that can be used to configure the HTTP endpoints for etcd communication a92b987b3dc comments d132afc87ee DRA scheduler_perf: benchmark baseline test cases with different allocators 191ab8d78d8 Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable 9640da54524 Verify if pod has ongoing async preemption before evicting pods 3dabd4417d9 KEP-4368: Job Managed By; Promote to GA c98804b77f3 Fix existing integration tests for NominatedNodeName 81448febcf4 KEP-5278 Clear NominatedNodeName upon scheduling failure 257ff6edcd6 kubelet/app/server_bootstrap_test: fix Test_buildClientCertificateManager 1fc389c43f8 Revert "prepare DRA kind config for kubeadm v1beta4" cdbe3401431 KEP-3619: remove e2etestskipper in e2e tests for SupplementalGroupsPolicy GA b3aeead3e22 KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default 9b95eaf5937 Fix pod resize validation when adding non-resizable resources 0631a66d528 address feedback - refactor validateSlice and validateSet to use validateItems 1e8fc543cc7 Fix report health for templated and renamed DRA claims 14f17a3809a addressed review feedback 713b7231d82 Merely check for presence of CSIdriver object fa31a593b9f Clean up event messages for errors in Portworx in-tree driver 979c4427749 Fix spurious workload rollout due to null creationTimestamp in controller revisions 7d186d870f9 Remove unused and fragile revision hash comparisons 94e085e15ca Add unit test detecting spurious statefulset rollout a22b3d031fe address feedback b609d4713c2 added integration test case 7aa849160a8 added queue hint function 3b905ae4b5c added device class add/update events to noderesources plugin when DRAExtendedResource feature is enabled fe3722dfa9a Address review comments 4bbe8f0cfb1 Add test that verifies scheduler behaviour b9118183cf1 Fix the boilet plate 39ad8278e23 feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case eb1a5b6ddfb remove pod resize endpoints from pending eligible endpoints bdb2e37781a Fix queue to gracefully shutdown b83a6a83f0f pick the device class created latest, or with name alphabetically sorted earlier 96edaa43d2e Set KubeletCrashLoopBackOffMax feature gate to default enabled for beta. a3bf2abddb2 Move a comment about ginkgo to code that runs ginkgo 3e33e61968e Enable group snapshot tests f9ef0049160 E2E framework: start slow tests first 321c1e37c06 Update group snapshot tests to v1beta2 de9138f4fa9 Promote IPPR e2e tests to conformance c13c5814597 Add given namespace in dryrun=client output of HPA 762b458700b Lock AggregatedDiscoveryRemoveBetaType to true 3eab698884a fixed unit test and integration test failures 363407c500d Re-enable SchedulerAsyncAPICalls feature in v1.35 6dd086536ff DRA E2E: stop labeling tests as ConformanceCandidate 5e0d06082d6 DRA allocator: partial support transition between nodes, fix "is incomplete" a0e500ace39 Revert "DRA: Allow AllocationMode: All from multi-node resource pools" 30de4235970 Revert "added WithFlaky() to the device plugin test case: supports extended resources together with ResourceClaim" d3c2115441e Clean NewDefaultKubectlCommandWithArgs for readability ac9120f6076 Move PluginHandler to separate file c832203707d pkg/controller/garbagecollector/garbagecollector_test: wrap kubeClient with a client that doesn't support WatchList semantics. 36510ccf56f devicemanager: fix cleanup of healthy and unhealthy devices 12a0c8ce17f DRA extended resource: chain event handlers d8c66ffb63c Add a global cache to support DRA's extended resource to the device class mapping 34021d451d3 Revert "E2E framework: start slow tests first" 59e075e8d35 Promote PodCertificateRequests to v1beta1 7c47b91ed2c Limit CONNECT proxy response header size 2be8c36dba5 fix: additional nil check for workqueue shutdown ecbda22ea54 chore: more precise resync comment a85a9e13aa7 chore: cleanup outdated comment 956964d6e58 fix: register feature gate dependencies 36e6b9075e5 chore: move golang.org/x/time to required 806cf9ef512 style: alphabetic ordering b68fd5e5336 docs: cleanup docstrings abf60333adb feat: add feature gate to kube features c2044c8d390 fix: feature gate min version 0c775eec7ce fix: rate limit route reconciles 9af329151a4 feat: minimal route resync period interval 9e612f107a1 feat: update routes on resync 0b41218ed4f fix: missing update of feature gates be7e0ddb74b fix: spelling 8ef9e53ce5d fix: check error of AddEventHandler a5055cc407b feat(ccm): watch based route controller cff07e75519 E2E framework: start slow tests first 6034321603b dependencies: ginkgo v2.27.2, gomega v1.38.2 308a53dfa6d Add validation options for static pod 264eab46db9 Remove unused delete reactor acdf891478a add e2e tests c99145805f1 [DRA] Fix DistinctAttributeConstraint match comparision with value 97587e951b0 oidc: fix jwks metric name in comment 2b0bfbfb8e6 removed unused functionality from run_group_snapshot.sh and prepare for kubeadm v1beta4 config a3ce49a11ea prepare kms kind config for kubeadm v1beta4 a1ce4bb4686 Check for CSIDriver object before stopping pod scheduling d17ed9be174 prepare DRA kind config for kubeadm v1beta4 2f0a84af1af Add csidriver lister to CSI scheduler plugin 85d7626d2dc Do not schedule pods if CSI driver is not ready 8b2babcbff6 PSA: fix lint with older policies d9ddd5c59b0 Allow PSA pass scenarios to be informed by the policy level e8bd3f629d4 drop UserNamespacesPodSecurityStandards feature gate f2d075ea655 Address review comments c69259cb713 DRA device taints: switch to workqueue in controller e5fcd20a264 DRA device taints: tighten controller test 6ebd853f170 DRA: implementation of none taint effect 75c91867928 generated files e4dda7b282e DRA device taints: fix DeviceTaintRule + missing slice case fee14ffca20 DRA API: device taints 1.35 11e3147fdd2 kubelet: add a test to verify that dra plugin enforces timeout c71e45c7352 Implement a csimanager for managing storage related assets d4c6e0bfd04 change client go default features to versioned 344df7835cd refactor dra fake grpc server 1951e8dd887 kubelet/config/apiserver_test: expose IsWatchListSemanticsUnSupported on fakePodLW 05f5051be3a kubelet/userns: Print podUID on errors 35423364e2f apiserver/pkg/admission/plugin/policy/test: wrap trackers with ToListWatcherWithWatchListSemantics 5993782d653 dependencies: various minor updates 9e462123d64 client-go/tools/watch/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics ae201951a8a k8s.io/client-go/tools/cache/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics f2257059d7a node: cm: fix linter failures 1055d8541e6 k8s.io/client-go/testing/fixture: does not support WatchList semantics 1ca34bd0d2d apiserver/pkg/storage/cacher/lister_watcher: pass RV for request from the watchlist consistency checker 040516a6e76 fix linter changes 67280d4df99 node: cm: update mocks for contextual logging migration bd11e52bfc1 Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates b3415bfdfe2 kubeadm: added container runtime version check to preflight d80ac77d985 feat(dra): add k8s:optional for all DV migrated optional fields cde15e6450c Add ObservedGeneration to CRD conditions 02289d08f6c refactor scheduler_perf test for extended resources by dra to have 10-50 device classes 67143028e78 Add --min-compatibility flag. 05f67d834ab node: cm: migrate container manager to contextual logging 7bbec73192a Add a interface for sharing CSINode objects between scheduler and CAS d99d3c0b69d refactor ippr tests c1a95eb7e2f Structured statusz 1d9c646892c fix unit tests for ippr ga 2e543d151b6 DRA device taints: convert unit test to synctest 2e534d6da10 DRA: Allow AllocationMode: All from multi-node resource pools fda069a5d62 update kal to fix markdown table bug 9cc3a06f0b4 enable duplicate tags for kal and add exceptions 0fac370625b sig-auth: fix KAS options OWNERS 428be46ba25 node conformance e2e: move registry cleanup to ginkgo.DeferCleanup 8d3bc085ce4 DRA integration: refactor helper functions 89f1edd5169 kubelet/image_manager: rename EnsureImageExists arguments at the interface level 01d1cb96793 test: fix flake in DRA DeviceBindingConditions by waiting for reallocation before status update 79df44ca529 scheduler: KEP-5007 allocator test - devices w/wo BindingConditions 7bc354e15d5 kubelet: add metrics for in-memory stored image-pull-related records ae7c6e8080e kubelet/imageManager: add metrics for MustAttemptImagePull 429a96eda6e kubelet: add metric for the number of stored image-pull-related records 7a9d718cdf5 Benchmark SharedIndexInformer 9b80964efd2 add integration tests for pod replacement during scaling and b1942ae6b12 [DRA] Add dropDeviceBindingConditionsFields and fix immutable field on DeviceBindingConditions strategy test df3f5dd493b test(validation): add cases for validating maxItems in status.devices.networkData.ips 2713803c78d feat(dra): migrate NetworkDeviceData.IPs maxItems to declarative validation a8c9bb1f168 test(validation): add cases for validating maxItems in status allocation requests 0d6d2aa6a58 feat(dra): migrate DeviceAllocationConfiguration.Requests maxItems to declarative validation 91614613170 test(resourceclaim): add unit test for unique DeviceAllocationConfiguration.Requests in status a553ac0e92a feat(dra): migrate DeviceAllocationConfiguration.Requests uniqueness to declarative validation a4e8b54dee7 test(validation): add case for handling duplicate request names in ResourceClaim status update cc0012b4502 Add Declarative validation unit test for duplicate IPs in NetworkDeviceData 9bbf28e2f4e feat(dra): migrate NetworkDeviceData.IPs uniqueness to declarative validation 1d2b87c2e9a updated nodeswap description only 4f647b3f3df removed BlockOwnerDeletion 2a217a9bfd2 promote pod generation tests to conformance 3b72759d1bc Update SVM to Beta 24a53fa6384 add JWKS fetch metrics for jwt authenticator ad2c6b443dd controller/validatingadmissionpolicystatus: Improve goroutine mgmt a51285e1f27 controller/servicecidrs: Improve goroutine mgmt 63c15cbe83e controller/resourceclaim: Improve goroutine mgmt 5f423d7ba8d controller/podautoscaler: Improve goroutine mgmt 51ef94c5472 controller/nodelifecycle: Improve goroutine mgmt 34e688eb3dc controller/nodeipam: Improve goroutine mgmt a265769245a controller/ttlafterfinished: Improve goroutine mgmt 821a3f5affb controller/storageversionmigrator: Improve goroutine mgmt 7240649e4f6 controller/ttl: Improve goroutine mgmt 3ee8c53e537 controller/podgc: Improve goroutine mgmt 1635a139b88 controller/storageversiongc: Improve goroutine mgmt 502186ca933 controller/statefulset: Improve goroutine mgmt 91cf8253a2a controller/replicaset: Improve goroutine mgmt 5f48a52bf86 controller/namespace: Improve goroutine mgmt cb4ad791023 controller/endpointslicemirroring: Improve goroutine mgmt cd73e8777b3 controller/endpointslice: Improve goroutine mgmt ccd35f7c5ee controller/endpoint: Improve goroutine mgmt d9ba92ba3bb controller/disruption: Improve goroutine mgmt 6e0a4da2f6a controller/deployment: Improve goroutine mgmt e8b0f274561 controller/daemon: Improve goroutine mgmt 575e9eb64c7 controller/job: Improve goroutine mgmt 7bf52d74d02 controller/cronjob: Improve goroutine mgmt d1eccb2377c controller/clusterroleaggregation: Improve goroutine mgmt 5f3f39edc12 controller/certificates: Improve goroutine mgmt 3a50f28ff80 controller/bootstrap: Improve goroutine mgmt c9825b8d279 kubeletplugin: clarify DRAPlugin comment about driver-specific claims 4a991bbbd9c fix unit tests for pod gen GA e06abce75f1 node: mm-mgr: Refactor to use logger parameter instead of context d2f780e277f promote ippr to ga 21c832b47dc promote pod generation to GA 9bf2363333d restarting kubelet does not change pod status 842cd0ea777 node conformance e2e: don't recreate test container on an error 135b46974af e2e registry: have SetupRegistry() return registry address ee777bef916 test/utils: remove GcAuthenticatedRegistry from RegistryList bb1b23a34ee e2e fake registry: add function docs fc81e22735a fix Node Conformance Container Runtime test with fake registry a0e64c21f2f Use fake registry in Node's container runtime image pulling tests b29fdd1551f Forget pod from scheduler's cache immediately when it's deleted or has DeletionTimestamp set 15029967870 Refactor scheduler event handlers for pods to handle binding event in one place a42581c7d39 Don't preempt pods with DeletionTimestamp set 37ba7bb454c Address feedbacks 94101ba6e0c Add new method to validate C Identifier ec8c2246b2c Use k8s-resource-fully-qualified-name format to validate MatchAttribute 2de03899dae Add k8s-resource-fully-qualified-name format in valdiation-gen 4a9a010c537 adding back v1alpha1 68710ce086b add declarative validation test 2e257dffd80 update code-gen for new tags and ignore v1alpha1 8f0a6583ca8 Use eachKey DV in DRA resources. 03e337cfb7a ktesting: support for synctest aad6cec749b DRA internal API: add JSON tags 679ccee1938 reverting changes that were unrelated to me pr 08b1b1d5a47 Do not log untolerated taint in pod status updates. 9c32e488db1 use tweak pattern 1dd384c44d4 Fixing unit test flakes in pkg/kubelet/winstats TestCollectMetricsData f82a139dc08 Promote KUBECTL_COMMAND_HEADERS to stable a3f242676cd Revert "remove failing test that depends on expired credential, remove credential, add TODOs" 973779a398f kubelet/image_manager: add metrics for EnsureImageExists b1a8d8849ee Update OWNERS to sig-apps owned registry packages (batch & policy) b72c9e41792 Improve CEL Policy admission test 51beeb26762 dynamic-resource-allocation/client: expose IsWatchListSemanticsUnSupported 4fd41778b87 watchlist: wrap remaining LW with ToListWatcherWithWatchListSemantics fb228c47048 Fix DRAConsumableCapacity to be able to allocate the same device that previously consumed the counterSet 86bfcd5eec1 oopsie missed two, should fix failing tests 11f9d32a0ea kept sidecar feature to enable default FeatureGate. will clean up in separate effort a277269159c updating sidecar feature to node conformance 92663144b98 Graduate a few soaked alpha tags to beta bda0e6a83c5 remove deprecated EndpointSlice api from describe 1e903a4b5a8 DRA: e2e: test extended resources after device plugin uninstall 7b2acb74c07 DRA: fix admit logic for extended resources 1cb45e2a27f DRA: fix scheduling of pods with extended resources 62b23aeb0cf Remove FromName for VAC external tests b40df46b0ba test/e2e: remove unused v1beta.VolumeAttributesClass field 04fb0931aec test: remove usage of storage v1beta1 APIs 65dcb4ce2cd refactor(kubeadm): including dns addon version to signature 816eee64e80 cpumanager: hack: add golang ci config for contextual logging fd5b2efa76e node: cpumanager: migrate to contextual logging 2cd69e0d0e6 Rewrite claim with extensions in allocator test a35785c0331 Drop loopback clients if unused bbd44717c15 fix: allow job startTime updates on resume from suspended state d10f4f39503 DRA allocator: Add the requests corresponding to the config FromClass f8ca585b666 test/images: Update tf-wide-deep container image with Python 3.11 and TensorFlow 2.20.0 36654a9ecbc --no-edit cff8bc86865 fix the unknown flag: --logtostderr error b2571fe170a Add WithNodeConformance to KubeletPSI test context 8a6b3caaa0d use union member DV in the DRA 97f9819f7e7 address feedback f64797580a8 DRA internal API: remove unnecessary types 294ff153426 kubeadm: improve the etcd version mapping 8b87df028d8 avoid Stop() racing with sync() 8b6f98b06ea DRA: lock to default-on 30a6d4b389a Add CSI driver opt-in for service account tokens via secrets field 0e7d42dd456 Clean up OWNERS for all api machinery owned controllers 167ccbc8ec0 Improve cmd tests for kubectl events fcef697a45a kubelet: add nil check for ContainerStatus in GetContainerStatus 715228f4789 Remove LoadBalancerIPMode feature gate b5297b18ab2 Remove AllowServiceLBStatusOnNonLB feature gate c403fd44811 kubeadm: validate the KubeletVersion for cgroups v1 5f083e3b9f5 controller: duplicate utility method cleanup 5d4d6cc980f Test: Add unit test for PreStartContainer 491f7f9ba89 Add a preshutdownhook to cleanup apisever identity lease c247514f47f Remove year from copyright header boilerplate f0e88857f7b Return error in case of discovery client failure 8a331a59d13 test: Fix data race on policy refresh interval 78796239cf0 feat(validation): add k8s:optional tag to InterfaceName and HardwareAddress in NetworkDeviceData across all versions 9ba536c2e44 feat: add subfield +k8s:format=k8s-long-name validation for DeviceClass ObjeMeta.Name field 9e5b6ad7488 fix error checks c764de03dc6 vendor: update system-validators to v1.12.1 724cdb5cf38 feat: migrate off deprecated NewSimpleClientset to NewClientset 1b863d81c92 kubectl: Add support for tracing 9d369f32a3d kubectl: Refactor profiling helpers 1e3a6e18d08 node: e2e: update podresources check post fix of kubernetes#119423 28507d0e921 [test] Add case for existing driver on old csi node a14230ae82d [test] Validate migration annotation are still applied 1e2817d5890 Avoid no-change lambdas 2061ec2be9d Enable DV for resourceslice f851bc7ce5a test(validation): add cases HardwareAddress length in ResourceClaim status 833c026435b feat(dra): add k8s:maxLength tag on HardwareAddress in NetworkDeviceData c3006a9bb96 test(validation): add cases for valid and invalid NetworkDeviceData.InterfaceName length 6fa8cb4a993 feat(dra): add k8s:maxLength on NetworkData.InterfaceName 2b4495f66a0 feat(dra): add k8s:optional on AllocatedDeviceStatus.NetworkData 8124b22f903 feat(validation-gen): add k8s:maxLength tag e762d9fc441 dra: Use context-aware client-go informer functions 196d3abcd53 CHANGELOG: Update directory for v1.35.0-alpha.2 release fa59ed7f82e pkg/controller: Use informer.RunWithContext in tests 70ac573619b adopt consistent way to set feature gate based on emulation version for kcm and scheduler test server. d764e81a66b Revert "Implement validation-gen lint for CI" 7d1500bb1ea feat: Add exceptions for conflicting markers in kube-api-linter 12b5106809d bump kube-api-linter tool to latest and go mod tidy 5fc2f3e5a93 feat: Enable conflicting markers linter to detect mutually exclusive field markers c49bdda383f kubeadm: remove the GA WaitForAllControlPlaneComponents FG a99a5c4bdc0 avoid updating when endpoint subsets are merely sorted differently 764918a4ddf remove deprecated CertificateSigningRequests api from describe 3fbd1a17871 etcd: bump etcd to v3.5.24 for k8s v1.32, v1.33, v1.34 7f99d6672f7 etcd: bump etcd sdk to v3.6.5 804708df532 /test: use a different image for hostname override e2e tests 5bfc9aba9f0 Disable unwanted gocritic checks instead of filtering them 9d48e7d2d40 fix missing involvedObject.apiVersion in event 38373335cd1 kubeadm: adjust the etcd version map for release 1.35 81e3dbdc33f Fix DRAConsumableCapacity to schedule more than one devices 8fc99212944 Delete dead code 8346bed9e7a Introduce pod queuing in endpoint/slice controllers f2a4ffd5b8b Promote ContainerRestartRules to beta 0a301490f61 Fixing k8s.io/kubernetes/pkg/kubelet/kuberuntime unit tests on Windows 4e29dcdf756 remove deadcode HashObject from k8s.io/kubectl/pkg/util 6cb2849928b switch endpointslice hashing from md5 to fnv-1a edbc0dc2587 switch endpoints hashing from md5 to fnv-1a dba6c30e964 switch kubelet static pod internal UID to fnv b3373320daf switch volumemanager reconciler tests to fnv-1a 797d3165191 mark remaining md5 usage TODO and exclude from lint b0a15b9163c switch storage e2e tests from md5 to sha256 e0df6b178a0 migrate kubeadm static pod hashing to fnv-1a 886fdeefaea forbid new use of md5 448584e1c8b feat: add step field and clarify comment for volume expansion d54f3b56ed9 Add OWNERS for controller/storageversionmigrator 413c34f3192 Added feature gate and tests b1c85ef2fe3 golangci-lint: no need to enable deprecatedComment 9902ae73872 apiserver/pkg/storage/cacher/lister_watcher: exposes WatchList semantics 339dba881fe Add synthetic create authz check to pods/exec, pods/attach, pods/portforward 229b33c4409 Address feedbacks 95c42b99515 Fix rebase issues cf96486aed8 Add format validator for DeviceClass.ExtendedResourceName adbea00238b Add new format k8s-extended-resource-name 3968f7ec5d6 apis/apps/fuzzer: add missing MaxUnavailable defaulting efeda8b0fd8 Use fast policy refresh interval for TestParamRef 579579138c9 reformat b95439f6d1a docs: EphemeralContainerCommon.ResizePolicy: This field cannot be set on ephemeral containers 26bbea8c071 Add RealFIFOOptions struct to provide structured configuration for RealFIFO 6b82a823b1a client-go/clients: improve TestWatchListSemanticsSimple bd6fb65f833 Reduce fuzz test runs by 10x to avoid timeouts 13511897bda node: e2e: extend wait for resources exported by sample device plugin c2e1fdeb7ad node: e2e: Ensure device plugin pod is Running/Ready before registration da80b554a7b DRA API: unify dropped field logic for ResourceClaim and ResourceClaimTemplate 49e4fe9d2ba kubelet: fix kubeletconfig.cgroupDriver in configz ad2832977c7 fix(kubelet_node_status): remove the node.Spec.Unschedulable check, after remove the register schedulable dbb3941cfe4 Declarative validation coverage for RoleRef.Name and Subject.Name in RoleBinding# 2e0319181de address feedback a817e2b923f test(validation): Mark bindingConditions and bindingFailureConditions errors as covered by declarative ce93309f4c9 test(validation): Add tests for bindingFailureConditions maxItems validation 2a116e29ce6 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingFailureConditions field 2ad5127a793 test(validation): Add tests for bindingConditions maxItems validation ab08274be10 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingConditions field 9eb7750d7f9 features: bump image gc max age feature to stable 7336f53439b remove usage o ExecProbeTimeout da77cf84baa pkg/kubelet/watch_base_manager: wraps the LW with WatchList semantics f8868e9cace client-go/kubernetes_test/clientset_test: intro TestUnSupportWatchListSemantics f3d1fd23c57 Fix comments and reformat import statements ba6074dd0b8 Promote HostnameOverride feature gate to beta stage 8f2d7581eb1 client-go/dynamic/dynamicinformer: wrap the LW with WatchList semantics f6e2ea7b968 build/common.sh: fix support for Rootless Docker 78fcb4475f4 client-go/metadata/metadatainformer: wrap the LW with WatchList semantics 0613fdeccb5 kubeadm: add missing cluster-info context validation 47e9686b4db feat(validation-gen): add +k8s:format=k8s-long-name-caseless declarative validation for DeviceRequestAllocationResult.Driver 0cf91027638 feat: add +k8s:enum declarative validation to ResourceClaim DeviceTolerationOperator and DeviceTaintEffect 44a268e2723 KEP: 5495 - Add deprecation warning for ipvs d7b83193c42 docs: quote PowerShell completion script path ($HOME may contain spaces) 0f6bc57d118 docs: dot-source kubectl completion script in PowerShell profile d07b769418d Replace feature label with WithFeatureGate for KubeletPSI test 2072acb3ba5 Add listType=map and listMapekeys on ResourceClaimStatus.Devices 4bd3d17e4aa Allow pointers for list keys 03c7962d175 usernamespace and procmount are tightly coupled. Disable them together 1f803aa314a Use DV for long name validation of spec.devices.requests[%d].firstAvailable[%d].deviceClassName af173926308 Setting the default feature-gate ExecProbeTimeout value to TRUE d0a2a0d22e7 e2e: find and fix reuse of test names 51fc3c744a0 bump etcd to v3.5.23 for release v1.31, v1.32, and v1.33 9864c29861e Lock SystemdWatchdog feature gate 6ae916a577c rbac: Remove PolicyRule.Verbs from declarative validation migration 2ea3d3815cd feat(validation-gen): Add declarative validation support for rolebinding(v1,v1alpha1,v1beta1) 4e660cc05b9 feat(validation-gen): Add declarative validation support for ClusterRole(v1,v1alpha1,v1beta1) 70a8babb09e test: move kubelet GC tests to node conformance 41cb2378b42 update publishing rules f23f716af46 drop support for policyv1beta1.PodDisruptionBudget 5594d94e671 ./hack/update-codegen.sh f076736206c code-generator/cmd/informer-gen/generators: wrap the LW with WatchList semantics 778ff5d5ab4 update after review d15b2893341 ./hack/update-codegen.sh 4d9fcfeeca8 client-go/kubernetes_test/fake_client_test: TestDoesClientSupportWatchListSemantics 2fd727bf923 address feedback - comment on declarative defaulting gap w/ DV c284201b711 generators/fake/generator_fake_for_clientset: intro IsWatchListSemanticsUnSupported 4bb2bd05322 client-go/tools/cache/reflector: supports watchlist.DoesClientNotSupportWatchListSemantics 26cba8ee03d ensure permissions are consistent on dockerized binaries 9d83f71cdec fix validation_test.go to use path normalization a77f845141a address feedback - remove origin for enum as NotSupported handles this 6e95412c432 address nit 77d87a0e633 fix normalization rule post-rebase f84423813bd address feedback 9a7dace7347 feat: add +k8s:enum declarative validation to ResourceClaim DeviceAllocationMode 91d135f3445 Include relevant dimensions in pod controller indexing 5b9b8ec732b make localtime mount readonly 1877809f59c cleanup unused rsync related env vars feeeb4aa19f switch from rsync to cp, drop rsync requirement e71aa02f96f we no longer need to delete old docker images as we don't build a build-image anymore, we use pre-built kube-cross ff0a5fff382 cleanup lingering references to kube-build b3ad67739a8 delete build-image 4eead9306d5 add coverage for pod resize 'read' and 'replace' endpoints ae3605d1093 mark aggregator test LinuxOnly bec583bc3dd Enable MutableCSINodeAllocatableCount by default in Beta 8324fc3e034 client-go/metadata/fake: expose IsWatchListSemanticsUnSupported 82e516200a4 client-go/dynamic/fake: expose IsWatchListSemanticsUnSupported fface8ebfc9 Bump coredns version 1.13.1 c7eb3751b9e Fix volume mount changePermissions test flake 9763935518e Refine: VolumeGroupSnapshot tests 9020a177318 feat: add enum validation for AllocationConfigSource 7825b2fc766 drop go-socks5 from build/tools.go 30c3c990d0e prevent shellcheck warning 563919c6858 don't update _output/bin symlink in dockerized builds 78830afba89 Enable external VolumeGroupSnapshot tests debe026b211 Fix unit tests to work with explicit depndencies 605f402d44a use relative symlink for output path 54f39033f03 Test status update for all APII versions 36e3a8f2691 Record and require all kube-feature dependencies 20af32e5c11 Stop serving alphas removed in 1.35 33321022f83 Regenerate openapi with unserved 1.35 APIs bec429cd96f Review fixes ac5046786e0 DRA API: implement ResourceClaim and ResourceClaimTemplate strategy for DRADeviceTaints 8a43852c35f build: build by running kube-cross directly should leverage a potential KUBE_GIT_VERSION_FILE 2a488616bfa tests/e2e_node: Add test for userNamespaces.idsPerPod b38d7028075 userns: Return nil manager if feature disabled 0b5aa1d491c userns: Use better defaults if idsPerPod are used db6a2b2318a kubelet: Don't ignore idsPerPod config 97861325ae3 KEP-4622: node: topomgr: max-allowable-numa-nodes to GA cccb66bfbc2 test: topologymanager: handle panic in test 00a8ddce91b node: topologymanager: don't leak options in tests 96a9fe5f7b1 update debian-base and setcap 15154374bca Bump images, dependencies and versions to go 1.25.3 and distroless iptables 476824c2a1e [PodLevelResources] Add more comprehensive test cases to kubelet bf88ae7d737 Fix DisableAllocatorDualWrite dependency on MultiCIDRServiceAllocator d0f482129da Add stability level in the tags doc. 678b79a173b Properly account APF seats for legacy watches that compute init-events 6f820481d36 bump to go 1.25.3 84b78307e28 fix: the failed unit test 4c8b4347797 DRA: Fix socket binding error in unit tests 6a455c669b5 fix panic for the crd with status subresource but lose openAPIV3Schema fileds da338ba1fff Warn on use of deprecated PreferClose 3176ef27602 Update TrafficDistribution docs for PreferSame* GA c6a86d125f2 Merge the two TrafficDistribution integration tests 02926c9563d Update PreferSameTrafficDistribution to GA b13564a63c3 Belatedly remove references to PreferSameTrafficDistribution being Alpha 7ed61cfde16 chore(kubelet): migrate topologymanager to contextual logging c48a16ebd8e fix issue e9f66ea507f fix dfb02e7581e add TestUpdateStatusWithOldVersion integration case 0554102ab33 test: Add CIDR allocator metrics test with multiple CIDRs 3c2c64a7f65 Add integration test for invalid SAN certificate handling 9292f1e82b6 refactor(resourceclaim): generalize tweakDuplicateRequestName to tweakAddDeviceRequest 2260c9b9837 test(validation): Add unit tests for DeviceAllocationResult.Config maxItems b3eb152db43 feat(dra): Migrate DeviceAllocationResult.Config maxItems validation to declarative 8c7a338afe8 test(validation): Add tests for status.allocation.devices.results maxItems validation a05fce7c228 feat(dra): Add maxItems tag on AllocationResult.Results f70142a6a90 feat(validation-gen): migrate ResourceClaimStatus.Allocation NoModify validation to declarative validation 331ea387696 feat: add +k8s:update tag and associated tests 86d06973197 remove blank line between comments and entry 19311b932fb reorder kube-cross to be under go version and dedupe it from the go version 39d37a1e926 Remove invalid SAN certificate construction ced2a40b9e9 kubeadm preflight checks: fix host URL construction 1c950080155 Log when automatically disabling dependent features e669ccda0f4 update build/README.md to reflect removal of rsync/data containers 7d2309f0591 cleanup unused rsync utilities faa62c8ce61 cleanup KUBE_RSYNC_CONTAINER*, KUBE_DATA_CONTAINER*, DOCKER_MOUNT_ARGS 36526c38158 delete more now-unused shell functions 5a05c062c3c delete now unused kube::build::copy_output and kube::build::build_image 7ed65b466d7 remove defunct comments about updating copy_output dee429c1659 remove unused scripts eaeed1a5345 remove calls to kube::build::build_image and kube::build::copy_output 581012fe063 build by running kube-cross directly 52c734f1e6d kubeadm: print errors during control-plane-wait retries 0a05490e08d fix broken gce jobs 19a29de5ec9 style(kuberuntime-container): clean up redundant if branches 4d61ba787d5 test(validation): Add tests for status.ReservedFor maxItems validation b0a511d3090 feat(dra): Add maxItems tag on ReservedFor field 9ae5039b7f4 e2e: skip the reboot node test case e8d512d8221 extract build vars setup into reusable function 6c9f2793ef7 Stop mentioning the removed gate CSIDriverRegistry 5362c2858de Remove mentioning of the APISelfSubjectReview gate 3b93755c0c0 client-go/tools/cache/listwatch: intro ToListWatcherWithWatchListSemantics 83eebc22902 fix: Add CIDR filtering and overflow protection to IP allocator dc686f240be Remove deprecated pod-infra-container-image flag 3f8a5219e2c Enable validation-gen on rbac/v1,v1alpha1,v1beta1 20dafe678bd test: Add failing tests for IP allocator CIDR filtering and overflow protection d5ae324fb6b don't require build tools to clean dd3a713f6c4 fix ReplicaSet and Deployment tests for DeploymentReplicaSetTerminatingReplicas FG enablement 2bf467170e7 make update b0e47a88f74 promote DeploymentReplicaSetTerminatingReplicas to Beta 8b5cf608fd5 Add k8s-label-key format for toleration key b738e8c3caf fix panic in cron.ParseStandard 7b4d4f72c90 fix lint error f27346db6c5 update warning to reflect kep changes 4f8757b4c01 Remove flaky HPA deletion assertion in TestMultipleHPAs d6dec0b345a Revert "Merge pull request #134178 from HirazawaUi/remove-RootlessControlPlane" 400f8eccc55 Remove the --pod-infra-container-image flag from kubeadm 233ad2071ca refactor(serviceaccount-tokens-controller): Change the secret's MutationCache to SecretLister efda517d93f speed up make clean by narrowing recursive chmod 9c2520b6334 test: mark duplicate device requests as covered by declarative validation 4616d749a3d feat: Improve the robustness of SVM ebc4768ff3b Increase time out for verifying metrics 861e397b054 Using processStart time to handle execution delays during stress tests 4f7e9ff1efd bump cos-gpu-installer to support cos 121 514b93d7e13 test: add validation test for duplicate DeviceClaimConfiguration requests ed932547cf5 feat: migrate DeviceClaimConfiguration.Requests to declarative validation c81fc12900b test: add validation test for duplicate DeviceConstraint.Requests 63f8c0a4fe2 feat: migrate DeviceConstraint.Requests uniqueness to declarative validation 0fa441f962b Promote KEP-5311 (Relaxed validation for Services names) to beta 2341b3bcc86 test: add validation test for duplicate FirstAvailable names 3ad7b189b70 feat: migrate DeviceRequest.FirstAvailable uniqueness to declarative validation d045a9dd3cd test: add validation test for duplicate device request names ca9e09b7d30 feat: migrate DeviceClaim.Requests uniqueness to declarative validation 3ec711f91ee cluster/gce/gci: revert PATH change when using custom runc 8e4cd1f3b60 address feedback d77cb206a09 feat: migrate k8s:format=k8s-long-name-caseless validation on OpaqueDeviceConfiguration.Driver to declarative validation 7f58bb9abdf Regenerate vendor 2fe6220968d Regenerate protobuf 6d8adfe4025 Isolate generated ProtoMessage() methods in build-tagged files 5fb0e16be6f Drop runtime use of gogo packages caea56f3847 Fix controller setup in storage version unit testcases cf099f4fc90 Update --chunk-size flag, dropping the beta information 8dc51e11eff improve kubeup env parameters 67c29eaafcd CHANGELOG: Update directory for v1.35.0-alpha.1 release b8670cbc31c reduce dependencies to apiextension objects 6f51446802f DRA device taints: fix toleration of NoExecute 9702a2dca2b E2E framework: enable data race detection only if needed 5e216ae34d0 Replace HandleCrash and HandleError calls to use context-aware alternatives 7eb7894dada refactor(apiextensions-apiserver): Make APIApproval controller context-aware f99d0e9759f Mark API server errors as transient in csi raw block driver 2fa703bfb69 address feedback b4fa5794efa generate 1c0f0add8a5 feat: add +k8s:immutable tag to ResourceClaim.spec and associated tests dfd7b230b4d feat: make it so that all ShortCircuit validators are run for short circuiting check 10473da4f70 chore: add +k8s:immutable tag implementation and test c189e9d82f5 Split Endpoints controller and EndpointSlice controller conformance tests 7b7145a5940 Update kubernetes.default endpoints test a bit e627b3b2bff Move some network conformance tests around. d46f15bd12f Fix some linter errors before splitting out code 07959fd1680 Remove redundant test of "empty EndpointSlice for Service with no Pods" ff83235f352 Fix up EndpointSlice conformance test descriptions dd8d0e65d4e Dedicated package for scheduler interaction with DRA structured types 1fb86743872 Add listType=map and listMapekey=uid for ResourceClaimStatus.ReservedFor 01264d3970b With new changes we will also have a VolumeModifying condition cb01a28df40 Ensure CSINode is owned by node when installing CSI drivers 13cd40d718b E2E volume: fix restarting of watch 328f9da729d Add current and old nodeIDs in log messages 111fc04e1d3 fix: update pkg/apis/resource validateDeviceRequest to short-circuit on the oneOf check e62523e1f56 address feedback fd12fc00c9f fix: remove unnecessary ValidateResourceClaim call from resourclaim ValidateUpdate 4ca286819a9 Add DV for uids in resourceClaim Status d9fb647515d fix overlapping client CA and requestheader CA validation with proper certificate checking 6965075ebd8 Address feedback: simpliy errormatcher instantiation 6138a68f4e8 fix(validation): Mark covered errors in TestValidateClaim for better clarity 763c01ef68f feat(validation): Add normalization rules for ResourceClaim validation 32e64ec0e9a simplify getNodeAnyway func c82f2caaa46 DRA E2E: promote CRUD tests to conformance 2b220dffa76 add integration test for endpointslice controller headless services d03fab555f1 kubectl config set-context: Add -n flag 09ef1e08e96 Fix storage version test flake f9a893be37b Fix incorrect error messages d1767c10c01 fix: typo in internalversion printers ae8ea8994ef feat(validation): Enhance validation tests with normalization rules support 7bbc7228aca run update-codegen.sh 7366031541a feat(dra): Add maxItems validation tags for ResourceClaim fields 4568ac300c1 changelog for 1.34 b2073c3325d reordered changelog for cri api 5b7e96219f8 remove cpuSharesToCPUWeight that is not used any longer 84431876888 Warn when quota request > limit 79678dd3935 feat: add resourcequota WarningsOnCreate request less than limits 100cd47acbc Update SIG Scheduling leads in feature-approvers 1137d51b358 Disable SchedulerAsyncAPICalls feature gate due to a known regression 2ddc9555582 correct metrics function comments 070d4c1846b bump etcd to v3.6.5 7c596722137 Fix in code and integration test that verifies that when victim pod is stuck in binding, preemptor pod remains waiting in unschedulable queue until deletion of the victim pod is completed e9f61ce511d Move stats updates to getList 4b3e562dc8c client-go/util/watchlist/watch_list: intro DoesClientNotSupportWatchListSemantics 0b0a5974f82 integration test: webhook proxy behavior 26c7846e6dd Use lock-free for unguarded isHidden/isDeprecated fields 52dec274b36 add TODO to migrate when new metrics mature and old metrics are deprecated 7c529f25f4d add apiserver_validation_declarative_validation_panic_total invariant 84ce0f57f27 add test to verify invariants are fully specified 41ae5cdf4b0 check invariant metrics after e2e tests 748510b8ee0 refactor and increase coverage for pod resize tests e4a34ce343e KEP-4540: StrictCPUReservationOption moved to GA, modified unit tests to reflect this ae259797903 Use a dedicated delete channel in HPA test f79fb9e59e0 Fix rebase issues 03da38a8023 feat: add path normalization support to error matcher f95d531b0ae DRA: CRUD conformance tests 545526cfe09 DRA E2E: only check ResourceClaims in the test namespace 2ac9ff1c1fb test: format unstructured as YAML a7b720ad5b8 upgrade to cos 121 5af28702540 fix nested map segmentation fault d71e7e78595 fix typo for `AnonymousAuthConfigurableEndpoints` error 6d3d7553fbe Lock all mutable fields when printing gc node 940a2a7f070 Update hostpathplugin image version in DRA test driver manifest 6e7762ef0ee Update cluster/addons/ip-masq-agent/ip-masq-agent.yaml b5805f28e72 Update cluster/addons/kube-network-policies/kube-network-policies.yaml c4c7efc4f95 apply feedback 515b579945a feat(resource): Add maxItems validation for DeviceClass configs e693da72906 feat(resource): Add maxItems validation for DeviceClass selectors 4986abe0b86 Automated refactoring to use SetFeatureGatesDuringTest 6e574cabdd0 test/e2e_node: mark MirrorPod update tests as [NodeConformance] d4c5b8817ef Set test feature gates as a group, and auto-disable dependents 46c15a1844a fix typo in comment for namespace validation to appease verify-spelling 2fd76c8ed18 fix: Comment out ipSloppyValidator 51f02aa58a2 fix: Update error origin in ValidateDNS1123Label to use k8s-short-name format 6b11e6433cc run update-codegen to for ReplicationController 0a26ff5cb47 Update CSR DV test to match RC style 2d48dae391e Eliminate public ValidateReplicationControllerName 229c6b13ca7 Validate ReplicationController.metadata.name 7cf99892224 Add ValidateObjectMetaWithOpts() to apimachinery b00e0f30208 Add cohort support to +k8s:item 975df59fcd5 Add cohort support to +k8s:subfield efe4d17d15e Add support for validation cohorts 8105dbe5bce Revert "Omit type names of emitted slice elements to appease gofmt" 07991f41f00 Fix: Correct timestamp for node swap metrics 5d067af5e1b Prefactor: Fix some bad tests 7b938513956 Fix ReplicationControl double validation 04d632dd050 fix: Adjust validation for pool names to ensure proper coverage in device requests c36c927d189 DRA ResourceSlice: nicer log output af9facf7bad Fix passing runtime.Object to HaveValidResourceVersion check af9b314fb45 Propagate backoff duration for crashloop backoff. 5ae2372f1b6 Remove a "helper" function that doesn't really help much 0cb916d4dcd Move metrics calculations to getList fc19fcfb73c improve httpstream handshake error logging 89b975c6d36 Add comments 199c9ac77ab Remove ExpectInvalid() 8b08c8e59ce Remove ExpectRegexpsByPath() b922fd9db43 Make ErrorMatcher more strict about multi-match a51fb72c7f4 Simplify tests wrt ratcheting 054ab36c913 Fix field path for embedded fields in root types 9757d8d8efe Document 0 as a special case in RV comparison 84f85712beb feat: Add matcher and conformance tests ensuring that RV is uint128 02a51e3712d DRA ResourceSlice tracker: explain test a bit better, fix -run c524a5fba28 fix(cordonhelper): Avoid mutating local node before API call 7c24e62d7cb Add additional types for resource version comparison testing 68205ff40c5 DRA scheduler_perf: run with specific allocator implementations 5832c915ace scheduler_perf: apply feature gates in deterministic, alphabetical order 60eeaa6ebda DRA scheduler: add unit test for allocator selection 7f57730ba4a DRA scheduler: fix selection of "incubating" allocator implementation b5bcac998d0 DRA scheduler: clean up feature gate handling 723d1555a72 test: update CSI sidecar images to latest versions b0460eedbac Make legacytokentracking controller context aware 37fcfcd29e9 feat: Add conformance tests for all resources for comparable resource version fe681cfd8f6 update comments 83163d0b4a9 update comments on beta apis 11291fb6c59 update featureflag list b656027b936 Update MaxUnavailableStatefulSet feature gate to beta 2cef54c1450 feat: Add helper function for client-go to compare resource version f5e65af1737 add getters for event User and ImpersonatedUser on AuditContext 8a03067211e fix resource claims deallocation for extended resource when pod is completed 2c12d5731e4 fix validation_resourceclaim_test.go with MarkCoveredByDeclarative 9380248ad69 generate ef2b68388ea add +k8s:maxItems tag logic and tests b6afe986c62 kubeadm: rework the FetchInitConfigurationFromCluster node flags 03a1a22478b Add declarative validation tests, use tweak pattern, and additional test structure changes 11df50453fc Add maxItems limits to ResourceClaim 212a9c6a60c test/e2e/apimachinery/watchlist: select only wellknown secrets for table test a20b34aa82e devicemanager: fix golangci-lint errors bb91913017e Migrate sample-device-lugin to contextual logging 7e27b9c241f change default for failCgroupv1 6a5d0ef4230 gce: fix etcd manifest 1cfc29a179b cluster/addons: update container images to latest versions 574ac5b4978 disruption: remove unused pdb parameter from getExpectedScale method 574b09b7de4 nodelifecycle: fix ComputeZoneState method comment 2b3f1877bee Update NPD to v1.34.0 c4ec18b58a6 pkg/volume: improve code style and readability b40b67b9cff Deprecate caseless driver name validation and enforce lowercase warnings 7af3377900b Add desired_replicas histogram metric to HPA controller 96349a46088 chore: Move declarative validation featuregates to staging apiserver 06c47136fef implement KEP-5573 by not starting kubelet on cgroup v1 by default e6e6c6fdfbb Remove unused WithTakeover and WithValidationIdentifier 9a7e2291d1f refactor: Remove Validate(Update)Declaratively and improve error handling d2ec0308c7f simplify scale subresource testing and document expectations 713cb97a850 test: Add unit tests for metricIdentifier function 2d7dd9164fa Refactor: Centralize declarative validation and migration logic d559a4afe7f Add configurable tolerance e2e test. 4a76cd84055 Remove configmaps related rules from the kube-controller-manager and kube-scheduler leader election roles d45a4557c1b Migrate device manager to contextual logging 4347d4be812 Update coredns to v1.12.4 5119b869668 refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration 2c78bc981c2 Introduce API to codify and validate feature gate dependencies 7efc77f493a Apply feedback 7bab54a7c8b emit comment for uniqueness is disabled by k8s:customUnique 059d1794e61 test(validation-gen): Enable uniqueness validation tests for listmap 71797498f9c test(certificates): Add ratcheting test for CSR conditions 3da0a255f7f Enable listmap uniqueness & run codegen 3015e58e40f Improve tests devex for DV tests. adf0a916930 update autoscaling leads bd075eb98cb kubeadm: use JoinHostPort in WaitControlPlaneClient ad8f91fb0f5 Fix error messages in volume path handler 53b81011e25 fix: add +enum tag to resource DeviceAllocatoionMode 8138390e51d feat(certificates): Add k8s:customUnique tag to CertificateSigningRequestStatus 09e96ae3f1d chore(validation-gen): Update output_tests for k8s:customUnique 81e2d211767 feat(validation-gen): Add k8s:customUnique tag for disabling uniqueness validation 6031ff29c14 make containerd download more robust 051b29bde38 Add nil scheme check in GetReference 0010d3992ac kubeadm: ensure waiting for apiserver uses a local client a96ac3a2766 update publishing rules for 1.33/1.34 to set go1.24.7 2ffc06e09ae Make APIServerLeaseGC controller context-aware 2b110c138ec Add RunWithContext method for debugsocket a28e452b44f refactor(apiextensions-apiserver): Make NonStructuralSchema controller context-aware 90bd84798c8 refactor(apiextensions-apiserver): Make NamingConditionController fully context-aware 409ad3944f7 added unit test for /statusz endpoints 56eb9a1a960 [126379] [go-client] chore: use WithContext functions: do not use SleepWithContext inside Sleep, use CalculateBackoff inside CalculateBackoffWithContext dbe4143de68 generate 7019a088c39 Add declarative validation tests for ResourceClaim status 8606fa03dc7 Add declarative validation of ResourceClaim status pool field e8f243dac2a Add output tests 83cf6358189 Add k8s-long-name-segments format 697113f5f07 Add utility function to errors to allow format composition 273912fb7f6 Improve BenchmarkSerializeObject benchmark d2e6be440c6 Revert "Merge pull request #133213 from sanposhiho/second-trial-conor" c1e74a1a982 Promote HPAConfigurableTolerance gate to beta bc7ea997a0c deflake e2e: ensure pod with sidecars restarts in correct order after node reboot a87068c685d Clean up gogo dependency tracking b7567b980b9 Remove non-generated use of gogo dependencies 840aa4722e9 Drop unnecessary gogo dependencies 7930c2db4c0 Fix SELinux e2e tests waiting for "container created" event 48d56644308 update kube-cross image ac35a0a99a9 Remove some unused bits of verify-golangci-lint.sh 911e46c08b4 fixed the CRD statusResetFields init issue 784b842a44f Remove the --pod-infra-container-image flag from cluster/gce 37592a026be bump gengo 22551e56a65 Fix IPv6 allocator for /64 CIDRs 51c525a1402 [126379] [go-client] chore: use WithContext functions 1e4e6e10c19 Use context.Background() directly in kubeadm polling API calls c8138546201 Update comments around an old bug workaround a8a21aaf853 Add hpa object count metric (#134140) 25893cb579a Promote regression-issue-74839 to 1.4 fefcbdcff23 Bump image version d957c90153a Track connection using IP+port in server to fix conntrack test flakes ea914d8077f Remove unused WaitForServiceEndpointsNum function 01f7de46f6c Replace deprecated WaitForServiceEndpointsNum call with WaitForEndpointCount 12db1e28dce remove unused file 15b16e0090d Remove RootlessControlPlane feature gate 343a5db9658 DRA E2E node: fix cleanup of tests using separate registrar 89b75e998d3 expand coverage for resource quota and limit ranger tests 4e719939170 Enable SSATags linter to enforce +listType on lists in APIs 883b9e570af Wait the readiness of pods for all the containers generate logs 4275b8b759d Don't limit the number of goroutines dispatched by the API Dispatcher 736f7b9a1b5 update to latest sigs.k8s.io/json 9d5ddd9faca change klog to log volume name instead of entire spec in GetDeviceMountPath 19356ad1182 refactor(cloud-provider): Use WaitForNamedCacheSyncWithContext f44279647bf refactor: Use WaitForNamedCacheSyncWithContext in core components 9d4b91dbd80 kubeadm: cleanup after ControlPlaneKubeletLocalMode c3a26a066d8 Bump golangci-lint to 2.4.0 36e3adf318c Add e2e test for MaxUnavailable StatefulSet RollingUpdate (#133717) 9382fa8b70b Remove KUBECTL_OPENAPIV3_PATCH feature gate as the feature is stable 7028ba09dbb fix: duplicated 'the' in comment d7a2793fa65 bump system-validators to v1.11.1 f8bfcfc8857 Drop utiliptables.NewDualStack() 88d6e6c465a drop automaxprocs hacks now that go 1.25 handles this built in 563d4d651ca bump go language version to 1.25 f8d2df0f74b refactor: skip re-validating for unchanged resource claim specs 9ca4ddf9699 add go.work.sum to dep-approvers file list c8d3b3fdd33 add go.work to dep-approvers file list 4b0eeeb6184 Make pod-security-admission honor emulation version 7f4ee652eaa Delete temporary ProbeHostPodSecurityStandards feature gate 55419eca7a2 Plumb effective version into admission initializer 67632f8229d Add support for k8s-long-name-caseless format. 17665a39cf5 feat(validation-gen) enable declarative validation for resource.k8s.io DeviceClass 871f87eaec6 e2e_node: test DRA plugin gRPC connection reuse 6d5aece4d81 Ensure keys used in storage and cacher start with resourcePrefix 0b10735cd72 Extract the prepareKey function 709280ef6e7 Test requests send to etcd for all LIST requests 56a4306fed7 kubeadm: graduate ControlPlaneKubeletLocalMode to GA fa9071302f8 Adding metrics for Maxunavailable feature in StatefulSet (#130951) f58d1e101ff refactor(controller): Use WithContext variants in cloud node controllers d12eeb98d0c Replace HandleError with HandleErrorWithContext 69aca29e6de Update kitten base image from agnhost:2.33 to agnhost:2.57 (#133818) 6dbc13fd134 Bump to go1.25.1 based images af231d2153c Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/ eca1cfb259f chore(validation): add validation identifier for declarative validation in ResourceClaim c0fcb10acfa fix(tests): update fake client initialization and add resource version handling in validation tests 7c45b1aa3b7 refactor: simplify declarative validation tests for ResourceClaim 380c4c222ee feat(validation-gen): Add declarative validation support for ResourceClaim/(v1,v1beta1,v1beta2) 3fc0498d6ec Bump distroless-iptables to v0.7.8 fb184a9ff42 Update pkg/api/testing/OWNERS c51a8734b12 Update documented metrics list aefd2effc5e test: automatically lower Ginkgo parallelism when using race detection 479d78851ab feat(apiextensions-apiserver): Add WithContext variant to EstablishingController 7a62519b364 E2E: treat data races in e2e suite as failures f5cd1a16646 Address tests grouping comment 50ea1f870ea fix incorrect warning whenever headless service is created/updated 92dcd02459f Add helpers for declarative validation tests 74faf1527fd Unify directory protection for recursive requests in storage cbb7b29bc24 print the current kubectl command encapsulated by kuberc on V(1) 3799b8bf6a7 Add reviewers and approvers to api/testing 1c41cb0550b fix gofmt 842d6d29fc0 test/e2e/node: promote ConfigMap update test to Conformance 1a5e77135b2 Add fine grained metrics to narrow down DV mismatches and panics 4db49d0f4e9 feat(validation): enhance slice validation with declarative options 4074be896bd Record SyncTerminatingPod error and set error status on span when non-nil err returned f99cb99a1b9 Wait for quota to report used before creating pvc 8817dd65296 Update cmd/kubeadm/app/cmd/upgrade/node.go 91a3a30eb5c Ensure consistent key schema requirements between cacher and etcd3 938b23879a2 test/e2e/node: add [NodeConformance] label to ConfigMap update test 5dac4ee1695 Improve dry-run error messages for clarity a825c72697e Update agnhost to version 2.57 e39ed4a4b4b scheduler/volumebinding: add test for PVAssumeCache bbee7b9d6b1 scheduler/volumebinding: rename passive_assume_cache_test.go 4b0eff59c07 scheduler/volumebinding: target AssumeCache UT generic passiveAssumeCache 872981a2055 Rename CLE test directories 1ce12710ec1 refactor(controller): Use context-aware WaitForNamedCacheSync in resourcequota and HPA tests d2ba13dac92 Add exceptions for existing issues for conditions linter 894d724f98a Enable conditions linter for Kube API Linter e3b08f98713 Update KAL to latest and add shadow config for new options af6b3ed1f51 Add support for k8s-label-key aa0c5960edc Add support for k8s-label-value format. 8fed05c5b78 DRA E2E node: fix test cleanup b81e87c02f9 fix: use iifname for input interface name matches 5a708a7ff0d scheduler/volumebinding: remove Get[API]{PV,PVC} ed19492dc2b scheduler/volumebinding: passive assume cache 09ab06b423c Remove container name from container event messages bbf896c35bb build: automatically choose a suitable base image 4e907fad15d Explicitly set TerminationGracePeriodSeconds for mirror pod 1e742f01ba6 Fix cacher resource prefix not having a "/" at the end in tests c385a229d4b scheduler/volumebinding: introduce testInformer 1baa7936d89 Fix flaking RunTestDelayedWatchDelivery eaf87d59077 scheduler/volumebinding: pass testing.T to helper dce23dac036 scheduler/volumebinding: use subtest 90109b21af7 Wrapper for DeleteLabelValues 455a4376742 node_e2e: fix kubelet configuration setup c08b9ab3b5c Replace deprecated sets.String with sets.Set for Index type 476325f6e5f Specify the deprecated version of apiserver_storage_objects metric cbedde7ef50 [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: also empty TokenFile if Token is set in ConfigFlags 41307203ba4 Add additional test for root level, ignore mutation lint error 029d314e150 Replace NewIndexerInformerWatcher with NewIndexerInformerWatcherWithLogger 46cc610e6fe Drop PodIndexLabel after the feature GA-ed in 1.32 16fa1501826 scheduler_perf: run garbage collection before measurement c52e3aafb32 skip creating storages for unserved versions 74cf1db218e sort the device requests in the extended resource claim spec. removed the sortClaim in the unit test. bb21080626d standardize not found error message of kubectl scale ecff35e2fb4 deflake e2e tests: set cpu requests to avoid out of cpu 0c0acbc5351 Disable too short scheduler_perf workloads 9f31b009081 scheduler_perf: KUBE_CACHE_MUTATION_DETECTOR=false in docs 4f6598e8a31 Fix tests not using proper resource paths 6e5a5abb86c Fix version bump to follow semantic versioning 97cd1c24085 replace fmt.Printf with fmt.Fprintf 96463c1e9a7 kubeadm: fix the KUBEADM_UPGRADE_DRYRUN_DIR environment variable doesn't work forthe upgrade phase when it writes kubelet config files to disk 9f49e3b9e16 deflake unit test: TestIsConnectionReset 86028eecf2a Add ratcheting of selectableFields a89a36061c8 fix lint errors 3da372354d6 add fake-registry-server command to agnhost 480fad996d5 kmsv2: run TestKMSv2ProviderKeyIDStaleness in parallel dfcadb4f896 Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/garbagecollector 5e66bb69720 ./hack/update-codegen.sh fe1aedd0bf7 applyconfiguration-gen: remove "Experimental!" comment as the code has been stable for several releases c911747f240 applyconfiguration-gen: preserve struct and field comments in generated code 8dafb98e916 Update sample-apiserver and examples fc091d93d53 Update tests that depend on internal model names e9daf55b56a Add tests 3fc59ee9a70 stop using util.ToRESTFriendlyName in favor of declared model names 0dd2056045a Update violation exceptions 5647c07179d generate e910c181cb9 Add model name generator tags cfbe326e3a2 Enable openapi model name accessor generator 8b63ace66c5 Bump kube-openapi dd9917ddce8 Fix flaky resource claim metrics test 3df195633a8 Add support for UUID format. 7e6aafe1577 fix intergation test 9e60e3593ec kcm/app: Add proper goroutine management 79f8d1b1c5d fixed bug such that implicit extended resource name can always be used, no matter the explicit extendedResourceName field in device class is set or not. 1ac067ae0e6 Fix tests to to only accesses keys from under resourcePrefix 31e035ec39e Use increaseRV in TestWatchStreamSeparation to imply external RV increase 83273e21b91 DRA scheduler_perf: clean up usage of steady-state pod scheduling 9af3e868102 scheduler_perf: detect testcases with no pods scheduled 3dfcda9afdb Fix minor inconsistencies in scheduler bf0429ed07c migrate kubelet/certificate to contextual logging edc8dafc699 Cleanup enabling resource size estimate 5483c52e101 DRA: Fix ConsumableCapacity shceduler perf test (simplified) 05fc3f65d82 CHANGELOG: Update directory for v1.31.13 release 70af7708fcc CHANGELOG: Update directory for v1.34.1 release d884ed5e97b CHANGELOG: Update directory for v1.33.5 release 6d0138d3f12 modify etcd data for integration test 587f67052dd modify api version hash 7184ac5a733 make v1 resource version first priority in resource f89e73a3038 CHANGELOG: Update directory for v1.32.9 release 9ca3159e34c Fix fake runtime's image pull a77fc586c75 Fix negative pod startup duration bbdd27d91e5 Add tests for unique tag combo & update-codegen 62662e3a08e feat(validation-gen): support unique tag on list a5b29fa812e refactor(validation-gen): move list-related validators to list.go 81cb5b7df22 DRA: Fix PrioritizedList scheduler perf test c4d8c9b5440 Re-disable listmap uniqueness (for now) 6fb020b1942 Temporary: Re-enable listmap uniqueness checks 3e15dded75d Pass equiv func to subfield, like item and eachVal 0d5e374da93 Don't ratchet-check inside type functions b6fdbe4a6ab Emit ratchet check for fields with a type func 229954d1138 Revert "protect against race between deletion and adding finalizers" e2e7fa17990 switch our usage of expfmt.TextParser bdfca587f48 update prometheus' client_golang and common packages 2d71a0d72b2 Refactor ItemTagValidator.GetValidations a bit 8f679c74020 Make item validation just use a TagValidator c047bdf58fe Sort item criteria to match listmap key order 26283acfb14 Clarify that union has field- or item-members 3f068c7c64d Parse path early, clean up getDisplayFields() 77c1ac6320b Improve error reporting in item tag 1f61a8b814d Rename "fields" to "members" 1417e56dffd Break processFieldMemberValidations into 2 funcs 023c026d6fd Add ListSelector in validation Context 3e2e2195ed8 Unions: replace `[2]string` with a type 8130cf82b59 run "hack/update-codegen.sh valid" 348d576c9f7 validation: Use JSON names in paths f51d57042e5 Update Context comments and fix some usage 9e71a07abf5 Minor validator name-string fix fd3fcfe121a Add comments to generated code 471256619f6 Put the nfacct e2e test back under the "KubeProxy" label 9b696ff58cd build: also support KUBE_RACE for test binaries 90c9a932d49 fix race condition in kubelet's PodCertsManager 8b50c77eb6d scheduler_perf: measure DRA setup time bc8ce679984 delete v1.32.0 testdata d59d48e64a3 Add v1.34.0 API testdata b276c96ef86 Migrate kubelet/server to contextual logging 1e3c3934cb9 e2e_node kubelet configuration: merge feature gates and system-reserved items c5882e38fff Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set. e3c9c277c33 fix CI failure: update pod image using the same one 55700685bd0 Revert "Add retries to node's crictl test" 801ee441630 Validate kubelet serving cert in local-up-cluster 82eb8bd23a2 Populate memory requests from actuated resources at pod status generation time 8ff5cec2617 scheduler_perf: block after creating ResourceSlices af6da561dd8 scheduler_perf: reset and stop testing.B metrics 5170982540d chore(kubelet): migrate eviction to contextual logging 39170e2ed63 chore: Clean up duplicate logs cfeeff7aced chore(kubelet): migrate stats to contextual logging 5ed98e97e1c Remove getLocalNode to fix GracefulNodeShutdown e2e. b42b96f518f add paths section to scheduler statusz endpoint 06c5eb992e8 DRA kubelet: avoid deadlock when gRPC connection to driver goes idle 6b908c192cc [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: use values from overrides when one of the field (file or data) is present in inverrides d38c1df3f36 chore(kubelet): migrate metrics to contextual logging. cd343aaf1e3 Fix OWNERS_ALIASES entry for SIG Docs 7aa6cabd634 fix typo for forceDetachTimeoutExpired fc8907da38d [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate 8118636321a Close container runtime connections after use 1a0813598b7 Update SVM Discovery checks in response to jpbetz and stlaz bf851e8bcfa Apply feedback 7d14367f57c Change WaitForNamedCacheSync to WaitForNamedCacheSyncWithContext. 80e6f9e20a2 chore(kubelet): migrate container to contextual logging f1b28b0d1f7 chore(kubelet): migrate watchdog to contextual logging 98f81fc2910 Remove redundant experimental prefix in wait command d75d4860e7f kubelet: migrate module `logs` to contextual logging 9c1cf79d74c kubelet: migrate utils to contextual logging 62cadde688c Fix incorrect description of feature PodObservedGenerationTracking c88f2f3142b Add k8s-long-name, k8s-short-name format validation tags c8681531abd fix typo for sattsfied 4e200ca00e8 fix: Only warn for unrecognized formats on type=string cee1ea7225a Update client-go compatibility matrix to include releases up to 1.34 ddb015f023b Resolve confusing use of TooManyRequests error for eviction (#133097) 86e3ad233f7 Revert trapping TERM for podWithCommand 21359d7b1f4 Switch to resourceVersion controller 21ff3c196c2 kubelet/metrics: fix multiple Register call 98c62936230 kubelet/metrics: misc optimization 43c3b03685c Lock AllowOverwriteTerminationGracePeriodSeconds fbd33bd6b39 hpa: prevent integer overflow in external metrics sum 09548c6bdf3 Move actuated resources state to kuberuntime.Manager 683a76dd159 Enforce that all resources set resourcePrefix 954ac21c6c8 Add Kubelet stress test for pod cleanup when rejection due to `VolumeAttachmentLimitExceeded` (#133357) 3e84e16315a Disable estimating resource size for resources with watch cache disabled 73cf278883a Mark some aliases as deprecated 5f4b4a68249 Bump gengo 7e9b228ff09 apply integration test: fix ordering test flake 07faaec2c42 scheduler-perf: fix data race in createPodsSteadily c8f8f66e6de Increase termination timeout for `evicted pods should be terminal` test ef7cee89bf2 add events.events.k8s.io to clusterrole view/edit/node default 8d31237c334 kubelet: poll after reloading logind conf c7ddceb8cb4 client-go/dynamic/fake: Stop ignoring options 5e59c658d6c Organize enum tests f971ad76af2 Only pass type args when needed in enum init fa1f9d444cc apiserver: avoid default toleration seconds data race for all tests ad9ae3ab9d9 test: fix data race in test/integration/controlplane/transformation e32adad6570 apiserver: fix PriorityClasses creation data race a67468717c3 Omit value type from validation rule failures d6068db62ec CLI: log info about race detection 23362e001c4 build: support -race in binaries 9fb1ef4dd0d fix kubectl exec command in cmd test da0e7384d5e - Update Nautilus test agnhost images from 2.33 to 2.56 - Update VERSION to 1.8 - Addresses issue #131874 for updating outdated base images 4babdf80264 Fix race in movePodsToActiveOrBackoffQueue fadb40199f1 Move interfaces: Handle and Plugin and related types from kubernetes/kubernetes to staging repo kube-scheduler 82896feebbd cli-runtime: Return defined error from Builder f0be916f7a9 Update CNI plugins to v1.8.0 584a9da5940 Use golang protobuf for etcd version monitor a41de8771af Bump github.com/spf13/cobra v1.10.0 137d56c1c24 add paths section to kubelet statusz endpoint 6ddf6261d44 Update to spf13/pflag to prevent CI break 1fd7f308fc0 ci: remove httpd usage while using agnhost instead 588276255ba Disable collecting stats for resources not setting prefix to prevent error logs 9b47a096f4b Update to CentOS Stream 9 based on reviewer feedback ea02ce5b603 Update protobindings scripts to drop gogo paths 70cd76c5cf2 DRA e2e node: skipping resource health disabled test 1578267ebef Update volume/iscsi base image from fedora:38 to fedora:42 73127eb86d0 Update volume/nfs base image from centos:7 to centos:8 72847ee1f75 Replace deprecated strings.Title with cases.Title 8a6f1736523 lock DisableAllocatorDualWrite 158e4e82615 generate b6927088c83 Use consistent documentation of aliases in the API b159d2ca597 self nominate natasha41575 to be a sig-node reviewer 799312a402c Update pod resize test to accept new cpu.weight conversion. bf13cd1b81d added resourceClaimModified to bindClaim to decide whether to update assume cache 1ba96db35b5 ./hack/update-codegen.sh 8b0d7efb43d applyconfiguration-gen: add ExtractFrom with subresource support f1d0c5dbc39 return an error in case nil selectors are passed to matcher functions 81cec6df1d0 Bump to mockery v3 7685612b9c2 refactor(event): simplify conditional logic in event handling for both v1 and eventsv1 APIs faa0f33b8be remove v1beta3 flowcontrol from rest storage fd2d2fd66ff Convert `k8s.io/kubelet/pkg/apis/dra` from gogo to protoc d1946199792 Fix linter 36cf7282814 Drop SizeMemoryBackedVolumes after the feature GA-ed in 1.32 9f8d9432e20 bump gopkg.in/evanphx/json-patch.v4 f3d278e75d1 Fix completion of resource names 233384d4e47 deflake e2e test: Services should implement NodePort and HealthCheckNodePort correctly when ExternalTrafficPolicy changes d85ce5310de Appease linters e6ae04e02ca generate 15b29a0fa20 Add +k8s:ifEnabled and +k8s:ifDisabled tags 243f47f3b33 Omit type names of emitted slice elements to appease gofmt 5c955edfe04 Add support variable initialization using any literal type e8186d06790 Add output tests 8435fbab983 Add +k8s:enumExclude and options support to +k8s:enum 64d9ddcf9dc Add enumExclude support to enum validator ed170c1c0aa Add constant discovery, ScopeConst and StructLiberal. Remove ScopeAny. e1218922db0 Add unit tests to isResourceUpdatable aea27237443 populate pending and ineligible endpoints e5f4caf62a6 drop spammy xtrace from hack/test scripts f1d980adf91 separate resource-quota and limit-ranger resize tests 541ff7cd169 DRA: Add configurable health check timeout per device f336f4c75a0 Close response body after the conn is closed 2608a38d475 Increase port-forward broken connection detection client timeout 2f356d02e29 make update 09e357d31fd Drop StatefulSetAutoDeletePVC after the feature GA-ed in 1.32 bf6a55cd062 e2e: node: address linter errors 9aed0813e66 e2e: node: cpumgr: replace old testsuite c4f7272f621 e2e: node: cpumgr: keep only scaffolding 37d678e098f e2e: node: cpumgr: remove old sidecar container tests 666dec8c2f6 e2e: node: cpumgr: remove old reserved cpus tests d98069e22c8 e2e: node: cpumgr: remove old distribute-cpus tests e2624d0cce4 e2e: node: cpumgr: remove old smt alignment tests 9e6073304fb e2e: node: cpumgr: remove old cfs quota tests bf9511eda63 Remove GA feature gate ComponentSLIs c35d5473ddd Remove the otel semantics override 684473af623 Bump cadvisor to 0.53 12a784b46bd cleanup: remove redundant type conversions in podautoscaler c16d72c4140 e2e: case for multiple volumes reference one PVC 0e6b22b5c80 test: add assertion to check OuterVolumeSpecNames 4abd40f6e3d kubelet: multiple volumes reference one PVC in one Pod 7910cbb8842 kubelet/volumeManager: remove outerVolumeSpecName from ASW 146f0c93453 remove MountedVolume.OuterVolumeSpecNames from logs 52b7d035f96 cache: do not allocate chan for nothing (#133500) f1ceec70a68 feat(apis/batch): PodFailurePolicyOnPodConditionsPattern.Status can be omitted (#133479) 66fdbe10583 fix using stale pod when evict failed and retry (#133461) 5af2b732bee Change KYAML gate to on-by-default b9a8dffa51e Fix replicaCount calculation exceeding max int32 (#126979) 7cf39066b34 Remove sleepAfterExecuting param from diskConsumingPod 388046c3ea9 ImageGCTerminatedPodsContainersCleanup e2e node test c9ccbae0d9e Remove terminated pods eviction code 2cad51f6c0d Add ImageGCTerminatedPodsEviction e2e node test a59ce54d79f TerminatedPodsEvictionOnDiskPressure e2e node test df54470e9b8 Test terminated pods are evicted on disk pressure 146357aa395 Evict terminated pods on disk pressure ad8afd3ab09 add generated files ff37d8c3394 Drop experimental prefix from kubectl wait command 388aaebbd7b Add HirazawaUi as a reviewer for sig-node b012e16b47e Remove use of pkg/scheduler/framework.NodeInfo in node_ports.go 731e6def042 Fix the spelling error of grpc in the log b83e933d6a9 doc comments 6dff95db798 CHANGELOG: Update directory for v1.34.0 release ac802de9f54 update openapi spec 5a718ca28cb remove stale Godeps filter from rsync 8512862161d cleanup tempdirs on exit in kube::verify::generated d4e1d134801 add note about not adding to rsync invocations 33a58e4bef5 stop excluding GOPATH from rsync 7a43f8bd273 Omit values from validation rule error expressions 56e2f15c1a8 Show simple values in validation rule errors 00c30b354df Reduce nested conditionals around validation rule errors d838611d6db api: Remove +listType marker for non-list field ae2d50cf1a8 Update MAP storage version to use v1beta1. 2dc6f7501ee kubelet: fix error message for EnableNodeLogQuery 3c00c3cb29d Move GetAffinityTerms functions from pkg/scheduler/framework to staging repo 75d04e6c7b6 Add a note about Conflicts return value 83da6f1a87c fix(controller/podautoscaler): do not print panic when .status.lastScaleTime is not set 1c336e3fc6f Fix flaking readyz check in scheduler integration tests 4fa6c70604b hack/logcheck.conf: add several converted packages 63f304708a0 client-go leader-election: structured, contextual logging 46e10103ff0 Take activeQ lock for part of the Update method a0a43e5f80e Drop CronJobsScheduledAnnotation after the feature GA-ed in 1.32 09954ce369d Drop unused tests, after KEP-2599 graduated to GA f2bc8bdea5e Drop unused tests, after KEP-3335 graduated to GA 9c8e03a40b2 gofmt cleaner.go 3bf684b4ed0 fix: parsing the patch directly ac1f9fb73f2 util/sets: benchmark List() 48399b1af14 util/sets: simply List() by using slices.Sort 16d4f9ea1f6 kubeadm: clarify the comments for a few API fields 3b7475c5226 kube-proxy: list available endpoints in /statusz 8a95e8a71ca DRA E2E: clean up class creation for extended resource tests 4a597f50b4b Fix panic in PodResources API test when FeatureGates is nil 7debab65049 Apply feedback 8b0b0df431a Don't run PreEnqueue when pod is activated from backoffQ 8b760704fc6 fix(cleaner.go): exit early on check of CSR issue state 6cefbb65d0f Apply feedback, minor cleanups 2fc66ddaf25 update gofmt e1c586eb00f Add doc.go, example_test.go and ARCHITECTURE.md to apiserver 3f5b678e980 Update nfacct_linux_test.go e792dcb8100 Update cri-tools to v1.34.0 accdd9e27e7 Add doc.go and ARCHITECTURE.md to client-go 08bd33e0dc1 clean up outdated in-place pod resize todo 3bdaeea2155 feat: Add discovery check to SVM to ensure migration doesn't get stuck bb6a0ea6b2c HPA: optimize calculatePodRequests for specific container lookups 94d3dc40b23 kubectl: include container fieldPath in event messages f6b3f916b1f scheduler_perf: fix data race warning around klog flush df64d3f8826 Remove rbd image and storage class f920b064d00 Promote VAC API test to conformance ebf3d814f4c Fix(cleaner.go): Add GC to handle Approved-Unissued CSRs 770b749436d feat: Require SVM to use RealFIFO b46a5cceeff Fix missing control plane health check timeout dec23d58e4c Add remote runtime/image `Close()` API 97a146d47df Refactor error handling: reuse `err` inside closures and avoid re-shadowing 5c8f26f4803 kubectl: fix expose --selector help text 2180b441dd7 gofmt and review feedback b9d5edd4445 remove stray strailing tabs from gocritic settings 535b4e07e94 enable gocritic deprecatedComment check to help lint for malformed deprecation comments 0b647319c44 hack: more output about running tests 38da6d767db DRA: Fixed ResourceClaim UpdateStatus to wrap with RetryOnConflict to automatically retry in the event of a conflict. 76e5929d1a1 chore: update CronJob casing for create job help c97f08793cb Fix startup probe worker termination for sidecar containers d4f8bebda08 Fix label selector parsing for consecutive commas 8d4108bf935 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels 189d6d726bf fix formatting of deprecation warning in test/e2e/framework.WaitForServiceEndpointsNum db5dd2fe8f8 update-codegen 2b47e8e5b5a fix deprecation comment in register-gen 668b3fe4afc update-codegen ef1878c6013 Update `sharedInformerFactoryInterface` context initialization example 80071d16e18 fix deprecation comment in informer fatory generator fa5792a4664 fix k8s.io/component-base/metrics deprecation formatting 1dd428d4c01 fix deprecation formatting for k8s.io/kubectl/pkg/cmd/config.NewCmdConfigSetAuthInfo 9fabccd24c9 fix deprecation formatting for k8s.io/apimachinery/pkg/api/errors.NewGone 30f4fc9ca38 update-codegen 8c139fbe942 use correct deprecation comment in clientset fake generator a405844e66d scheduler_perf(fix): correct typos, clarify comments, and minor tweaks d3ba41467db set default log flush frequency in kube-proxy config validation tests 69b3876fd17 set default flush frequency in kubeletconfiguration tests f9dcd5f7135 validate that flush frequency must be positive 3995b6cf72b Register apiserver_resource_objects in TestDeleteStoreStats b77f4f2425a Align metrics hiding with deprecation policy 0b16f0ae3cb Test that auth{z,n} hook clients honor Kubelet's request encoding. f0e52c1c476 add known example API group suffix to avoid race cb1d04655fa test-integration: set KUBE_PANIC_WATCH_DECODE_ERROR to false aa819af85a1 chore: update CoreDNS to v1.12.3 e1dd085ffe2 Add retries to node's crictl test. 7f4462398ab e2e/watchlist: normalize dynamic 'Age' column in Table test to prevent test flake 3eb69eb8522 Fix DaemonSet misscheduled status not updating on node taint changes 39e7b2ce5e4 Migrate pkg/credentialprovider to structured logging ddffd8e3893 Allow IfNotPresent to be used in node e2e tests Currently the node e2e tests overrides the image pull policy to PullNever, if the policy is not PullAlways. d4bd007d3b8 adds a list of available HTTP endpoints for the kube-controller-manager component under the /statusz page ea9d7ff8656 PSI test: add a CPU limit of 500m to cpu-stress-pod 8612c57d216 e2e: node: linter fix e839adafb7c e2e: node: cpumanager: move shared code in topology manager tests af53d97786a e2e: node: cpumanager: move specific helpers d86d798eae4 e2e: node: trivial rename 30ca634386e e2e: node: cpumanager: push utilities in util.go bb7cff161c5 e2e: node: split utilities to learn machine properties 1a4e289cfac e2e: node: split kubeletconfig utilities a28eda435f2 Add sig-instrumentation as OWNERS for apiserver/pkg/storage/etcd3/metrics 1ea47202688 Add e2e test for SELinuxMount to CSI drivers 97edb4d5e43 Fix SELinux label comparison 76bbaa9d47a test: Standardize labels for ResourceHealthStatus e2e tests 9a6db5ad0ba remove allocationManager's reference to containerManager 9a8a4a3b440 Add missing cases to SELinuxMount tests 3fc91586a71 Fix metrics test 993ba324cd4 Bump BV to 1.35 29eb19e4228 Address feedback bd900111a8e Move ContainerRuntimeOptions flags to cmd/kubelet/app/options ff6f4e1f633 Move kubelet config code to kubeletconfig 30b34fbcca3 Don't read AllocatedResources from PodStatus during admission dc0343c2f79 Split preemption integration tests to mitigate the timeout 0c91e28360d Clean up service account print and describe aa59f930b35 Add lock to TestAsyncPreemption to prevent races c5ef7208373 Fix race in scheduler integration tests 70794c4568e Add newline to fix owners fmt 7242ddd9370 Add jefftree to OWNERS cf8ab1c3e7c component-base/metrics: add concurrent WithContext unit test 45f61b5bc06 component-base/metrics: store WithContext ctx in a wrapper to avoid race 1d792b00e65 move timeout to only cover the line under test 640dabd58b0 Decouple term and remotecommand packages a2061e97f45 install appropriate version 50fec6fc577 kubelet/volumeManager: (Get -> Has)PossiblyMountedVolumesForPod c20b105ac28 kubelet/volumeManager: GetMountedVolumesForPod() returns desired and actually mounted volumes 09131604046 kubelet/volumeManager: verifyVolumesMountedFunc checks both desired and actual eac9da061dd Bugfix: DeleteOptions decode errors should return 400 instead of 500 62dcfe3bc06 Added WithOrigin within apis/core/validation with adjusted tests b080dba14ec Add utam0k to SIG Scheduling reviewers 6c56d2fd1bc Replace usage of deprecated ErrWaitTimeout with recommended method across all Pkgs d959186056f kubeadm: simplify error handling in getAPIEndpointWithRetry 0a987f8f578 ServiceCIDR ValidationAdmissionPolicy for backkwards compatible behavior 81e680e6d98 defaultservicecidr controller no shutdown eventbroadcaster on start efcf97f98c7 authz tests: delay response in context cancelled scenario d0816f84f9c feat: increment an internal metric when duplicate validation errors 66f7e30c653 conversion-gen: use custom conversions for slices and maps of pointers a4763ee3cb8 conversion-gen: add test for custom conversion functions for maps and slices of pointers f154d43739d conversion-gen: avoid attempting to read or set unexported fields 808f837c310 conversion-gen: add test for conversion of unexported fields 531fdc67e28 Replace deprecated WaitForServiceEndpointsNum 3b0a85170a7 Make kubectl auth reconcile retry on conflict 25fee618fd9 Add helper command for comparing protobuf files 78c9672deb7 migrate tracing tests to use the new otelhttp semantic conventions 6852abc73c4 WIP: Use the tool directive instead of tools.go without sharing dependency ffa084f8112 kubectl: Fix current-context being written to wrong file c11759bdbfc golangci: Disable staticcheck QF1008 in hints 391967c7b6a Report actionable error when GC fails due to disk pressure 584eb8464cf Pod Certs: Fix flaking integration test 3a86a4eb0dd fix: fix failed ci 7c1d133dff7 Fix sidecar containers flaky tests bf088c12ff0 chore(kubelet): migrate images to contextual logging. b6f6731ab61 chore(kubelet): migrate prober to contextual logging. 065899e95da chore: use ptr.Deref to replace int deref utils cd4771d7371 fix up types for 1.34 release - remove GA feature gates 925bce297e4 Fix help for set selector 908fb0266de Fix gocritic issues b04222a41c7 Fix non-existing PCI device hierarchy scenario in TestGetPCIeRootAttributeByPCIBusID c4e8e8310b8 Fix typo in test case name 64d452d3b61 Fix non-existing PCI device hierarchy example in GoDoc for resolvePCIeRoot(pciBusID) 725b17067a6 Do not remove PVC ClaimRef to fix flaky VAC test aa077145377 chore(kubelet): migrate userns to contextual logging ec9f0d55360 chore(kubelet): migrate nodestatus to contextual logging 2b1f38a83b5 chore(kubelet): migrate config to contextual logging. cc4666cc94b kubectl/logs: Add LogOptions.RunLogsContext 904ba748f12 fix(kubelet-windows): Typo in structured log user display name 086a5add02d test: code coverage increase for kubelet/preemption a375b0aa367 Ensure CSINode belongs to current node on init ed07efbc579 Configure JSON content type for generic webhook RESTClient. 5d20dc55bfd chore(kubelet): migrate pluginmanager to contextual logging ad47298caa6 Fix a typo in fake clientset generator 53e7b175524 Fix CEL library doc string whitespace ba46831c87a bug: Remove duplicate storage resources update validations 176ee0c2452 bug: Remove duplicate RBAC resources update validations 1dd33c8e6de protect against race between deletion and adding finalizers 49ebabb54e6 verify: additional validation of e2e.test --list-images output 73627dd663b verify: improve output of verify-e2e-images.sh a352bf8815d Remove redundant MilliValue call in GetRawMetric for podautoscaler, which has no functional impact. 7c1d0c93a2b added changelog for CRI API 1.33 e7d76f37a45 flag: fix nil-ptr panic & typo messages dd37ad1bc2c metrics: don't record apiserver_request_sli_duration_seconds for dryRun requests 6f1abad18e5 metrics: add dry_run label to apiserver_request_sli_duration_seconds 9f1704dd9a1 pull mounter from dl.k8s.io e7cfbc6e14a gocritic: simplify bool expression a79865c0016 Added contribution info to sample-controller README a325cb42115 try order sandbox by attempt or create time 947de3d0a49 Bump addon manager image to v9.1.8 fe02b543aac Fixes pod status error when it has an error container Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2026-02-09T20:22:07+00:00 Changqing Li changqing.li@windriver.com 2026-02-09T08:30:43+00:00 urn:sha1:9a28d5edadbec84e07e64dc7fbb67543becf22a9 Refer [1], cgo will embeded cgo_ldflags in the intermediary output, which make content ID will be incfluenced by cgo_ldflags. '--sysroot=xxx' includes build path, which will make the binary not reproducible, these recipes can build successfully without --sysroot, so remove it [1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2025-10-19T01:01:55+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-10-19T00:30:40+00:00 urn:sha1:f281a3e744707abd381174a4da017daac96a2f03 Bumping kubernetes to version v1.34.1-54-g03a5f06c269, which comprises the following commits: 30fd2664059 Do not validate etcd version for aggregated server conformance test f3b637f6c3a Bump etcd to v3.6.5 6ebab3f180f Include relevant dimensions in pod controller indexing 8cd6b631ceb update setcap and debian-base to bookworm-v1.0.6 2674d8a049a Bump images, dependencies and versions to go 1.24.9 and distroless iptables bddc18b0948 Add integration test for invalid SAN certificate handling f40e4ce5529 Remove invalid SAN certificate construction ed6bf3e5db3 kubeadm preflight checks: fix host URL construction 5be5dc9d54a With new changes we will also have a VolumeModifying condition ea75d2aa00a gce: Fix etcd manifest 61c0fb13a70 Disable SchedulerAsyncAPICalls feature gate due to a known regression 40899107c1d upgrade to cos 121 2bfc98b313c Update pod resize test to accept new cpu.weight conversion. 3ffc54a9e96 kubeadm: rework the FetchInitConfigurationFromCluster node flags e9f5e892f74 kubeadm: use JoinHostPort in WaitControlPlaneClient 663664c6171 kubeadm: ensure waiting for apiserver uses a local client 3f170932be0 Revert "Merge pull request #133213 from sanposhiho/second-trial-conor" 09ddc5ebbf2 Bump images, dependencies and versions to go 1.24.7 and distroless iptables b245b551f74 Split preemption integration tests to mitigate the timeout 560cc36db21 fix incorrect warning whenever headless service is created/updated 07ac83c146b fix: use iifname for input interface name matches 35b87e4c188 Wait for quota to report used before creating pvc 856ac4923d7 release-1.34: pin system-validators to v1.10.2 7d43ddbbfb6 Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set. 4a40ddf1e6b gofmt and review feedback 4ae3b64b736 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels 16e3f7c1793 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.1 93248f9ae09 Release commit for Kubernetes v1.34.1 988bdd12587 Do not remove PVC ClaimRef to fix flaky VAC test b97399727e0 DRA kubelet: avoid deadlock when gRPC connection to driver goes idle 76ab5f06640 kubelet/metrics: fix multiple Register call 04fd1ada6f4 kubelet/metrics: misc optimization 7bd2900b1e6 fix: Only warn for unrecognized formats on type=string f779cf63819 Disable estimating resource size for resources with watch cache disabled 96739661c7c Disable collecting stats for resources not setting prefix to prevent error logs 2631a5f21ea Fix linter 94c0e478827 Fix completion of resource names 08515c751b0 Fix missing control plane health check timeout a75938d9e5f Fix DaemonSet misscheduled status not updating on node taint changes 3ebbe57311f Add a note about Conflicts return value 98dca817c91 Fix SELinux label comparison 3e75f388199 Add missing cases to SELinuxMount tests d1337421461 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0 f28b4c9efbc Release commit for Kubernetes v1.34.0 f2170bc6c3d kube-proxy: log but don't exit if ipv4 or ipv6 is not available f47e9696d72 CHANGELOG: Update directory for v1.34.0-rc.2 release 78405b2c893 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0-rc.2 ed3ccdbe323 Release commit for Kubernetes v1.34.0-rc.2 db01f940320 Remove patch/update from ServiceCIDR API conformance test d49e3d67cb3 Fix storage counting all objects instead just objects for resource 747a295caca fix flake in dra test 'TestPlugin' 4ebe560c74f DRA allocator: fix data race around `claimsToAllocate` 41013e7bf0a e2e_dra: use latest release if stable doesn't exist e49f6116f9e clarify that staging repos are automatically published ada2ed84877 add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only 8919ac43c81 special case that kubectl staging repo is currently used to track issues, and only pull requests should be redirected back to the main repo. 011d5001975 link to what a staging repository is 7c43e6d2fdb docs: clarify that this is a staging repository and not for direct contributions f8bad82c212 update go version for publishing bot rules bf6c86b562d DRA: wait for stats to converge in "creates slices" e2e test 020b7052ca8 Bump dependencies, images and versions used to Go 1.24.6 and distroless iptables c8ab780edbd dra plugin: assume claim after api call in bindClaim 81affffa1b8 CHANGELOG: Update directory for v1.31.12 release 8311c1d3d70 CHANGELOG: Update directory for v1.33.4 release edfa9a5bd28 added WithFlaky() to the device plugin test case: supports extended resources together with ResourceClaim 48a4967718e CHANGELOG: Update directory for v1.32.8 release 064b5916172 improve CRD handling in VolumePopulator test 944b0a49235 do not allow the node to update it's owner reference 0bd039e89af Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0-rc.1 4d6b49b3fd4 CHANGELOG: Update directory for v1.34.0-rc.1 release a956ef48629 Release commit for Kubernetes v1.34.0-rc.1 e073a91256e Add release-1.34 configuration cbd6fb867ba Remove DeprecatedVersion for apiserver_storage_objects, adjust help text 89b5034d562 Make podcertificaterequestcleaner role feature-gated 2629fe25faa Use Delete() instead of DeleteLabelValues() for etcd metrics 13ced7b7ddc CHANGELOG: Update directory for v1.34.0-rc.0 release 40e8ad9517f Release commit for Kubernetes v1.34.0-rc.0 b7969189866 reduced numPods to 5 from 10 to fix flaky test (supports reusing resources) due to timeout. 2a026f6d659 1/ added retries to AssumeClaimAfterAPICall for the object which is not present in the cache (dynamicresources.go) 2/ modified the assume cache verification to not error out as long as the expected claim is in the cache, no matter its latest and api object are different or not. (dynamicresources_test.go). 3/ fixed nil panic as seen from https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/133321/pull-kubernetes-integration/1952472629470302208 01470d973b2 Fix memory limit decrease test on cri-o aca402f25b3 e2e: node: skip breaking tests 0fbc8cd44ce Remove integration-test labels from long running scheduler_perf workloads e83e5815e5e always pull pause image for eviction tests 418e96bf1af Update prerelease lifecycle to v1.34 65fda6dd34e fixed exended resource scheduling performance test, added more nodes for scheduling the init pods 9eda4789c02 Fix potential race in PodStatusPatchCall implementation dbfeb9c351a Fix potential race in closing API dispatcher c7db6362fe6 Move NominatedNodeName preemption-related integration tests to a new package 46b858aa130 fix: return false to apply the patch 07c71097d33 Split DRA scheduler_perf tests into multiple packages 988c9b03fd1 Demote KEP-5278 feature gates ClearingNominatedNodeNameAfterBinding and NominatedNodeNameForExpectation to Alpha 0a12f00e9d3 fix nil panic in hasBindingConditions, it cannot assume claim has allocations 7f052afaef5 KEP 5075: implement scheduler 3e3b2447ffe Promote PodLevelResources to Beta (#132999) 59bba927178 KEP-5075: generated codes from make update 5ad969588d5 KEP-5075: API updates 29d1951eb76 fixes scheduler nil panic due to empty init container request&limit 23d6f73e720 extended resource backed by DRA: test 34a64db2c73 extended resource backed by DRA: implementation a3a767b37ec WIP: fix e2e tests 4ca47255a8b node: disable resource managers when pod-level resources are enabled 3068b60b830 extended resource backed by DRA: codegen 1f2fd18ac86 extended resource backed by DRA: API types.go 7fbf63a23fc HPA support for pod-level resource specifications (#132430) 6e9b60e3fd8 Add / update kubelet and DRA API owners 60fa65db883 Clear pod.Status.NominatedNodeName when pod is bound 15b1a7fd317 Revert "CPU and Memory manager event when using pod level resources" aea0a3cca29 Run all relevant test cases with the feature gate enabled and disabled 856e7d2383c scheduler: Stop clearing NominatedNodeName on all cases 6653ef652b3 KEP-5007 DRA Device Binding Conditions: Add dra integration test 9e82c133010 KEP-5007 DRA Device Binding Conditions: Implement DRA logic e8c3af1f5cc KEP-5007 DRA Device Binding Conditions: Implement scheduler logic ac81b829e4a KEP-5007 DRA Device Binding Conditions: Run make update 987ad395167 KEP-5007 DRA Device Binding Conditions: API Related code Update 34c3b093835 KEP-5007 DRA Device Binding Conditions: API Update ac9fad60301 feat: trigger PreFilterPreBind in the binding cycle 48eef9ce9af test: fix TestStructuredAuthenticationConfigReload flake by handling expected network errors 4874d41665b Pod Certs: Fix kubelet volume host arg order f9bb14fcf06 Fix apiserver service proxying e2e test flakiness 8ace0fb89fb remove failing test that depends on expired credential, remove credential, add TODOs f07dcd443d7 fix flake on TestStreamTranslator_WebSocketServerErrors 7ba22700bfd websocket streamtranslator increament metrics before writing status 0aea6a1e45d TestStreamTranslator_BlockRedirects use subtests 4b698656bec Returning early if podResources is nil to avoid nil pointer dereferencing 766d011bba2 E2E tests for no hints nor aligment of CPU and Memory managers 5672750e6a3 Unit tests for no hints nor aligment of CPU and Memory 7804b51f420 CPU and Memory manager event when using pod level resources fd206a0efb3 Add comments for restart rules not used for unknown container status and probes 4b479da4b5b Remove the feature from e2e test 6997fbd1edc Fix incorrect validation on the kubelet 48f8458c41f validation: Fix user-namespaces test case name 50a7a8af4d2 validation: Align usage of hostUsers in error messages 5f7e611f736 validation: Return error if hostUsers=false && volumeDevices f3466f8adc1 fix: flake integration test ed74d4cd52f Revert "Revert "fix: handle corner cases in the async preemption"" e8dc272c533 Update etcd to 3.6.4 0f7cd149596 Fix prerelease-lifecycle for volumeattributesclass 9c8dacb0374 ContainerRestartRules feature gate should work with probes 48fd30113c6 [PodLevelResources] Add missing label to Downward API test 57ceb56c6fa Bump etcd sdk to v3.6.4 b562335cb36 Build etcd v3.6.4 image 17d733e2433 KEP-5229: Send API calls through dispatcher and cache 40a90df3b36 DRA E2E: remove stress test b956484c25a KEP-5229: Add metrics for async API dispatcher 006d7620a8c Revert "fix: handle corner cases in the async preemption" 727a6e6db50 Reject pod when attachment limit is exceeded (#132933) a652896307c Allow white-spaced CABundle during webhook client creation and validation (#132514) f1737db166b Update DRA Pod spec comments b7de71f9ce7 feat(kubelet): Add ResourceHealthStatus for DRA pods d4a83b9a522 fix(golangci-lint): skip config verification when -c none is used 252513a1b99 Add WithFeature and WithSerial, also check if cgroup v2 is used in test 1bc995c195e Generated files f925e555483 E2E tests for container hugepage resources immutability 9f5b09eb7bb Unit test pod level hugepage Default and Validation logic 845e94d3707 Validation logic and Defaulting update for pod level hugepages c15a54f8c0c draadminaccess: move metrics test from e2e to integration d176808d3a9 Rename hack/*-yamlfmt to -owners-fmt 7adcd21148f Replace cmd/yamlfmt with k-sigs/yaml/yamlfmt 79833578f66 KEP-3695: add kubeletPodResources feature gate to Beta 2cb955d8cca Add KYAML support to kubectl 8182a27f3b0 Re-vendor sigs.k8s.io/yaml @ v1.6.0 94bf8fc8a9d Promoted API `VolumeAttributesClass` and `VolumeAttributesClassList` to `storage.k8s.io/v1`. 8e3f93c8796 Unit test propagate pod level hugepages to containers 52b457421a9 Pod level hugepage cgroup when unset in container add7132a6db E2E tests for pod level resources Kubelet Preemption 976a617d059 E2E tests for pod level resources eviction manager 13b122b6ffe Unit tests for pod level resources eviction manager 9a3ca05f6bc Use pod level resources for eviction manager b34f8782e2f Add e2e tests 9086e52feeb Implement restart rules in kubelet af595a44aef Add container restart rules to API 5dc2030c027 4033: GA KubeletCgroupDriverFromCRI feature gate 27e16751538 Make PSA host enforcement honor emulation version 32053b1d2f3 chore: replace ptr caster with unified ptr.To 83a0d0c660a kubelet: add metric for version CRI implementation will lose support ffe306d6795 client-go, kubectl: Replace deprecated ErrWaitTimeout with recommended method (#132718) cb33accc8fc JSON & YAML output for kubectl api-resources (#132604) 8a2db4da426 fix: adjust the log level in the preemption 4c9bf4719b8 fix: handle cornor cases in the async preepmtion bf98e45afb3 Migrate pkg/kubelet/volumemanager to contextual logging aecd37e6fb4 Moving Scheduler interfaces to staging: Move PodInfo and NodeInfo interfaces (together with related types) to staging repo, leaving internal implementation in kubernetes/kubernetes/pkg/scheduler c954e13255a Revert "DRAAdminAccess: add upgrade downgrade test" 12d67506661 client-go/metadata/fake: sets opts.Watch to true b37fd0cab28 [KEP-4816] DRAPrioritizedList to Beta 6767d54bba6 Bump DRA API version to "v1" in "deviceattribute" package in "k8s.io/dynamic-resource-allocation" module 449763fb115 e2e: podresources: disable memory manager integration b768c1d1d5b DRA API: bump storage version to v1beta2 24de875cebc DRA: graduate DynamicResourceAllocation feature to GA d8df1dc1b89 DRA RBAC: fix kube-scheduler bootstrap policy 21d929f5992 integration: use --runtime-config-emulation-forward-compatible 5c4f81743c2 DRA: use v1 API cff91579e80 DRA API: v1 registration + tests 4e592f6c145 DRA API: s/v1beta2/v1/ and generated files 1f2f433f76d DRA API: verbatim copy v1beta2 -> v1 837b7395d29 kubelet: DRA: Close gRPC connection when removing DRA plugin c7d6c096833 List available endpoints for kube-apiserver (#132581) 5f4a1aa58c3 chore: ptrTo util removal with ptr.To a82187cf11a [PodLevelResources] Update Downward API defaulting for resource limits 4c87e60d0db Tests using .host field in probes must be at priviledged level f94fcac8680 Add new fixture testData for 1.34 PSA fc0474d7718 Copy test fixtures to 1.34 from 1.32 9540a963964 Copy test fixtures to 1.33 from 1.32 4a3ebf886c4 update the minimal version to fix unit/fixture tests 333b19b4416 Add PSA for blocking .host field on pod probes and lifecycle c7bf3b81f6a Add flake debugging for admission test a806e069e26 Remove WinDSR feature gate unit test 765d84e9bff Test only EndpointSlices, not Endpoints, in dual-stack e2e tests 2cb48f77f0f schedule pod availability checks at the correct time in ReplicaSets 61cc6cf8072 draadminaccess test make it serial 33b45c8383e Update "should proxy through a service and a pod" to look at EndpointSlices d70e7e223cf Port aggregated apiserver discovery to EndpointSlices 41dc2d3b024 Add utilities for getting EndpointSlices for a Service f7109ed281a [KEP-3751] Allow PVC VACName to update to nil or empty when status.currentVAC is nil c35e4ad2b24 add codes for drop disabled pod fields 8d65e1e98ee Add e2e tests. f31aeca4256 Add code for overriding hostnames 88b76214343 Add validation for the HostnameOverride field. c889ee17a2f Convert kubelet plugin manager from gogo to protoc abb1b26d508 DRA: Add experimental allocator variant 17cc5e9ecd8 e2e: node: podresources: exercise with dynamicresources enabled ee8ef383bec Update kubectl kustomize to kyaml/v0.20.1, cmd/config/v0.20.1, api/v0.20.1, kustomize/v5.7.1 af6c97bd14f add Feature Gate. 8b3814c4ab8 Add the HostnameOverride field to the Pod API c2a06e7912c DRA: skip flaky test case on Windows f6061605fb5 DRA E2E: run multi-node control plane tests also with two nodes f0e29208985 DRA E2E: simplify "control plane" test names 603751ee80d DRA E2E: remove redundant test 21ed19798ea kubelet: DRA: Handle grpc.ErrServerStopped in plugin tests 61bd5789be4 Updated to not directly change the global variable `claim` 4f0a5771abd test: add e2e case for mutating named port db9b9b5a429 Build etcd v3.6.3 image 179551a7cb3 feat: Implement warnings for unrecognized formats in CRDs 437a2ad693f feat: Add func to export the supportedVersionedFormats d943239c57b added debug_redact to cri api secrets 88af8b6060a Add PodLevelResources to the Windows OS limitations in the API doc c2b26617bec Check OS for PodLevelResources in kubelet e2c308aff93 Check OS for PodLevelResources in API server f6aee636906 add validation logic for APIVersion fields of HPA 6f3b6b91f08 KEP-3721: Support for env files (#132626) 0b60c121947 KEP-4222: Adopt text and JSON transcoding support for CBOR. 917659269af Bump to github.com/fxamacker/cbor/v2 v2.9.0. 216f7485bd9 DRAAdminAccess: add upgrade downgrade test 303a7056ffc e2e: node: podresources: enable multi-container tests 38a9a8a59dc e2e: node: podresources: add tests for missing pod 19b00ecc941 update CCM image to v33.1.1 b070b0a5c5f chore: residual boolptr and intptr removal 407bcf88645 kubelet: add metrics for userns pods e5ccc31e704 chore: replace float64Ptr with ptr.To helper in validation and integration tests 545b36ba295 fix uncore e2e check b97decb7d91 client-go/dynamic/fake: sets opts.Watch true f626e847e72 Migrate pkg/kubelet/winstats to contextual logging ce2d979390e Run Unschedulable scheduler_perf test case with SchedulerAsyncAPICalls feature gate enabled 0da0897c18d Bump external snapshotter for vgs tests 78bf3410c88 DRA E2E: revisit conformance classification of tests 911df655d3b chore: migrate kubelet lifecycle to contextual logging. 872f0682d58 Use "k8s.io/api/resource/v1beta2" instead of "k8s.io/dynamic-resource-allocation/api" for resource API imports. 31d2de59dd9 Split the symlink target error cases into for each condition a4fb1562f4a introduce resolvePCIeRoot instead of resolveSysDevicesPath f3d4b216f3a assign return value to a variable instead of using it directly 7f27c88d0fb Update staging/src/k8s.io/dynamic-resource-allocation/deviceattribute/pci_linux.go ee26a5837c4 Update staging/src/k8s.io/dynamic-resource-allocation/deviceattribute/pci_linux.go 8b558a1bc3e fix(validation-gen): correct typos in comments and documentation 63a958ff344 chore(validation-gen): remove TODO regarding ratcheting behavior for slices and maps c659b418265 e2e test for mirror pod with pod generation a5b9c7a7981 bump resource claim controller concurrent syncs to 50 6d4000f844e Pod Certificates: make update 4624cb9bb92 Pod Certificates: Basic implementation facbb66142e Temporarily revert restart-on-node-IP-change behavior of proxy NodeManager e2d37f3cd7e kube-proxy: merge OnNodeAdd and OnNodeUpdate into OnNodeChange 0dc51b16f9e kube-proxy: merge NodeEligibleHandler with NodeManager d4892fef768 kube-proxy: merge NodePodCIDRHandler with NodeManager 373fb487f60 kube-proxy: add NodeManager to manage life-cycle based on NodeIPs d21ca8674ce kube-proxy: add NodeTopologyConfig for tracking topology labels 8acda3631f7 Belatedly add tests of proxy NodeConfig and ServiceCIDRConfig edf4654d76d generate proto 18918e20085 add CSR declarative_validation_test.go tests 69a8a169d59 add WithOrigin and MarkedByDeclarative, update hand-written to error at list instead of list item field, add additional tests for approved+denied case 6a2d5a1e644 feat: add CSR status.conditions approved+denied declarative validation tags and associated declarative validation tags to v1 and v1beta1 types.go 248ad21610b graduate prefer-align-cpus-by-uncorecache to beta 6e77bff18b8 pod sandbox image is not being used by kubelet any longer 43706d6b7a8 add warnings when creating headless service with specified load balancer ip,external ips and/or session affinity 53aa4332b56 fix integration tests 8996e81fc87 fix unit tests dd4dd3d8ea4 feat: Enabledeclarative validation in CertificateSigningRequest subresources updates ccc82775f45 expand test coverage for uncore alignment cb29414b44f Extend E2E test coverage for PSI metrics under pressure 4ed231da063 kubelet/imagePullManager: add benchmarks for image pull record accessors 5486e6f44e2 DRAAdminAccess: move to beta 5d4010d2d24 Mark KubeletServiceAccountTokenForCredentialProviders feature gate as beta 4fc9546e0e2 KEP-5229: Implement API dispatcher 549f7c4fc98 image pull manager: add in-memory LRU intents/pulled records caching ea326373ef3 e2e: node: cpumanager cgroup v1 compatibility b8d74e75c7b Add test case to prove MaxElements correctly set on IntOrString 7e5aafcb164 ci: remove unnecessary test harness 457df1cf981 ci cleanup: make sure to remove test KUBECONFIGs 3026020b44a Convert `k8s.io/kubelet/pkg/apis/deviceplugin` from gogo to protoc 4f9f6c05363 scheduler_perf: hide "metric ... not found" errors b8758ac31b7 node: mm-mgr: migrate to contextual logging 2e756e7412c fix data race in OIDC integration tests by serializing test server starts 03acd266a31 chore: residual uint64ptr removal with ptr.To b84271a7795 DRAAdminAccess: add e2e ab839c93ff8 feat(kubelet): migrate kuberuntime to contextual logging 30e5cdd6412 kubelet: don't fetch image credentials if the image is present and if we don't need to check if the pod is allowed to pull it cbba3281a3a integration: fix etcd output handling d0fc938a07f DRA client: fix conversion of watch channel f77ce8951e6 DRA: debug output for list/watch client 9d7d3a61722 Bump sample-device-plugin base image to alpine:3.22 7ddb0426266 feat(cmd/kubelet): support structured and contextual logging fb4e2522240 test: add batch pod deletion for kubelet e2e tests 4b8dd9612ff cleanup: remove example plugins 067bd16b154 Add unit tests to check if right feature gate is checked based on resize request. f71080c930e Create separate feature gates for static CPU Manager and static Memory Manager support 07ef7842be2 Change memory manager static policy to a public const ae5247afc18 address feedback 65951744564 unit test for HandlePodReconcile retrying pending resizes 0d24c3b57f0 add sourcesReady parameter to fakeKubelet constructor 6e86af48ccb fix check if requests have shrunk 6a40bcb4268 Retry pending resizes if a status update leads to aggregate requests shrinking 22d724969c9 kubelet: record container_resize_requests metric for all resize updates 13a6d2121c1 check a couple extra failure scenarios 8957109b76b only record resizes in progress and pending after all pods are added d51375dccf2 record 'kubelet_pod_deferred_resize_accepted_total' metric b8fc1b6750f record 'kubelet_pod_infeasible_resizes_total' metric d845e1fd6b8 record 'kubelet_pod_pending_resizes' metric 23005281f74 record 'kubelet_pod_in_progress_resizes' metric 0595ddaafa6 record 'kubelet_container_requested_resizes_total' metric 468aa5e30c4 record 'kubelet_pod_resize_duration_milliseconds' metric 12966276334 define and register ippr metrics 3964fbeab14 kubelet: integrate sa creds in image pull manager f1728bd584a Add ServiceAccount coordinates to ImagePullCredentials v1alpha1 b9dd2fdec03 credentialprovider: track service account cred source in ext provider keyring 9a4c0f9b2f1 scheduler_perf: Add memory tracking to performance tests 8a42f4ccce5 Add support for CEL list library. 5d31866313a dedupe fetching allocatable and available resources in node test 79dc0b8a414 Add jitter to priodically executed process in storage to avoid too concurrent executions a48420e3ceb promote PodObservedGenerationTracking to beta 336b5aff452 Check for valid UID range when runasnonroot is true e9492239b24 Promote windows graceful shutdown to Beta 00bf3b37a74 Graduate PodLifecycleSleepActionAllowZero to GA 99059895f4f Account for caching and maximum object size when estimating LIST request 2256f5747dd Add resize completed event after Inprogress conditionCleared is cleared d42a1d58d0e DRAAdminAccess: add metrics f5d12ed39a1 fix: Compare versions instead of pointer comparison 8dc20a0f62d Fix IntOrString cost estimation when schema has a MaxLength constraint a2e9e9f6677 fix pass ctx into a revised HandleError function 729cd583ad9 scheduler integration: fail test instead of existing bfa33b18a08 fix(kube-proxy) avoid add zero-masked loadBalancerSourceRanges to ipset d6e85b504d0 Add kubelet_credential_provider_config_info metric 14a5ef56a34 fix pipeline failure 21e2fcea9ec Add automatic_reload_last_config_info metric for auth configs 5f829195e6b Only warn when AppArmor annotation doesn't match pod field f2c48ffec9e Add generic config info custom collector 11921f75857 [KEP-5100] WinOverlay feature gate to GA e417232f92b Warn when using AppArmor annotations with a pod field 4fdf09fdc1b Stop syncing AppArmor fields to annotations 3ecb3d230f3 Remove unused appArmor*InUse functions 75ae2d727a0 Add an E2E test for memory limit decrease usage check 2a9388c3036 Move memory limit decrease e2e test to success cases c7a78185c25 Remove the restriction on memory limit decrease d9c91127d06 Check memory usage before decreasing limits 465f7281419 use gomega.BeComparableTo instead of Equal for resource quantity check in resize test cedcbfb94c3 Update cel-go to v0.26.0 24065780ed7 Add e2eendpointslice.WaitForEndpointPorts, use in some tests. f456a70bdea use CreateBatch and MakeResizePatch 5cea72d5649 DRA integration: add test case for FilterTimeout 241ac018e25 DRA integration: remove unnecessary anonymous import bc338e7505c DRA scheduler: implement filter timeout and cancellation 430c79b53fc chore(validation-gen): hold uniqueness check of listmap 1745094c405 Update VolumeAttributesClass API Description 2cb30c77949 Refactor target check 86bc1bf0a45 more complex e2e test for deferred resizes 66de1960a5d Increase maxSeats for List requests 025c606e398 DRA scheduler: add plugin configuration ee38a001311 DRA scheduler: add DRASchedulerFilterTimeout feature gate 837ef29f5a2 scheduler: enhance and document Filter cancellation 7910b43cd39 scheduler_perf: document benchstat usage b9ce92d50eb edit versioned_feature_list.yaml 070621bf776 Remove unit tests that rely on feature gate enablement check 3f847d97c32 GA the NodeSwap feature gate 1a7630c0979 Remove deprecated LegacySidecarContainers feature gate 300c7b815a2 set the timeout to Get method 2b13b87e609 chore: replacing timer ptr with ptr.To 532d48fe6ad Convert `k8s.io/kubelet/pkg/apis/podresources` from gogo to protoc cf68f75fc33 Deprecate apiserver_storage_objects and replace it with apiserver_resource_objects metric using labels consistent with other metrics db342010f46 kube-controller-manager: enable WatchListClient cef9f9edb6e kubeadm: fix a bug where it should generate default etcd command based on etcd version when the etcd image tag supports semver ace2a224926 drop rules for release-1.30 as it is EOL 6737c31d0f7 update publishing bot go rules for release-1.31/1.32 a1a85ddb161 SSA: test optional map keys 4d34975a466 sigs.k8s.io/structured-merge-diff/v6 v6.3.0 3357e8fc057 SSA: add integration tests a2a3839a8ee DRA scheduler: add pohly as approver 4bc2ad6eea7 migrate pkg/kubelet/preemption to contextual logging b96e3cac741 migrate pkg/kubelet/pod to contextual logging 0cb31bc4073 migrate pkg/kubelet/nodeshutdown to contextual logging 75ccd69babe migrate pkg/kubelet/kubeletconfig to contextual logging 1d0fd592881 kubectl: add port names to describe pod output 7dad9e2af6f migrate pkg/kubelet/apis to contextual logging f141907ddd8 DRA kubelet: add v1 gRPC 1b5a08cbfb5 cleanup: fetch individual PodResourceInfo from allocated resource state 6e7e6b37c7e Fix the cost issue to match the bug fix for target being nil in CEL side. ad220eb6c32 chore: remove residual int64ptr usage with ptr.To a9644686381 Add PodCPUAndMemoryStats to stats.Provider interface 8f4a624a593 Fix pipeline errors e8536c01910 add item + union and item + zeroroneof output tests be72d963b88 add validate/zeroorone_test.go and add +k8s:zeroOrOneOfMember output tests 10b20852e3c feat(validation-gen): add +k8s:zeroOrOneOfMember tag validator and associated validate method 81f18759e6e add validate/union_test.go and add +k8s:unionMember and +k8s:unionDiscriminator output tests 5bc9b691141 feat(validation-gen): add +k8s:unionMember and +k8s:unionDiscriminator tag validators and associated validate methods bfb42fc31c9 refactor item.go with buildMatchConditions, make itemTagValidator a LateTagValidator 5d1c5ebd8cb add ParentPath to context, remove Parent from context and plumb changes in validators c50da38aa18 allow field validators to generate variables e7aeb4ff5c1 Promote MutableCSINodeAllocatableCount to Beta 9bcaa8c86b1 Fix conversion-gen caching incorrect memory equality comparisons b35ad4e9b01 Add e2eendpointslice.WaitForEndpointPods, use in various test dbecdd18763 Use e2eendpointslice.WaitForEndpointCount in more network tests b7998a397b5 Add e2eendpointslice.WaitForEndpointCount, use it in some network tests dd3691b1698 refactor allocator, removed claimsToAllocate from NewAllocator(), instead, passed it through Allocate() 8e6651520e6 Convert `k8s.io/kms/apis` from gogo to protoc 2f605f49fcf CHANGELOG: Update directory for v1.34.0-beta.0 release 9cf00ec6d17 kube-apiserver: promote WatchList feature to beta e4320fe25cf e2e_node: DRA: test handling fatal serving failures ea05ad8887b e2e_node: DRA: add errorOnCloseListener fc21d3f37dc e2e: DRA: enable test plugin to cancel main context on error 1981c985b17 e2e: DRA: support test and public options d44b737447f DRA: handle grpc.Server.Serve failures 169965350cc e2e_node: Refactor DRA tests to use variadic options 52fab5969cc Add NominatedNodeNameForExpectation feature flag fd23fa3d423 Graduate ListFromCacheSnapshot to Beta 665599417ab Add e2eendpointslice.WaitForEndpointSlices, use it in a few places b5931f53dd7 Auto update openapi spec a100dfdfaa5 Using alpha as the stored version for one release. 6e932445326 Add validation of volumeClaimTemplates in StatefulSet ae4a43de6dd Refactor: isolate flag registration to kube-apiserver to eliminate global state 5b4c1872a0f chore: residual intptr removal with ptr.To e9aab4648fd CHANGELOG: Update directory for v1.31.11 release dc0ca0be3f8 CHANGELOG: Update directory for v1.33.3 release d6caa36dcc7 CHANGELOG: Update directory for v1.32.7 release d460611e77c Add more checks b69fd9d42c4 Add egress selector support to JWT authenticator e9c1ca724f0 Add conversion-gen memory equality test 62521d83508 fix observedGeneration in pod resize conditions 38637260281 add unit-test for ensuring authn latency annotation 760eb7d5dea fix: record authentication latency before audit filter wraps up 26c8ee7b858 DRA: Improve allocator with better backtracking d383c8e0243 Update history of checkpoint support in Kubelet 20914ef4e90 Prevent running two HPA cachers for different API versions bc5088cbf35 Revert "Kube proxy node manager" f8c7131b46b Drop experimental- prefix from etcd flags d8747d716e4 Use object size estimation for non-recursive list 05e1c4b4893 e2e: node: fix podresources API feature label 6e1875fac94 local-up-cluster.sh: don't require to be invoked in the root 356be5ae30f DRA E2E: move upgrade/downgrade test into test/e2e_dra c8ca9249acd DRA integration: add upgrade/downgrade testing with local-up-cluster.sh 60e9316c0cc DRA E2E: refactor helper code 2e3228e2ca9 DRA E2E: support deploying driver on localhost e5f57d2cfab ktesting: add WithoutCancel e01603b2e33 ktesting: document side effect of SetDefaultVerbosity during init 0b1bed1a1e0 ktesting: WithCancel does not cancel on test completion anymore f381d737247 DRA E2E: retry exec of hostpathplugin c2080e7e45d DRA E2E: support using ktesting 906505281fc ktesting: add step Begin/End b7c2d6aba50 ktesting: skip logging error when capturing it 4977163860b DRA E2E: reduce port proxy verbosity 5721c927e6a DRA E2E: increase verbosity of resource claim controller 1a284472f17 E2E framework: retry also on EOF errors 6a7b9589f61 E2E framework: support setting REST config bd30b0adef6 remove general avaliable feature-gate DevicePluginCDIDevices 9c0e65b085d test/apimachinery/watchlist: server supports sending resources in Table format 2dfc4e25a9a endpoints/handlers/respone: include metadata when IncludeNone and watchlist requested e1a0cf6244f handle stoppedCh and listenerStoppedCh returned by cc.SecureServing.Serve 6cd00cdcba0 Auto gen a3ecea296c1 manual change 4f3334b7cee Promote feature gate 0d8fd61e64c address review comments 32afbd9ea5d Inconsistency resets cache snapshots and prevents collection of new ones until cache is marked consistent again 4f77a461863 Generated files a04e7cf5eb8 KEP-4601: Graduate selector authorization to stable 6f4be0d8c93 DRA allocator: skip unsupported test cases 740e568468e address review comments 61542e7a987 Cleanup: Remove field name from invalid field detail message 14f3c26842d Remove redundant metric field. ad03cb87336 chore: residual strPtr utility removal with ptr.To af249fb2e97 DRA E2E: test mixture of extended resources + ResourceClaim 9a7dddf5a71 fix test 09ec6f74483 chore 85adda5e68f Use object size to estimate list cost assigning 1 sear per 100KB f20be4c094c add test which checks release method calls Get 7d9eb2b3d0d test/apimachinery/watchlist: update tests that receive resources in Table format da7c55e0d2f reflector: detects unsupported meta.Table gvks for watchlist ebc1ccc491c Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b) 8d1cbc83d8c endpoints/handlers/get: remove watchListEndpointRestrictions 14d1bbf36f4 chore: maxPtr utility removal with ptr.To 6462ad918e7 codegen tool: resolves GOBIN via `go env` 1073b3b9055 Add unit tests for AddPod() fcb595a2df7 service-ip-alloc: delay ip processing on service recreate 8de14b526e9 service-ip-alloc: make repair loop consumer clock interface e3836172845 Fix TestProgressNotify for etcd v3.6.2 e0f9914ef72 chore: replace int32Ptr usage with ptr.To cf4912eb4e5 chore(validation-gen): reorder imports 419e70b7637 run update-codegen 4c8f489b817 add +k8s:neq tests fc1c832c495 feat: add +k8s:neq tag which enforces field is neq to a specified comparable value fb971325c39 feat(validation-gen): add new test cases for item validation 5cc2721f6c6 feat(validation-gen): add k8s:item af05aa61d9c feat: Add validation ratcheting for subfields tag daef13ecc36 chore: improve error rendering and add unit tests for ErrorMatcher f40ee6f996d feat(validation-gen): add new test cases for validation of slices and maps b059bb55143 feat(validation-gen): enhance validation functions for slices and maps 0b1fa64a920 refactor(validation-gen): streamline type validation logic 7ad89e19971 feat(validation-gen): add FieldValidator ba45e37b24b chore: removed boolPtrFn helpers with ptr package implementation 5971802fdda chore: intPtr removal with ptr.To a091fa607ea Add apiserver_resource_size_estimate_bytes metric e6cf7dbf063 Enable running cache inconsistency detection by default a06b3d356c8 Bump dependencies, images and versions used to Go 1.24.5 and distroless iptables cba38b62932 DRA allocator: fix linter hint 5eab2b7a6e4 Remove unuse runtimeCache parameter from stats.Provider 46e2c22fd76 kube-proxy: merge OnNodeAdd and OnNodeUpdate into OnNodeChange fa9e466945c kube-proxy: merge NodeEligibleHandler with NodeManager c6735d9b3bc kube-proxy: merge NodePodCIDRHandler with NodeManager 45c355ca58b Move unschedulablePods struct to a separate file bfeaae3310f Compact watch cache based on last observed etcd compaction c43104cbea8 kube-proxy: add NodeManager to manage life-cycle based on NodeIPs af7abde0e55 kube-proxy: add NodeTopologyConfig for tracking topology labels 98c4514eae2 add e2e_node tests for uncore alignment 70191dd21ca fix uncore cache alignment for odd integer cpus 65e0cff3c5a add Replicaset -> ReplicationController conversion test 9df4c35a60a Disable SchedulerAsyncPreemption feature correctly in integration tests 3636d5bd3a5 Added NodeSelectors field to DriverDefinition 4f0d3eaa36b enhance exec probe logging with pod and container context ffe90820710 DRA allocator: select tests based on supported features b1a35c640eb Build etcd image v3.6.2 7e37711d6ee kubelet: Add service account UID to token cache key for proper invalidation 45dfb46448a Add TokenRequestServiceAccountUIDValidation feature gate with UID validation 237fbde8b1e clean up e2e test and sorting code 4d2566eb5a1 credentialprovider: wire in service account mode cache type 03db2278d52 kubelet: Add CacheType field to ServiceAccountTokenAttributes with validation ff4746af139 increase verbosity of kubelet preemption log f2de8897e77 Add metrics for mutation bfa7f38c6af fix TestPodResourceAllocationReset for windows e8b914c4b83 address comments 6052c569db3 prioritize resize requests by priorityClass and qos class c126870ebc9 Bump RecoverVolumeExpansionFailure to GA 7b906f204a6 DRA allocator: fork the code 5caf7bca15b DRA allocator: refactor code 03e32bd260f Expose compaction revision from compactor 5e3ea8e279c Add test for compactor bbab5941103 local-up-cluster: stop running Docker f57662856f9 local-up-cluster: store logs in artifacts directory 81b6e1d3a34 local-up-cluster: start containerd before Docker 27a77370dde local-up-cluster: simplify installing packages ddda1dca33c local-up-cluster.sh: add dry-run mode 0950b9ee508 DRA allocator: export DeviceClassLister bc5aa94d8d1 local-up-cluster.sh: allow configuring all ports a4b1d26b14b local-up-cluster.sh: dump config on KUBE_VERBOSE >= 2 5665bafaa86 CHANGELOG: Update directory for v1.34.0-alpha.3 release 381b3f376bd clear just the errors rather than the entire in-progress condition when a new resize is allocated b89ab301f5c feedback round 2 67aaa956da3 Update docs on shutdown and draining 7a6f6fdf721 Delete unnecessary mutex 271233a62ae Prevent the failure of releasing the lock by updating the resource version in case of a resource conflict d9de590a26b test: increase test coverage for pkg/kubelet/types 2dd07e92428 DRA E2E: ResourceSlice Controller test flake 26f54e5c0e3 chore: replace int64ptr with ptr.To f2b24b98494 Increase verbosity of frequently printed loglines in binder plugin 621482d68b6 update pause version to 3.10.1 ce456c87f1c add SuccessCriteriaMet status for kubectl get job bb6bd520126 Add feature gate enable test for KubeletPodResourcesGet c925243779a address feedback c6fef9752c2 fix: improve the pod level request validation (#132551) 89344dc2391 feat(validation-gen): add k8s:enum validator 345641f106b feat(validation-gen): add Enum validator function adb71d041d6 Forcefully expire lease in integration test to fix flake 637bf55cbc2 bump golang.org/x/vuln/cmd/govulncheck to v1.1.4 e0cc07af866 Promote PSI metrics feature to beta b46a124db31 skip pending resize evaluation if sources aren't ready 35bf1522b0e update allocation manager unit tests to cover push and retry of pending resizes e6d165b879b move resize allocation out of the sync loop 87fe2491a11 add some additional helpers to kubelet status manager cb2baef9122 move handlePodResourcesResize unit tests into allocation_manager_test 1a62ade7428 cleanup conntrack entries test for UDP service 8f92a81787e node: e2e: podresources: add more e2e tests 380ed8d9b3a e2e: node: memory manager: build everywhere, run only on linux bc56d0e45a2 podresources: list: use active pods in list 30a3bfdbcba chore: remove residual uint64ptr usage with ptr package 006b2a3b52c e2e: node: cpumanager: fix cpu quota non-regression tests 54f86a22e88 chore: removing redundant type conversion 25d9d8d9ba7 refactor: use getLocalNode() to avoid code duplication bc9e8e1a910 add a context argument to prePodCreationModificationFunc() 83584d13c49 fix: TestPatchResourceTimeout flaky test 994e106dc0d ci: update sample-apiserver version to v0.33.2 3379d5ac4b6 make sure all streams are created before starting demux websocket 1cec0acebf2 Short circuit CategorizeEndpoints when there are no endpoints c53b41e98c2 Add testing compaction in storage List tests 1ac60e35e96 e2e test: Add a container_swap_limit_bytes metric bdd662f7c6b unit test: Add a container_swap_limit_bytes metric 341957a367c Add a container_swap_limit_bytes metric c530b022576 chore: depr. pointer pkg replacement for pkg/security and plugin/pkg dfe6a5c9c13 Clean up `unversioned_feature_list.yaml` file e909e0cf738 chore: replacement of toPtr helper functions with ptr packge 841886df76f Convert externaljwt from gogo to protoc 1b730abf8dc cleanup: use HandleErrorWithXXX instead of logger.Error where errors are intentionally ignored 075abb07a91 ci: redis removal for e2e test dependency simplicity 830a088d1bc chore: remove strPtr usage with ptr.To instead 838f3afc521 storage/etcd3: add back missing errcheck 604cc2b51f4 hack/update-openapi-spec.sh 5adc3bf08a6 hack/update-codegen.sh ae7d637b893 Delete unused ResizeContainerPatch function f1b35cae913 Use MakeResizePatch instead of hand-written patch strings in resize E2Es 00c1c1a58e8 Generate an E2E resize patch from original & desired ResizableContainerInfo cfd65c5f74d chore: replacement of helper functions to ptr packge ff7c781e251 Loop over all IP address from each node d9de37d9316 chore: typo invaILd occurrence replacement 1ae1964e88e chore: depr. pointer pkg replacement for pkg/apis 31156514102 chore: remove uint64Ptr using ptr.To instead 38080c082e1 kubeadm: use named ports in static pod manifests baf71997f53 chore: depr. pointer pkg replacement for pkg/controller 8abcdf0885a chore: depr. pointer pkg replacement for pkg/controller f966647b4de chore: depr. pointer pkg replacement for pkg/apis 6cef8492e71 chore: depr. pointer pkg replacement for cli-runtime bc72fb81c35 chore: depr. pointer pkg replacement for test/e2e d193ffe57ff Use sets.Set instead of a local impl 277c665e8bc use early return 81be9065d12 improve the log message to clarify what users should do e74bbd5db48 chore: depr. pointer pkg replacement for test/e2e 2f7148782b2 chore: depr. pointer pkg replacement for test/e2e and utils 1802c556524 chore: depr. pointer pkg replacement for test integration b22ffdb48f2 golangci-lint: exclude naming convention check for swagger docs 0e8424fcf00 chore: depr. pointer pkg replacement for the e2e_node bb24afe586c chore: depr. pointer pkg replacement for component-base bd8d5f9798c chore: depr. pointer pkg replacement for controller-manager fe61e825e04 chore: second depr. pointer pkg replacement for apiserver 4a61b817013 chore: first depr. pointer pkg replacement for apiserver 4625908a640 remove unused file 995a7872c55 chore: remove utilpointer usage in pkg/api/pod ebae4193371 feat: add PreBindPreFlight and implement in in-tree plugins c5b0c9fdc01 chore: depr. pointer pkg replacement for psa policy 88d885e4073 chore: depr. pointer pkg replacement for psa admissiontest dc947510da6 chore: depr. pointer pkg replacement for psa tests 35e118a4794 chore: depr. pointer pkg replacement for apiext. apiservers validations 4a205cc7fd3 chore: depr. pointer pkg replacement for apiext. pkg/cntroller 107c58eeea3 chore: depr. pointer pkg replacement for apiextensions in general b8ec161d7f1 chore: depr. pointer pkg replacement for apiext. integration ca1d7fff7f1 chore: remove utilpointer usage in pkg/apis/autoscaling 0ad351281bc Cleanup duplicate function to get port number from named port 1ac5f661ed8 Don't log irrelevant zone hints message on no endpoints 27812e44bce chore: depr. pointer pkg replacement for apiext. pkg/registry b72ab8a4e14 chore: depr. pointer pkg replacement for the cloud-provider b464bbeb8f7 Remove gogo-protobuf from CRI ce7b3694f7c chore: remove utilpointer usage in package test/integration/service/loadbancer_test.go 9016f9cb1bf chore: remove utilpointer usage in conversion package 90bbce56b95 PriorityMemoryEvictionOrdering: allocate more memory when swap is provisioned 25498cd34d7 Eviction tests: small refactor 43b22a24395 Apply fix to namespace deletion test (#132691) 0766a3c6b14 chore: depr. pointer pkg replacement for the kube-aggregator apiregistration 6c3146e3557 chore: depr. pointer pkg replacement for the csr 9345552274d chore: depr. pointer pkg replacement for the reflactor ebea328f173 Fix volume limit e2e test cleanup 38bf213271e podtopologylabels: update topology.k8s.io->topology.kubernetes.io 2e966244ed8 DRA resourceslice controller: fix recreation after quick delete fa313170001 Remove unused PodIndexLabel feature reference 8c6c7df736d remove apiserver_storage_objects metrics after crd deleted a7e8a505c25 Improve ignore-not-found behavior (#132542) 1c1f00a5f47 fix: add RV check on GC delete calls 84f6d742c5b Make dynamic and metadata clients plumb DeleteOptions ad0b2bf4f57 DRA E2E: serialize costly test 33cd2e1ba08 Fix AuthInfo godoc for Token / TokenFile precedence (#132659) c6f87f6e64a Fix offline expansion tests for case where no node expansion tests is required b44b0fbf129 Update github.com/emicklei/go-restful/v3 to v3.12.2 58e620cc440 Bump go.yaml.in/yaml/v3 to v3.0.4 00f8cbae6b8 Bump sigs.k8s.io/json to latest - no code changes 22138ef552b Add DNS e2e test of NameIsDNSLabel validated Service names 97c1974e9c2 Add integration test for RelaxedServiceNameValidation. 19e7e38af29 Add unit test for Ingress service ref relaxed validation 37a90b7c244 Add unit test for Service relaxed validation b430159c86a Allow Ingress service refs to be validated with apimachineryvalidation.NameIsDNSLabel 487eb8a9e47 Allow Service names to be validated with apimachineryvalidation.NameIsDNSLabel 9043afae6d9 kubectl: Cache Verifier.HasSupport calls 179c4398f35 use defaultImage per OS 998776d80bb remove breaking test a17b0d7f66d gofmt 1514568ddfe rename sortedfeatures -> sorted 9e1a21816d2 update README 5cebe66b646 update log line dcbed2fbdce Graduate PodLifecycleSleepAction to GA 977c6707333 Add unit tests for minReady new behaviour 4b99dc5f1e0 document hostnetwork <> port implications 952d2727a66 Add OrderedNamespaceDeletion to conformance. 12330a6c426 Drop BoundedFrequencyRunner from pkg/util/async 5d4a85f9f6c Enable versioned validation fuzz testing for certificates v1/v1alpha1/v1beta1 group 0fd4a0acc10 CSR: Add declarative validation test suite 5db2056682f CSR: Enable declarative validation eecba765de0 Enable validation-gen on certificates/v1,v1alpha1&v1beta1 ec6471f63ef Remove gnostic-models gopkg.in/yaml.v3 unwanted dependency d04ee27c98b Update vendor b41d375b888 pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59 6d5e0bf2a21 review remarks 95b1151d2ab use format specifier 459188ce25c Port BoundedFrequencyRunner from flowcontrol.RateLimiter to clock.Clock eae17c21b02 Change how BoundedFrequencyRunner retries work c16ee887efc Remove burst syncs from BoundedFrequencyRunner 0298e04ea0f Updates to BoundedFrequencyRunner 6da9d363f36 Copy BoundedFrequencyRunner to kube-proxy 799aa8b2a8c Graduate streaming list encoding feature gates 5bae9fa8939 Graduate ConsistentListFromCache to GA d4e49b2eed7 Ensure Loadbalancer internal port is set to container port from endpointslice if the targetPort is not specified in service info creation. 6a25bdaac8f kubeadm: fix missing log of health check 764a8bc8b61 chore: remove utilpointer usage in package pkg/apis/admissionregistration a55318fe149 fix: versioned validation test avoid incorrect conversion 4c09aa9073f review: feedback 776382daa58 review: assert 43f6bd45f59 review: assert fa87098ae30 fix: kubelet CRI portforward concurrent map write on error a0ea2569a76 chore: remove utilpointer usage in package staging/src/k8s.io/apiserver/pkg/registry/rest/delete 7236f3fc2c2 graduate APIServerTracing featuregate to GA 75fc2b1cf6d promote TracingConfiguration to v1 a8068e27b1d scheduler_perf: Fix version emulation for empty featureGates map 5a20c38da61 remove usage of KubeletTracing featuregate from kubelet 7faf797a946 promote KubeletTracing featuregate to GA d28791fa625 Remove unused sysfsPath's methods 6e5c99dd059 Review remarks ee8c265d350 Move Code and Status from pkg/scheduler/framework to k8s.io/kube-scheduler/framework 08dd9c47b36 improve the log message to clarify the cause of the failure a6e2cd4e8d3 scheduler_perf: add logs to report the failure of measuring SchedulingThroughput 7e816ca9b1e Commented out for unused sysfspath methods 2bc45ca4666 Make test only helpers private (sysfspath methods, touchFile, createSymlink) 94973ba3fc9 Fix typo: s/smock/mock/g ac86e67b7d2 Commonize filtering of Pods by Owner with all orphans in namespace ca314b9f561 Fix validation for Job with suspend=true,completions=0 to set Complete condition 1134220e011 Add RelaxedServiceNameValidation feature gate f644e35d193 kubeadm: cleanup after WaitForAllControlPlaneComponents GA cfe8604504a kubeadm: graduate WaitForAllControlPlaneComponents to GA f437aa4aa67 scheduler_perf: Set version emulation only when QueueingHints is disabled b2f27c0649f fix: Truncate too long Deployment name in RS name (#132560) d67e7937e63 Remove recovery related featuregates fa6f27c8f7a Add extra validations for newer resizing related fields 00dd610c93e DRA E2E: run some tests without feature label f93b4408a77 Drop test that checks openAPI resource name since we currently don't guarantee name stability in the API 3eefb05a2c3 Fix gRPC listener error message in kubeletplugin and some minor renaming e54e01e0abb Enhance help text for the 'top' command 7d5ab756277 Re-generate applyconfigurations 9af684ae098 Applyconfig-gen: Only the root type is an applyconfiguration d50e1a684cd Ensure all the files have the updated sorting f2d8b7ec2cc Add linter to report on unsorted feature gates efcb03759dc E2E framework: sort tests in JUnit report dfd34a5b189 fix pod template spec validation missing in sts a57f15e0816 DRA kubelet: remove v1alpha4 005cef332da DRA kubelet: API clarification f1845218e2d fixup! DRA: fix deleting orphaned ResourceClaim on startup 585ed0a5cb3 [client-go #1415] Use transformer from provided store within internal stores in reflector to limit memory usage bursts 8632257c934 Cleanup: Remove redundant detail messages in field.Required e82d4f8e559 review: feedback 5cca0379274 resolve linter check ce86fca8cd5 Add warnings for use of Alpha features with Emulated Version Warn for both api and feature flag use of alpha features with emulated versions. This is an unsupported use case and users may run into issues. 00d37505033 Move ClusterEvent type to staging repo, leaving some functions (that contain logic internal to scheduler) in kubernetes/kubernetes (#132190) 74af3ac8ad1 Revert "pop respects the context" 2dcce93336e Revert "modify tests" 31667cc7412 Avoid killing kops etcd-manager 6d6a749c62e DRA kubelet: add dra_resource_claims_in_use gauge vector 75432a14108 component-base metrics: allow usage of Prometheus types in tests 1639b090839 Add benchmark for SizeBasedListCostEstimate feature c75d425ae2e CHANGELOG: Update directory for v1.34.0-alpha.2 release 292679a28ae Handle consistent LIST in watch cache to avoid incorrect semantics while setting ResourceVersion on options c6c15bbe441 bug: Remove duplicate DaemonSet update validations 39dda2b88dd tests: runtime units 8bd8c14312e tests: add more units f9a5aec318b Added unit tests 5390f75360d Added podutil.HasAPIObjectReference to deny admission for static pods referencing API objects 8b2eb9090e9 chore: Remove vet target and associated script from Makefile and hack directory 7d85134caee improve unit test coverage for pod observedGeneration 1a59c250eab feat: make CLE timers configurable ef117edf356 DRA: fix deleting orphaned ResourceClaim on startup c5b4b133ce3 switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well) e2c6b7fdf97 Override getKeys when cacher is enabled 7cb24179993 Run background cleanup goroutine ec78b8305ad Estimate average size of objects in etcd and plug it into request cost estimator 190c8c7abc5 Use per-policy marker names for VAP integration tests. 6795d5366f1 feature(kubectl): support mem-percent,cpu-value,cpu-average-value,mem-value,mem-average-value flag to kubectl autoscale 9de075def7d replacing deprecated pointer pkg with newer package version b8b3984874e client-go/reflector: stop exposing UseWatchList (#132453) 0028ea8e993 Improve containers lifecycle test output parsing 7e0d71fc14b apiserver/storage/cacher/listwatcher: error when the WatchList FG is disabled ec6ea2213ed test: code coverage increase for kubelet_client cb4014fb75f cleanup: Migrate more usages of deprecated function ExtractCommentTags b50d5081766 bugfix(hpa): introduce buildQuantity helper for consistent resource quantity creation cbba973b6c9 Fixing go-vet finding "call of reflect.DeepEqual copies lock value" by just asserting on the basic fields that should be reset when ClearState() is called 35ecb00f1c5 fix: Add wait for cache sync for customresourcediscovery tests d6d186ece06 Activly poll for namespace termination instead of sleeping e1daa69de8c Add printer column validation tests 369e6a25a28 Introduce k8s-short-name and k8s-long-name to the OpenAPI formats supported by CRDs 6f1295ae9d2 fix: prevent SSA from creating CR while CRD terminating 3b0fd328106 e2e: serial: cpumanager: continue on failure f76e1381d08 e2e: node: fix quota disablement testcases dc323756cea Bump to latest kube-openapi d180fe28ad5 Add json-patch v4 compatibility test 2ca4ffe6532 Add evanphx/json-patch/v5 to unwanted dependencies 5a7e04b6cc7 feat: optimize ListAll and ListAllByNamespace to return directly when nothing to select ae13d101958 KEP-5229: Add SchedulerAsyncAPICalls feature gate dce69afadea apiserver/cacher: properly wire listwatch options to the listwatcher 0276769c2c8 kubectl: avoid logging during init 6040344a65c kubelet: DRA: fix TestRegistrationHandler cc7893a42c6 kubelet: DRA: fix unit test failure cf544da6f7a e2e_node: DRA: add tests for different socket setups 7f6389e7709 e2e_node: DRA: pass socket path as a parameter 3ae99f25471 kubelet: DRA: fix test failure on Windows c90c2e0d402 kubelet: DRA: fix linter warnings 165bb1da58e DRA kubelet: use TimedWorkersQueue 4ee7374b24e DRA kubelet: add connection monitoring f927cd01088 DRA kubelet: simplify plugin creation and connection handling cfeab03ade4 remove kvh.exec 75862f3f461 show namespace on delete (#126619) 56d97283afb fix: Improve error messaging on updating a deleted object fd8bf1c8211 e2e: retry getting status on restart policy tests c5f061e0df0 Fix pod and container level swap metrics for CRI e1d74f1d335 Update etcd image revision to 3.6.1-1 7e3945808d3 nftables: remove filter-output-post-dnat chain 91f2256b34e update filter chains and priority 72305f82f9a Move UnsafeCorruptObjectDeletion outside of etcd3.New function 59dd2bd60dd ci: update test image base: nginx, nginx-new af89044a78c conntrack: clean stale entries on endpoint port change 861e7b8fae2 fix unit test flake for authn config on windows 2fd93c08988 fix: data race for patchResource func ccdef28acd3 fixing large resourceversion and limit for storages fe84377458b e2e/watchlist: new test for checking metadata informer d6ba9e1b9f7 replacing depr. pointer pkg with new ptr pkg on src/apimachinery db32c4cf7ca fixing syntax issue for etcd builds 8454093f09e DRA: add e2e test with initContainer using external claim 138e363e413 cleanup shellcheck for temporary HOME directory 66c611125c7 Add namespace-aware orphan pod indexing 5e54df3e72e Fix [Failing test] [sig-node] [Feature:GPUDevicePlugin] [Serial]-related tests 280cecb8fb0 fixing location to ensure the cp commands dont fail d2945a21fda bumping revision fa1832484d1 handling the etcd 3.6+ build directory location change e68d6013449 Don't panic in case of an unknown API error code 4ca91a03052 WIP: Fix tests 2b2c9adef38 Nicer value rendering in API errors cfff359b419 fix for gimme when $HOME is not writable 6a654e5be0c Deprecate StreamingConnectionIdleTimeout field, that is not being used for a long time b8cd05881c5 Address PR comments 6f97f5bbf87 Use Mock CSI Driver for MutableCSINodeAllocatableCount storage e2e test (#132373) 176095ac30e [KEP-5100] WinDSR feature gate to GA 64c44e1fa63 Test that generated applyconfigs are a runtime.ApplyConfig a5d42f56939 Re-Generate applyconfigs d5527b51930 Update applyconfiguration-gen so acs implement runtime.applyconfiguration 3fe4ea550e8 Add an interface that all applyconfigs implement b0b52f4fb29 CHANGELOG: Update directory for v1.30.14 release 2bc98f123d7 CHANGELOG: Update directory for v1.31.10 release 20e9f160c97 CHANGELOG: Update directory for v1.32.6 release 9e126a37720 CHANGELOG: Update directory for v1.33.2 release df32f10e069 apimachinery/pkg/util/errors: deprecated MessageCountMap de2f22ee8ee e2e/watchlist: intro verifyStoreFor 017c9b94daa e2e/watchlist: rename toSecretPointerSlice caa64afd017 merge constants.go into attribute.go 73d65f830a1 Put _linux suffix for linux specific go files 88b34ea1f1d Move bdfRegexp from global constant to local variable fc854a9a861 Introduce DeviceAttribute{Name, Value} and change return type of 'GetPCIeRootAttributeByPCIBusID' with it 8ed8217e9ab Moved device attribute constants from api to deviceattribute package f7461a12dcb Revert "Add StandardDeviceAttributes and StandardPCIDeviceAttributes helper functions" 6b9ac7c5160 cluster/gce: rm KUBE_LIST_FROM_CACHE_INCONSISTENCY_DETECTOR 512563e7b08 pkg/proxy/conntrack: refactor 91b4816c230 Optimize job controller performance: reduce work duration time & minimize cache locking 18dd1daaeb9 Add Windows Server 2025 (ltsc2025) to BASEIMAGEs (#132235) 44b4682a320 Use jq docker image for pause windows build 3827d3bc4f1 Drop usage of forked copies of goyaml.v2 and goyaml.v3 2869b6f42c4 Add StandardDeviceAttributes and StandardPCIDeviceAttributes helper functions a8ab9eb5fea Simplify the implementation: just provide GetPCIeRootAttributeByPCIBusID d390902b99a Verify scheduler resource metrics account for Pod Level Resources 32fcaf14067 client-go/util/consistencydetector: move IsDataConsistencyDetectionForWatchListEnabled 72654620a2f removing WaitIntervalString from iptables bad49390493 client-go/util/consistencydetector: remove CheckListFromCacheDataConsistencyIfRequested 15ca38b521d apimachinery/meta/types.go: remove InitialEventsListBlueprintAnnotationKey const 690790257fd Add test verifying KUBECTL_KUBERC can be turned on and off 45449a78d5e Removing setting KUBECTL_KUBERC env var, now that it's on by default 3f32edeace1 chore: Remove the dependency of the volume manager on the container runtime. 3dc1810bb7e fix: failed unit test. b8a2127d277 Add random interval to nodeStatusReport interval every time after an actual node status change update or restart fbf4b47d150 chore: clean up probemanager for shutdownnamager. 3fa23d06af6 Adjusting AdminAccess Type for API v1beta1 2a5e4d55824 add script for verifying dead code elimination 891e7fec6e1 add seperate health check/probe for multi etcd override servers - grouping health checks for exclusion purposes & add exclude integration test 28573e373fd Add error prefixes for authn config load or validation failures 4cb6d3d7761 Validate requests sent to etcd in TestList "test List with limit" scenario 03afe6471bd Add a replacement for cmp.Diff using json+go-difflib 32ec4e68cc8 adding omitempty tag and opt tag e654deba630 CHANGELOG: Update directory for v1.34.0-alpha.1 release f4a45862556 fix APIServerTracing test data race 2004ee50f5d Fix -Consistent paginated lists serve from cache bccc9fe470f KEP-3939: Job Pod Replacement Policy; promote to GA fc198b92c0d apiserver/handlers/watch: stop encoding initialEventsListBlueprint (#132326) 854499f986b clean: use correct pod template fae2fdd052c DRA: wrap e2e finalizer update in retry 7a95f3e4787 Fix NetworkPolicy podSelector comments 233a0aeedbf DRA E2E: label tests which need a certain minimum kubelet, II 2cd5dbbdaab modify tests 59f0ab97c25 Add boilerplate header to go files 1c33d987625 pop respects the context f67d30b3529 handle context in process loop 384240b4d95 Use "Invalid" errors rather than "TypeInvalid" bdfa8839bec calculateStatus should use the same now time point for each pod ce44bcdf52b conformance servicecidr read status endpoint c2988884f34 fix kubeadm e2e tests cb26d065d39 Validate PCI Address (domain is 16 bits, bus is 8 bits, device is 5 bits, function is 3 bits) 752a043692f fix lint: apply De Morgan's laws to simplify conditionals 76ef6a388f8 fix kubeadm e2e tests 79601d13569 Fix CRI fake_runtime RemovePodSandbox 666f38f4189 DRA: Introduce a helper function producing standardized device attributes for DRA drivers 7a3af908c64 add securitycontext OWNERS to be SIG Node as the package is mostly used and contributed by SIG Node 7f1dde2a0fe test/apimachinery/watchlist: properly wire modified config to informer for fallback case 40c718864b7 chore(apiserver): avoid using html template which disables dce 6a37976848b client-go/rest: rm watchlist 4372c59ebf0 update go version for publishing bot rules e09b042d34b Bump etcd to v3.6.1 901441c66eb Promote SeparateTaintEvictionController to stable 85bc3cb0960 Remove GetExec method from VolumeHost 9251b2a7a58 Expand webhook test to check rejection metrics f8b4ea50e8d ./hack/update-internal-modules.sh 71b2f32d70f DRA E2E: label tests which need a certain minimum kubelet 3908550c0dc Update to latest github.com/modern-go/reflect2 d8bfafe07af test/apimachinery/watchlist: prove typed client's List method not streaming 601065a7c6b bug: Fix misleading response codes in admission control metrics 5882df8beb3 promote env test to conformance 69a5bda836e Bump base image used in nonewprivs to alpine:3.22 04110fce1bc Correct error message to print `ResetConfigurationKind` 3443c1115ae make update 798c6ebab85 client-gen/code-generator: remove watchList db2555628c1 Fix: HPA suppresses FailedRescale event on successful conflict retry 2f943293ed8 client-go/gentype: remove watchlist f0dde38234f Remove pluginName param from GetMounter and GetExec fb611f4c93e kubectl delete: Update interactive delete to break on new line d46e13b9c5f change the command of the terminated container 226c0d10959 Bump ipc-utils base image to alpine:3.22 e75ccce83fc feat: optimize label selector match performance ac467d3aea4 add ratcheting testcase for validateFalse tag 9384285c604 add ratcheting testcase for minimum tag 1574001a1cd run update-codegen.sh f574115f14f feat: add default ratcheting support e9eabb2007d feat(validation-gen): Refactor type handling and introduce utility functions 03c6e15f845 bump to alpine 3.22 and bump apparmor-loader to 1.6 b86b4632b3f disable selinux relabeling when mounting sourcedir to shellcheck dc3836c49ed Remove deprecated encryption config controller metrics 5a2844a766b Update to etcd v3.6.1 in vendor/ a9108e8f532 Adding `grpcnotrace` tag for production (non-debug) builds 11abb0042d2 Fix outdated links in VolumeSource godocs 4b2fe2a544d pkg/kubeapiserver: use utils/ptr package instead of utils/pointer 69eddde89b4 using finalizer 57d55fbb106 test: Add test case for createNodeOp 1d69a2fbc3a ./hack/update-vendor.sh edadfee47d3 test/apimachinery/watchlist: prove dynamic client's List method not streaming 348ff7497c3 Build etcd image v3.6.1 3038f3530d1 client-go/dynamic: rm watchlist 86c709cd817 skip nfacct test in IPv6 clusters e5f36796e34 Bump dependencies, images and versions used to Go 1.24.4 and distroless iptables 07151bb0f4c chore: Add validation error for unsupported map of slices in validation-gen 89f5453e314 Allow system:monitoring role to access kubelet metrics endpoints 2810f6e65f5 add bentheelder to cmd/preferredimports *reviewers* 00a6d2c99c0 add bentheelder to conformance related test *reviewers* 1dd055774cd backfill some sig-testing-reviewers (tech leads aojea and pohly) ad68a4b4cdd emeritus spiffxp 512f000d0f3 Update tests for StructuredAuthenticationConfiguration feature gate GA efebfe9e3a5 Set StructuredAuthenticationConfiguration feature gate to GA in v1.34 769d71b3045 Remove unused Expect methods in testscheme 105dd3b0ab0 Add ExpectMatches to ValidationTester 28e973c0447 Better formatting of matcher errors b39741b5062 e2e: node: serial: fix cgroup path with crio 26b188aaa8f KEP-4633: Graduate to Stable. fd5d7a18ed1 reduce logspam when calculating sandbox resources 0baeccd32f0 KEP-740: promote ExternalJWTSigner feature to beta ef2c18a5a0e Add more test cases eb3c9a3184a Promote feature OrderedNamespaceDeletion to GA. f8b70124350 Revert "improve display format" 449320a54a2 update github.com/spf13/cobra v1.9.1 260a720a851 Rate-limit the LoadBalancer rolling update test 0a86ca40615 Add healthChecker to the kubeDeps dacafec88c2 KEP-3015: PreferSameTrafficDistribution to Beta b2ab0ba1938 Drop unused testing manifest 96b39187c5f Add context to Count() 9d1bc51cbb7 adjust durations for sleepAction c85ac59df41 Build k8s using latest commit of golang 4a7e68a3555 fix: Fix the issue where kubelet's slow startup causes it to be mistakenly killed by the watchdog. b02fba7e0e6 Fix incorrect logging of insufficientResources in preemption fc7ba63ee8b support parsing of iperf 2.2.0 output 1755a9e5455 fix: iperf version in comments 0ca9c380add update all api files 32aa52adf66 tolerate newer golang/oauth2 version 3cfa73bc17b add -q flag for git worktree 97ec8618d3e Fix kubelet iptables startup, clarify semantics of utiliptables calls. 6a4751da7fa Graduate RelaxedEnvironmentVariableValidation Feature gate to GA f4ab6c2befe cleanup: Migrate deprecated function ExtractCommentTags 0d468f58c07 kuberuntime_manager: don't log entire container spec. 858b88bceef kube-proxy: log ipt errors during platformCheckSupported 1f46b3fdbff Clean backoff record earlier 7b1f4990677 DRA kubelet: rename Store + Plugin -> DRAPluginManager + DRAPlugin fad670c27b9 DRA kubelet: move RegistrationHandler into Store 494a129d02a DRA kubelet: clarify plugin vs, driver name 0d5578b8395 test/apimachinery/watchlist: prove metadata client's List method not streaming 5b0f0d2efa2 update pr template issue links section a38ad3a2c67 client-go/metadata: rm watchlist beb86a8391b KEP-3329: drop PodDisruptionConditions feature gate b5a8f5d0a50 KEP-3715: drop ElasticIndexedJob feature gate 10de6780cf6 DRA API: remove obsolete types from v1alpha3 0896693693d fix TestNodeAffinityPriority: calculate the priorities correctly even if PreScore is not called 087554448ca Make nodeports scheduling plugin sidecar initContainer aware 1876c544511 Remove unsupported map of slice validation for non-byte elements in validation-gen 50139381006 Change option to a slice 990cb7547ca Use slice.Contains() 28e99ef2ee6 Add type information to tag Docs() and use it to typecheck tags 31aa3c20297 Switch to using named args in output_tests 7892fd95f24 Use codetags in validation-gen 249801b7ccc Fix windows-pause-image-base:<tag>@<digest> invalid reference format 2c4c3037b6a Fix field path for embedded fields in root types d1bddfd779f Forbid github.com/pkg/errors in k/k efaaece0fbc go.mod: drop pkg/errors as a direct dep cbbfabe7fec Support embedded fields properly d1a858ca9f6 kubeadm: fix one missed pkg/errors location 036f4bfe282 hack: fix KUBE_RACE in benchmark-dockerized.sh 5be254650f8 kubeadm: start using util/errors f522d7cb858 kubeadm: add a local implementation of wrapped errors 2bf3d8b7336 KEP-3335: drop StatefulSetStartOrdinal feature gate 1d1d0c154c2 promote agnhost to v2.56 258961cb350 pkg/appis/apps: use utils/ptr package instead of utils/pointer 7b664a11352 pkg/volume: drop pointer wrapper functions. 253a08d7e39 pkg/util: drop pointer wrapper functions. ac5cb23000f Bump gengo/v2 to latest d6ec03a1302 Preempt based based on allocated resources rather than desired 7d47165e3ec Replace queue.FIFOs with k8s.io/utils/buffer.Ring 705e89b046f Only set pod allocation if admission succeeds f8b893489c1 Update pkg/kubelet/kubelet_test.go 147073102b7 fix: prevent data race in metric LabelValueAllowList initialization 8cdbbf5cdae Update k8s.io/utils for new generic ring buffer daae472fe1b e2e_node: verify restart looping container correctly 109ae1bacad feat: Allow leases to have custom labels set when a new holder has the lease 8d3fb9ee0a5 [KEP-2400] kubectl top: add a --show-swap option (#129458) 4c7840ec5d2 podResizeMutex cleanup c7fdf6abde1 Handler will return the server port number instead of address 6a495241ef3 KEP-3331: Add test to simulate revocation via user validation rule using unique identifier (jti) 466fb815287 test/e2e/apimachinery/namespace.go: make OrderedNamespaceDeletion test serial 7e7aa6d810d e2e: node: cpumanager: require cgroup v2 68efb079aab kuberc: add tests for DefaultGetPreferences ad3a13e014f Graduate NodeLocalCRISocket to beta b9d9dea03f4 Update npd from v0.8.20 to v0.8.21 47dead1c403 unexport allocationManager IsPodResizeInProgress de1d6fbf242 fix: ResolverTypeProvider data race 9b8d7ce4987 pr review feedback a512de6e094 Clarified the token scope and future plans for the next security scan to refer to it 032a9eaede4 DRA kubelet: code cleanup a6e22689946 Ensure github.com/pkg/errors is used only in kubeadm 7ccb9657f7c sched: Apply EnablePlugins to CoreResourceEnqueueTestCases 6cb14884b61 test-integration: allow enabling race detection 545fbc99c2b test: drop dependency on github.com/pkg/errors 899f76159f1 add unit test for IsDNS1123SubdomainWithUnderscore function 0a7d9f9bfd9 KEP-4427: Promote Relaxed DNS search string validation to GA 2aa7ef3d273 Address comments dbdd6a3b435 FieldManagedObjectTracker: Fix to work with unstructured b7d16fea7fd disable terminatingReplicas reconciliation in ReplicationController ee33c1a9fc9 e2e: fix userns test be049397dfd Fix IsDNS1123SubdomainWithUnderscore to return correct error message 4f91a69f2b0 DRA integration: move and extend device status test 0a96613754b proxy: remove iptables wait interval flag a5aabf9f7e0 DRA kubelet: validation pass before changing claim info cache 5420dcec553 Promote two more EndpointSlice tests to conformance b9496d1a9d7 Update client-go template with backticks d70fcf731bd Update client-go PR template d75af825fbe Extract interface CycleState and move is to staging repo. CycleState implementation remains in k/k/pkg/scheduler/framework be6807e6a57 Allow specifying a directory for image credential providers json/yaml configuration aac00c1f0ed add orphanedPods parameter to getRSPods d13dcbbf95c kube-dns bump to v1.26.4 96b5ae792bc Add code for not expanding volume if it has NodeExpansionNotRequired annotation 2b0b3435078 DRA: Improve implementation of counter management in allocator 1cd71cbb14e ManagedFieldsObjectTracker: Reload scheme 4654496c395 Add code to not expand certain types of volumes 741d0e2b81a Gradute ResilientWatchCacheInitialization to GA c8f1a653014 agnhost: added server address for conntrack cleanup entries 5058e385b09 DRAAdminAccess: update label key ee2d3b6a2c2 DRA: Exclude individual devices when PartitionableDevices feature is disabled ab6fdf46d89 Move the autoscaling e2e tests to be ran in parallel (#131091) 4e3634bbbfb Update security contacts for sig-cli owned repos b0847b47697 Add unit tests for fsGroupChangePolicy accessors 74167f9041b Fix typo in the `--anonymous-auth` flag name 6410329a07e update go version for publishing bot rules 60b5338d460 Promote automatic_reloads of authn config metrics to BETA f694c58c6cc feat: graduate QueueingHint to GA 1310fc027a5 kubelet: drop dependency on github.com/pkg/errors 346fe182bea DRA E2E: fail test when ResourceSlice publishing fails dc2f33f9d8a Update Perl to 5.40 7c0f968ab25 Drop usages of deprecated otelgrpc methods 157903b09b6 Skip backoff when PodMaxBackoffDuration is set to zero 54b2fad0330 kubectl: drop dependency on github.com/pkg/errors b461d80f3d9 etcd: update etcd image to v3.6.0 df2857e7777 Revert shorthand for kubectl explain --output 1d17ca9b7e9 generate code 8ae7171041b Simplify subresource matching 9715c90b31c Clarify errors and improve tests 4cac349f86b Clarify group version lookup in validateDeclaratively c2eef42cf4d Add output_tests 6284a0f50bb Tag types with +k8s:isSubresource and +k8s:supportsSubresource for scale 7dc8660d036 Update testing to fully track subresources 6ca6b7bb6ab Add +k8s:isSubresource and +k8s:supportsSubresource tags 105391403fa Enable scale subresource in generated validations a3eddf7d854 Add declarative validation testing for replicationcontroller/scale 356f395f0de Enable declarative validation for replicationcontroller/scale 030b4ab9cc9 Add declarative validation testing to Scale.spec.replicas 48e1079cf03 Add subresource mapping support to ValidateDeclaratively and introduce configs 8c5c5fb7618 Add origin and use apivalidation.ValidateNonnegativeField for Scale.spec.replicas validation. d0f6fe30bf1 Add k8s:minimum validation to Scale.spec.replicas ffb4e003f70 Enable validation-gen for scale group-versions e63019a8701 DRA integration: refactor code to support other tests 1ffda045cbf update to latest ishidawataru/sctp dependency 50f152440be DRA integration: start scheduler on demand 488c94735ce Bump dependencies, images and versions used to Go 1.24.3 and distroless iptables 699dce0a579 DRA kubelet: fix gRPC timeout flake 7215de79b3c DRA kubeletplugin: some doc updates 24c0e91d295 DRA resource slice controller: disable resync 01820ff7c27 chore(scheduler): add filter integration tests for missing part plugins: NodeAffinity plugin 151d9d79f4a Remove package protected field updatePodOther from ActionType. Make ActionType.None public 76f95271a5d kuberc: make update and update-vendor b8e6de08e1b kuberc: add API violation exceptions c29accaf581 kuberc: introduce fuzzing for kuberc types b0370c483af Promote kuberc to beta 1f355e5b441 kuberc: pick the first known version when decoding + tests 0341b27c5d0 kuberc: align internal and v1alpha1 go-types with v1beta1 39195f9a463 kuberc: add v1beta1 types 35870c480d6 client-go remotecommand: avoid "unexpected error" log when there is no error 7287dcd2fb3 vendor: update system-validators to v1.10.1 b35c5c0a301 e2e: Fix shadowed error in reboot test and clean up containers after reboot test (#131699) f79012a0db3 renamed SIG Node google groups 50fe29e524b Add accessors for fsgroup change policy 17946fe7994 Add Stress Tests for VolumeAttributesClass 32c45ecf10c Bump github.com/vishvananda/netlink to v1.3.1 aea2743e4e9 vendor: update system-validators to v1.10.0 96e4cc65fbc update baseimage c5f368522d5 kubeadm: fix dryrun-latest e2e by updating cluster-info fixture d7b6049099e e2e: node: always declare testcase CPU requirements b571840d00f bug: Remove duplicate ReplicaSet update validation 67345417c03 Update tests to use v1 for AuthenticationConfiguration aea874e5e47 Duplicate v1beta1 AuthenticationConfiguration to v1 c509e22d11d Add a list of modules that should be pinned at current versions c4421fc13e7 address more feedback and some cleaning 637d234aae3 feat: Add support for ECDSA-P384 encryption algorithm b98b86bd6ab DRA: Add scheduler perf test for partitionable devices (#131771) 4cc2bded914 DRA: Add an allocator test that uses an attribute selector 60c36432f2a DRA integration: set up nodes for scheduling 1c3beb47a5c Fix goroutine leak in unit tests f6fafba424a fix flacky test: ResourceQuota should verify ResourceQuota with terminating scopes through scope selectors 8cf5e8db78d Deprecate kubeconfig's preference field in favor of kuberc 1ce8503e91e add UT for volumepathhandler a8ed33bc646 feat: add metrics for compatibility version c4a59afe9dc Fix incorrect URL in build/dependencies.yaml file 5bb3f862a06 DRA: Clean up allocator tests 5834476681c fix lint and unit test failures 676978641e1 address feedback 88e1909e518 move pod admission and resize logic into the allocation manager 35307319740 Kubectl: check version skew (#127365) 3878f7e7489 E2E ResourceQuota: ensure consistent ResourceQuote during scope selector test 4a353d07e4f E2E ResourceQuota: fix pod creation flake 4b10ba9eef8 E2E ResourceQuota: dump last ResourceQuota f712b01ddb5 Unify references to group resource in metrics d3afe8a87eb hack/local-up-cluster.sh: remove kubelet --cloud-config 772d0106651 client-go workqueue: clarify parallel reenqueuing d043beb223b HealthChecker has a List method 9b3830fba23 Bump google.golang.org/grpc v1.72.1 be5d8c767b2 Update cmd/kubeadm/app/cmd/upgrade/apply.go c0885e018ae Fix --config option from suggested kubeadm command 8f49fb5ce7e future-proof csi test mocks adc4916dfe4 feat: introduce pInfo.UnschedulableCount to make the backoff calculation more appropriate 968e19d1b6f docs: avoid broken link a271d3e5339 cleanup: remove error comment of AddIndexers func 5def7fadf3e Drop dependency on x/exp package in mount_linux_test.go b9e2a160832 e2e_node: dra: test plugin registration retry aef61622aed e2e: dra: implement ResetGRPCCalls e8be3e575b9 e2e: dra: simulate GetInfo failure 2f50d0a510d Add kube-api-linter plugin to golangci-lint 0e5eab042c3 test: Use sub-tests in watch tests 5da12b5aee9 Add tests that validate the return value of resize operation c369e3cd493 etcd: build etcd image v3.6.0 65a27eb97d6 restrict the use of scheme internally to client-go 671d1a07a58 Bump the busybox image 88b23605404 ResourceQuota E2E: more informative failure message ba77d27560a DRA E2E: reduce risk of flake in ResourceSlice stress test 6b0ebedccc1 Set non-experimental WatchProgressNotifyInterval config field 079d4e52c24 Fix kubeadm etcd client interface cf0bbf1171e bump etcd client to 3.6 7bccb1acb5e Update pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go 139fab0ebdc kubelet: don't import testing dependency in non-test code 90b256537c2 Add suggestChangeEmulationVersion if setting locked feature. 5314fcece31 Promote automatic_reloads of authz config metrics to BETA 1b9bb3393f5 test: Fix CURL download of Windows busybox test image b0ab168a71e CHANGELOG: Update directory for v1.30.13 release ec7e732cbcc e2e: dra: move gomega matchers to dedicated package fcfd87812f1 CHANGELOG: Update directory for v1.31.9 release 2b7f8e1682c CHANGELOG: Update directory for v1.32.5 release 1ab54ffa642 CHANGELOG: Update directory for v1.33.1 release bba9c49e101 e2e: DRA: test 2 claims with the same name 8d8fd92966b DRA: test mismatched claim UIDs 96da66054db DRA: genTestClaimInfo: add claimUID parameter 69e16d2f544 DRA: kubelet: check for duplicate claim names b9fec8bf4ff fix scheme import cf8acf5cb73 package bootstrap matches dir e9fcdabcf50 feat: kubectl debug: add label for debugger pod b13cf0a65ae tests: userns: Add framework.WithFeatureGate() 9549c111551 fix e2e network test flake because of network programming latency ef0547741db verify scripts: preserve exit code 0114d33c346 datapol: compare types directly a1a4bc8fec8 fix: add BackoffExpiration to DeepCopy 2fe65bbf48b fix(kubelet): update lease duration when config changes 094466539e0 Add rotation and clean up for logging 125600e7458 Remove unused GetHostname method ee94ba913ad Run codegen 4eb9fb21b69 applyconfig-gen: handle non-pointer embedded members c374ab81185 Add a breaking example for applyconfig-gen 70e05132645 Separate getList and watch errors to prevent TestGetCacheBypass flakes 5121115711e Add sig/scheduling label to scheduler integration tests and staging repo OWNERS 1ed6cf21966 Add e2e tests for kuberc 0ad8e65d90e e2e pod readiness gate network flake fe1b1fff7c6 Remove unused GetHostIP method 504b681ae14 Adding Joel Speed 47f85960638 DRA: prevent admin access claims from getting duplicate devices c5e4cab9b1e e2e: add corresponding featuregate label to node features c4d6fcb1974 Remove misleading comment from NodeTaint TimeAdded field d0b6ea36b60 update got to 1.23.8 for the active release branches 3043257b838 remove release-1.29 as it is deprecated 9fd545bcc46 [sig-scheduling] SchedulerPreemption [Serial] validates various priority Pods preempt expectedly with the async preemption: replace finalizers with preStop hook and TerminationGracePeriodSeconds 74e9b27e56e Port "Service endpoints latency should not be very high" to EndpointSlices e5f7fc25e71 TestNodeAffinityScoring: wait all nodes e42aba6c0ce Optimize RS Controller Performance: Reduce Work Duration Time & Minimize Cache Locking 28602c66fcf Update pkg/scheduler/framework/plugins/defaultpreemption/default_preemption_test.go 52e7aa37daa gofmt a507e64fe4b Have separate tests for custom selection vs ordering, add comments around system pod eligibility 283c5e6b61f Have IsEligiblePod be supplemental to priority check, update tests 3ed73e058ae Clean up the affinity explanation, fix for new lint rule d4bc527a7b8 Update comments: affinity info, default behavior, priority->importance 95ebc2c10e9 Apply suggestions from code review 7f57c6e52dc Update factory to use generics, keep single New function 137da6a4882 Remove line about equal priority, fix typo b8ac1714370 Apply suggestions from code review 224e6a3a355 Rename EligiblePod* to IsEligiblePod* 4bf6841495e Update the customizations to operate on individual pods, for more flexibility later c34f8db5594 Remove unnecessary context and typecheck, switch to cmp.Diff c6f2d3879b8 Fix gofmt in default_preemption_test.go 78b059c064e rename OrderedPods -> OrderPods 2616202ac9e Implement tests with example customizations, add direct constructor 760daaf1100 feature(scheduler): Custom pod selection/ordering in DefaultPreemption 721947a5703 Update staging/src/k8s.io/apiserver/pkg/audit/request_log_test.go 153233c677d review from tallclair e418ee3a92c Avoid encoding in LogResponseObject when we are not going to use it 26c198dc202 Some fixes 0b915a538fd Cleanup after rebase a6586aa610a Addressed comments e262cccf23b Cleanup after rebase 86104043588 Add e2e tests for Partitionable Devices ece35e58828 Update DRA e2e test framework to allow publishing advanced ResourceSlices a437a269f18 Fix comments on ginkgo label functions 85734ac6b38 DRA E2E: don't run prioritized list tests twice 808a5cfd469 e2e tests: remove all cloud provider calls in storage/volume_provisioning.go 51407868295 feat: improve the backoff calculation to o(1) cfe7d042435 Account consumed newlines properly in YAML decoder d5a56739cee use framework.ExpectNoError instead 699ec0a538a Remove wrong comment f718096b744 NoExecute taint should be added when a Node's ready condition becomes Unknown 3911b677bd4 test: wait for nodes to be in scheduler's cache ea6b4ea7e9d kubeadm: bump supported etcd version 9d963298a3b test: Close response body in watch tests d1fb42a4000 fix: fixes a possible panic in `NewYAMLToJSONDecoder` 960a4939f25 Eliminate AuditContext`s SetEventLevel c39705281c9 Self nominate adrianmoisey as sig-network reviewer b09d034a570 DRA E2E: revise test labeling 13bd0b4ee82 e2e: node: rewrite the sidecar related tests f4265638be9 e2e: node: factor out reservedCPUs a8c8b0987dd e2e: node: dissolve skipIfNotEnoughAllocatableCPUs 32d4724ab8c e2e: node: add comment about reserved CPU daf2fc71002 e2e: node: rewrite multi-pod tests ccc662c228e e2e: node: initial multi-container tests 2419d9ccc5f e2e: node: rewrite: multi-cpus single-container pods e4726719a75 e2e: node: rewrite more compatibility tests 74fda8c700a e2e: node: rewrite compatibility tests dd3f9b60741 e2e: node: rewrite CFS quota tests b9ce058ab67 e2e: node: rewrite strict-cpu-reservation tests 3eb2e65fc30 e2e: node: rewrite cpumanager tests 94dd0b8402a Move test cases from mounted_volume_resize into testsuites/volume_expand.go 4aa3c968a78 Build etcd image v3.6.0-rc.5 641834d030e Fix broken recursion eb4641d6512 Add container Resources to the backoff key 080d6f9ead7 test: pass the test context to http requests 3f188e5d86b refactor: Use http method constants in apimachinery 75afa1e0acf Fix API server crash on concurrent map iteration and write f93e4645c18 refactor: Stop using ioutil in apiserver 9e3a1b0a908 Add comment describing the feature gate with a link to KEP e3f3da5e795 Swap KUBECTL_COMMAND_HEADERS to use the proper feature gate mechanism d1b5f268b48 Drop KUBECTL_ENABLE_CMD_SHADOW featgure gat entirely a6abd717eae DRA: Fix failure to allocate large number of devices 6cca37b36fe Add integration test for log verbosity 69682b75e50 Manually read verbosity before kubectl command construction ee4c6b90ce9 add HirazawaUi to kubeadm approvers list 77b1236a523 fix: Kubernetes versions in unit tests f40892f4813 client-go: call out WithContext inconsistency 871cabeedb0 deflake e2e tests: StatefulSet Non-retain StatefulSetPersistentVolumeClaimPolicy should delete PVCs after adopting pod (WhenScaled) 8b81a3d883e Rename GetStableKey to GetBackoffKey 861682235cf DRA: Fix incorrect behavior for AllocationMode: All in ResourceClaim when used in subrequests a3097010faa Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity (#129874) ce02da8daba generate code 4821604f83a Reorganize scheme type converter into apimachinery utils e81887276c6 refactor: Add request method constants af1d60f30bc Add hpa reviewers 0acc7bd4dcc HPA: Fix int overflow in GetExternalPerPodMetricReplicas b9cb3cb3339 update klog flags 57218ac969d Revert "kube-proxy: log errors during proxy boot" 9def40c9e7b DRA E2E: fix "must manage ResourceSlices" c71e29ff12b DRA E2E: fix flaky "sequential update with pods replacing each other" d28c8cd4887 fix: not removing the plugin from the unsched plugins after PreEnqueue 47d296d62d7 feat: introduce pInfo.GatingPlugin to filter out events more generally 441dd305150 userns: Wrap more errors 43f61e80de3 userns: Improve error returned if userns is not supported c5efc843dac Fix rudimentaryErrorBackoff to only be created once 97e64e80c3e Fix typo in comment 68f0204e3e1 Better logs and debugging 8a571f7fb80 Rename discover() to discoverType() eb3c061cafb Reorder and merge blocks handling named types 67bab26ea13 hasValidations should return cached values first bb10f55fd1e Fix lint warnings 22fa3c747b1 add retries to exec command in cgroup verification 8652b6ab283 Update sig-network-approvers/reviewers b1bb9a5885a Kubelet: Randomize ClusterRole name in e2e 863168e4749 e2e: stabilize Windows memory pressure eviction test 4ed3768dc95 userns: Use len to handle empty non-nil slices 97a2cb39ce2 Make sig-scheduling-api-approvers actual approvers 6d927c3c250 Comment out sig-scheduling-api-reviewers, since it's currently empty. 038bb1a9a5c Remove alculquicondor who is stepping down from sig-scheduling-api-reviewers 55b5827d8f0 integration: etcd data aa9f156d7aa integration test for compatibility version 3be3051fb77 Adding test case for the webhook behavior change cf82fd7e9ce Treat error decoding a mutating webhook patch as error calling the webhook 9bcec340f88 modify unit test for compatibility version 15ab88f88bf remove networking v1alpha1 and make update 54b014be1cd use networkingv1 as default storage for servicecidr and ipaddresses b2fe862ae3d graduate disableAllocatorDualWrite and lock MultiCIDRServiceAllocator d2fa246b069 Update codegen d78b295a845 Reenable guard to only validat root and scale subresources until ratcheting merges. 94d043b149b Drop KUBECTL_DEBUG_CUSTOM_PROFILE feature gate entirely d52f05dad3a remove hwdef from hack reviewer 2e6ec2414c8 Remove unused function 2e8b409a5ff Rewrite Subresources godoc. 164fefa9483 Update codegen 2119555e02b Add subresource to operation, do not special case subresources in validation-gen 2073ba2372b pkg/storage/cacher/cacher_whitebox_test: deflake TestWatchNotHangingOnStartupFailure when ResilientWatchCacheInitialization is on 2b3f2aa705c propogate error 10c5bdd6a1a Apply feedback 36685c6f1ce Add information about expected status 6c89041043c fix(scheduler): node pre-check logic to consider NoExecute taint effect e36a168a630 test/e2e/node/kubelet_authz.go: fix SAR to include service account groups aeb43eb22f6 Migrate ExtractCommentTags to ExtractFunctionStyleCommentTags 1ec7231f633 DRA node: reject static pods which reference ResourceClaims 2ea4b1aba60 golangci-lint: don't warn about conversion and defaulting functions 15d9a93d7c8 golangci-lint: redirecting stderr raced with termination of script 3b5cfeaf204 DRA: use v1beta2 b262d56165f DRA: client-go wrapper with latest API as types 8e9abfaf217 DRA: v1beta1 <-> v1beta2 conversion d7a64d68b56 DRA resourceslices: clarify code a171795e313 DRA resourceslices: better error reporting 6392b54e12a DRA resourceslices: avoid update loop when partitionable devices feature is off 5af026120a1 test: bump agnhost image to 2.54 e5ffec242a3 Bump CNI to 1.7.1 47fddb08f75 Expand has() tests for omitempty and omitzero c2c003a71fc update k8s.io/utils to bring fakeClock.Waiters() b3bf5ed0ee1 verify-shellcheck.sh: normalize KUBE_ROOT using pwd -P a1a6208863e use the minimal shellcheck image instead e0983dbee87 remove unused shell imports in verify-shellcheck 7b50c8a510f jwt: support CEL expressions with escaped names 784c589a77a Check for newer resizing related fields after expansion is successful 6bb6c993429 Drop null creationTimestamp from test fixtures 41805aff915 Update runtime convertor to honor IsZero() bc605171713 bump cbor to add omitzero support 06b0784062f bump structured-merge-diff to add omitzero support fdf0bb41a44 Omit null metadata.creationTimestamp 79891eac8bb agnhost: bump version to 2.54 09912f35219 Make ToUnstructured match stdlib omitempty and anonymous behavior 49f765e2b3c Remove redundant Required validation for IngressRules c78556fb4b9 agnhost pause: report signal, support termination message a6549edd1a7 kubeadm: use named ports for coredns probes 0faeb5a0d09 golangci-lint: move into hack/tools/golangci-lint 5d9a2f30f28 golangci-lint: finish migration to v2 9bada79de10 DRA node test: fix useless gomega.Consistently 4adb58565cb chore: bump golangci-lint to v2 f6d0498017f Continue alias creation when __completion is used to enable completion dceae3b3889 DRA e2e: avoid terminationGracePeriodSeconds 56e533f4a08 servicecidr: only patch status if necessary 7fedcc34e49 refactor default service cidr sync status logic edda4b02d61 fixup! Introduce special handling for updates involving a single resource slice. 6d8b41fac66 Introduce special handling for updates involving a single resource slice. 2e98d87c561 api: Fix typo in word "immediately" 5441f5fdef7 jwt: add unit tests for using CEL with deeply nested claims 43ce37ed481 Address feedback 7e1cec680e5 e2e: Deduplicate cgroup verification cc4c14d4cb2 Disable size check for xfs/ext3/ext4 filesystems before expansion 48054afd6ac Relax external signer path validation to allow relative paths 5712881cac1 Disable disk size checking when calling NeedsResize function e500f94519c add missing space in string concatenation (kubeapiserver) c5a2c69b943 add missing space in string concatenation (kubeadm) 43a0da5880e add missing space in string concatenation (kube-proxy) 66b8a8427cf Fix CEL equality bug for structs will nil field not marked as omitempty 1b9386aac37 Add comment explaining the metric sampling logic for plugin execution metrics 0a4ab936763 fix incorrect comments 4d5d48da706 Remove unused volume limit constants 3a5dda78afd e2e network: blue green deployments ea644182714 Appease linters 43d6ea12e3f jwt: refactor CEL eval to drop unstructured and map[string]any 064074c07ac Add lazy reflective CEL object wrapper 903d6d4f030 Don't reinitialize test framework during each test case a56378d9fcb Update UserNamespaceSupport feature gate name 3cadb6ff808 DRA test: update examples c6f652d5fe0 Refactor pod failure policy defaults 68b1a950f9b kube-proxy should check global IPv6 enablement 2080bafa154 Add sunnylovestiramisu as Reviewer d6b45bc98d9 [FG:InPlacePodVerticalScaling] clean code resize test dddfeb4a0e4 Handle unsupported node expansion for RWX volumes 62ddcfba575 kube-proxy: conditionally skip e2e 8bb7b056378 dependencies: github.com/client9/misspell -> github.com/golangci/misspell ad40bc88568 kubectl describe service: Add Traffic Distribution 28e7acf0f93 improve display format f30c23a7831 kubectl: sort configmaps alphabetically to avoid random order db960d10078 Fix openid discovery docs with external jwt signer. 1869f6f23a9 Fix typo in service account config test. c7a870135a3 nftables: cleanup service chain checks 494b2b563f8 use testing.TempDir and delete helper function efcceee903b reduce assignment f42ee7a2d67 use slices package to reduce the codes 9cb3dfb5d3c kube-proxy: log errors during proxy boot 2d337f5151b Retool validator utils realType and unaliasType 835bb2ecc5c Change v8n context.Type and Parent on typedefs 6ea1db51a75 Disallow pointers as listmap keys fc7f0173577 Handle typedef fields in optional validations 9d519c7c46e Fix immutable validation for structs with pointers 0b190b81748 Add test cases for immutable to verify pointers 855918f75c2 Add tests for optionalness of typedef fields 7a24c4ce5d9 chore: update github.com/google/cel-go dependency to v0.25.0 addaf680aed remove v1.31.0 api testdata 86a43f4b539 Add v1.33.0 API testdata 89156452aeb fix nil pointer panic on windows node 00908ce2d13 Wait for resource quota status to be populated d5bf33e7d71 update-codegen.sh: automatically install protoc 8a2f367ec3e automatically install goimports when running update-codegen 1473aeaac4d add goimports to tools module 540ea5949f3 skip kubectl proxy env tests when the host is localhost/loopback and would not be proxied 1214dc223c7 kubelet: Use node addresses from informer c0b2f341a72 clean up cloud provider code because cloud provider only supports empty or external and cloud is nil 187b43d5ada enable dep-approvers for staging go.mod/go.sum f50ad91ed76 Create a single TypeDiscoverer for all inputs 08794974b79 track gopkg.in/yaml.v3 as an unwanted depdendency aee4945252f alculquicondor stepping down from sig-scheduling approvers 58e5dfd45c4 attempt to re-introduce dep-approvers for go.mod/go.sum 74e84dbf5a3 Add more test cases to TestDescribeSecret test (#131422) 6eff9db0f10 chore: Add VeryShortWatchError typed error 92359cdc69d update godoc for and rename observedGeneration helpers 932cff5dd41 add more error details to the failing cgroup check c3bb59d078a Fix etcd3 watcher flake 0d3d2733f60 Update go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful to v0.44.0 a2281f97bb0 bump fsnotify v1.9.0 44d7132afbf Update hnslib version in Windows KubeProxy. 7c53a5aaa4d Remove feature label NodeOutOfServiceVolumeDetach f74424bd7c1 etcd: better logging 24257f2d316 Remove deprecated scheduler cache metrics 269d3ae5147 Fix comment for default gRPC log level in DRA plugin 2ea68920776 Always check for Immutable selector in Deployment Replicaset Daemonset (#131017) 947a9f26fa3 Move pod resize e2e utilities out of e2e/framework 609e4a9ba04 Unhandled panic crash on rollout_history printer.PrintObj (#130503) fa8e37f7805 Allow disabling caching for webhook authorizers when using `apiserver.config.k8s.io/v1{alpha1,beta1}.AuthorizationConfiguration` (#129237) 1db2d6a0184 Mark NodeExpansion finsihed without featuregate check 70ebe90b139 Also change final status by removing featuregate check 849924b6ba5 Increase delay in kuberuntime termination order test to prevent time rounding flake. 0e40ed642bc Check for newer fields when deciding expansion recovery feature status 4fa090bd812 Remove alculquicondor from test framework OWNERS 6a17858ff9b CHANGELOG: Update directory for v1.33.0 release 90de4b58943 Remove warning about resizing failed for unknown reason 41809284025 Update cri-tools to v1.33.0 f63702de0f9 scheduler: return UnschedulableAndUnresolvable when node capacity is insufficient d10eb869276 fix: Fix non-constant format string in framework.Logf call b9a6a257b7d add TODO for unifying .go-version 5c84ee07eee test/images: read .go-version instead of duplicating 722581f5f68 Expand etcd data test to n-3 c21f26895c2 Fix VAP test for v1.34 bfcee664500 Bump DefaultKubeBinaryVersion to 1.34 27815acee14 remove outdate comment 64b4c96e20f fix: use correct apiextensions v1 API instead of apiregistration v1 a53ea3357c2 Updates prober_total_total to BETA and updates the list of stable metrics f844abfc6f9 Fix typo in ResourceEncodingConfig comment ff108e72a52 DRA device taints: fix rare unit test flake 97dd6dc2846 Add warning message for attach 8672956f730 etcd: use Unix Domain socket for testserver 33f16a55ba2 etcd: fix 5 second delay during shutdown ff2e6dddc8b DRA device taints: work around fake.ClientSet informer race 638abf03396 DRA device taints: more logging in test 40f2085d68a DRA device taint: clean up test initialization 091d09b4479 deflake e2e tests: CustomResourcePublishOpenAPI works for multiple CRDs of same group and version but different kinds db1e107150d Job: Fix API comments for SuccessCriteriaMet ac3274521be scheduler: remove duplicate nominatedNodeName clearing in preemption 373866eee99 Build etcd v3.6.0-rc.4 image 7fcc1bcf1d1 chore: move watch handler tests to handlers pkg 3fcb26f0179 reduce etcd install log noise 3e609ecf6e9 fix: Watcher deadlock from Stop not being called c704025a0eb Fix error handling and csi json file removal interaction 1654aa619c2 deflake intergation test: TestEndpointHandlers 3d53bfec09f Typo fix: watchActcion 4e3026fdb81 pr fix 7d6f86594fc kubectl: sort secrets alphabetically to avoid random order 8f1326251c2 Improve Job API comment for the backoffLimit 9d5f78a990a Update OWNERS_ALIASES add aojea to sig-network-api-reviews e8dbfc0b6ff add miss Shutdown call for selinux_warning controller 405b9e80221 Check expected emitted events with assert.Equal 5ebeb8defac don't only run events in nested lists consecutively 614b1e90170 Run all permutations of events in ResourceSliceTracker tests 29b499e2ba4 simplify applyEventPair 45b0ddff12c make input events a slice 3883e050fc1 Use shared test fixtures for ResourceSlice Tracker test cases 7f21df6ab14 resolved review comments 5928fc0e600 Add ContainerIter utility for ranging over pod containers 3b2cd123479 fix(kubelet): acquire imageRecordsLock when removing image 6d6abaab7d1 Simplify etcd3 watcher b82fd6c2888 add e2e test for healthz/ 8bc7e6c10e0 add etcd server overrides to etcd probe factory for healthz and readyz b141ac6a235 adjust container_spec_memory_limit_bytes e2e to range: ppc64le is 44*1024 less 2aa39a0c77c Update the busybox test image to 1.37.0 f9c1876b45d Make proxy CleanupLeftovers methods quieter b61ca041b45 Add some missing cleanup to "kube-proxy --cleanup" c1ff9cf4e81 chore: Upgrade the mockery version to v2.53.3. ffe235d2dd3 replace context.TODO with context.Background in tests 4bd0c024e9d add goleak to kubelet vendor via hack/update-vendor.sh 161b44d04ed add missing header in httpstream_test.go; whitespace in imports 79150d1ecf1 add unit tests to verify the fix 42d3716d727 fixed the formatting 268033a5116 Fixed go routine leak in kubelet tests 30f1bcadea4 Add a unit test for iptables.CleanupLeftovers, improve ipvs test 94530dad7b7 Move iptables/ipvs/ipset interface creation into CleanupLeftovers 975e653af44 RWX tests should create RWX volumes 5ad90c3b63a merge RunBenchmarkPerfScheduling and runBenchmarkPerfScheduling 780c0d67251 add license description in options.go 4f33b74a35c Use Go 1.24 os.Root instead of filepath-securejoin 5677f7ab0b1 Make Request#RequestURI honor configured context root b206264ffba Shorten long directory names with e2e pod logs 2800c16c8b9 Remove FlowSchemas handling non-leases-backed leader election 16f4a5c4eac cleanup unneed code 88fbccd6982 Fix the allocatedResourceStatuses Field name mismatch in PVC status validation 302a8505833 Update coredns version to v1.12.1 d4fd41285b8 update the log message to reflect success and failed jobs cc42846187b Fix for HNS local endpoint was being deleted instead of the remote endpoint. 551f3c7824d merge the integration tests into a single one de98a71ff57 Update PodSecurityLevel used during Service CIDRs tests 58ff3129add update kubelet_authz.go to new test framework c7d0ed5c488 add integration test for job failure event delay and remove the unit test 6747bf7a9cb Clean up leaked goroutines in cache unit tests 04d0715e663 scheduler-perf: add option to enable api-server initialization 16af0d79d87 update sig-autoscaling maintainers 653f48d8867 Certificate store: ensure data is written to disk 5a14fdbf7f3 e2e: Keep original error when exec in container fails 9c228e81d24 Increase kubectl cp command timeout to 30 seconds 310b395a04f [cloud-provider] respect the "exclude-from-external-load-balancers=false" label ae08504ca62 Remove unneeded return values 2c94112a026 Disable thresholds for PreemptionBasic and PreemptionPVs tests f7d8853213d Add dom4ha to SIG-Scheduling approvers 8e65a62b3fd Deduplicate MilliCPUToQuota function & constants 3067bbfe159 hack/ginkgo-e2e.sh: fix misplaced brackets 5e4600e46ba e2e service ip preservation test f7e82d8059d clarify mutual exclusivity of service account annotation keys in godoc 4fa96391457 kubectl http proxy e2e: do not append os.Environ() redundantly f7f4aa02baf kubectl e2e: debug appended environment variables 5aa61f84797 Test tooling: fix agnhost pause command 65b8fba34bb Mask Linux thermal interrupt info in /proc and /sys. 0ff1e3778f1 Remove general available feature-gate PodDisruptionConditions fe14689f221 bump k8s.io/utils 1c3dc397ae1 make update 8af1629f7ae remove inaccurate hostNetwork doc comment bad6c7e4cc5 Set LANGUAGE env variable in TestDiffProgram for consistent locale behavior c005b85d4df Reduce locking duration on cache to fetch data from Cache 252d584cb73 Implement validation-gen lint for CI 1a694bfd328 Make validation-gen lint errors easier to read 8dc6806d26d Expose NodeInfo to PreFilter plugins and Framework 5413d0edfa4 chore: correct the comment on UnschedulablePlugins 8db5f061838 adding commits of the original PR 1b8bbcac44c Add integration test 1402a54917e Removed unused function UncompressLog. 88a3c000e5b Implement CSI e2e test for MutableCSINodeAllocatableCount d868eeb0889 Migrate pkg/kubelet/status to contextual logging 7f263b057dd Tag api change instead of apimachinery on generated openapi. changes 4120ed1df05 chore: `make update` for doc changes 356e148045e fix: comment on preferred PodAntiAffinity a2624f9c64b make update 21f7026c25c clean up CSIDriverRegistry a68501da72b Add check to see if promote worked within the retry loop 53499d97eec prefer error over bool, prefer Should(gomega.Succeed()) d54ff7441e1 test: don't panic during an Eventually retry loop cab6045a40f hack: remove verify-e2e-suites.sh 73afab1856c handle review comments 51fdd55e87e use sync map for the cache 3a5f8b4b99c Update OWNERS_ALIASES for sig scalability 547c005cb7f handle job complete update delayed event 410ada00220 Made the unsupportedError msg more readable 780fac5a37d chore(kubelet): migrate network to contextual logging 125b8d2809d Removed kubelet test duplicate line. c1efa2e1618 delete test/e2e/common/storage/volumes.go 42943796244 e2e storage test: intree driver adds the support for nfs v3 6df869347bc remove outdate comment about pv controller 32999059054 Based on the issue #8304 add mfahlandt as ne Co Chair for Contributor Experience 9a60ea01f9f fix getPodMatches should call /runningpods endpoint 5da366e3efa Update pkg/quota/v1/evaluator/core/resource_claims.go ce7d3ea00cc fix wrong api version in toExternalResourceClaimOrError 0f0f9d01c0d remove out-of-date comments about version c2b455f55c6 remove unnecessary functions 44d31af29bf Add example in etcd override flag help text 3dc611e6666 fix container lifecycle e2e tests 4a4fb0a11ce Fix LC_CTYPE for kubemark start scripts ea644981df4 Update pkg/controller/certificates/cleaner/cleaner.go 1e1e2dee909 Update pkg/controller/certificates/cleaner/cleaner.go 006ebbc33a8 Fix comment typos 4bf5f1a6b31 kubelet: add coverage for identical kubelet config and drop-in config content eae133919f0 fix: killPodOptions support JSON serialization 55ba8f063b1 kube-scheduler: Fix a misleading error message in the VolumeRestrictions plugin a52863827ba [kubectl] drain daemonSetFilter with other APIVersion 9f50740b7bc Simplify span handling c64b6f80eb7 Trace across start handler invocations, nesting spans 6fd8954fe86 kube-controller-manager: also support context for record.NewBroadcaster bea35b1f565 remove non-lease resource locks in tests. ff74405bd39 kubelet: remove --register-schedulable flag 05be83b3848 tracing: set audit-id on incoming requests eda71f9e958 cleaner.go should use time.Until instead of t.Sub(time.Now()) 1354bb9e2ea Update log verbosity for node health and taint checks Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2025-07-07T15:42:27+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-06-26T20:25:27+00:00 urn:sha1:46ccc838f511089ebc0c323a3da7cc8e79dcd50f Bumping kubernetes to version v1.33.2-1-gf208b6c73d1, which comprises the following commits: f208b6c73d1 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.2 a57b6f7709f Release commit for Kubernetes v1.33.2 05e72aa38dc fix kubeadm e2e tests 612e0555562 Bump images, dependencies and versions to go 1.24.4 and distroless iptables a792b779060 Remove warning about resizing failed for unknown reason ea3aa291814 Add tests that validate the return value of resize operation 060a4985376 Revert shorthand for kubectl explain --output c4f2287f8a3 Bump images, dependencies and versions to go 1.24.9 and distroless iptables 1fde2b884c7 DRA node: reject static pods which reference ResourceClaims 2628e18dabe userns: Wrap more errors 514da8a95a6 userns: Improve error returned if userns is not supported 992924664b5 userns: Use len to handle empty non-nil slices 76747b4eed8 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.1 8adc0f041b8 Release commit for Kubernetes v1.33.1 f240b3abf52 SchedulerPreemption [Serial] validates various priority Pods preempt expectedly with the async preemption: replace finalizers with preStop hook and TerminationGracePeriodSeconds cce99a8c73a Automated cherry pick of #130503: Unhandled panic crash on rollout_history printer.PrintObj (#131496) a257be82995 fix: fixes a possible panic in `NewYAMLToJSONDecoder` b59deb49149 DRA: Fix failure to allocate large number of devices 750d2c02f03 Update hnslib version in Windows KubeProxy. c916dba6073 Disable size check for xfs/ext3/ext4 filesystems before expansion c8f2295d688 Disable disk size checking when calling NeedsResize function 3caaf056f1b Handle unsupported node expansion for RWX volumes c7eb93190c6 Mark NodeExpansion finsihed without featuregate check 74035d7b771 Also change final status by removing featuregate check 1a9d4fc468f Check for newer fields when deciding expansion recovery feature status 950bb3baf51 Fix for HNS local endpoint was being deleted instead of the remote endpoint. 5dc8b8dd268 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.0 60a317eadfc Release commit for Kubernetes v1.33.0 9ba7dcecc39 CHANGELOG: Update directory for v1.30.12 release 191c34eaba2 CHANGELOG: Update directory for v1.31.8 release 7bf818fb88a CHANGELOG: Update directory for v1.32.4 release 95b926c93a4 Feature-gate watchlist e2e e467c9530b8 [Go] Bump dependencies, images and versions used to Go 1.24.2 and distroless-iptables 660df229bf3 Stop exposing list-via-watch from the server a8f6d77c8da ServiceCIDR and IPAddess Conformance 44c230bf5c3 CHANGELOG: Update directory for v1.33.0-rc.1 release 4939c17914f Update CHANGELOG/CHANGELOG-1.33.md for v1.33.0-rc.1 92e86d1b4bf Release commit for Kubernetes v1.33.0-rc.1 0266d3bcb37 Allow single-to-dual-stack reconfiguration for ServiceCIDR 7d7fc2d9892 Fix flaky test: Metrics should grab all metrics from kubelet /metrics/resource endpoint 505836c22cc staging/publishing: add release-1.33 rules e5a5f726dde Tag SELinux tests that require SELinux warning controller cacd595bae4 CHANGELOG: Update directory for v1.33.0-rc.0 release 18249aaaa4f hack/update-conformance-yaml.sh 1eab3036b67 mark tests that use estimateMaxPods as serial b2933c0adac estimate some system daemonset overhead for max pods b1a9cc34731 bug fix: fix version order in emulation forward compatibility. f63cdcbc811 Release commit for Kubernetes v1.33.0-rc.0 2ef4a8426c2 Move to released version of prometheus/client_golang v1.22.0 from rc.0 c8c2844aaf1 Fix race for sending errors in watch d3c5a4ab2f8 CHANGELOG-1.32: fix release note about kubeadm upgrade phases 10a7d6f8fdb Update CSI Proxy to v1.2.1-gke.2 24edc6e90f1 Update etcd to 3.5.21 eca90dab3f5 Parallelize cacher list tests 1a15d582ae5 Don't start etcd for skipped test 75186095c58 Stop cacher in TestWatchStreamSeparation to speed up shutdown 38d5cb368dd Fix flake, non-consistent list doesn't give any guarantees about staleness 9b5c4504ee4 Ensure that cacher is terminated in TestGetListRecursivePrefix 24536987d89 fix narrow spaces of %e for x/net bump f3b80a85822 bump etcd 3.5.21 sdk 0e2e687d3cc cleanup etcd v3.6.0 20d6b51588a Build etcd 3.5.21 image 5c7491bf087 accept rounded container cpu limits in container cgroup tests (#131059) d349ac57e47 wait for containers to have started before doing cgroup check b0b89d3bd25 fix the DeploymentReplicaSetTerminatingReplicas version 8db1426554d rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingReplicas 83bb5d57058 deflake restart count assertions in in-place resize tests (#131055) 1d42ba78ff9 Add e2e tests for resource v1beta2 API e761be47a45 Run make update 39507d911f3 Add resource v1beta2 API 52298cf36a6 DRA kubelet: fix potential flake in unit test 2350e7a9118 deflake pod-resize-resource-quota-test 2073252d5ab Ginkgo skip needs to run inside leaf node otherwise it panics d429c8b17d4 debug cpu_manager_test failure 478a6f9d053 Add a tests for PreferSameNode 0ee6b0dbfa2 Add "multi-node" TrafficDistribution test 7956b37f62d Add test for `trafficDistribution: PreferSameZone` 23aff5dabd5 Split out the pieces of the TrafficDistribution test 10cd54bee46 Streamling the node/zone-picking logic bc81a860b08 Abstract the logic of the TrafficDistribution test b1a0fea4c6f Remove a level of indentation in the TrafficDistribution e2e 8f7bb964de5 TrafficDistribution e2e cleanups 52c3010c8b7 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA d6d9a354d7d Generated files f035e37c4bf Added e2e test and fixed existing pod test 94ddb3a98fd Implementation cc466aa355f CRI API changes 0380f2c41cd Validation 70540c9f43e API changes 2037f39e204 kubeadm: use 'writer' everywhere in util/apiclient/wait.go 310723b21c8 kubeadm: fix WaitForAllControlPlaneComponents with anonymous auth a75cd2e0f47 Adjust metrics ranges to reflect additional CI job environments 2bd0481d2c3 Use established pattern for kubelet metrics url 0486790592d Fix container_spec_memory_swap_limit_bytes in ci-cos-cgroupv1-containerd-node-e2e CI jobs a264b0015ec kube-up.sh: set inotify limits 4db8e8cc1dc Add configurable tolerance e2e test. ac107137ce8 Refresh autogenerated files following the configurable tolerance updates. dc1696d8074 Fix API doc and tolerance field handling when gate is flipped. 2dd9eda47ff Add configurable tolerance logic. 11b6e2a3752 Update test fixture to account for new tolerance field. a41284d9fa3 Add the HorizontalPodAutoscaler tolerance field. 463b15b9b22 Add the HPAConfigurableTolerance feature gate. a237f429fc2 Revert "Separate SeparateDiskTests from eviction" 914a4ba8bfa generated c86ff2339d4 Unit and E2E tests dcc67d08c6d Increase number of pods in PreemptionBasic and PreemptionPVs 33fbce73ae2 benchmark to show inefficient linear search lookup 6bbaf8cb104 Extend CRI stats provider to support PSI 77118d4ca06 Extend CRI API to support PSI 92a42e65ec2 Surface cadvisor PSI metrics to summary API and prometheus metrics c7fc9d5f91a API definition for PSI metrics a18354c60dd DRA API: fix DeviceTaintRule REST storage test 2d7518df6db Revert "Add e2e test for Regular Container image change" a9526f6c7e0 add comment to the CPUManager feature label 0882efaf8e6 Remove general available feature-gate CPUManager 16f5fe6a26b Fix infeasible resize test 8cfb9adbf60 overwrite existing labels during pod Binding storage 17acc4a5eeb Move queue.Done() before Prebind, add tests 6873e819297 Run in-place resize tests in default CI jobs a09cb22e4db disable in-place vertical pod scaling for non-restartable swappable containers a490960c92b fixup! KEP-4742: Node Topology Labels via Downward API 01ae1b1b5a5 remove kubernetes.io/hostname label copying 934e247030b Remove kubernetes.io/hostname label copying, skip overriding, and support direct spec.nodeName changes. 6ddabb6ee64 updating to reflect latest KEP design 5e7e1e7cf16 KEP-4742: Node Topology Labels via Downward API 67bdfa7d6ee Add alpha feature gate KubeletPSI 2670462eb03 Remove TopologyHints and TrafficDistribution feature flags 3b3df8ba728 CI integration scripts: reduce log noise from installing etcd cfb9486417d DRA taint eviction: avoid nil panic 56adcd06f37 DRA device eviction: fix eviction triggered by pod scheduling 7b38bff6ec9 Move pod level hugepage test from e2e to e2e node 98e362c0495 Revert "Pod level hugepage for cgroup when unset in container" fd50d9207f5 End to end tests for pod level hugepage resources b9e0d4ad666 Unit tests for pod level hugepage resources 51db93c3fb4 Use pod level hugepage limits for cgroup when unset in container e3f4c6e62ab Containers with hugepage volume mounts with unset hugepage limits aa17082a160 Default pod level hugepage limits e5020285fa2 Hugepages to pod level supported resources 5856d3ee6fa DRA taint eviction: fix waiting in unit test ac6e47cb142 DRA taint eviction: improve error handling d62e766dad1 Fix function comment c7919f5e22e Pop from the backoffQ when the activeQ is empty a67cc3aac12 Reduce locking duration on cache to fetch data in DaemonSet Controller b726f2cf579 Add an integration test for PreferSameTrafficDistribution 919c2b478ee Refactor TrafficDistribution integration test 64034307c22 Fix comments in TrafficDistribution integration test 323d55e67f9 Rerun update-featuregates.sh c10dc416815 Ensure --enable-logs-handler help appears in kube-apiserver help 3043fbc3daf Added feature gate to unit test c0a1489bc86 Fix unit tests d46050aa5d3 PodLifecycleSleepActionAllowZero to Beta 8fdd6fe4768 Unify should delegate list 8b4aab5451f e2e_node: add a test to verify kubelet fails to create pod if userns isn't supported a6494ec3134 features: bump proc mount to on by default beta 3701f878d65 Fix the logic on TestGetStaticPodToMirrorPodMap 2d05c3849a4 DRA E2E: fix "cluster must manage ResourceSlices" test ca42addbdff chore(scheduler): add filter integration tests for missing part plugins: NodeResources plugin 2a9a3ea827d test: switch gotestsum quiet output format f82c9e56d92 Serve LISTs with exact RV and continuations from cache 657ccc30995 Ensure that the pod has the proper phase upon re-initialization 3c7ed00e224 node: kep-2625: cpu manager policy options GA 1a34095f75b KEP-3094 Promote NodeInclusionPolicyInPodTopologySpread to Stable 1208f25b3f4 Verify oom_score_adj for containers that have been restarted in pod resize e2e c6d6e0414c0 KEP-3619: rename variable in TestPodAdmissionBasedOnSupplementalGroupsPolicy 586af6b568c KEP-3619: move SupplementalGroupsPolicy e2e test from /e2e/node/ to /e2e/common/node/ 4055b1a9b50 KEP-3619: update e2e test to check a pod with SupplementalGroupsPolicy=Strict should be rejected when the node does not support the feature eda274ed7e3 KEP-3619: merge SupplementalGroupsPolicy dedicated validation tests into standard ones 64a4e349893 KEP-3619: fix field path in validating ContainerUsers in PodStatusUpdate 2a0e51825bb KEP-3619: kubelet now rejects Pods with SupplementalGroupsPolicy=Strict on Nodes not supported this feature. 45846f6b4ea KEP-3619: Set Beta for SupplementalGroupsPolicy featuregate in v1.33 16abcd78bd4 [FG:InPlacePodVerticalScaling] surface pod resize actuation errors in pod resize conditions (#130902) bfaa2496b2f Remove SidecarContainer feature-gate check ec1b493a088 Populate status memory requests from actuated resources 1ee7d946d77 WIP add tests for regular container image updates f04cfdf6e76 Update gofmt. 39d6396aea0 Promote the DisableNodeKubeProxyVersion feature gate to be enabled by default. c2927727107 Consider AllocatableResources when computing pod requests aba588cd14e Deprecate IPPVSAllocatedStatus: always set allocatedResources with InPlacePodVerticalScaling 798ce5bde25 e2e framework: add BetaDefaultOff feature gate testcase 507621e0da4 implement WithFeatureGate label proposal 1738c0bc4c9 Add ltsc2025 for windows-servercore-cache test image ea2f8881093 Auto gen 6d7f11689dd Complete feature impl, fix issues, add perDeviceNodeSelection support, add tests, address comments, etc. ecba6cde1de Allocator updates ece1d76e802 API manual changes deaaa124a5b DRA: Feature gate for Partitionable Devices baaa38c0992 Remove mutation of authn options by binding flag setters to a tracking boolean in options 7fe7754e67f Fix unit test, remove wait after resize 0ec6566c68c chore: update emulation version help msg. a2c739f3d50 chore: [e2e/framework] Updates test feature gates to versioned feature gates 7b5cbbb9618 chore: Remove unused unversioned feature gate map by consolidating feature gate files d7ed3f1c9b6 Add image volume subpath e2e tests 7f4b9a52db2 Consider memory requests in determining if resize is in progress, set termination grace period to 0 f73945aae56 Websocket HTTPS proxy support ba09a97341d node: cpu-mgr: Graduation of `distribute-cpus-across-numa` to Beta dab8758a59d chore: avoid resetting config of emulation verison and featuregates when adding flags 7d74a504caa Remove unused VAP for DRA admin access e2e test 1889e0cad65 scheduler sets observedGeneration in pod conditions 951e33fdf94 Fix gofmt issues 10c6a4258f8 feat: graduate MatchLabelKeysInPodAffinity to GA 917c4b310bd Fix lint issues, use kuberuntime's minGracePeriod const, boost container restart wait period 327ebcffc85 node: cpumgr: e2e: Define constants and use them instead of literals c90f0539c88 node: cpumgr: e2e: Tests for `distribute-cpus-across-numa` policy option b6a3ac47de0 node: cpumgr: e2e: tests for NUMA allocation spread metrics 3edeb60c089 Create Snapshotter interface to fake the implementation 7da942ca748 Change precedence order for continue and legacy exact match e367dca6c5b Change backoffQ less function to order pods by priority in windows 88f8e6697dc Implement PreferSameNode traffic distribution in kube-proxy c85083589c8 Clarify hostname vs node name in kube-proxy ff640c3679a Minor updates to kube-proxy topology code 19952a2b7bd Implement the EndpointSlice controller side of PreferSameZone/PreferSameNode 90c8f9aef1a Don't write out dummy zone hints in clusters with no zones 413af836b38 Minor updates to traffic distribution unit tests af3584778e0 update generate docs for PreferSameTrafficDistribution 4435ead24a1 Add PreferSameTrafficDistribution feature gate and associated API. 6ca82f9c164 Update the use of sets in EndpointSlice validation 929a9c0cad9 Extend shouldDelegateList testing incorportating state of cacher 09fdae408fb pkg/kubelet/userns: add idsPerPod tests 1592bfa4a81 kubelet: config: add userNamespaces.idsPerPod 9f161590bee metrics testing: add type aliases to avoid direct prometheus imports 37b47f47244 DRA helper: support dropped fields and TimeAdded defaults 2499663b84e DRA E2E: tests for device taints 5760a4f2820 DRA scheduler: device taints and tolerations a027b439e58 DRA: add device taint eviction controller 07a275437f3 kubectl debug: Display a warning message that the debug container's capabilities may not work with a non-root user (#127696) d5d008a6bd4 Invoke UpdateContainerResources or trigger container restarts (for RestartContainer policy) when memory requests are resized 0301e5a9f88 DRA: AdminAccess validate based on namespace label 2f1f19a992f flake: fix data race for func TestBackoff_Step 75a4d136aba Update kube-openapi and integrate streaming tags validation cd1a5c6d5cf Fix Kubelet unit tests 506e4fed14e In TestListCorruptObject corrupt the object in etcd instead of changing encryption key 413e867f537 [KEP-5100] WinDSR to Beta 8b2cee83c15 Replace StorageVersion API with aggregated discovery to fetch served resources by a peer for MVP c09d87f79c9 Implement watchcache returning error from etcd that caused cache reinitialization 13d04d4a92f DRA device taints: copy taintseviction controller 6478ca58594 ktesting: fix per-test logging in TContext.Run and WithTB 939c9c0c6ba DRA: add ResourceSlice tracker 99dbd85c45f DRA: generated files for device taints API 797475e1137 DRA: add device taints API 7fb028a433f DRA: add DRADeviceTaints feature c766a52356a Implement KEP 4876 Mutable CSINode (#130007) 9be73c0d67f Graduate InPlacePodVerticalScaling to beta 691398c8563 add API approvers to generated applyconfigurations aa32537e9a0 Add workqueue for node updates in DaemonSetController 381ccf0f4c7 Fix empty describedObject in hpa status (#124555) 5625483527c KEP-4540: added e2e tests for strict-cpu-reservation option 269bbac6e8d KEP-4540: moved StrictCPUReservationOption to beta feature gate 4c2be4bdde2 kubelet sets observedGeneration in conditions d95d6ba5264 DRA scheduler: fix potential panic during unit test verification 582b421393d DRA kubeletplugin: add RollingUpdate b471c2c11f6 DRA kubelet: support rolling upgrades 760903c0de6 DRA kubelet: give DRA drivers a 30 second grace period for updates 0524c807864 e2e/node: Remove outdated comment c11077f417b e2e/node: Skip userns tests on windows c348bd10e6c pkg/kubelet/userns: Log userns mapping information 69e270f509c pkg/kubelet: Explain why a user is required to get userns kubelet mappings c984f0f08a1 tests/e2e: Add tests for userns kubelet mappings 1be3f8961bd Fix a race when closing activeQ 0effe155434 Move scheduler_perf topology spreading tests to a separate package b3890d9fa0d bump RemoteRequestHeaderUID featuregate to Beta, on by default decd11414b0 fix typo 091b450057c Replace PodResourceAllocation with PodResourceInfoMap type for extensibility for pod-level resources support 349e079abeb Update release notes in changelog-1.30 to fix example claim validation rule af291a44c3a Add unit test to validate email_verified in claim validation rules 5d0caaa1a66 feat: Add alpha feature verification to feature gates 916c7867f7e fix godoc for email_verified requirement when username contains claims.email a15520fbeaf Move pod resize status to pod conditions 61863035803 Adding Unit tests for windows-dsr and overlay support 984b475e749 Extract delegator.Helper interface to allow making delegate decision based on cache state 4f1912abf2d Fix missing recursive in consistency check, enable panic on failed check and fix typo in logs 5402baf4a2b Fix KUBE_BUILD_IMAGE_CROSS_TAG mismatch when KUBE_CROSS_VERSION is passed 9837a61528f update cri-api comments for Windows HostProcess withdrawal a666451e8a3 withdraw Windows HostNetwork support 2b504a7089f Fix failing git_repo e2e release informing tests. aa187d2d5ac add separate container runtime filesystem tests c30eb9d9e5c feat: graduate the async preemption feature to beta e394d430c48 Promote E2E to conformance tests for JobSuccessPolicy 0490b9f0b72 kubelet: document seamless upgrade support and guidance f1031be019c node: cpumgr: metrics: add metrics for allocation per NUMA 5c4948ff314 controller: factor out pod node name indexer helper function 9e7c080b863 Use ValidateListOptions in watch cache 414bfc707ff Split subfunction to allow adding more subtests 6d21d8f2376 Test continue with negative RV for reading consistent RV 8c9452f4ca9 e2e tests: remove unneeded storage feature label d66330609c3 Remove the not-even alpha feature setting bc74476bdb9 Remove VolumeCapacityPriority feature gate 43382b1b394 Switch control from VolumeCapacityPriority to StorageCapacityScoring f6ddee95f96 Add storage capacity scoring to VolumeBinding plugin 410dc1d6549 Trying to fix kubelet_config_dir_test 8f69d596e81 Fix pkg names != dir in tests b47e839e4ec Comment on origin and JSON schema 46d5438c144 Fix import groupings 1ff4433c87e Fix whitespace in validateFalse test fixture 4c0c2d21ea6 Use origin in validateFalse's own test d1d77cd553c Use test.Helper in helper funcs 1ae091e7187 Add validation for the NodeSwapStatus field 9d38a85c709 Ensure unit tests are guarded by a feature gate 18139b9845f Add unit tests 16871a1faa0 populate the new node.status.nodeInfo.swapInfo field a9b02114099 add auto-generated files: make update ee4ac3d70a3 add auto-generated files: ./hack/update-openapi-spec.sh 4bdaf6cbbde add auto-generated files: ./hack/update-codegen.sh a53a517022c Add the Swap field to NodeSystemInfo 3e48d143fa9 kubectl: Remove duplicate selector calculation logic and add missing test cases for the 'describe DaemonSet' functionality 1f04af7947b Remove general avaliable feature-gate PersistentVolumeLastPhaseTransitionTime a548688ffe1 fix: add feature-gate is disabled unit tests 03934974688 Add protection finalizer to vac when it is created 06482b6bd3b address comment 41e3efdb60a change doPodResizeAction to call updatePodSandBoxResources inside setPodCgroupConfig 95d3d4a22d7 Gate apidiscovery/v2beta1 serving with a feature gate a758e725b86 Non-pointer VariableGen 4e3d114c267 Refactor VariableGen - no interface needed 6a59dcfa1dc Non-pointer FunctionGen 0b295553232 Refactor FunctionGen - no interface needed 282e1490d43 KEP-5040: Disable git_repo volume driver. 9aeeb530952 Remove usage of TopologyAwareHints feature-gate from kube-proxy packages. 25e041470eb Run ./hack/update-featuregates.sh 619957c9762 Graduate TopologyAwareHints feature-gate to GA in 1.33 and LockToDefault a6c94ea605d Enable DeclarativeValidation feature gate by default 146515ac4a8 kubelet: pullmanager: write to pulled record if secret matches during query 788b7abe406 kubelet: pullmanager: move to a separate package b8fc6042ca0 kubelet: GC for image pull managers 3793becbb94 kubelet: integrate the image pull manager 95d411382f2 Fix comment for GetServiceAccountFunc type 01302639f59 Add unit tests for credential provider in service account mode f6a35c55f2d Wait for node to appear in cache in TestUpdateNominatedNodeName integration test ef40e670bf1 Update hostpathplugin image to v1.16.1 cf20c21ef82 Revert "stop overriding max concurrency in CI, let automax procs handle it" 04ac6df8a91 add dra to edit role and add featuregate test 718ed7d0b58 dra: add user rbac 5a98d4dbb4a Limit declarative validation to spec until subresource support is added b8361f9c6ea Revert "pkg/kubelet: Fix userns tests on Windows" 1057407cee3 DRA e2e: more flexible socket listening b3befff631d implement a file-based image pull manager 0ca23338462 make update 47827f4d9a5 kubelet: modify KubeletConfiguration API with image pull policies 311e589534b Emit comments before validation code ad96b3aed58 kubelet: implement image pull policies 1a660d3d0c9 flake: fix data race for TestApfWatchHandlePanic unit test c4d77a07993 Add test cases for negative resource version in TestList 58d9b5c7b64 Test bypass for negative RV d263344a9b4 Simplify bypass test by just testing shouldDelegateList function ec127279571 DRA kubeletplugin: revise socket path handling c6252daccb8 DRA kubeletplugin: turn helper into wrapper 37dee3c2824 [KEP-4817] DRAResourceClaimDeviceStatus to Beta dc8dc314421 fix error treatment and remove annotations from proto 86169a7a1e0 Fix flaky RunTestConsistentList 09817b320f0 move generate podsandbox request to platform specific ce4de97c2e3 make kubelet call updatePodSandboxResources on PodResizeAction b27c303ac24 update cri-api runtime interface and cri-client add new method 8f11574f3d4 update proto files to add new method UpdatePodSandboxResources 64c0164cec0 kubelet: add the ImagePullManager interface 37e0fd50aac imagepullmanager: add v1alpha1 config API cb7468b0774 kubelet imagepuller: PullImage() - accept TrackAuthConfigs directly 09284d926cc credentialprovider: track kube secrets as creds sources in DockerKeyrings e549eeb7964 introduce the KubeletEnsureSecretImages featuregate 9df0f6b6043 Call PreEnqueue plugins before adding pod to backoffQ 8d4eaa024d3 Add SchedulerPopFromBackoffQ feature gate for KEP-5142 5c17e7bd9c6 node: cpumgr: metrics: add uncore cache alignment metrics 9cfe1863ce9 node: e2e: clarify test description cea7d97d8bc node: cpumgr: use String representation in output 52e0f522ba0 node: cpumgr: test: use Equals for comparison a07510fade8 node: cpumgr: test: abort on failure 3e70a1bc9c8 remove unneeded e2e features 6979567c449 Enable proper API in CLE integration test f7296b31f0d Add declarative test cases for RC.Spec.MinReadySeconds 177193ed197 Mark RC.Spec.MinReadySeconds as k8s:optional 1e336160681 Add declarative default for RC.Spec.MinReadySeconds 1059dbdee18 Declaratively validate minimum value of RC.Spec.MinReadySeconds 20b69a54bff Add declarative test cases for RC.Spec.Replicas 0f4786536f7 Declaratively validate RC.Spec.Replicas optionality 21b3da7e5aa Add declarative default for RC.Spec.Replicas e08bbf254c4 Declaratively validate minimum value of RC.Spec.Replicas a9514b05911 Add update-featuregates to update.sh 088daf472b7 feat: Refactors featuregate lifecycle management script 14934b481ef refactor: detach Info from apimachinery util version a3094ccbe6f feat: extend version information with more detailed version fields 8d71f74fcdb pkg/kubelet/userns: Remove skip on windows 691fd360ba2 pkg/kubelet/userns: Wrap error to get mappings 925416bc370 pkg/kubelet/userns: Provide stub implementation for windows 74b069d0fab pkg/kubelet: Fix userns tests on Windows 1ddfc7bdce1 benchmark-dockerized.sh: don't redundantly install gotestsum 8898868fea4 install-ectd.sh: brace PATH and suggest user export d798d86981d cleanup CI integration scripts d9a2dee622c Fix subresource parsing for declarative validation 7848744bf9c remove kubelet fake status manager d6e5d4f20d4 make update 8eb74b96e33 Add validation to StatefulSet's .spec.serviceName 7315d0a6878 Change internal-version RC.Spec.Replicas to a ptr e0011c72367 Support emulation versioning of formats 8f83f2446a5 Fix detecting consistent read when watchcache starts handling continue 6d3bff83213 Test recursive in TestGetListCacheBypass and separate overrides 8b0294daed2 Fix typo and pass the environment variable required to enable watchcache consistency checking in GCE tests 987bdd9e466 Sync pkg/credentialprovider/OWNERS with k8s.io/client-go/tools/auth/OWNERS aab7a079fa4 make each scheduler test independent 27706a0b54c Add quota support for PVC with VolumeAttributesClass 2db729cfa42 Add flatz to kubelet auth. ed08387663e Enable versioned validation fuzz testing for core v1 group b5bc2838089 ReplicationController: Add declarative validation test suite 5a5ed81e1f2 ReplicationController: Enable declarative validation 256a576651c Add featuregate, feature and unit and e2e tests e8547d8a540 Cleanup unused container parameter from allocation state Delete 05a9c062125 Don't update checkpoint file for deletion 30bca329c52 Don't re-write the checkpoint file when the content is unchanged e856356225d Enable validation-gen on core/v1 9e42056a0df stop overriding max concurrency in CI, let automax procs handle it cb7afbccf6e delete hack/test-integration.sh 08745086e2d chore: change Info->Error log level related to declarative validation runtime tests and refactor panic wrapper names 3b88db4f235 Promote CLE to beta a7505f02621 generated 5ba4a90fdad Add LeaseCandidate v1beta1 ef3cb5c5afa skip admission for unsafe delete a0cc02e264e Simplify shouldDelegateList b27735be2ee Define type alias for getServiceAccount function ad22c0d4954 Fix IP/CIDR validation to allow updates to existing invalid objects 78e58b8c49f kubectl: expose context parameter in DefaultRemoteExecutor 37ddc637f55 Revert PR 125102: Add unit tests to client-go/tools/cache/listers.go 692785d25b6 Add legacy versions of IsValidIP/IsValidCIDR ac6790450ac Move TestListOptions setup before we start API server ba189de78ff Slightly improve EndpointSlice address validation fc4bb4fdb90 Add validation.IsValidInterfaceAddress f79bccf4d99 validation unit test cleanups 76f1684117a Rename ValidateNonSpecialIP to ValidateEndpointIP 2090a01e0a4 add e2e test with the gcp-credential-provider test plugin ad8666ce88d Update credential provider plugin to support using service account token 69dd6b3c0e5 CHANGELOG: Update directory for v1.32.3 release dd25c6a6cb4 CHANGELOG: Update directory for v1.31.7 release de904f80992 feat: add declarative validation metrics and associated runtime verification tests 34349e735ca CHANGELOG: Update directory for v1.30.11 release 1d365762a53 Introduce versioned validation test utilitizes and add fuzz tester 3eaa0478509 CHANGELOG: Update directory for v1.29.15 release 6defd8c0bdb node authorizer changes to allow read on svcaccounts d398de294dd Add KubeletServiceAccountTokenForCredentialProviders feature gate dd7b9f6171b Add service account token and annotation to v1 CredentialProviderRequest ba2eecca0d2 Add TokenAttributes field to v1 CredentialProvider 003f2157671 *: reduce tracing events during streaming JSON objects 2d810ddfa9c Apply feedback b9cb44a5933 Add approver permission for jpbetz in component-base/compatibility d6f61438e01 CHANGELOG: Update directory for v1.33.0-beta.0 release 9fe18bf4866 Update core v1 fuzzer and validation tests to use util/ptr instead of util/pointer 775b118a6d2 Remove invalid emulated version and add lexographical order test 9eef88c8446 Add CLE e2e tests f5dd7107f71 Implement streaming proto encoding d6ef05b9a82 Add +k8s:minimum validation tag b7b1e78d629 Fix context usage cfcf7e93a3a chore(validation-gen): rename flag --extra-pkg -> --readonly-pkg in validation-gen ca4f7857576 Update hack/verify-golangci-lint.sh cd9df2f115a chore: change error_matcher.go to use test interface instead of importing testing pkg c36b1c901f8 KCM: CTB publisher: tolerate NotFound during discovery 24e8fa769bc move ClusterTrustBundles featuregates to beta 1f1dbc35a90 kubelet: ctb: use generics to handle alpha/beta APIs for CTB projection 5b3b68a3a14 KCM: CTBPublisher: use generics to handle both alpha/beta APIs d3f44a5bc0f kubelet: lazy enabling the ClusterTrustBundleProjection feature 0cd2976cabe integration: ctb: apiserversigner test to use certbeta api ccd2d4d62ad generate code e0f536bf1fa use the ClusterTrustBundles beta API f598b4860c5 copy ClusterTrustBundle API to v1beta1 efac8fdea24 Delete todo comment to ignore update where 'old' is equivalent to 'cur' (#130322) f9e5dd84ad4 Graduate image volume sources to beta b38bfaa2ac9 fix: shared informer typos cdac61b9025 use generic set in sig-node 63cd30e3f6c use diff port for TestCreateConfigWithoutWebHooks from TestCreateConfig 9e53371ddaa Fix test cases that may potentially cause a panic. e4d73c56cd0 Implement consistency checking 4c6971007be Refine logging levels in Job, IPAM, and ReplicaSet controllers. 92aeb63a5be Handle optional value-types with defaults f1674543718 remove feature gate AdmissionWebhookMatchConditions that was GAed in v1.30 8195f82fe82 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 141e98ed050 Add comments to FunctionGen 989d68d7577 chore: update DeclarativeValidation featuregate 03f0475ebd2 Add Complete reason verification to all e2e conformance tests 8a20e908398 [FG:InPlacePodVerticalScaling] Drop 'Proposed' resize status 3460b2238eb Disallow optional/required on non-pointer structs dcbfe67b1ca Prevent usage patterns we don't want to support 3d2d8db8350 Add option to explicitly enable future gv or gvr in runtime-config. 8eb90fe136d Add CoveredByDeclarative to field error struct 628d107b619 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates 9828ad64da4 e2e framework WithFeatureGate adds [Feature:OffByDefault] (when passed a feature that is not Default) 819cb8fe22f Add emulation forward compatibility into api enablement and RemoveDeletedKinds. 46ac2af06a8 Fix validation test for ReplicationController 6d0b6278cd3 Rename some allocation.Manager methods d4444dd5986 Use actuated resources to determine resize status 660bd6b42d1 Track actuated resources in the allocation manager af9ac325b13 controller sets observedGeneration on pod conditions 42abc2a73b9 Mark StatefulSet's .spec.serviceName optional 4deb4f2b5f0 Trigger rescheduling on delete event also when unscheduled pod is removed 80f4f62ea86 hack: fix shellcheck 77758c185b1 hack: verify to verify-golangci-lint.sh 67f0e95b3ac hack: fix text a9d558de263 hack: verify golangci-lint config, update text 89440b1239b DRA: integration tests for prioritized list ccb607f06b9 Unify ListOptions validation between cache and etcd dbf780a48ae authn-trust: don't react to target CM updates aab083972db fix handle terminating pvc when kubelet rebuild dsw ce163947aa6 fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode 085d23388ad Mark VAC roll-forward test as flaky dc806188177 Use SetFeatureGateEmulationVersionDuringTest() for testing ServiceTrafficDistribution feature-flag disablement in control plane components 4e317265c77 Remove usage of ServiceTrafficDistribution feature-gate from kube-proxy packages. 2492eddd20b Bump ServiceTrafficDistribution feature-gate to GA in 1.33 and set LockToDefault=true ca43bb17190 Run 'make update' 0d0b81b9375 Update trafficDistribution API spec docs for GA graduation 770ce2d874b Better handling of YAML that tastes like JSON f08e640b9e2 Lock down gofuzz in deps 0ce4268b1fe Vendor randfill e54719bb667 Use randfill, do API renames 6798e2d8635 Add time to extra-pkgs for validation-gen 8c98dee1edb Add utiliptables.NewDualStack b0312589692 Improve utiliptables error handling when there's no iptables binary f1d0eb4fe47 Add a unit test for utiliptables.New() 9c98d297953 Remove exec arg from utiliptables.New e5e76d7c7ce chore: Fix incorrect AppArmorProfile.Type marker 3f5d30543d8 Add integration tests for using SAR with node audience restriction b09ca8c2c84 Use SAR to allow dynamic audiences for node audience restriction 97a54dc4b04 update to v1.22.0-rc.0 337f1c211d3 Build etcd v3.6.0-rc.2 image 41469004282 Add normalization support to CEL semver library, enable in base env 7316d831377 Add warnings to all IP/CIDR-valued fields d4c55d06cfa Export endpoints, endpointslice, mirroring controller names 610adebdb75 Add utilvalidation.GetWarningsForIP and .GetWarningsForCIDR 34717000dae Split out IP validation functions into their own file 5e067b6781c Minor IP/CIDR validation cleanups/fixups b62503dd66e Remove a dead error check in winkernel f001b3916d4 Remove a stale comment in metaproxier.go 303593cafe1 Fix some pkg/proxy comments b5e9a8262e4 Remove exec arg from utilipset.New 36f5820ad15 Remove some unused proxy args/fields 13f0449e4ca Fix up kube-proxy import ordering/organization. 834a0d92cfa hack: fix settings for forbidigo linter c510b93d28f Add tolerant parse option to semver fabd449d7fe fix typo e1d3aaf8612 Return correct error upon websocket message read failure 325a54f73dc ./hack/update-codegen.sh d6ea91cf93d client-gen/fake: pass ListOptions to Watch method dfb8ab65210 DRA scheduler: fail in PreFilter when DRAPrioritizedList is disabled and used 0a32e7d6e79 make sure that container is running when execute kubelet exec command d76f40d2f39 fix(scheduler): skip best-effort pods in BalancedAllocation PreScore 032b05114c7 chore(scheduler): add filter integration tests for missing part plugins: TaintToleration plugin 9765fe4abb7 Add all extra_pkgs needed by main API types to validation-gen 0140842add1 update testdata for roundtrip and client tests 701b76f10d7 pod gc controller sets status.observedGeneration upon pod failure 40e7d88f022 Kubelet sets pod.status.observedGeneration behind FG 749f03a49fe Gradeate Job SuccessPolicy to Stable 6f1f7beff3a sort client-gen output 20230f22514 Fixing unit tests in k8s.io/kubernetes/pkg/volume/util/subpath on Windows bb3ba9d073f Preserve old observedGen if incoming attempts to clear it 12d34624ba4 add observedGeneration to pod's dropDisabledStatusFields 6edd9217469 run 'make update' eab9197d1a8 Add observedGeneration and validation to pod status and conditions 6645022d8bc Update status before returning err b345f64c767 Skip test if cri proxy is disabled or undefined abdc760ba54 call dropDisabledPodFields from pod status strategy 46c09d30178 add more uncore test cases 919e8a62e9c uncore: more testcases 5a7697dfe0c Fix unit tests for volume ownership 15cb82b3b3f Separate compactWatchCache from increaseRV 2fc3cd90b15 Store pod backoff expiration time in QueuedPodInfo 5917343e457 Parallelize lease candidate ping 627bfbdfdf1 windows does not support sleep infinity a1cfb13099d we no longer need to track the go version in staging/src/k8s.io/kms/internal/plugins/_mock/Dockerfile ed326fea133 Always report pod status resources consistent with the current pod sync 0e7e025c599 use kube-cross to build kms plugin a3009258dac fix dockerfile warning 4d7f6eadf10 kms-e2e: use setup_env / respect GOTOOLCHAIN 97db9a7843a feat: Add flagz endpoint for kube-controller-manager e2505b0d27c Update OpenAPI c597cc1f309 Allow OpenAPI verification to pass both with and without strict alpha handling 0a9f492eedf Fix up ErrorMatcher from feedback e6cf9dd1663 Pass storage.ListOptions to WaitUntilFreshAndList 796690637d6 Propagate error when creating CustomResourceStorage instead of panic'ing 4001c819f09 fix b88f026053a Implement tests for encoding collections in Proto 7a84e7630f9 Run lists tests in subtests 5ecddb65715 update to latest cadvisor @ v0.52.0 8202b791e96 Job: Use jobSuspended util for suspended detection 32fd0de21c5 tweak 8e4b00e9494 use Cleanup instead of defer 186e6ee2bd5 Debug latencies in request handler 8fac9c68e18 Change allocation manager pod UID to types.UID 3a80473cda2 CHANGELOG: Update directory for v1.33.0-alpha.3 release 4f7ce7513e2 chore: migrate logging featuregates to versioned 04129d1dc82 node: metrics for alignment failures 4fda41c6509 Update base image for addon-manager to fix a build failure. ffc1b32c660 Add declarative validation utility for use from strategies 5ff334a1589 Add declarative validation to scheme c4ea350ef66 Add "endpoints.kubernetes.io/managed-by" label to Endpoints 41577dea1b0 delete opIndex wrapping 33bf509eb06 Use CamelCase for memory manager policy name check in InPlacePodVerticalScalingExclusiveCPUs 6975572a801 Add missing increments of queue_incoming_pods_total metric in scheduling queue 96bae53a375 Promote SELinuxChangePolicy and SELinuxMount to beta afb4e96510f Expose NodeInfo to Score plugins 94471a5c5cf feature(scheduler): add more requeue case for CSI plugin when the VolumeAttachment is deleted cb5c8d159c8 Don't automatically clear in-progress status when resize is not allowed b0621e6955d Update CHANGELOG for addon manager v9.1.8 9598e5a1a57 Mark the feature gate on by default since it's a security fix. 523a19aa44e Extract isInPlacePodVerticalScalingAllowed to shared function 460db5c1372 Always use allocated resources for pods that don't support resize 6df3ea46d92 Never attempt a resize of windows pods ca9734afaa7 Add third party strategy to the coordinate leader election integration test 074d9653b14 Bump addon manager kubectl version to 1.32.2 ea3fa1c5196 Add e2e test for MutatingAdmissionPolicy. 8bb597c0d24 Clean up some confusion around TrafficDistribution metrics fdddd8d18c9 Port k8s.io/endpointslice from utils/pointer to utils/ptr 526960f9885 Change FailedScheduling Event message to be more intuitive a2f47e6586f Add validators: immutable 63050550c35 Add validators: optional/required/forbidden 31f46372170 Add validators: eachkey, eachval, subfield b5f9a00258e Add validation-gen core tests 8c41bdf05b1 Add validation-gen test infrastructure 3210f46b5b0 Add validation-gen to codegen scripts e892dfac7d5 Add validators: opaque c1f9e6b8eed Introduce validation-gen 7f5e1baeeea Bump gengo/v2 to latest 9a843790a30 Adding tests for consistency a94403e9429 add BytesToXConfiguration function 77647cdfc3e rename SplitYAMLDocuments function 2d8d972cb85 Add warning logs for uninteresting kind 6a59c98a9e8 distinguish between YAML and JSON file formats during log output 09427ab5586 Update test/e2e/network/netpol/network_policy_api.go bb79c29dd51 remove feature gate RemainingItemCount that was GAed in v1.29 3842d74d97d restrict trace context propagation to system:master and system:monitoring f8b080a4be7 Update test/e2e/network/netpol/network_policy_api.go 2f6f8d083e0 Update test/e2e/network/netpol/network_policy_api.go 438d496555b Add test for ReconcileConntrackFlowsDeletedEntriesTotal metric e5ad4a18781 e2e network policies test support network policies with finalizers da987eb762d Wrong matcher - use BeNil instead BeEmpty 1e64a890385 Reduce number of (versions of!) images we pull in our e2e tests 29c219dcebe update go.opentelemetry.io dependencies to v1.33.0/v0.58.0 05a90bf642a Revert "Add LeaseCandidate v1beta1" 1a1b566d61f Revert "LeaseCandidate alpha -> beta," 71622aee49d Revert "generated" d5c072117db Clarify host_port field in CRI 2c062117d00 fix lint 2bed3333bc5 fix lint error 75b09b40540 separete runOp df9d5f0bf8b Clarify ordering requirements of client-gen --input e43de183cf1 conntrack reconciler must check the dst port 7fcaaa08ee9 Run make update e2d1fcc1628 Addressed comments 3d318b57e30 revert the old loop to check if the node is rebooted 7555cbca90f DRA: Updates the e2e tests for Prioritized Alternatives in Device Requests 36d8a44b9c3 DRA: Update controller for Prioritized Alternatives in Device Requests 2229a78dfe6 DRA: Update allocator for Prioritized Alternatives in Device Requests cc35f9b8e8d DRA: Update quota calculations for Prioritized Alternatives in Device Requests a716095a8af DRA: Update validation for Prioritized Alternatives in Device Requests 68040a31736 Run make update 8f7b43b6fdc DRA: Update types and defaults for Prioritized Alternatives in Device Requests 0faebe30fdc DRA: Add DRAPrioritizedList feature gate for Prioritized Alternatives in Device Requests 0d7c9aa816e Prevent node-problem-detector from being scheduled on Windows nodes. ac0b30db6da Update dns OWNERS in line with kubernetes/dns f91105a77e5 fix prep and validation for pod subresource updates c8111709e56 Add an error matcher, convert 2 tests 052f1fe8203 Update tests 8a1057a804b test: sched: replace `pointer` use with `ptr` 486d12efc5f call cleanup func position change bee19638f19 tweak e7c743b2ebf Streaming JSON encoder for List a86cca4e185 Improve error reporting of KCM metrics f9051901cee client-go certificate: context-aware APIs and logging 6b7e38f0180 Fix nits from PR 130355 c7cf852086c test: Add Origin field support to ReplicationController spec.Replicas validation test 07477c656e7 test: convert ValidateEndpointsCreate to use error Origin field in test f63359efb03 fix(pod/util): typos in getting pod validation options 5eb37b073c6 Fixing k8s.io/kubernetes/pkg/util/filesystem unit tests for Windows 3010618efee feat: add DeclarativeValidation and DeclarativeValidationMismatchMetric feature gates c3de5b707e2 Do not look for SSH external IP for NFSPersistentVolumes tests 2d10dec3a29 generated ac7a95efb09 LeaseCandidate alpha -> beta, 0fede7b8a2f Bump x/oauth2 and x/crypto dca3f56f64b Add e2e test for topology manager with restartable init containers fad4594fd9f Add LeaseCandidate v1beta1 038b90d475e return error instead of fatalf fb3b163ca0b Ensure we switch to k8s root directory for dockerized builds during e2e-node ci job b7c80f7f159 Fix implementation of ContainsCIDR to allow non-equal addresses f2e8fe93fb5 Fix bad CIDRs in a NetworkPolicy test f73f6fd2ab5 client-go/gentype/fake: sets opts.Watch true cc0faf086d7 [kube-proxy:nftables] Skip EP chain updates on startup. 65c792ca9ba e2e_node: remote: fix getting pod logs e5becd01c84 correct ResyncPeriod comments 28d359beec1 promote HonorPVReclaimPolicy to GA a4885091974 test: Improve error comparison in resource validation tests 02f7dc55d16 feat: Add Origin field to Error and related methods 94f3b552bf3 Fix linter warnings b0dc96e71ec Add unit tests for progress tracking and remove fullpath from reporting 20cecaee97f Add Watch to controller roles (#130405) d44ac38891c Promote e2e to conformance tests for JobBackoffLimitPerIndex a91ed902fed Graduate Backoff Limit Per Index as stable 5942cd81382 Added tests for log file modes and compressing unknown log error conditions. f214d8e27a0 delete unnecessary init 650db7fab97 golangci-lint: temporarily suppress known issues in the code base 45b323d6a5f use Cleanup func e8b9d1d93f8 feature: Added filter integration tests for missing part plugins: NodePorts plugin 2472f4965fe Implement chunking for gzip encoder in deferredResponseWriter 239aad8e4b2 chore(scheduler): use framework.Features in scheduler plugins 168c338f7cb Remove limit support from btree store 43509b63d76 Bump hack/tools to github.com/golangci/golangci-lint 1.64.5 for go 1.24 8090db5dcfd Switch to private instances of rand for seeding for tests 88300c406b9 bump go.mod to set min go1.24 597b54720e1 Bump images, dependencies and versions to go 1.24.0 fea89f25d1b Move GetCurrentResourceVersion to storage.Interface 4205f04ce35 Replace uses of reflect.DeepEqual with cmp.Diff in pkg/scheduler tests bed838955fa Removed parallel execution for test/subtest where AllocsPerRun is used 4c635ecf825 Rename CacheProxy to CacheDelegator 3c9cc93dbcc Bump etcd v3.6.0-rc.1 image eeabc3ac6c4 selinux: Ignore pods with Recursive policy d66928b842a Add Job e2e for tracking failure count per index (#130390) 740db0f01d9 Move watch progress to separate package. 145bc8a2ccf chore(kubelet): Use ptr.To to replace the custom function unit64Ptr. 04f0bd4e83b storage/cacher/ready: dynamically calculate the retryAfterSeconds eb0f003d252 Fix a bug where the `ResourceQuota` admission plugin does not respect ANY scope change when a resource is being updated. i.e. to set/unset an existing pod's `terminationGracePeriodSeconds` field. f7c17992973 Handle returned error as placeholder variables for now fbce6bd6107 Fix typecheck errors b51cbb1d17c Change plugin interfaces to use progress monitoring 32752fe395a Add recommendation for using OnRootMismatch 49dabe56d04 Monitor progress tracking for permission change f484ae5bcbd Fix kernel version check condition in nftables proxier ae991725b79 e2e uses websockets by default for portforward 071b1bd839d e2e test use websockets as default for exec operations a97c6a70451 Added the mergeDefaultEvictionSettings Kubelet Config 4c0b24b06d4 e2e_node: eviction: fix ImageGCNoEviction test d02401dea92 start setting pod metadata.generation 2de2093bcef Add snapshotting of watch cache behind a feature gate 0f24b9ff451 Split backoffQ into backoffQ and errorBackoffQ in scheduler 059dee36f84 Allow ImageVolume for Restricted PSA profiles Stop referring to ImageVolume as an unknown type during pod security admission validation. Avoid restricting ImageVolume for the Restricted profile, as users who can create a pod with a certain image should also be able to use ImageVolume with an image. 2173a0fafd4 Add watch cache capacity upper bound adjusting logic 56bd8d86a58 test/integration: use default API groups in test apiserver cf70b06e376 e2e_node: improve logging for eviction test b56d30e32a5 fix flaky test: Subpath Container restart should verify that container can restart successfully after configmaps modified d92c70b8269 enable go-required check afa266d7ef9 remove genernal available feature-gate AppArmor 2feecd46bdb [e2e/node] update base image from busybox to agnhost c2afe4909d0 fix copyright year de51ce79c01 ./hack/update-vendor.sh 3ae5312c97e Generate register files for all examples fb11415a690 add simpletype pkg in v1 for register-gen test e9c47f86018 Add codegen::register to hack/update-codegen.sh dc4fce61ce6 Add missing imports in register-gen bc4ae15d77b fix wrong assertion on tests a933481f797 use const rather than string in cgroup_v2_manager_linux.go b1f6cfcfae0 change defer order to pass test a20a959b2c0 hack: split up test-dockerized.sh 86f504284c1 feature(scheduler): add queueinghint for volumeattachment deletion f540197768f chore: add more error info for validateResourceSliceSpec ddd4c56893b Fix pod resize E2E tests after forbidding memory limit decrease 1f642c79c31 Drop winsymlink go 1.23 workaround 237aadab89b [hostutil_windows] Remove unix workaround 2a32b213723 [test] handle ModeIrregular in getFilePerm for Go 1.23 b9f6013c12c fix: handle socket file detection on Windows dfc8b271cf1 [kubelet] Make use of os.ModeSocket info 9492a2ca9ba DRA: add dedicated integration tests 9024140468e Cleanup allocation checkpoint failure message fe4671356c0 Call allocationManager directly 2418b54ee2a Revert "Add random interval to nodeStatusReport interval every time after an actual node status change" f904c6f46c0 fix e2e 1289f43f73f Build etcd v3.6.0-rc.0 image 034285dc477 Test continuations and exact revision LISTs 0f40600b316 add e2e test to reproduce unexpected unmount after kubelet is restarted e1b3c8fd9b4 Add e2e test 06fa6158a06 Update namespace deletion process when feature gate `OrderedNamespaceDeletion` enabled. 7098221ae54 Fix TweakContainers comment f1612003ff0 Fix the node reboot validation failure 4e651addd8c Add statusz endpoint for kube-scheduler e986217c217 Update Generated API Code d5c804b14db Remove Flagz feature-gate check before populating serverRunOptions.Flagz a49b336e83e test(statefulset): return errors in framework function GetPodList for upstream handling 92cc680c8ae Fix SelfSubjectReview test to decouple beta and GA types from the same apiserver 2636aa35e3b Require canonicalization of NetworkDeviceData IPs ec66befdcb2 Fix dup word in API doc 8ee35583912 node: topology-mgr: resolve lint errors 9e1d6d5cdc1 node: topology-mgr: Add logs in the happy path 04b048dcec6 flake(scheduler): fix allWaitSchedulingPods data race failed f9e7b15c001 ktesting: add Run c2ad724e9a1 ktesting: add Parallel 9a795c31fa3 remove release-1.28 config due to EOL 98fd7b4deac update publishing rules for rel 1.29/30/31 to use go1.23.6 764e13e27ae Refactor TestList and validate continuations to allow testing pagination and more exact RVs in the future bf63e0046cb selinux: rename allMetrics ee36b817df0 events: ensure the name is valid ff69b5bcf37 generated bdf2e2d0646 Fix non-recursive list should also read RequestWatchProgress feature when consistent list from cache is enabled 9e27ae27258 Remove gate for leasecandidate strategy 4cc32f817a1 Remove cloud-provider arg for kube-apiserver in local-up-cluster.sh c186de00809 Fixing k8s.io/kubernetes/cmd/kubeadm/app/util/staticpod unit tests on Windows 697293906a8 Fixing k8s.io/kubernetes/cmd/kubeadm/app/util/dryrun unit tests on Windows 97cb563cae0 Require auth for all new Kubelet endpoints 2b1b20b3b15 Fixing k8s.io/kubernetes/pkg/proxy/winkernel unit tests 993f3c361f2 Fix DRA flaky test for ResourceClaim device status 21f899596ef Promote AnyVolumeDataSource to GA a0a226d1584 integration: svm: wait for CR to be stored as v2 after CRD v2 switch 80966ce5c44 integration: svm: use consistent path args pattern in etcd fetch functions e1557f80a2a integration: svm: use k8s ktesting package for test ctx init faf5b3ec765 integration:svm: refactor utils 293a6c5c916 fix typo: optimitically -> optimistically 553e9bf84d1 adjusting loopback certificate validity in kube-apiserver 99881453838 Ensure that btree threadedStoreIndexer implements orderedLister 3d007532e0d Introduced additional log formatting to windows kubeproxy. faf6dc13134 Add retries to runner.List() b6f49d0728c Add retries to conntracker.ClearEntries() 90a42e0dc04 Add retries to conntracker.ListEntries() 84ec78ede71 Extract pod allocation manager from status manager 81e54a2a016 Move allocation state out of statusmanager 3100bbab2f7 Update gorilla/websockets library from 1.5.0 to latest 1.5.3 72b404f6aad CHANGELOG: Update directory for v1.33.0-alpha.2 release 3f4ef42e9a5 Move PodResizeStatus cache out of allocated state d3eb639313e selinux: add tests for SELinuxController e15fd43d812 test(network): replace calls to e2erc.RunRC with Deployments in service latency tests cd0df9786ea test(network): replace calls to e2erc.RunRC with Deployments in service proxying tests 7deb49e3a60 Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" a2eeec5c5a7 Revert "Switch hard error to a WARNING for kernel version check" 9315ddbb650 kubeadm: fix panic when no UpgradeConfiguration was found in the config file de984ec9b92 Update kubetl subresource to stable 992c8e9479d selinux: explicitly specify NodeMetrics in function names 7d5f3c57230 [kube-proxy:nftables] Read map/set elements on setup. 26fe6bc6e09 Add tests for encoding collections in JSON for KEP-5116 323410664c4 e2e: node: cpumgr: check CPU allocatable for CFS quota test bb49a05fb5a fix: adopt go1.23 behavior change in mount point parsing on Windows 004c5f5a398 chore: remove unnecessary check for node is zero 45e2f3e438e Add a test to validate deferredResponseWriteron multiple write calls a36f64e0743 Add more log information to help debug flake #129779 a70b6b9105b Add lock for csiNode update 2050d6fc696 selinux: add a new SELinux translator to the controller 3b7926824ec e2e_node: Don't use userns in DefaultPocMount tests 5d726e32c4d remove duplicated test on configmap volume c48499d3604 fix ci 2382c0125b3 remove Removed generally available feature-gate DisableCloudProviders and DisableKubeletCloudCredentialProviders 29e5d429797 kube-apiserver: removed the deprecated the `--cloud-provider` and `--cloud-config` CLI parameters. Signed-off-by: carlory <baofa.fan@daocloud.io> 438df173e32 kube-proxy: metric to track entries deleted in conntrack reconciliation fcce8aaad8a workloadExecutor's member use value not pointer e353086e6ad test(network): replace RCs with Deployments in util function StartServeHostnameService bdd83038e83 kube-proxy: metric to track conntrack reconciliation latency 98d600bef94 test(network): replace RCs with Deployments in util function CreateServicePods 6b16f051484 modify SchedulerCacheSize field comment because it will be removed at v1.34 e52274a9e2e Don't allow resize policy mutation 7a1b2aea741 fixing k8s.io/kubernetes/pkg/kubelet/apis/config/validation unit test failures on Windows a1595d9dca7 Don't allow memory limit decrease unless resize policy is RestartContainer f6090185a80 e2e: fix node conformance flake 0ce48b56368 Honor KUBE_HACK_TOOLS_GOTOOLCHAIN 6d58125111b Bump KEP-4427 : AllowRelaxedDNSSearchValidation to Beta dc59c0246fb proxy: should add PingPeriod for websocket translator 844c2ef39d2 e2e: node: cpumgr: cleanup after each test case f5e86dfea65 Deflake the PodReplacementPolicyFeatureToggling Job integration test 5e6611af559 fixing various unit tests on Windows that create abstract sockets by now having them create file-based sockets on windows/darwin 453e22a1667 Remove unused service account creation from node_authn.go 36c6c7778b4 Use `sudo` for dmesg in hack/local-up-cluster.sh 83595f500a4 NFTablesProxyMode to GA ca8a0f5f1be separete sleep func 6d291ddc21b fix lint a9ee6bdf81a use *e.tCtx cc87cb54ab7 delete unneccesary define 3ce36b3b3ce rename doXXX to runXXX d202a683f54 rename workloadExecutor member name c40e69bb4cc remove double comments 3725c6f7650 pkg/kubelet: Make newTestKubeletWithImageList allocate a userns manager 96c2b81670c features: Enable user namespaces by default 447c74ca2cb DRA E2E: fix race between container start and check 4724870b971 test: remove implicit inclusion of "name" label in utils functions d6a6dda2fa7 KEP-3857: Recursive Read-only (RRO) mounts: promote to GA 2642d8222d8 CHANGELOG: Update directory for v1.32.2 release 976eae5ee7c CHANGELOG: Update directory for v1.31.6 release fc219cd3843 CHANGELOG: Update directory for v1.29.14 release 08ea6ca8da2 CHANGELOG: Update directory for v1.30.10 release 93a88f55182 GetRandomReadySchedulableNode nerver return MetricsGrabbingDisabledError ec165ca5601 fixing k8s.io/kubernetes/pkg/kubelet/eviction unit tests on Windows df1e9eeeb8c skipping InPlacePodVerticleScaling unit tests on Windows 569eb41f238 fixing k8s.io/kubernetes/pkg/kubelet/cm/memorymanager unit tests on Windows f8728b62228 Bump konnectivity-client to v0.31.2 dbb34a04cc6 Reduce the number of processes used in e2e to prevent unexpected OOM b9cd017a214 Fix intermittent test failure b346ac0f8e0 Limit ResourceQuota LIST requests to times when informer is not synced def95202175 node: topology-mgr: Add metadata to logs f2f4634bd35 Add LegacySidecarContainers feature gate 54e2416210b update sig cl owners in k/k da2f36be583 remove NodeOSDistroIs from test/e2e/framework/pod 358afb38f59 update publishing rules to use go1.22.12 for some active release branches c83a5e0ad2b HonorPVReclaimPolicy: add more e2e tests e31a3989fcf Make kubelet always canonicalize the PodIPs 6512de76ce3 Make EndpointSlice mirroring controller always canonicalize the IPs it writes out 29be52b3f70 Make EndpointSlice controller always canonicalize the IPs it writes out 7259742e233 Make Endpoints controller always canonicalize the IPs it writes out 26fe80855d1 Update build/pause/Makefile faa23642f51 Bump windows pause image base to mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.4.1 1bd3d34d6f9 Remove some dead code in the Endpoints controller eaab9081955 Mark v1.Endpoints deprecated in the API fc3e649ef4d make update 2a903dd7a3a Mark v1.Endpoints as deprecated in the documentation d3feb5080c1 Update websocket logging levels for better debuggability c7a90b670c4 Introduce kuberc as new flag to customize defaulting and define aliases in kubectl (#125230) f75965e5d9b aim to fix runtime class error 1c5170ff528 disable cfs quota when exclusive cpus allocated per static cpu policy requirements 437cd38e19a add feature gate 953954168c9 Modify how to check the status 0c68aa6a35f test(network): fix jig deployment scaling d728eb47dc5 test(network): replace RCs with Deployments in util function jig.Run ab02cda1683 make error consistent 8a797e42e12 resource metrics e2e tests: expect swap node and container level stats 676116359db Scheduler: update the error log 464fd0765d0 test(network): replace jig.CreateRC with jig.CreateDeployment af3b9e613d3 reduce dependencies in apimachinery net testing utils 938b5f82620 chore(scheduler): add more log info when no preemption candidates is found in preemption 297b35873fe use workloadExecutor 4facb872247 kubeadm: update preflight check 445183a31fa nominate myself as an approver for storage e2e tests 479f9cd898d can pass all testcase 8ee64ba6b54 Bump images, dependencies and versions to go 1.23.6 and distroless iptables 819bf72b0c2 Remove feature disablement ConsistentListFromCache in update openapi script fff99141581 Fix the flaky Job test: TestSuccessPolicy_ReEnabling dc51c81751a kubeadm: update v1beta4 docs 523ed5498e1 Fix comment for FailIndex as JobBackoffLimitPerIndex is beta b30944b0715 chore(dra): move pool validity check to the beginning of pool processing 5d278c138c0 fix labelvalues for scheduler-perf b1d72a5b7c9 test: Add emulated-version flag verification in flagz test c8804bff6d1 fix: flagz endpoint to return parsed flags value 8ab075578a5 feat: promote CRDValidationRatcheting to GA ee25fed97d2 update publishing rules to use go1.22.10 for some active release branches d195ea8756d fake/clientset: improve TestNewSimpleClientset 46ff62d6e49 Run ./hack/update-featuregates.sh 9ebe4422a98 Add support for Debian and Ubuntu 533a1211d30 Add completion in kubectl debug 6971779d0dc pkg/proxy/conntrack: refactor log levels for conntrack cleanup 07c279d06bf bump netlink 7edc7fbd47e kubeadm: add --etcd-upgrade flag to kubeadm upgrade plan dbefbd593ed remove unnecessary unnecessary 03b59d8eef2 propagate context 88410368cd5 test: fix a typo 0907f745a0d Add the feature gate `OrderedNamespaceDeletion` for apiserver. cd9fc8bc71f Enable ServiceAccountNodeAudienceRestriction feature gate by default in v1.33 5738ee4def9 Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32 62809dd0de9 node audience restriction: use csi translator to convert intree inline_vol/pv to csi ecd67e25373 node: memory-mgr: Adhere to the message style guidelines d6c50c391d1 node audience restriction: add unit tests to simulate intree inline_vol/pv to csi failure f4496974573 node: device-mgr: Adhere to the message style guidelines 40c86d8e064 node: device-mgr: Ensure consistent use of named arguments 19e406a3574 node: device-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...) 9cd041156fb node: device-mgr: Add logs in the happy path a585bd74c48 node: device-mgr: Keep log level consistent across all gRPC calls 4b613ae96fe node: device-mgr: Bump log level for expected skips 584e224b431 node: device-mgr: Add metadata to logs a10b3c35559 node: memory-mgr: Add logs when memory allocation is skipped due to QoS 6240febf4c5 node:memory-mgr: Add logs on the happy path ee7f2616c62 node: memory-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...) 07d83acce56 node: memory-mgr: Update log levels and add logs to capture state update 34fd61a3ef1 node: memory-mgr: Add metadata to logs 7997c93cfdf node: cpu-mgr: Adhere to the message style guidelines ca2c46a2730 node: cpu-mgr: Add logs when CPU allocation is skipped 01a546fe53a node: cpu-mgr: Add logs on the happy path 14c0bc19ac2 kubelet: improve allocated resources checkpointing b05d56e5a54 Fix pod worker and prober log message typos 46a17f60e4d E2E node: fix --timeout default 8fc3a33454b Refactor compatibility version code e54be1e1337 CHANGELOG: Update directory for v1.33.0-alpha.1 release 8bd4e1bab22 Update test/integration/serving/serving_test.go 6c093b1699e kubeadm: fix dry-run for kubelet-wait-bootstrap phase 065bf2004d2 Deprecate WatchFromStorageWithoutResourceVersion 20fbdeac96e kubeadm: fix upgrade to be able to rollback ControlPlaneLocalMode bb36212342e kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta b1ad53c5331 Disable StorageNamespaceIndex feature gate when BtreeWatchCache is enabled and deprecate it c5f66bfe70b Add statusz endpoint for kube-proxy 8431aa75390 Use %w to format errors and fix lint error. 3de770d5985 Use uncompressed kubelet log file permissions when compressed. 1a8d8c9b4a3 client-go watch: NewIndexerInformerWatcherWithContext -> WithLogger e1ab6073ab1 Add more tests for optional. 3701e393279 fix: remove the mention that DRA uses Pending 8a3d0d68a20 Update the env option. 7b1c7c639ef Fixed the estimated cost for opt map. c1e0443232f Bump cel-go to v0.23.2. 0ca45bd4f80 Bump images, dependencies and versions to go 1.23.5 and distroless iptables 5281152f077 feature: Added score integration tests for missing part plugins: TaintToleration plugin e2ff03486d1 scheduler_perf: add thresholds to DRA test cases 949385731f5 golangci-lint: remove "strict" checking 8d27bf2108c Leave TODOs in pkg/kubelet/kuberuntime for later removal 0bee0bcaa7d Promote SidecarContainers feature to GA 81f09811cad Fix kubelet_authz_test.go e0f548183c4 Graduate BtreeWatchCache feature gate to GA 4a5bbc4c159 Flip SeparateCacheWatchRPC feature gate to false and deprecate it. f6b527cb54e Additional timeout to receive all watchEvents 4619a89ebaa e2e: expand error conditions when test-ing port-forward 0d5d714c2a6 Fix the remaining flaky integration tests in Job controller da5a76bd396 Fix flaky test for container life cycle f7df3ec07fa move log restored state to better location. 829fa63b5b1 DRA: fix allocation mode `All` e766b04ade9 node: cm: use maps.Clone instead of reinvent it 8cc74e8a266 client-go informers: provide ListWatch *WithContext variants 6688adae142 client-go + apimachinery watch: context support 274ad0391fc Add scheduler_perf test case for default PodTopologySpreading constraints 71b91148409 kubelet: Migrate pkg/kubelet/sysctl to contextual logging ce7d2130ad3 Fix kubelet_authz_test.go f891092b87d Add the check of node rebooting in windows rebootnode test a9aab298b47 switch to using the real FIFO 24b43ea96ec make a real FIFO implementation 424c7ca7e58 Remove unused ClearState function b7fd30c8712 update generated docs 8f11a3b3679 WIP: fix the flaky Job integration tests 7936d64e037 Replace IsExternalSigner boolean with ExtendedSigningDuration throughout apiserver to ensure consistent token signing length between local and external token signing. 1b0ad78718e fix ab80d577321 Try to clarify EndpointSlice semantics some more f310ac03f45 kubeadm: graduate WaitForAllControlPlaneComponents to Beta 82f0303f899 node: e2e: Remove flaky label as device plugin reboot test is deflaked 0c34b706b28 Revert "kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta" 9ac25f1d9ed update of CRI API readme file bde75d60200 chore: use NotFound error for missing components 8c80d384b2b feature: add scheduler queuesort plugins integration test ed826dddfec fix(dra plugin): when there is no resourceclaim, return directly 8a0937c0346 feat: add a lint rule to prevent Add unversioned featuregate 509bbed0985 Add a test ensuring all /scale sub-resources return table b04e1b80be8 kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls 1fa995224aa Update scale sub-resource to return the same error everywhere 9d893aed0c7 Use GitHub release for downloading `crictl` 601c0e359dc cacher: decrease the running time of TestConsistentReadFallback cfd6d9a2b44 cacher/cacher_whitebox_test: newTestCacherWithoutSyncing allow passing a clock 88090c49732 prevent deletionTimestamp from moving into the past cfa0349159b Update validation code c31b1b3332f Resolved some review comments c479f007d84 Update field to use feature gate ab964a776c8 Fix e2e tests failure 5889da1bbc7 Resolved latest review comments 242dec3e341 Updated some unit tests and resolved some review comments 5ed5732fa22 Refactored status manager code of updatePodFromAllocation 8fa8277908a Added some unit tests 2ba61325f69 Fix e2e test error due to ContainersToUpdate map not created 9a5c57817a0 test: pod-resize tests for sidecar containers 6c5cf687229 Resolved latest review comments 6cf5b80c644 Fix some unit test error 1cf45872773 Fix build error 1eb966cb455 Added unit test for sidecar containers in TestValidatePodResize a0d3cb0a2c7 Added proper validation msg when non-sidecar containers are resized 591b0f547ae Fix issue of pod spec mismatch if there is any non-restarble init container present 5d5e903e27b Revert e2e tests added for sidecar 3885d2f8abc Added sidecar support in ValidatePodResize and dropNonResizeUpdates cdddaed8419 Added sidecar support in and 34ddb91f187 Fix some unit tests error 0e392f90170 Disable e2e test for now d1fac494f4d resolve merge conflicts 5742f3deeb9 Cleanup running dmesg process in `local-up-cluster.sh` b3e1d57339b kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta 617c0944354 Add an e2e test bd8dee96379 Improve Goroutines metric calls in parallelizer.Until 54500bfe692 cadvisor_provider, unit tests: ensure container-level metrics are collected ceeba21d3d0 cadvisor_provider, unit test: Add swap stats to cadvisor CPU and Memory stats c1112666098 cadvisor_provider, bugfix: Add swap stats to CPU and Memory stats e6c19f315f9 cri_provider, unit tests: ensure container-level metrics are collected 748b52a1308 cri_provider, bugfix: Add cadvisor container stats a85f489b28d client-go/transport: structured, contextual logging 44ca3b36545 Passed context for Wait methods in integration test utils 659804b765c refactor runWorkloads 4e05bc20db9 Linter to ensure go-cmp/cmp is used ONLY in tests 3a780a1c1b5 KEP-2862: Graduate to BETA. 28896d2f90c e2e: bump port-forward timeout 013f65b2576 DRA: fix test-driver examples 7f766762d91 Updated Concurrentmap iter d3e8572d706 cluster ip allocator should check first on the legacy allocators 627e83c841f Passed context for Wait methods in integration test utils 27ec5de8638 chore(scheduler): improve log output for podtopologyspread filter plugin 156b9fbadc1 Bump kubedns and nodelocaldns to 1.25.0 38a21e06f5d fix: Fix the issue of relist caused by client-side timeout e263b878eef Deployment controller should count terminating pods in the status dc1914c61c0 ReplicaSet controller should count terminating pods in the status 28437797b52 update generated files and feature gates 14783b8a9bc add validation, field disablement and tests f7c46df6651 api: add terminatingReplicas field to ReplicaSet and Deployment statuses 067012f5844 `client-go`: transform `watchErrorStream` to wrap the underlying error (#129765) 2b24c518b04 Drop declaration of IP/CDIR type CEL variables 0b38e6cd9e6 e2e network: remove test for funny ips 87139335b0e Switch from using a function to just pure map in create token 3030b1dc6a4 Finish extracting ExplainFlags structure 06077806cab Add dom4ha to SIG Scheduling reviewers 91afef615ad Refactors explain command to split flags from options da999fbc1b5 Update CNI plugins to v1.6.2 and avoid using k8s-artifacts-cni bucket fdebfb44857 e2e log info on nodeport allocation failures f150016fbec feature: Make Unschedulable scheduler performance test parametrized with the number of initial nodes. 1065377f97e Revert "tests: include stdout of failed commands in JUnit" faf30b30679 update github.com/coreos/go-oidc to v2.3.0 84b8f181e4d Concurrentmap Iteration db3ae754b1d e2e network: adapt dual stack tests for endpoint slices only 69964319d14 remove GAed EfficientWatchResumption since v1.24 d889bd15bda DRA CEL: skip estimating the cost in the scheduler a78983906f4 Adding support for providing version for functions in kube_codegen.sh (#129658) b7386467c8d client-go rest: store logger in Result 7821abf2ae2 client-go/rest: finish conversion to contextual logging b15a1943d51 client-go/rest: backoff with context support 48fb886325f client-go/test: warning handler with contextual logging 9998a032b13 kubeadm: fix a wrong log message bda81f1b68e Kubelet server handler cleanup c56426bd9f6 node: device-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...) f8596d6d289 node: device-mgr: Change ErrorS(nil, ...) to InfoS c68fc01b774 return an error instead of recording a test failure c9e81cd84ca Switch to gopkg.in/go-jose/go-jose.v2 @ v2.6.3 0452ae402a5 Use cached calculateResource result when removing pod from NodeInfo in preemption c5fc4193bbe Fix pod delete issues in podresize tests 7712d34b9ee remove unrunnable tests from NFSPersistentVolumes 969ecabc0f2 Remove all references to v1.Endpoints from non-network e2e tests da5bf27bc57 Remove no-longer-used TestUnderTemporaryNetworkFailure() bae4122f56f deprecate nodefeature for feature labels 7266759b67f Nominate macsko to SIG Scheduling approvers 238c32a1d9b Remove cache.ErrRequeue 8e77ac00013 Remove Queue.AddIfNotPresent aaac13fc6a1 remove gke from e2e 09c82fc58a2 integration etcd storage test 8fcb4b5773a comment we keep storing v1beta1 by default to handle upgrades 3606d52cd6d make update 779b9cf90c7 update integration test b6c3dfdad5c e2e test for service cidrs 7721590b9e5 update controller manager 33ba5855340 update kube-apiserver bea17e14971 update internal API ad511cd249f update registry e340a07ccf4 update kube-proxy ddfc4d3e588 update text fixtures for rbac c26a5796fd9 update networking strategy e3b39758215 describe servicecidr and ipaddress v1 eeae7b3fc8f promote ServiceCIDR and IPAddress to GA 272f33de90a api rule exception for ServiceCIDR 68cae5131a5 server both ga and beta servicecidr and ipaddress apis 3b48b0627bf graduate DisableAllocatorDualWrite to beta disabled by default f97ff113fa0 graduate MultiCIDRServiceAllocator to GA 5cd7325cd7e e2e: expand error conditions when test-ing port-forward 7d02a18a645 add a comment to InTreePluginPortworxUnregister 03a3288ddde tests: include stdout of failed commands in JUnit 5ed3164d322 Update in-tree gcePersistentDisk tests e26fb1c393a remove duplicated test case of `pvc not found` e1fdced21f3 Put the target plugin names in the Qhint integration test cases aecf3238bf6 fix lint errors 8b4eae24ab1 Move some exec helper functions from framework/volume to framework/pod d3974065c8e Remove GetDeviceNameFromMount from HostUtils 612fcdaf737 add a comment for features.Flexvolumes 45529062e76 KEP-3836: 1.33 - remove feature gate ce9e398641b hack/ginkgo-e2e.sh: forward TERM/INT to Ginkgo 1d4acfb8822 Update EnvFromSource.Prefix doc to mention Secret as well as ConfigMap 25a6fa144f4 There is no need to set the worker to nil to avoid potential timing issues. 110868691b2 node: cpu-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...) b3fed900526 Remove unnecessary feature label Recreate 8d7aed698b7 remove APIListChunking which was GAed since v1.29 e68cc0a6eda remove feature label FSGroup 9898bfdbdae Remove unused test code fca697aca08 Add logic to check for new ephemeral containers on pod update and update secret cache if they exist. 92e35e7618f update credential provider godoc with unique provider name req 9a331bbf59c credential provider config: validate duplicate names early and preserve provider order 1fc514cfe99 Bump sample-apiserver test image to 1.32 2504c6e73ae Update VERSION to 1.32.1 for sample-apiserver 2cc3dbf2250 DRA CEL: add missing size estimator 1714fbfa754 node: memory-mgr: Change ErrorS(nil, ...) to InfoS dac6b34a618 kubeadm: improve message in 'reset' 4aeedcde3b8 Fix CSI migration UTs 14936a7f582 Promote Portworx CSI migration to GA 40b9a297389 Fix Portworx plugin's CSI translation to copy secret name & namespace 479ff5a02b0 remove duplicate getAttrsFunc calls to reduce temporary memory allocations e578dcab3ad CHANGELOG: Update directory for v1.29.13 release 7f1abe993cb CHANGELOG: Update directory for v1.30.9 release 8ad8ad4681e CHANGELOG: Update directory for v1.31.5 release cba6300414c Document nftables kube-proxy's "public API" e5b326c0505 CHANGELOG: Update directory for v1.32.1 release c78ee00e963 add missing KEP link for AuthorizeNodeWithSelectors feature gate 271b8cf1c1e kube-proxy healthz handler ip family aware 226b43b8ee7 Prevent alpha feature gates from being enabled by default 94d90fafeed fix name 3986472b3c7 Revert to go-difflib and go-spew releases fef67f64c7b Update compatibility matrix and maintenance status upto release-1.32 c911ddd8a48 Fix: touch /dev/null permission denied on macos 936f249fa05 Add introduced and removed version information in etcd fixtures 43d86c2a3ef Drop github.com/asaskevich/govalidator 0d8a8fe3065 Update to latest kustomize/v5.6.0 bfce77d1c0f We still can't rely on first condition being fs-expansion pending condition aa6a72f76ff Bump CSI sidecars to fix CI issues and such 59850b58230 Promote ServiceAccountTokenNodeBinding to GA d66ced5730f client-go/tools/cache: fix TestAddWhileActive 8221e28e4d9 Add ffromani as approver for kubelet resource managers and their tests bc488020870 remove WatchBookmark feature-gate comment from types.go c0b49120e53 lint: removed empty line a7937f53915 Remove WatchBookmark feature gate 561c1d235a0 full sync per one hour with BFR 0ddab169457 shrink the cache.Queue interface to what is actually used 12345a14c34 kubelet: use env vars in node log query PS command e179f0e364d Add test for compatible version 2f4bd13fe57 kubeadm: remove misplaced error during image pull a92297f1a76 kubeadm: remove the GA EtcdLearnerMode FG aa1d79c3701 Use DeepCopyJSON to copy testcase input a2b12ba4061 Simplify schema sentinel subresource logic f886f3b7f10 e2e: expand error conditions when test-ing port-forward 17030f19b6c e2e services: avoid panic on service creation retry 2c58e274760 storage e2e tests: add more tests for pv relaim policy fd35f652d41 fix state mem constructor and adjust restoreState 018ee41e6f5 kubeadm: fix a wrong comment 3274dc40edc pkg/proxy/healthcheck: consolidate IsHealthy and isHealthy 1c1fc736162 pkg/proxy/healthcheck: enhance testing 729deef4542 bump kube-network-policies to v0.7.0 0e55e47cff1 Remove unnecessary logging in FilterActivePods 64aac665fd9 pkg/proxy/healthcheck: bug fix for last updated time 4a4fc9da801 Extract and unify cache bypass logic by creating a CacheProxy struct 2d826871146 Improve topologyToMatchedTermCount map in InterPodAffinity PreFilter 1b7ddfe6bbb e2e: deflake subpath tests 1b2bacda5bd Only test requests that pass validation 7226a3084e8 DRA e2e: adapt to increased ReservedFor limit 0899cf892d4 add documentation that 0s duration will be overwritten for 5m ba816967a0c Simplify status subresource ratcheting testing 8d79998058b remove workaround for vsg testing c6f19d3c2a1 update snapshot CRDs to v1 in cluster addons e5a3bdb3a71 Refactor shouldDelegateList bdd0f5dd238 test: add Junction file type test on Windows 1cee3682da9 DRA API: bump maximum size of ReservedFor to 256 fe895563d92 Test all possible combinations of input for shouldDelegateList 13a21d58548 Add benchmarking of namespace index 8eb31f8aa16 Fix service's nodePort already allocated a2a0a752102 Cleanupï: only initiate http2 server options when http2 is not disabled 2653caa248d fix dra test lint 5b2c1dde79d Add namespace to DRA adminAccess ValidatingAdmissionPolicy message 41f805b4761 Added check for multipath device mapper a6c7d22f44f update publishing rules to use go1.22.10 for some active release branches 0645f0e50ec pkg/proxy/healthcheck: file rename d6c575532ab pkg/proxy/healthcheck: rename 'proxier' to 'proxy' 4a0578e3dee Improve benchmark to handle multiple dimensions 091fa293908 Fix status subresource ratcheting f1834f06f4f client-go event: add WithContext expansion methods e681a790584 apimachinery wait: support contextual logging 77eae7c34f9 feature(scheduler): remove dra plugin resourceslice QueueingHintFn fb47caa689f Update coredns to 1.12.0 cad12e5a415 Lower verbosity for topologycache messages efdd6bea2e9 kubelet checkpoint: refactor state memory 42a5e5f4255 Pass context down to wait.PollUntilContextTimeout 8e872978e84 kubelet: improve allocated resources checkpointing 75131475fdf Remove general available feature-gate PDBUnhealthyPodEvictionPolicy a7be958884d Remove general available feature-gate JobPodFailurePolicy a811427020a Remove general available feature-gate AppArmorFields 7c887412c88 Add validation for revisionHistoryLimit in sts to prevent negative value (#129017) 4114a9b4e45 [kubectl] Enhance describe output for projected volume sources to indicate optional Secret/ConfigMap (#129457) 02fbcb4e69b kubeadm: should not warn on non-detect sandbox image b1cb471982b Use generic btree in watchcache a97ed3c98bc Update github.com/google/btree 977c4e9138d remove nsenter package 00a7849ef90 kubeadm: add preflight check for losetup on Linux nodes kubeadm: remove preflight check for nsenter on Linux nodes c9bfc3b4556 use ginkgo.DeferCleanup to do cleanup tasks 129418b9a98 e2e: ctb: make it possible to run the tests in parallel df503e54c85 Update etcd from v3.5.16 to v3.5.17 4c6deed07ec kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfiguration is not respected by 'kubeadm upgrade node' 61681433869 Remove use of deprecated functions 5aa4dd4a6ea Make it possible to pass a scheduler profile to RuntTestCoreResourceEnqueue 78a64027559 Extract list response struct to manage all the response fields 9d55fba36a0 fix featuregates_linter deb234c9d5c refactor: simplify boolean expressions in CRD handler 2fd16abbe8d kubeadm: bump supported etcd version cff0f4009f1 webhook: alter regex to account for x509sha1 GODEBUG removal a9b641464eb chore: adding support for staticPortRange 2c305d71f05 kubeadm: add system verification check(including kernel version check) for upgrade c3a54926a44 Fix PodTopologySpread matching pods counts for constraints with the same topologyKey 2cb1cc9e3a0 Bump images, dependencies and versions to go 1.23.4 and distroless iptables 215d0b094b6 Add tests for kubectl qos (#129388) 5f4d646ea33 Add Device status const comments 8e1403563a6 client-go cache: fix TestHammerController b649c113661 chore(printers): add miss unit test for resourcequota b406ba5cc36 kubeadm: skip disabled addons in clusterconfig on upgrade f47e6d04283 fix: enable len rule from testifylint in module component-base 35f584187a6 accept GINKGO_FLAGS for test-e2e-node.sh (#129215) 976aefca1b2 fix: adopt go1.23 behavior change in mount point parsing on Windows e99fea7e3f1 deflake volume tests 63ddf4bf33f test: Add integration test for apiserver statusz endpoint 2ddbfd19670 Fix Borg pub link in README 176730b0f08 test: fix pv deletion timeout 7c515cd1cb6 remove kubeadm.alpha.kubernetes.io/cri-socket annotation when kubeadm upgrade ca4529574e9 remove node special feature typos 0b6e3718340 Bump x/net to v0.33.0 59fcd7b770d fix metrics test 6c94adcc630 expand etcd storage tests to test for 1.31..1.33 dc476e968d9 remove emulated version test for un-emulatable 1.30 cf28c0405c0 Expand emulated version range to n-3 with 1.31 floor 4e8477bd3bd Bump binary version to 1.33 f20eb2e7c16 client-go workqueue: add optional logger 446252b0c35 Add crd from external snapshotter c71d27cb020 remove v1.30.0 api testdata cf1e2e6c2da Add v1.32.0 API testdata db6bf022173 feat: Add flagz endpoint for kube-scheduler 4396511e43a kubeadm: removed preflight check for `touch` on Linux nodes. e3b12d89d0d fix(dra): support multiple resources to publish in PublishResources 769e7990d61 remove container-runtime-endpoint flag when upgrade efdb7357506 kubeadm: fix idempotency retain, address deprecation 78f9f214c02 apiserver/admission/cel: add unit tests for JSONPatch expressions a88e08c3971 Do not attempt to truncate revision history if revisionHistoryLimit is negative db4c509e716 kubeadm: generalise CreateOrUpdate etc. 4411a3f3be8 lint bc46e3d9b3f apiextensions: replace panic with error handling in DiscoveryController 4638ba97166 client-go/tools/cache: add APIs with context parameter 00dab9dffa6 Add Validation to versioned feature specs. f3ff7d0518f chore: update comment for NamedFlagSetsReader 8495df64b22 deprecate nodefeature for feature labels 68ab918df76 Bump filepath-securejoin to 0.3.5 13b84453df5 Coerce null label and annotation values to empty string 4a2b7ee5699 Configure watch cache history window based on request timeout 04426633c0b Use OS-agnostic path separator in pod warnings check b963e1514e9 fix check errRaw != nil but return a nil value error err fd8a61ae1b3 kubeadm: update owners for v1.33 19aef482fae fix incorrect variable reference in handleUpdateEndpointSlice 75e5bd6a4f0 Fix unit test. 3ec97a445f0 kubectl: add test coverage for cordon command (#129202) b9fc5678d96 Not using fine-grained auth. a87dd67a3c8 feature(kubectl): use autoscalingv2 in kubectl autoscale a7340ff36c0 [windows] Don't chown existing directory in MkdirAll e1ef9e40f57 chore: Update apidiff.sh script description 0c1b1e04501 Address comments 6a608c3cdb1 drop NodeSpecialFeature and NodeAlphaFeature from e2e-node e67c24bdbb4 Bump kubedns and nodelocaldns to 1.24.0 (fixed) 67a13f5355d Revert "Bump kubedns and nodelocaldns to 1.24.0" c3a3a54822a Add `github.com/golang/protobuf` to unwanted dependencies 2c24a12804c Update generated clients after removing always-nil setConfigDefaults error return value c3eba35aa2c Remove always-nil setConfigDefaults error return value in generated clients 1d13ff2a05e make update 11d68ecc4eb ResourceClaim.Status.Devices.Data as pointer f5969adb14a Clean up NewServiceChangeTracker/NewEndpointsChangeTracker args 79d1c078bb1 Make change trackers just ignore the "wrong" IP family 2c348bf1863 Use a constructor properly in change tracker unit tests 7e578bdb6d9 lint ed7f7ce92b0 fix race conditions in polling functions 532607ecbbb Revert "Change default filestore permissions to 0700" d84ab830ad8 Remove shouldServeBeta parameter in apiservice storage b2c84061c9b Change default filestore permissions to 0700 3269f4bb94c bump kube-openapi 8f782fea930 Add client-go README 3cd1c8dd2d2 Drop v1alpha1 VAP in CEL tests 68631d8f7c1 Remove v1alpha1 serving for VAP 1b15876e266 test: reduce container resources in in-place pod resize tests 90e64a57c6c kube-proxy,nftables: add debug logging for failed transaction. b7d6e787268 make update ca5f1deed44 Fix ResourceClaim status API inconsistency 161a817812e Clean up v1alpha1 serving for authorization API c1d0e870f4f Replace `github.com/golang/protobuf` with `google.golang.org/protobuf` 3571992ffcf Add watch permission to namespace-controller for WatchListClient feature 39e7db9cc92 kubeadm: remove iptables/ip/tc/ethtool binary preflight check 80735180ab2 Update x/crypto/ssh dependency a69efaeb765 Shut down webhook after apiserver 9e46be86470 CHANGELOG: Reflect correct approvers/reviewers 137ccd2a73b OWNERS(sig-release): Add `release-team-subproject-leads` alias 0c1ccd133b0 OWNERS(sig-release): Reflect Marko's position as RelEng subprj lead 5c283cbb453 flowcontrol: remove testing dependencies 8fce9b0db68 apidiff: default from prowjob env if available, default before doing anything else c9066d75f6d Fix data race in CBOR serializer's custom marshaler type cache. e8087b3f6ac Remove the limitation on exposing port 10250 externally f9d9649f567 Bump kubedns and nodelocaldns to 1.24.0 f93e6f3d3ae kube-proxy implement dual stack metrics b95c7880005 remove release-notes of reverted PRs 0ba43734b4c client-go/tools/cache: goroutine leak checking e3c584030c3 k8s.io/apimachinery: add HandleCrashWithLogger and HandleErrorWithLogger ae11c7deb1b DisallowInvalidLabelValueInNodeSelector 0cc92622006 kubectl: fix wait --for=create to work correctly with label selectors (#128662) 5b06498cb24 fix: fix miss makezero bug (#125132) 2f9fb220ba6 CHANGELOG: Update directory for v1.32.0 release ebb02bb6cc0 feat: Adds flagz page for kube-proxy 88365488062 test: Add integration test for apiserver flagz endpoint 7caff55fd9c Add statusz to kubelet auth. 353118c0475 e2e: don't panic asserting inside wait.Poll 63992e1790d dra e2e tests: add feature-gate label when these tests depend feature-gate 5d3c07e89db kubelet: only emit one reboot event f367122f302 scheduler plugins changes are API changes, not upgrade action required 9bd5dc86d31 Fix grammar mistake in kubeadm config v1beta4 e35c9b2cd22 add comment for features.BootstrapTokens 3698050dc79 network e2e tests: add feature-gate label when these tests depend feature-gate 902dedbb522 fix: Move statusz to debugging handlers. 816cd402806 Unify ComponentKubelet and add unit tests. a04df83f86b add statusz for kubelet 804f8c75843 kubelet: fix DRA registration test bfed2323105 Update cri-tools to v1.32.0 74090f8eb4a updated bootstrap-discovery link 247555c2b79 test: deployment patch status test should check the modified fields d1cc270f139 local-up-cluster: only wait for coredns if enabled bb2db379c79 test/e2e/apimachinery/watchlist: select only wellknown secrets 8f48a82e6ed docs: `-l/--selector` example for set-based requirements 060c653b53a scheduling e2e tests: add feature-gate label when these tests depend feature-gate 04669c5d644 add warning for duplicate port name definition 5a8d77a2ae2 Add statusz endpoint for kube-controller-manager c5f0e63c624 Add Podresize endpoints to pending_eligible_endpoints.yaml 22c41caca9f Add integrate test to OOS node dce863e5e61 fetch cni plugins from GitHub releases f0c5de00600 Fix volume expansion offline 29d26297a1f e2e: node: fix misleading device plugin test a0b74011b2b add kubelet validation for containerLogMaxFiles cb74323e070 refactor: Simplify the code logic. 617e5c79bb4 storage e2e tests: apply feature-gate label when these tests depend feature-gate 1fd76884b96 Isolate mock signer for externaljwt tests b71763ef386 Remove unnecessary log msg. 0a02c74ca63 update-vanity-imports.sh: remove script 8a908e0c0bd remove import doc comments 326c84a1515 [e2e, service] Add total timeout for affinity check curl command. b330eeac2ff prune-junit-xml: preserve system out + err text during test pruning e0e4af8a58b prune-junit-xml: smarter concatenation when pruning tests 53e9f29d29f Fix kubelet e2e tests incorrect message 8f4e425daf2 chore: ignore dat files generated by scheduler-perf 0d18ae303bb apiextensions: add pkg/test with CEL unit test helpers 9e99be7c2b4 Fix: typos for volume package e5ebbdc3c7f Ignore internal packages messages ebe5bab2cb4 Move common code to an httputil package 27608fa25db refactor(scheduler): Rename UpdatePodTolerations for code style consistency. f92bde1894f parallalize the apidiff dump affafd906da improve report on failures summarizing the modules with incompatible changes 7de94d43cab handle the case when modules are added or removed 52386915a83 use relative paths and modules that are not visible to golagn workspaces 48ea6fc4651 oom_watcher: fix testifylint failures f622be03338 kubelet: Migrate pkg/kubelet/oom to contextual logging e6fccc36d8e apidiff support internal go modules 79d62d8bb3b change current and desired 6f06cd6e057 Do not reload kubeconfig from disk a43b00b429c make test-cmd: use kube::util::find-binary to get kubeadm binary 65b243fcd60 chore: remove repeated scheduler prefix metrics for CacheSizeMetrics bf1280014bb pkg/volume: remove unused function 31958838318 UnitTest: kube-proxy EndpointSliceCache cleared correctly 78b440a74af Fixed: kube-proxy EndpointSliceCache memory is leaked 05ebf451146 e2e: wrap DRA ResourceQuota Forbidden claim check in gomega.Eventually eb6bb5f84d8 Record dataTimestamp as float 67b74696f8c Adjust performance test threshold limits 8312c3ec242 Use generic Contains rather than deprecated ContainsString 7c3a9d65fca Don't set default resize policy in E2E tests da4dc0aec78 Stop defaulting container ResizePolicy 3baa6f08c0a Add modern-go libraries to unwanted dependencies b63593715ff Test EndpointSlice in dual-stack e2e tests 9dbdfe7ecb1 Remove provider specific operations from the autoscaling tests and reintroduce the tests. c3f15fd707a Use generic sets rather than deprecated sets.String bfea4890c59 cleanup: remove pod_scheduling_duration_seconds 36245509e86 fix flaky behavior due to the test ordering between DynamicProvisioner and Retroactive StorageClass Assignment 4a876e21bce fix: params typo 7e977d824cf update the github.com/golang-jwt/jwt/v4 dependency dd1300df986 📝 output log when server shutdown is failed 7280d58f856 Don't allow to tolerate flakes b577972a551 set user.DefaultInfo.UID from x509 cert 4e21f535475 Add test case for service with same named port for regular and sidecar containers e637659d893 Fix named ports of restartable init containers don't propagate to EndpointSlice a6e995379af Add test cases for Service with restartable init containers f87bcd9b3a8 fix: remove duplicated unit tests in JSONPatch and ApplyConfiguration 90922f5c946 Fix linting issue in test a9c311b96a3 static pod upgrade test with hostNetwork 2581d2fadd2 Add self to sig-instrumentation leads 588408df1cd Bump konnectivity-client to v0.31.1 0ba8af9006f DRA: enable performance tracking with scheduler_perf 36f9ee958e2 proxy/util: remove unused function 179fa16f467 Remove user privilege checks from preflight tests 30a7664c3f5 Change way to create a pod in test c725e18e079 feature(scheduler): more fine-grained QHints for interpodaffinity plugin cd6f4153e05 Fix a bug in framework.IgnoreNotFound where it will panic when a function type's final input parameter is a "..." parameter. 22c3db6f7f9 Added unit test for validation check of sidecar containers de8e8c5404c Add integration tests for event handling cases in scheduler_perf 7e067396c2a Build etcd image v3.5.17 36144e07085 test: add a check that a specific error has occurred. 49080bf02a1 Document the existence of nftables as a kube-proxy mode. 80ed375e373 Fixed time 8b90c9e885c lint 991651353d6 lint fe46e47bd13 chore: update deprecated polling methods in apiextensions-apiserver dc258e65ac1 memmanager:cleanup: drop `Experimental` prefix 3d069b2a8a6 Add myself to client-go reviewers b1830bd1de2 Improve validation for missing storedVersion 5db88777c4f change the CapExec value to false by default 636419cdd7f Fix nil pointer dereference in selectable fields check When checking specVersion.SelectableFields, if specVersion is nil, a nil pointer dereference could occur. This change updates the conditional to use || instead of &&, ensuring that the check for specVersion being nil happens first, avoiding potential runtime panics. 50ed36229ce cleanup todo comment in node restriction integration tests c478e4bd382 Add e2e tests 11594fabe64 csi: update snapshot controller to the v8.1.0 de6a43c43c5 generate 93d66a216fa Update API docs that are shared between VAP and MAP a67cf0ba4da Add volume modificatoin recovery e2e test b01b016668a Use Go 1.21 min/max builtins 6f97d063775 add device-plugin-test e2e log e5fd9cfb189 Job: Remove JobTrackingFinalizer annotation specific testings 94f6422562e test:Fix typo 734c36851fb test:Add podgcCtrl to attachdetachClients 6910e766991 test:Add podgcCtrl to attachdetachClients bf1b9c45ea9 add test for inmemory response writer 50f71e948c6 prevent unnecessary resolving of iscsi/fc devices to dm e5ffba17bec Report event for the cases when probe returned Unknown result 4dcddabb7e1 update vendor e2f62322586 preserve options after remount for bind mounting 49b479116f4 [e2e][webhook] Retry update webhook configurations f97abdbee07 allow ContainerResource calculations to continue with missing metrics like Resource calculations 1b371d0d469 Add test for CEL reserved symbols without double underscore b53ea554f88 Adds more flexible version of test ccm server 568255ac7d8 e2e_node: add test about container metrics from cadvisor d9e278711cb Fix GetVolumeName for image volumeplugin and add unit tests for CanSupport 8e877096161 testes written for cache/listers.go 6e82d974510 fix: Ensure testForceDetachMetric works on the delta of ForceDetachMetricCounter ee3e9a7bd44 apiserver: decrease timeout for TestKMSHealthzEndpoint Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2025-06-26T02:40:08+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-06-26T02:40:08+00:00 urn:sha1:bc2a750d5cd518706aff406da6e0719ce475e36b This commit updates the container recipes to the OE core UNPACKDIR changes. - We drop references to WORKDIR - We adjust destsuffix fetches to use BB_GIT_DEFAULT_DESTSUFFIX instead of 'git' - Update our GOPATH references to use UNPACKDIR - Drop S = assignemnts where possible Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2025-06-12T14:40:52+00:00 Changqing Li changqing.li@windriver.com 2025-06-12T05:59:03+00:00 urn:sha1:0115e61cdd5fe8c705bb0350a0d75ebebcf84c79 Rename CNI_NETWORKING_FILES to 00_cni-containerd-net.conflist. According to the following k8s doc, k8s networking file will be used when both containerd-cni and kubernetes-cni both installed. "If there are multiple CNI configuration files in the directory, the kubelet uses the configuration file that comes first by name in lexicographic order." This commit can fix following issue: PACKAGE_CLASSES = "package_deb" do_rootfs failed with error: dpkg: error processing archive /path/to/oe-rootfs-repo/corei7-64/./kubernetes-cni_v1.32.0+git0+5fe148234f_release-r0.deb (--unpack): trying to overwrite '/etc/cni/net.d/cni-containerd-net.conflist', which is also in package containerd-cni v2.0.5-r0 Refer [1], "--no-force-overwrite" is set for dpkg, so above error occurred. [1] https://git.openembedded.org/openembedded-core/commit/?id=cb95ba079960411775c57ab864d266e15a6292d1 Signed-off-by: Changqing Li <changqing.li@windriver.com> 2025-03-13T19:11:45+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-03-13T19:04:36+00:00 urn:sha1:a42666e77c52d5f1be124dc0e65f8453ffeac27c We now have a new enough go in OEcore to enable this update. This reverts commit 3ec3b0605053ca2cb922ed426c9db3b25535604b. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2025-01-17T19:17:09+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-01-17T17:57:21+00:00 urn:sha1:3ec3b0605053ca2cb922ed426c9db3b25535604b This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b. 2025-01-17T19:17:09+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2025-01-15T21:37:01+00:00 urn:sha1:d5633843dd673c6b9cf7bd64c15267219e5e87a1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2024-07-15T19:10:35+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2024-07-15T18:24:32+00:00 urn:sha1:244d5882c58ed0bf713ea93140c0c8a4d8661039 Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits: b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm 3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same. 95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby. 50428ed169f gitRepo volume: directory must be max 1 level deep dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod 81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests 49a2366ddb6 Initialize terminating field in the Job controller unit tests 46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled 85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2 39683505b63 Release commit for Kubernetes v1.30.2 47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base cd73ad187cc update driver installer 654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable 1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap" 0df7267723b kubeadm: use the actual configured kubelet healthz address:port 398ab938efc kubectl create cronjobs: Manually set OwnerReferences 42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node. f73bb17efbf base on allNodes when calculating nextStartNodeIndex a26f2c59e3e Fix printPod panic with spurious container statuses 85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1 6911225c3f7 Release commit for Kubernetes v1.30.1 3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions. b762a187f4a cherry pick #124618 to 1.30 1c8b0f697c5 fix requests tracker concurrency 2956e294c44 fix conflict race in statefulset rest update 7d9b913d106 fix stateful set pod recreation and event spam a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year ad1353499eb Clean up PersistentVolumeLabel admission plugin 42742942f5d scheduler: preallocation for NodeToStatusMap d17cd6ef75c tag service.spec.TrafficDistribution field as alpha d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled 37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553) 1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight e1594967bbb Idempotent transformers in scheduler & kcm dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade 7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently 6bb6b07b185 e2e node: fix -v support 4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name 933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation 502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0 7c48c2bd72b Release commit for Kubernetes v1.30.0 69e332560d0 CHANGELOG: Update directory for v1.27.13 release 128d6cc1462 Add envFrom to serviceaccount admission plugin fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2 7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release 22140b6a070 Release commit for Kubernetes v1.30.0-rc.2 be4b7176dc1 Fix Abs path validation on Windows (#124084) d19bff9a022 Update publishing-bot rules to Go 1.21.9 1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables 99fac38d286 Update x/net for CVE-2023-45288 f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1 6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release 77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1 f338ab5f959 svm test: wait after updating CRD to avoid flakes 363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration 0add741012c fix test flake caused by not waiting for CRD schema update 02139c91028 Deflake authz config reload test fc428df4914 update setcap/debian-base to bookworm-v1.0.2 06e69e4b099 releng: update publishing bot rules for 1.30 d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release 6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0 c893c484328 Use the right feature gate when updating uncertain volumes 6f5240b19c6 e2e_node: fix podresources test 9ce994af9fc e2e_node: remove `Dbus` test case 247392271f1 Fix admission error 84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles" a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod" 225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout 4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure f2d4848e49c add stefan as apimachinery tech lead 0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. a7f23e46da4 Fix OOMKiller test warnings fc555839d73 Allow installing newer containerd/runc on COS 10b6319e64b fix slow dra unit test 2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint 656cb1028ea CHANGELOG: Update directory for v1.29.3 release e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release 26881132bd0 kubelet: assign Node as an owner for the ResourceSlice 80db011202e remove VolumeAttachment endpoints 55302de991e Promote VolumeAttachment e2e test to Conformance 4048598620d Change the API operation e2e test to conformance test. 045d91d882c Add e2e tests for GA API a0add8d2c75 dra api: NodeResourceModel -> ResourceModel c78812868f5 CHANGELOG: Update directory for v1.26.15 release 0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0 c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure 8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers 1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers 4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported 6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812) 5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package. 926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release 4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh 2c2d424b012 make type checking tests non-conformance. 19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits 7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services" 3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents a527cab9fce Fix non-recursive list when consistent list from cache is enabled 727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled dc2974c6461 retry policy creation for CRD type checking E2E test 9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests 4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test 21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil fc2134c84cc dra kubelet: fix error log 51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload ea14ccdf13f e2e_node: mount_rro: fix error string comparison 5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts) 3ce6c104e21 Support fetching NPD from github releases in standalone mode 56da06b6dd9 Fix the dirname command in macOS does not have a -z option 62ac88b9ea5 Add metrics for authentication config reload b4935d910dc Add dynamic reload support for authentication configuration 13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts 6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts` dd0882a83e0 kubelet: expose `node.status.runtimeClasses` 8db07446f19 api: validate RecursiveReadOnlyMounts 8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts 0b1a507b002 pkg/features: add RecursiveReadOnlyMounts 76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts 27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers 9161302e7fd feat: implements svm controller 121607e8096 Require email_verified to be used when email is set as username via CEL 79fe37537c3 Adjust the validation to the current state 1163c7ed9c6 Adjust the API comments to the current state ee64b30d05c Check taints as well for control-plane acf6b500eef Follow up fix to the job status update test 91a7708cdce feat: implements Storage Version Migration API in-tree 04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated 6a361e1f364 dra api: enable new CEL features by faking their version 7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters 251b3859b0b dra scheduler: consider in-flight allocation for resource calculation 2c6246c9066 dra e2e: move ResourceSlice test 0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice 42ee56f0931 dra api: implement semver attribute value type 234dc1f63d7 dra e2e: run more test scenarios with structured parameters d59676a5453 dra kubelet: publish NodeResourceSlices 5e40afca060 dra testing: add tests for structured parameters 3de376ecf69 dra controller: support structured parameters 6f1ddfcd2e3 kubelet: support structured parameters for preparing resources 4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters d4d5ade7f5b dra: add "named resources" structured parameter model 096e9489050 dra scheduler: support structured parameters 49ee96eed43 pod security test: add user namespaces feature 1f9c271c8c6 PSA: update procmount tests to have hostUsers 23706cb90c8 api validation: validate proc mount against user namespace e216742672a Job: Support for the JobSuccessPolicy (alpha) 7bd78b06e93 Warn on deprecated AppArmor annotation use b1341c87957 Revert portion of the GPU testcase 194009fac9d Add integration test for managedBy and cleanup of finalizers 2867be47b31 followup to allow special characters a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice 2e34e187c99 node authorizer: lock down access for NodeResourceSlice 39bbcedbcae dra api: add structured parameters eb1470d60d5 scheduler: fix assume cache with no index 48daa91857a Update publishing-bot rules to Go 1.21.8 30857658e42 Adjust GPU test to work with latest nvidia daemonset ffafb2b9ca9 adds portforward streamtunnel unit tests 758dc535107 Enabled conformance test for VAP which is GAed. df7f5fca27f Don't embed plural exceptions in tools 39e1c9108c0 Support multiple JWT authenticators with structured authn config 2d86cbf2616 Separate feature-gate for AppArmor fields 22068e0cc7b Validate annotation & field match in PodTemplate 06caf32ecd7 Validate localhost profile max length 0eb5f52d06f Rename AppArmor annotation constants with Deprecated 8373f3035ad fix aggregator path filtering to include / 70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables 6f2842c08c2 Avoid clearing go version in go.work update script c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0 1395c801098 Update Job conformance test to do a legal update 2e465cd6fa0 Remove _tmp from test/images/image-util.sh be7ee821b97 Make verify-vendor use verify::generated 778644154f3 Remove _tmp from verify-openapi-docs-urls 4d6f56d3985 Make vendor-licenses use verify::generated 8a3a299c650 Remove _tmp from pin-dependency 813787489b7 Make verify-openapi-spec use verify::generated e90782bec8e fail LimitedSwap with cgroupv1 5d83282823d Auto updates de506ce7ac9 Promote ValidatingAdmissionPolicy to GA. 6a4e19a4ec9 add no swap as the default option for swap 27df75c577a dra api: fix status updates ec325b328db Match annotations against pod AppArmor field d25b1ded761 PodSecurity check for AppArmor fields 24537a91317 Stop appending AppArmor status to node ready condition 207a965b3ff Update AppArmor e2e tests bf3c8464bae Implement Kubelet AppArmor field handling 289ec02e8b5 Implement version skew strategy b7f620c12b7 Generated code 855bc740239 Adds OWNERS files to client-go streaming dirs 94927afb50c AppArmor API changes 6b03166beda update to inject only the list of excluded resources. 7a57bcea6cd fix e2e test for kubectl interactive delete 646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet e568a77a931 Support for the Job managedBy field (alpha) (#123273) 5122fe07323 don't watch headless services on kubelet 0595ec79423 implement field selector for clusterIP on services b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1 290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta 53d38a31611 node-controller require providerID to initialize a node 3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const 221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed 01689d0906e add e2e tests for relaxed validation fa3c1014393 relax validation pod envfrom e56240b2e1b add validation method at the top level 5b072a59a29 Fix flaky test on multi profiles waiting pod 96a16a7bc9f add relaxed env var name function af2dadcb18a Add custom debug profiles on top of static profiles 2bd7f4f8e06 storage e2e: update hostpath and mock images 9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16 4a5fe2decad Addd negative case for the fix in #123570 ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field b04d1177efb extend deadlines to one minute 3d56ff21fd3 adds comments to tunnelingResponseWriter 33af937b4a5 re-write fallback dialer unit test e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error 2443b3fa694 Fix headerInterceptingConn handling 9e154628430 adds return context in RunPortForward() 8b447d8c97e portforward: tunnel spdy through websockets 79b344d85e3 Add authorization webhook duration/count/failopen metrics 1cf4cec449c Test that separation of streams work by using progress notifies 8345ad0bac4 jwt: fail on empty username via CEL expression 606cae9b479 Add new metric servicesCountByTrafficDistribution 05e1eff7933 Prevent conflicts between service account and jwt issuers 57d1b68dc2d Remove deprecated sets.String c4163a9cb84 Add label with access mode to SELinux metrics 31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior eb6abf04623 scheduler_perf: automatically delete created objects 51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled 51a3fa2e6ff Start reconciling on the new field 9513f75089f Add trafficdist package for handling reconciliation of new field 646fd200b85 Run 'make update' 996d11d4e87 Add new field trafficDistribution to Service spec d72448a41c2 cleanup: if triggerValue has a value, fast break 78fb0bae22f wire up discovery url in authenticator 84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration c61b2a3975a Check length of instance name before truncating ebcb78df529 promote aggregated discovery conformance tests b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10 968aefd1bf2 Ensure GCP instance names are a max of 63 characters c2ccb921ea0 e2e pod: fail fast on failed pod c134bfe9ebc agnhost/mounttest: add new line to output db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided 22adf221a14 print nodename 0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...` 90e6546c689 Use go.work to auto-find internal modules eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons 6174f199dfb kublet/userns: Add test switching feature gate off/on 4bb508dd303 kubelet/userns: Add unit test 0b69c2bc81d kubelet/userns: Use kubelet maxPods 39c68156766 kubelet/userns: Remove alpha maxPods limitation 4180284dc97 pkg/kubelet/userns: Remove outdated test 4c81e5c9dc6 features: promote UserNamespacesSupport to beta 87a057d4170 KEP-127: kubelet: honor kubelet user mappings 3bada5d4515 test: Bump CUDA images 30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta 0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1 b48b4ebc697 address reviews 1d4be7527f8 increases client-side websocket write deadline to 30 seconds 948d9ca2217 Rely only on `source` cli parameter in conformance/walk 0e9cdf76ad2 Fix discovery v2 conversion registration data race e2b96b25661 Add a header to go.work 467d5d745c2 Get rid of unused API type NodeResources d2051503a3e e2e/service.go: remove same node nodeport test e76fce75666 add authz webhook matchcondition metrics 9633e25579d feat: add csaupgrade option to upgrade subresource 1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well. 3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature f34782bb927 hack: re-enable protobindings which use k8s.io/api 9a404b590b1 Filter aggregated apiservice gv b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta 8854d360a5d printers: add status to jobs table 462dd326c2e Use v2 types with agg discovery 301e804c3f2 Promote AggregatedDiscovery to GA 0593746f609 Remove test for disabling aggregated discovery dde48918dda promote match conditions e2e tests to conformance 74417b517a0 Tag all feature gates required by a test 99313bea88c kubeadm: remove constants for mirror pod timeout ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration ce8bd8584e0 Configure cpumanager policy options in local-up-cluster ba525460e05 change result size to numAllNodes 45783a630cc increase parallelism on node controller ccm dce0d8a3d3f increase parallelism on service controller 20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111) 6b08919473a Revert "[cloud-provider] require providerID to initialize node" 1d653e6185a test: use cancelation from ktesting d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests 00e09374b6f Make update-codegen avoid sub-workspaces 21715e6bbd1 Fix up go.mod files after reviews 78f82b972f8 Sort publishing/rules.yaml ac5664086ba Use path instead of filepath for pkg-paths 70d803c1ff3 Make `make` fail better with bad inputs 81ba0f3b44b Make golang::setup-env turn on workspaces 2e2ae029c33 Fix instrumentation tests 706c88863f5 Use go 1.22 for KMS mock 812d5fff401 Remove old gengo detritus 16c26b22cb0 Run latest openapi generation d6cf98f8ac6 Remove errant +required with no validation code 1a4450f6ffd Get rid of code-generator/cmd/openapi-gen 067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd 7776496309c EOL code-generator/generate-groups scripts 9cf189f4e02 Fix lint found by golangci-lint 14321ef959b Move doc-generation funcs into only caller 8288c06b2b4 Make hack scripts use `go install` and assume PATH ea3696dbcf3 Remove legacy references to './output' 242b4e27c05 No need to check nil iterating gengo Inputs 7a084b33528 Renamed gengo SourcePath -> Dir 96b91f364ac Renamed gengo Builder -> Parser cb86010d206 Gengo utils moved 236ce54aa8a The gengo "args" package is gone b40e4d7e705 Get rid of gengo CustomArgs 86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator cb7f0593aea Move gengo/examples/deepcopy -> code_generator 01a18659347 Fix lint in code-generator/cmd/... b68340e5b6a Get rid of gengo InputDirs flag 299b0453070 codegen: Remove most uses of InputDirs e78dc862885 Move import-boss to k/k, retool to not use gengo 08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing 5b2d4384c70 codegen: Make import-boss do it's own flags 1fed36b9842 codegen: Minor: fix wrong comments 6420e646621 Move go-header-file flag to each tool 3a77592b2cb Remove gengo verify-only - unused and untested d0dd72b01e0 Move OutputFileBase flag to each tool 26a1a13b805 Rename output-package -> output-pkg 6a375b8f4cd Move the OutputBase flag to each tool 875566f997a Type-assert gengo CustomArgs blindly 0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator 2ac119bea94 Rename gengo Target.SourcePath() -> Dir() fcd6c19c246 Rename gengo generator.Package -> Target d2c74019109 Drop `generator.Packages` type b2832697d50 Rename DefaultPackage to SimplePackage bd31265d23e Make update-vendor log the go env 4627a15ac00 Get rid of vendor baggage in go-to-proto 43206312659 codegen: Don't need to pass --logtostderr 2c0da11c0a0 Make verify-shellcheck take optional args 19b37f046f1 Rename update-generated-* dockerized 94b709c0e22 codegen: Use single-dash for '-v' dd4e456875c codegen:proto: Use revised API to gengo parser 4b55936ab0c Remove defunct trim-path-prefix 2348e949082 Conversion: Better logging 6dbc754ed68 Retool typecheck to be simpler 4d37426a3ab Update Makefile comments 965341390f8 Remove KUBE_GO_PACKAGE 5a96a56c80c Fix make test-integration for workspaces 4b20f81c194 Fix verify-conformance-yaml for workspaces d61f2996140 Call verify_go_version at the END of setup_env e84adf611f4 Remove references to "GO111MODULE" 2a1147a4341 Call setup_env from verify-vendor d2a4a1958fc Tidy update-vendor-licenses for workspaces d772f7719dc Remove defunct references to "vendor" 7f5982e7084 code-generator: Remove now unused helper function 10c32b3e2f4 Get rid of most references to GOPATH 3c2940f2ae2 Kill off PRJ_SRC_PATH 651297220ef Fix pin-dependency for workspaces 1c3e701e0c9 Fix verify-spelling for workspaces 032dd890a57 Fix verify-external-dependencies-version for workspaces bff2e92edd1 Fix update-netparse-cve for workspaces fad5bb1cdd4 Fix lint-dependencies for workspaces b2b9de88eba Fix update-import-aliases for workspaces 530c4352fb4 Rename new::setup_env back to setup_env bece9bc3f4d Remove old::setup_env f9ca58efe9e Remove run-in-gopath.sh b32e2072569 Fix last run-in-gopath user: typecheck 91efe7e5712 Fix import-boss wrt gengo/v2 c8b61bb98b4 Fix register-gen wrt gengo/v2 f772410082b Make code-gen subprojects work on gengo/v2 251b22a7f89 Make update-codegen protobuf work on gengo/v2 b0a70dec4ab Fix go-to-protobuf wrt gengo/v2 7506048d3f2 Make update-codegen client work on gengo/v2 b961b39efa7 Fix client-gen wrt gengo/v2 130a9f8426e Make update-codegen applyconfig work on gengo/v2 5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2 9c62235266d Make update-codegen informer work on gengo/v2 0aa98ee8e38 Fix informer-gen wrt gengo/v2 46665fa76a9 Make update-codegen lister work on gengo/v2 b82527b6fb5 Fix lister-gen wrt gengo/v2 1965f56f59d Make update-codegen openapi work on gengo/v2 5475797f433 Make update-codegen conversion work on gengo/v2 ed35118664b Fix conversion-gen wrt gengo/v2 1e96f4e50a7 Make update-codegen prerelease work on gengo/v2 fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2 b5b8c9d8698 Make update-codegen swagger work on gengo/v2 8420278c7fe Make update-codegen defaulter work on gengo/v2 1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2 d5e8e9c29cf Change update-codegen.sh to use new setup_env db590ecd896 Fix scripts to avoid testdata 514dd0e1f6d Convert all gengo references to gengo/v2 6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2 b3dd7241741 Remove dep on set-gen: gone in gengo/v2 487cd027118 Change verify-generated to new setup_env c79e5abec42 Change test-e2e-node to use new setup_env 7a7dff1eeb4 Change verify-imports to use new setup_env 3be358ecc15 Make verify-conformance-requirements use new setup_env 08622aa6858 Make verify-no-vendor-cycles use new setup_env 854037d5b52 Change update-generated-api-compatibility-data test to new setup_env 25b97dae82d Change ipamperf test to new setup_env 238b33de3be Change test/instrumentation/update-* to new setup_env cbc887a1d6b Change verify-govulncheck to new setup_env 024f4e9c09f Change verify-generated-docs to new setup_env 35aa5b3c698 Change verify-fieldname-docs to new setup_env 0d30f918fae Change verify-description to new setup_env bad67dc973c Fix golangci-lint for workspaces 3163fc4f69a Change update-golangci-lint-config to new setup_env 714f8a0855f Change verify-yamlfmt to new setup_env 3dc447708b8 Change verify-gofmt to new setup_env d785f13c059 Change verify-licenses to new setup_env 974276e4a08 Change update-openapi-spec to new setup_env 2ee339b0236 Simplify verify-cli-conventions; use new setup_env 2924b90d75a Change verify-api-groups.sh to s/vendor/staging/ b725fd20c2a Fix update/verify-mocks.sh 58ab5eea89f Remove some references to GOPATH 5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters e9b30a0d29b fix UT failure TestPrintIPAddressList c05e541793b Bump cAdvisor to v0.49.0 6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called a51a5b46223 kep-3716 GA, remove feature gate 26484df2108 Make websocket heartbeat test timing less flaky fc86811cbe8 Avoid logging binary junk for frame write failure e2575228890 add transient types to admission test. b57d7d6ad79 add min valid jwt payload to API docs for structured authn config 8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0" e38531e9a23 Add `image_id` to CRI `ContainerStatus` message e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time d6851ec7356 scheduler_perf: fail when input YAML is invalid f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN aaf6fc07d82 Make build scripts use Go import paths f3c8e92def7 Clean up test.sh and get rid of GOPATH 8cb8535d9cd Excise KUBE_GOPATH from coverage build 0af31064421 Dedup binaries when building 9256031a871 Workspaces: excise vendor from golang.sh df42d56947f Remove vendor from ldflags 81d932906aa Make golang::binaries_from_targets smarter 8b579b23473 Change the build_binaries path to use modules 65b841c077e Generate go.work files e54f2296ed3 Require Go 1.22.0 in go.mod e2b529fda73 Fix a test that doesn't build on Windows ffa183a7a41 generated files 01db4ae9e74 Graduate PodSchedulingReadiness to stable 466019b1b27 kubeadm: implementation of API types 3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text d303cec1183 Update test 55e9d509e61 Promote KEP-2681 to GA in 1.30 a3dfba8f506 Create e2e test for VolumeAttachment endpoints b115df227ab update tests due to change of NewPluginInitializer. 64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources. 5b1fffa3e40 add resource filter to admission initializer. a0dc949ce32 Improve error handling for json path results 61d6026d23a Fix field paths 45742d1d9af Add integration tests 31f7efab20f Add cost stability tests for chained and nested CEL comprehensions 7ef3eea8a73 Generate code 291703482d5 Add selectableFields to CRDs d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix fa44b9ca150 Fix panic in getNpdPodStat f46df21cad3 update comments on API 5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode" 2a22b6f6b8d Add information about SELinux test tags ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO 52558a03104 Add e2e tests for SELinuxMount 92bdc7b3873 Ensure that initial events are sorted for WatchList 58a826a59a7 graduate MinDomainsInPodTopologySpread to stable 20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test e663285ccf4 Add `image_id` to CRI `Container` message 3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release b394aac4ce3 Use the websocket protocol header, verify selected protocol 03812ddb169 streamtranslator counter metric by status code e89dddd4af6 jwt: strictly support compact serialization only dc4c92f5a56 add support for map 4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests. 374e4b56861 Address review nit, use longer variable identifiers. 3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380) cb39dfc9deb Promote ImageMaximumGCAge to beta f832692d980 uid is also supported in field ref for downward api ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested 0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled 658b45cd035 kublet/userns: Test new functionality with feature gate disabled 1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format b2a92406efd KEP-127: check for runtime handler userns support 024146f7058 KEP-127: the kubelet stores runtime helpers ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades. c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError a147693deb2 remote command turn on feature gates 0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test dd1e617ba0b Scheduler first fit (#123384) ca41a9222d5 Fix makefile variable expansion for test-integration target aefaf66d2b4 remove unused service keys from aggregated discovery 0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers fd5019a5468 ktesting: ut flake fix for CI a24f2c11923 Validate restartable init container state transition c99996efab1 bump metrics server to v0.7.0 0ab006b8a1e node-controller reconcile node labels on each update 03bd3e25b16 [cloud-provider] require providerID to initialize node 099f26296b2 integration test for cloud provider ef83ec27536 don't use leader elect on ccm integration tests 08f8be99039 fix goroutine leak on legacy-cloud-provider gce 3636971c39c add aojea as reviewer b4b4784c6c4 enable ip aliases on clusters by default 3908a46b222 bump cloud controller manager to v29.0.0 b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value dc7114fa911 fix default IPMode set in UT 9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil 0f083966a7a set actual podToMake values 840ef149071 ktesting: doc updates and fixes fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml e6d6d8e14c2 feat: print etcd ready status 07e0a80216c graduate HPAContainerMetrics to stable df92ad9bcbf Run autoscaler as non root in kube-up d7735f32d0b Skip autoscaling tests when we hit rate limits 1ecd4053de7 ktesting: skip timing check in unit test 8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test" 18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin bbef156ef5d update 129 b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e e2ff63103df fix for persistent Horizontal pod autoscaling failures 148757903ae release v1.29.2 for sampleapiserver 247233f7b40 bugfix: modifying argument causes wrong fieldpath e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests 75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting e1ac3e1de76 Fix kubectl proxy e2e test 52dd6030551 initial e2e for aggregated discovery 13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager 4760e0cc44f refactor: use shared CollectParams from VAP 64cd09f7208 refactor: use match from generic pkg in vap 96c418a7b73 add generic policy dispatcher 9f9858b6caa Hit APIServer cache when testing healthiness 2e920365766 Rename "new" reconstruction just to reconstruction e9193b4f336 e2e: remove dead code for providers d816ab7657b Promote LoadBalancerIPMode to Beta 4cb4228522a ktesting: improve unit test coverage 4ffa628ead5 ktesting: add missing methods to error context dc6abc3ff8f ktesting: add Underlier type alias fe10bfb044f ktesting: fix ExpectNoError 2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate 513c2a3690f Mark NewVolumeManagerReconstruction GA 78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21 cc515bd8f13 Job: Fix test case names for the validations 0c4df640920 fix api aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device 9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425) 11ed3032c09 test: infer gvk of objects acf1d850c61 refactor: handle paramKind directly 83751630081 Add test to validate non empty pod log dir 81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server dd890b899fa Make PodResources API include restartable init containers 16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation f6682370b1a fix flaky ut in TestCause contexthelper_test 98437cb4be6 fix json output when fetch kubeadm config from server ce6bacb5acd fix persistent volume docs link 6726e656190 Aggregated Discovery, mark stale before initial health check 5fb002147bd Remove unused Resolver interface in pkg/proxy/util 43ba0bd53b7 kubeadm certs check-expiration support json/yaml output 4172d364865 Codegen: use plain find instead of git ls-files 527d2ea9d0f Codegen: use plain grep instead of git grep 9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g d7028a8ed50 Add SELinuxMount feature gate ba8fcb5ef6c kubelet: don't disable gc if max age is specified 8dddf6d3140 e2e_node: add test for max age after kubelet start a8ea9363648 image gc: don't start until max age has passed since kubelet started 6cd78bc5fc5 node e2e: add image max gc test be7856e3402 e2e_node: factor out waitForKubeletToStart da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta 5a8579a3e40 kubelet/userns: Remove tests that fail as root cb3180950ef dra e2e: fix stack unwinding in helper function c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation fe8e896df87 Improve the doc comment for the Job status.active field 3c9c141d980 exchange the order of comparators 7b108d8ee19 Add testcase covering unknown plugin config 611f8ba8153 bump nfs-provisioner-to-v4.0.8 c74ec3df094 graduate PodLifecycleSleepAction to beta e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test 65faa9c6800 Consider initContainer images in pod scheduling b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource fa6429a31c9 Use new 1.4 NFS image ec394ec53db Fix NFS related CI failures c29450eb009 kubeadm: apply retries to all API calls in idempotency.go 0f49a1e36e0 fix panic in CRI stats of windows dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed 01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api ae0a813be10 Fix tests after rebase c8b4d8ebedb kubelet: add reason field to image gc metric d3a0e296def Update x/crypto to 0.19. f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE 5fcbc9d2fca Fix permission denied error ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters 19d9405a1c3 Update comments and error messages d9e2487d0c3 Add PodLogsPath to kubelet config 3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata 7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate d5d3eddb95b Add allowed/denied metrics for authorizers 59bf8b02e63 Refactoring to encourage use of switch case 7b2698a5e5c Add handler to run watch serving in separate goroutine c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II 7faa8bbac3b Add e2e test for kubectl interactive delete 6d5133f3ecd add functions to policy accessors for getting match information and params def05a20e22 flake: avoid flake by ensuring params appear in the initial list 57fc5d24013 Add decode and roundtrip tests for CBOR marshaling. 871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A. 71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop. f84d643c204 Use the Defer for pod replacement policy 066421f108c Add CBOR Serializer implementation. ab8cdae3b1f Reset metrics in the Job integration test before testing ec7e051bc00 Always test PDB's during service upgrade test 115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0 0feb1d5173c Add integration test for multiple audience in structured authn bd27c99262e move OWNERS from validating to all new parent policy folder 5dc92ada068 Implement authz config file reloading 3a98e60a719 Move authz construction to reloader 2b00035b5fc Split construction of authorizer / ruleResolver 1fddc948ed8 Split node/rbac/abac construction 49124293c3c Store constructed node/rbac/abac authorizers 75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct 41435d045db Guard empty status.acceptedNames 18c563546a7 support multiple audiences with jwt authenticator 3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release b202d053fa7 CHANGELOG: Update directory for v1.26.14 release cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release 14045bf340e CHANGELOG: Update directory for v1.28.7 release aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0. 5f4cb8b09a4 Move kube-apiserver authz validation functions b5e0068325d Support all key algs with structured authn config 630ff96f9d6 Revert "Scheduler first fit" e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost 5d861b6f12e promote agnhost to v2.47 aa772d77fbc e2e pod: dump pod in unexpected phase 008b075b462 DRA: fix data race in resourceclaim.Lookup 9c726b015c5 agnhost: v2.47 2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release b8a59346fe6 test/oidc: extract key type to allow testing different algs b7e70f0e000 update-vendor after package rename 3094395fa76 bugfix: avoid NPE possibility by making composition environment global 18fbc48b015 refactor: implement VAP off of policy plugin fw a6366573d5c refactor: create generic policy plugin type similar to webhook 2fa02552ebf remove comment 48b1576980d use table test pattern and replace hardcoded values 19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration 6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list` 39606af8c3d golangci-lint: optionally skip it during "make verify" 7ee89440c39 agnhost: v2.46 07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress) 8876b68a604 golangci-lint: add hints for error wrapping 8e2c1b559ac update images to have the full semver in the tag 1b1b902f81d codegen: don't nuke files if only verifying e53ac426335 e2e labels: add placeholder docs for existing items 445443bd8a5 e2e labels: ensure that the lists remain sorted a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts 77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric 4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util" 0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args 7dd624d3443 ci: bump kind to latest for kms jobs 5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment d697f43d738 refactor: move matching logic into parent policy folder 8b14116509a refactor: move vap into parent `policy` folder 8b26b6eec1b refactor: move celmetrics close to its usage in vap 5ba3883be02 Adding unit test for makeWinContainerStats 5c825d8a226 core/v1: remove comment about non-existing constants a8abed80153 Update publishing-bot rules to Go 1.21.7 da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer 63aa2615834 ktesting: add TContext 75210d0840e Clean up dead code in node controller 593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests 73cc31847fc fix eec508e488f use patch number ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22 ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate 36904475db4 kubeadm: increase ut coverage for app/util d42d9a9b079 features: promote NodeLogQuery to beta 3e777540fda add test case for error inside variables. 13c848f562c self nominate kevin hannon as a sig-node reviewer 3a813049d3a add aojea as feature-approvers on OWNER_ALIASES 6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642) e821e0de15e remove error wrapping from builder de6989041a7 added OWNERS to test/e2e/feature/feature.go 0f5cf6c1cd9 Add image pull duration metric with bucketed image size c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment 1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations 42672ee2ea1 Make comment about reject action more accurate c7e48f1ebf5 kube-proxy: flush nftables base chains on startup 7a56b6e3f7a Add validation.IsValidCIDR 658e3308f34 etcd: Update to version 3.5.12 fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig 105ec3d48fb fix linter failures 852c03a49b9 check key is set before deleting from map 4d8c3530f57 fix regular bound service account token test ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1 eceaed8c075 Put validation utility packages used by API validation under API review 1ae7553744a Revert "print error message regardless verbosity level" e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation 1085c0b15a4 Bump sample-device-plugin image version 9e37ccedc7f apiserver: refactor handleError in endpoints/filters 6a98704229a Bump to latest version 63e91ed0232 remove deprecated framework.ExpectNotEqual dfc20d19c8a fix integration tests now JTI feature is enabled by default cae710d9e96 kublet/userns: Test error messages on init failures 1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta 5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428) 4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency 7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint becb25c01f9 Bump version for the sample-device-plugin image f97dec28407 Add comments about wildcard clusterEvent 31c86e38ac6 Update in-tree azureDisk and azureFile tests 0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep d81023db30c When matching clusterEvent, we should consider the "*" additionally 3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758) 960d7fbf094 add admission tests a0770386abe fix copy paste b0c9a18673b add TestPIDPressure 195a7747180 eviction_manager: add unit test for PID pressure 774d666d1ce kubeadm: better checks if the node is CP during "upgrade node" f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" 9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet dc832c6e59e add support of variables for Type Checking. b636984004c test: remove unnecessary skip healthz check from test 71bf5630343 Job: Stop unnecessary sting casts in validations 21ba0d59d3a refactor type checking to use CompositedCompiler. 7cab0ad2d2b apiserver: warning should not panic when request times out c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes a56d483df06 kubelet/userns: Use t.TempDir() 0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages fdc20de5004 kubelet/userns: Wrap error message 065066d1aba kubeadm: support digests in DeployedDNSAddon() 1db6e434f3a build etcd image v3.5.12 227c1915db3 enhancement(scheduler): share waitingPods among profiles 8bf03e83d3e Stop claiming --node-labels is alpha 2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4 2dd81563a96 Update to runc 1.1.12 60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release d190fa3e7de Fix race condition between external-resizer and kubelet 593654eaa3b Fix cleanup of file subpaths 97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure 9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours 67926c3777c Update in-tree vSphere tests 01dbb85974d fix: correct incorrect comment & function name about SchedulingGated 717a0002b75 [gce_runner] use metadata file when values have special characters b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds 77f03c17449 Don't export single-use types 01155f59c35 Merge pkg/util/config into pkg/kubelet/config 049261aca1b Delete unused config utilities e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes 77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction. 0283498ab40 fix gofmt error 0c7281624ea change style of enums f589b911f85 node_controller: improve taint eviction queue add worker time args 71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed c222db1429e fixes kubectl explain to shows enum for field types if they were defined 2216361c59e fixes kubectl explain to shows enum for field types if they were defined d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter 7f2d78656ca Updating FG based tests 8bc63027d9f remove extra space in log 2c829cf29b6 chore: Refactor network load balancer creation in e2e tests 6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller da05076868a Reorganize a bit of winkernel proxier setup 33bd5fb3c44 Remove unused param to winkernel proxier 4716bf8bd45 Fix issues found by linter ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2 c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1 76ea1420516 Use gcloud for gce_runner a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total 1baf7d45866 Corrected some spelling and grammatical errors a7cf7fe55a2 Bump shellcheck to 0.9.0 20ec766adfb bugfix: disable ratcheting for typemeta fields 7353f52bc8c test: add CRDValidationRatcheting e2e tests 768c169dd82 feature: promote CRDValidationRatcheting to beta 5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field 85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows d60a25b2db5 Add DeletionHandlingObjectToName a15f4376697 KEP 3458 - promote to stable ceabc4aba84 DRA: always returns Unschedulable in PostFilter 6cf42037512 dra scheduler: reformat code a809a6353b6 scheduler: publish PodSchedulingContext during PreBind 5d1509126fc dra: patch ReservedFor during PreBind 6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go 5ab9f3d15f0 kubeadm: fix the err check bug in certlist test ebba2d4472d Move some code in the proxiers 536364266c1 Sort messy kube-proxy imports c2c4f4616d4 cleanup structured authn/authz error logic c89dcf52b12 convert the expectedValues to be cel.Val. d6991638029 extra case for affirmative has(map) test. 139c6daf302 Missed a spot! testing verify-licenses.sh 7801173f6ed get the error claim in dra 6e5e1d03177 Remove useless org mutate code 09a1abda998 Update vendoring to take new CBOR library dependency. ef27338bef9 Add skeleton CBOR package and introduce library dependency. 89db64e0534 collect generated files and logs 39afee443f1 enable testing import check for kubeadm binary ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists 4d6c0ba518d kubectl debug: add sysadmin profile bcf512693a0 kep-3836: promote to beta in 1.30 8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only 9b96ab46eee Fix license verification script 1ad143177c3 Added metric resource name to HPA table (#122804) af35b7ff2e0 Update Changelog with Release Notes 1.30 Team b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695) e490439262f drop deprecated pointer package 83de1586e08 boilerplate_test:fix pylint warnings 4473dfebbf9 fix boilerplate test 9dc1da1e5bf boilerplate_test: fix bad indentation 65d67101e72 Drop vsphere cloud provider d0c323fb8fb fix convertField and its comments. df9620c9f6f add support for equality check. 9bbdbc510eb mutation library for CEL. eafa9bd24b2 Add validation tests 7972f0309ce Fix service account token projected volume validation 35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted 1d59d6b6c65 Use validation.IsValidIP in a few more places 519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency f999b24fad9 Expand IsValidIP unit tests 8fc691be940 Drop validation.IsValidSocketAddr 09abfa46be8 Update knftables, with new sigs.k8s.io module name 367bbd01d76 update testcase on podreadytostartcontainercondition 8371e4cf931 quick break when met 740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config e92a4debcbd Fix lint warning about unchecked error d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows 8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform" b88fefad1f8 Add note about directory structure 62eb7cb4f93 make update: add update-golangci-lint-config 31de75f62cb KEP 3836 - promote to beta 0ef42133a18 Reduce verbose logs in MetaAllocator b8df7e76845 unittests: Fixes unit tests for Windows (part 10) b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling 25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints 4b40299133e pkg/proxy/nftables: handle traffic to cluster ip 01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects 80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching d23483dd7c2 pkg/proxy/config: rename import aliases 212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error 43539c855f5 e2e framework: unify logging, support skipping helpers dd0cee48955 e2e node runner: remove dependency on e2e/framework 3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure a05db0dd22a Add retry around create ed289f875e3 Remove some dead options in KubeSchedulerConfiguration 1645667297b compatibility fixture 6d65c063caa describer: improve job and pod template output 1a38fb3c354 init.sh fix a2be736c027 vendor update 0bc023bc28c Add aggregated discovery v2 types 6ae264464ca Make local-up-cluster non-verbose by default 41e706600ae client-go/reflector: make UseWatchList a pointer 0ba903fd574 kubeadm: enable parallel pulls of images 510df7eab17 kubeadm: add validation of ImagePullPolicy in the API 754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions a4afaeda372 print error message regardless verbosity level de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky] e3ee4e35851 e2e: replace klog.Fatal with assertion 427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update 2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry 5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly 1192f313b8b Fix local-up-cluster on darwin e2222f1e304 dependencies: klog v2.120.1 8a89a1f5a5c mark density tests as flaky 18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0 26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry 365cbe1b41f remove formatted newline fd5353eb721 check for error message and type 8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options 3a6060745cc Remove unneeded permissions of node-controller role 83ff8a2f49f Negative index regression test for json-patch (#122625) f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release 14294ce870f CHANGELOG: Update directory for v1.28.6 release 4a9906fd340 CHANGELOG: Update directory for v1.27.10 release 4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter ee354366f58 sig-instrumentation: add rexagod to other groups 6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager 8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation 2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta 3aa366a3eb1 e2e: remove dead code 041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on 5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner 98054dd9d3a Clean unused code in kubelet server. d21fc96db35 Fix type assertion error in init and join commands for kubeadm 8a32f346a09 kube/features: improve unit testing known/registered features 995135973d6 Inject feature gate instance into client-go for kube components. 54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go ec89154276f Handles clean up errors 80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order 66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes c65d9e4d59f Replaces path.Operation with filepath.Operation fcb51554a19 Plumb the conntrack.Interface up to the proxiers cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries 51063cb5c41 Clean up conntrack unit tests 46c4249e3ec Remove code to be removed in 1.30 5cfd75a84ea Ignore vendor folder on client code generation f29d6970c96 doc(scheduler_perf): enrich the documentation 7773b0f53fd client-go/features: introduce WatchListClient feature gate 9263a66aec7 kubelet: make log more clearer for not create a mirror pod d652596e429 Remove redundant string conversions in print statements 0d366dd99ae codegen: Use long flag names for clarity 0f849d3b55b update-codegen: rename "base"->"file" for clarity f2b550180c6 codegen: don't use xargs w/ maybe-empty input 582312d9650 Sync json-patch ver to the same as everyone else 7162b930bec code-gen: Use the passed FlagSet, not hardcoded 8b8f0a70cd3 Make verify-fieldname-docs actually error 0c3e49e64c0 Run test/instrumentation/update-* 5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout() caf53114132 kubeadm: start using the Timeouts struct values 374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate() 9b5ad7e1191 Add processStartTime in metrics/slis 8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. d2b16b2a21c vac support ResourceDescriber 9860e12d6ee expected and actual field position adjustment 08645984b0a Revert "Save a list of images used by e2e.test" 73565cde13d Use gomega.Consistently instead of sleeping dcdfd714501 Fix kubeadm init regression 9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp 46d0e1d5aaa Support overrides for registered feature defaults. d954b25b118 hack/tools: bump logcheck to v0.8.1 6cd25f43a63 fix version typo of namespace indexer 4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6 04b772c6611 logs benchmark: really write through pipe 7f1a30f8d59 logs benchmark: fix config handling 3fb67901642 Update env version, Add cost for previous func, add tests, etc. 5ca73197b3f Document the nftables kube-proxy packet flow ddbf3ab6629 local-up-cluster: use the newly built library always a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 3c86d21316c bump klog to v2.120.0 6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake. 6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference 56321a77799 Revert "Graduate Evented PLEG to Beta" 57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file 9c39f2b7760 Fix kubelet_server_journal --until parms. b0e929264fb e2e/network/conntrack: rename invalid conntrack state test 6073d1cd3d5 Adds tests for bypassing scheduler processing 9387a66c71f Clean up encryption config reading and hashing logic 4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule 04bbd3481f7 client-go/features: warn when ordering initialization issue d74c57d4f59 client-go/features: introduce feature gates 71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling 70e20b58dd8 Add missing string formatting directive 8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies 4df39d89e0b Correct the link to install Docker Desktop on Mac. ce263d88281 Address comments during Review 1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode 50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet 9eac24c6563 kube-proxy: store ExternalIPs as net.IP d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP 564b80b1e11 kube-proxy: don't use invalid cidrs in unit test 41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test 2e999fff026 Fix compiling e2e.test on macOS 6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197) e46778a246a remove dead code 87816ffb2c0 Support ignore scheduler extender error when binding f8abe71238f Add an post-upgrade condition to ensure the job is running 67cf648ab77 Add a new neverTerminate job behavior just for upgrade b7012da2ad4 Remove providerless tag in controller_test.go 377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support ca8c27c480f kube-proxy: do not delete previously stale but currently active chains 073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet 0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA 683f7f43af0 e2e/endpointslice: add ready conditions d5664276bf5 refact IsLikelyNotMountPoint e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag fdf6503e601 Enable more storage tests to work independent of the providerless tag 5704a588101 add test for the registered feature gates 4b296699af8 Add fake GCE provider to make CI jobs happy 549ef5da1bd split ingress tests into multiple files 88bfefad0f5 import providers selectively based on the tag 220a559f45e Add missing doc.go for some providers 7a236bd7e06 Add providerless tags appropriately in test/ c019b51be41 Remove unnecessary providerless tag in azure legacy provider 5c196ddaef5 add patch integration test to disable nodeport for LB type service 4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false edff1c3b2fd swap originalPod and modifiedPod to match the comments. 801afbf888f refactor TestPriorityQueue_Update 288c00c0c7b Allow framework plugins to be closed 73bec0f6d95 api: remove SecurityContextDeny admission plugin d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere ea0fa414457 kubeadm: implement mutators for "config migrate" 492c0619dc8 kubeadm: add a Timeouts struct to v1beta4 2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags afefc6f4ebe Make EndpointSlice API e2e test faster af6e653f175 Use errors.Is() to handle err returned by LookPath() 2431a964af3 Drop hack/verify-govet-levee 9c6b42af46e promote contextual logging to beta, enabled by default d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings 289bd72631b Add ut for pkg/registry/networking/servicecidr 4aecb151b83 Fix kubectl drain error handling bug. 99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage 1d144f518e2 Fix SELinux e2e tests: add label to observed metrics 246e69fb990 Use http/2 for localhost webhook 55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default 55e1646fa42 removed the deprecated azureFile in-tree storage plugin a3c4a609950 Save a list of images used by e2e.test 10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors 2e8e2989d15 Removing Windows image from e2e test image utils af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement 5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0 d3b8eba690f Update konnectivity to 0.29.0 be88a79b6ab Remove unused csi-hostpath-testing.yaml 7503440ba85 bump runc to v1.1.11 09abd6be5a8 address reviews a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig 97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands c3775de7479 fix logic error 5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found 2203cb7dde8 fix: create tls secret cert to crt for --cert flag 5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume. 8f2aaf63d7b Fix incorrect error checking 20fe2a3539e Add decoding time to the audit log e3686246ea9 Fix update-openapi-spec to not change caller CWD 41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion' bd269e06baa feat: support annotation in nodewrapper feb833f1296 fix nil pointer dereference when EventedPLEG is enabled f73bba51c97 flowcontrol: set the serialization version to v1 430fd83454d kubeadm: increase ut coverage for util/etcd 3b67181c93b remove GA featuregate RemoveSelfLink 719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts d849c625ec2 Remove kube-proxy proxy detection & increase timeout 86873d33352 NodeProblemDetector tags d12416e2f31 remove duplicated check on validateTokenRequests for new object f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac acbbaddada4 Initialize default attach func regardless of the value of flag 041efcd1d40 scheduler: update an old comment 1c089afcf37 Fix a set type 147114e6485 Update some change tracker doc comments a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData 764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker ede0dc1d079 Make newBaseServiceInfo a function rather than a method 0779042a6f1 Remove a useless "_" assignment to appease the linter 452fcc5fd6e Remove some dead code in service.go 51f3b705c64 hack/tools: bump logtools to v0.8.0 90e68e3a024 Update the help mesage of interactive flag in kubectl delete f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured cd3f7a31e81 Add unit tests for no score plugin scenario 7abba242312 Fix existing unit test (add no op scoring plugin) e19be41f584 Don't evaluate extra nodes if there's no score plugin defined 4ede571f8bc dra e2e: unify per-node resource specification bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true d317b01244a Fixed Inappropriate Logical Expression 47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork 4658f769456 CHANGELOG: Update directory for v1.26.12 release c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release 38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release c8a2d5684d0 etcd: Update to version 3.5.11 36cceff0a3c e2e: forbid usage of gomega.BeTrue/False a8da4202c0a .*: bump golang.org/x/tools to v0.16.1 b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation 32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function 557118897de kubeadm: drop concurrency when waiting for kubelet /healthz 4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30 1f3e668e180 Use semantic comparation for API 725b107f494 Correct typo from 'gingko' to 'ginkgo' 626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults 5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2 538248df0de More understandable error for scheduler configuration validation 64da4345231 kubeadm: hide unwanted global klog flags b6eac505fb4 Add testcase setup scheduler 2edb3349933 kubeadm: hide unwanted global klog flags c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code b69510b0690 Remove an unnecessary abstraction 75695dae109 move encryption config types to standard API server config location 868114a41de k8s.io/code-generator: include all metav1 applyconfigs b6e34187ca4 Update duplicate env var warning 1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score 85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts 1ee81839036 add extra locations to check for release-tars 09a80df1d13 podtopologyspread: scheduler queueing hints d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency b6c1f8ef08c Fix etcd repository path to prevent redirects. 642574e9643 WatchEvents seems useless aee1d54a0dc Drop SubcontainerInfo c865ad532a4 fixing based on feedback in PR 9d1829c33ac Make OpenAPIGetter tolerant of nil d621e09a528 remove unused GetRawContainerInfo 15e0c416019 Fix CSI migration for vSphere volumes b3285fa8df4 Add tests for CIDR type 31f9384646a Add tests for IP type e1f9aa450b7 Add costing estimations for IP and CIDR 4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30 2f585b45123 Add CIDR network CEL extension 13b22b23a1a Add special IP validations to IP CEL type c6aa360d3ef Add IP address CEL extension 85d08833bfa warnning on relaim policy when it is Recycle eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30 4d7c5d9257e nodeaffinity: scheduler queueing hints f676c99d6e4 Wire in field dropping for CRDs 88cfff678bb Drop v1.27.0 API testdata 8cf0c79fc85 Add v1.29.0 API testdata 06679402e75 remove PruneWhitelist, use prune-allowlist instead c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface 16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled e2cf9692fc0 Remove unused code in kubelet - take 1 ced99383d55 logcheck: remove redundant entry for pkg/scheduler b450224c129 golangci-lint: inline logcheck configuration 49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2 e706b6ba14b Use a separate function for checking if device was reconstructed 87d817e62d8 handlers/watch: refactor watch serving to prepare offloading 16f35785f9f Drop publishing-bot rules for the release-1.25 branch 8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28 1160521a4f6 Revert "Scheduler first fit" 86ab185fa1e Migrate client-go/metadata to contextual logging (#122225) 01916625dab Remove unnecessary error catch in scheduling failure (#121981) 7a82c03daa3 nominate self (carlory) as sig storage reviewer 31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856) 2e388dd7e91 keep existing PDB conditions when updating status 16aad468b65 Replace test.name with test.namespace a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests 8f5efce8e03 Update publishing-bot rules to Go 1.20.12 9573eb54c71 etcd: Build image 3.5.11 221897d7513 CHANGELOG: Update directory for v1.29.0 release 1ae5594fb2a Update cni-plugins to v1.4.0 b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1 7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency" 329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency" 9e1adced5db noderesourcefit: scheduler queueing hints 324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch 983f6a4a84b Update cri-tools to v1.29.0 917027b42e4 fix incorrect function comment 56dd5ab10ff Add tests for checking of uncertain device paths 87c6b0d69fe Smallish update-vendor cleanup 477176a4674 kubeadm: add supported etcd version for v1.30 34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 1e54c050936 leaderelection: Instrument for when slowpath is exercised 1d9f7fd516b leaderelection: optimistically update leader lock d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute 7dfe3d866b7 Fix verify-licenses.sh 6fee657d3ac Makefile: enable warn-undefined-variables 2208cb94936 e2e: only select linux nodes for NodeLogQuery tests b9ff6b25f22 Simpler and less noisy make-clean 39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan` 7897709ed0f Add timezone column in cronjob get command 1d11bc4aca6 e2e framework: provide more guidance to developers 28f8e56d553 Fix prerelease codegen log string 44898f79099 Address comment ed0facacfa4 Fix device uncertain errors on reboot 48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh 048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility. 20b67a4d1ac kubeadm: increase ut coverage of util/config 78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable 210ed2ebbd8 add preScore for volumeBinding e92501b8fc6 optimize the comment 56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions 2fd4758359b change func WithTracing parameter naming 51495bb4c59 optimize the unit test ceb7ca93875 Fix etcd storage_events_received_total metric not being registered 4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics 2d952528cfa belated updates to feature-approvers for SIG Network leads changes 69c40a33965 fix lints 74a6a4581f0 fix by linters 24c4d6f7c9c add unit test for kubelet trace eed6e29a5b8 client-go events: support context.Background() as context 5310abe14ad make scheduler_perf usable from other repositories 08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance a23b26913fc DRA helper: enhance context support d11511b1e81 kubelet: enhance context support 0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30 eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30 a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30 965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30 84c0ed2642f Add SidecarContainers feature beta version e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30 b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout d9070623085 Minor cleanup in watch handlers d8bd150784b support pod namespace indexer 9efff41b8e0 making suggested changes 55e60db88b1 Unify watch handler across http and websockets a82ee6d4168 fix error check 8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable 7cedc3d7417 Simplify creation/tracking of chains 1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times 38c67af789b Use tristate for provideclusterinfo to manage provided flag f035fea63ab remove unnecessary code 3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured 56dcde86270 Add unit tests for no score plugin scenario 6d92b330e31 use ctx withoutcancel 5e7c4c245b9 remove the deprecated in-tree vsphere volume's code a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30 90fc108f6da fix kubelet trace broke in 1.28 f7aca72155e unittests: Fixes unit tests for Windows (part 8) feb23ec581b Fix existing unit test (add no op scoring plugin) 199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined 2d943801ad3 Clean up unused type `HealthcheckType`. 5e5f8b1dd29 move provideclusterinfo assignment into correct place c86189d1de8 clean up unused parameters for volume zone unit test eddf65849df Fix list_type_missing in k8s.io/apiserver 18f3941c24b Fix list_type_missing in k8s.io/metrics 58fb9f6e66b Fix list_type_missing in api/storage e96578fb4d0 Fix list_type_missing in api/rbac b2458e456a1 Fix list_type_missing in api/networking 7fc3ef1fec0 Fix list_type_missing in api/imagepolicy cddfa437698 Fix list_type_missing in api/extensions cfe146615ac Fix list_type_missing in api/core fe902f7384a Fix list_type_missing in api/autoscaling ad397373970 Fix list_type_missing in api/authorization b24cffb1744 Fix list_type_missing in api/authentication a3ea994fa28 Fix list_type_missing in api/apps 460df86f2a6 Fix list_type_missing in api/admissionregistration b8982be2684 Fix list_type_missing in sample-apiserver e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver dd80194d967 Re-run codegen with new kube-openapi 1f55357d993 Re-vendor k8s.io/kube-openapi 44060fb1f36 Fix "list_type_missing" API violations in meta/v1 9f8f55a6ed2 Use DBG=1 for conformance verification 37b7ae6b933 build: use -trimpath in non-DBG mode 2315d3fed54 uncomment ktesting.AnyToString f86249c68e6 kubeadm: remove outdated notes during upgrade e38362501b7 dynamic-resource-allocation Update API comments e5b86c1034c Fix node update event will miss some potential changes a601ebd6b60 Changed the log message 02b0dc98dd9 remove unnecessary fmt.Sprintf call 57a5db8da3d remove feature-gate APISelfSubjectReview eb45a8f2f5b Added comments 76be319571b Optimzed the code 5c99f3a24e3 Logged the return value of ListPlugins 3e1dbccf4d3 Don't sort under lock 91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration 468e2dac81d fix: requeue pods rejected by Extenders properly b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags c494e8b18e7 fix incorrect getDeviceNameFromMount comment 03b8241fcef put storage related plugins under SIG-Storage reviewing 4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister 52ff7f8dc0c fix(framework): elaborate the document on PostFilter 9cb2d1cf6de Removed Comments 1dca49157a5 Utilized ListPlugins method 59c75b001a4 cleanup: remove getStorageAccountName warning messages 1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo 7ba546cfeb7 drop alpha comment on ephemeral storage aba817ac1d6 return not-found errors properly from fake listeres f0aab8c984d encoding: avoid setting GVK unnecessarily 1489a992060 Update mount_windows.go a3e27aa1ade ad controller: optimize populateActualStateOfWorld 854347ac818 ad controller populator: check for inUse sync in test a85f5879849 Job: Use built-in min function instead of integer package 140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging 2076429e434 Enable pod container resources tests on Windows 19da26005b3 kube-proxy: Fix etp:Local for externalIPs 81d040d5381 remove import hack about k8s.io/utils/clock/testing 565ac50bafb Drop testing dependency from shipped binaries 12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code. 5164db066cd Drop testing dependency from shipped binaries 3df90134ca5 add script for restricting import of test only libraries 1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard b8533f79769 kubelet: add metric for the first pod with network latency f9ceab37ca3 e2e: pass context into pod helper functions 4de02f2dec9 kubelet:memorymanager: add metrics e2e tests ddd60de3f3a memorymanager:metrics: add metrics d6b8a660b08 Fix kubelet panic when allocate resource for pod. 33aa56097a3 Set the initial length of set[T] in sets.KeySet 4c06bd5bbb8 fix bad assumptions in gce network tests f040d9012cf verify-no-vendor-cycles: set up Go environment 30dc2f0773c Added Imagefs inodes in default Eviction Hard 60520b6d4a2 look for the cm after the lb is created ae3235aa01b Remove --use-real-proxier support from kubemark 407b9d96104 remove duplicated check in operator_generator.go bd4707ac9a9 fix dns autoscaling test to run with coredns 4a4940694f4 remove stale comments 1c0044594dc cleanup todo after feature.BlockVolume gate was removed 3fb16abfca4 make the decode function respect the timeout context fec63d5ea0e fix: use generic set in pkg/util/iptables ae24846c487 add comments for switch of syncUnboundClaim 29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter 166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0 abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens ed8d10f6605 Update sig-auth aliases d78a794be22 Remove unnecessary sort in kube-proxy ipvs 1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests b91f07008cc add ut c26bb7eb85a update util/sets to use standard package cmp a00a610d15c move SidecarContainers featureGate checking to PreFilter 6cca6e05246 bump kube-dns to v1.22.27 e48aa093402 Make verify-typecheck.sh only check valid targets for a platform 090b79f65d7 Update version.sh 957e9a7f1a0 adc remove redundant check a96d21b4b0c Add logs for event handler 84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook 624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList. 1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs 6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller 7b60e7e2a31 Added plugins enabled at each extension point d96a9858d39 client-go: allow adding indexes after informer starts 58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller fade7463cd4 Add String() to framework status 083818f9e29 fix wrong condition description in PVC e2227a24fbc switch to e2 machine types 4fa3247a61e use context for lazy evaluation. 6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file 8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func 32db5774a34 Fixed extra lines 81bf3a59d1c Added mutex locks when accessing file object : addressed review comments 63b3085f2a8 fix ad controller populators test 21cf23b4faf Added extra info about default plugins in component config 0e76e2c2bbf Added mutex locks when accessing file object : lint check fix 9ed4c58a1f1 Added mutex locks when accessing file object e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual 3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh 4bba73a2bd9 Add comments to cpu accumulator and minor renames ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings 95f2c859a39 snapshot controller version bump to latest 48452fef8de kube_codegen: Add a --one-input-api flag 87d158e4571 kube_codegen: genclient can look in any Go file a789a9d44bb kube_codegen: avoid dups in dirs with >1 file 3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual e69a960792e skip deploying csi driver if it is already installed e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual f53ff68edd1 Generated files 531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils 47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression 81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute dbb6927ec22 Replace stat syscall with statx b20bc79a602 remove not register event code 6e0ece85c49 cleanup the retrun style for cp execute function aa9b2b16968 use generic Set in api 567fca7baa9 Use copy() instead of a for loop 61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly. 76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images 56c241783e3 fix ab1f97bd6ed fix c7549fe340d fix(kubectl): delete pod declare no controllor note 286628b0304 Fix error message for invalid resource reservation e40d00cf53a fix: 119921 ad0b671b56d getPersistentVolume remove reduant deep copy 12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls 3579674df2d fix comment of rbac decision for NoOpinion c2049c7961b chore: loop optimization defe307ec22 chore: io/ioutil deprecated e6900f5ead7 Optimize the performance of the Clone method of preFilterState Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>