k8s: update to v1.33.2

Bumping kubernetes to version v1.33.2-1-gf208b6c73d1, which comprises the following commits:

    f208b6c73d1 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.2
    a57b6f7709f Release commit for Kubernetes v1.33.2
    05e72aa38dc fix kubeadm e2e tests
    612e0555562 Bump images, dependencies and versions to go 1.24.4 and distroless iptables
    a792b779060 Remove warning about resizing failed for unknown reason
    ea3aa291814 Add tests that validate the return value of resize operation
    060a4985376 Revert shorthand for kubectl explain --output
    c4f2287f8a3 Bump images, dependencies and versions to go 1.24.9 and distroless iptables
    1fde2b884c7 DRA node: reject static pods which reference ResourceClaims
    2628e18dabe userns: Wrap more errors
    514da8a95a6 userns: Improve error returned if userns is not supported
    992924664b5 userns: Use len to handle empty non-nil slices
    76747b4eed8 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.1
    8adc0f041b8 Release commit for Kubernetes v1.33.1
    f240b3abf52 SchedulerPreemption [Serial] validates various priority Pods preempt expectedly with the async preemption: replace finalizers with preStop hook and TerminationGracePeriodSeconds
    cce99a8c73a Automated cherry pick of #130503: Unhandled panic crash on rollout_history printer.PrintObj (#131496)
    a257be82995 fix: fixes a possible panic in `NewYAMLToJSONDecoder`
    b59deb49149 DRA: Fix failure to allocate large number of devices
    750d2c02f03 Update hnslib version in Windows KubeProxy.
    c916dba6073 Disable size check for xfs/ext3/ext4 filesystems before expansion
    c8f2295d688 Disable disk size checking when calling NeedsResize function
    3caaf056f1b Handle unsupported node expansion for RWX volumes
    c7eb93190c6 Mark NodeExpansion finsihed without featuregate check
    74035d7b771 Also change final status by removing featuregate check
    1a9d4fc468f Check for newer fields when deciding expansion recovery feature status
    950bb3baf51 Fix for HNS local endpoint was being deleted instead of the remote endpoint.
    5dc8b8dd268 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.0
    60a317eadfc Release commit for Kubernetes v1.33.0
    9ba7dcecc39 CHANGELOG: Update directory for v1.30.12 release
    191c34eaba2 CHANGELOG: Update directory for v1.31.8 release
    7bf818fb88a CHANGELOG: Update directory for v1.32.4 release
    95b926c93a4 Feature-gate watchlist e2e
    e467c9530b8 [Go] Bump dependencies, images and versions used to Go 1.24.2 and distroless-iptables
    660df229bf3 Stop exposing list-via-watch from the server
    a8f6d77c8da ServiceCIDR and IPAddess Conformance
    44c230bf5c3 CHANGELOG: Update directory for v1.33.0-rc.1 release
    4939c17914f Update CHANGELOG/CHANGELOG-1.33.md for v1.33.0-rc.1
    92e86d1b4bf Release commit for Kubernetes v1.33.0-rc.1
    0266d3bcb37 Allow single-to-dual-stack reconfiguration for ServiceCIDR
    7d7fc2d9892 Fix flaky test: Metrics should grab all metrics from kubelet /metrics/resource endpoint
    505836c22cc staging/publishing: add release-1.33 rules
    e5a5f726dde Tag SELinux tests that require SELinux warning controller
    cacd595bae4 CHANGELOG: Update directory for v1.33.0-rc.0 release
    18249aaaa4f hack/update-conformance-yaml.sh
    1eab3036b67 mark tests that use estimateMaxPods as serial
    b2933c0adac estimate some system daemonset overhead for max pods
    b1a9cc34731 bug fix: fix version order in emulation forward compatibility.
    f63cdcbc811 Release commit for Kubernetes v1.33.0-rc.0
    2ef4a8426c2 Move to released version of prometheus/client_golang v1.22.0 from rc.0
    c8c2844aaf1 Fix race for sending errors in watch
    d3c5a4ab2f8 CHANGELOG-1.32: fix release note about kubeadm upgrade phases
    10a7d6f8fdb Update CSI Proxy to v1.2.1-gke.2
    24edc6e90f1 Update etcd to 3.5.21
    eca90dab3f5 Parallelize cacher list tests
    1a15d582ae5 Don't start etcd for skipped test
    75186095c58 Stop cacher in TestWatchStreamSeparation to speed up shutdown
    38d5cb368dd Fix flake, non-consistent list doesn't give any guarantees about staleness
    9b5c4504ee4 Ensure that cacher is terminated in TestGetListRecursivePrefix
    24536987d89 fix narrow spaces of %e for x/net bump
    f3b80a85822 bump etcd 3.5.21 sdk
    0e2e687d3cc cleanup etcd v3.6.0
    20d6b51588a Build etcd 3.5.21 image
    5c7491bf087 accept rounded container cpu limits in container cgroup tests (#131059)
    d349ac57e47 wait for containers to have started before doing cgroup check
    b0b89d3bd25 fix the DeploymentReplicaSetTerminatingReplicas version
    8db1426554d rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingReplicas
    83bb5d57058 deflake restart count assertions in in-place resize tests (#131055)
    1d42ba78ff9 Add e2e tests for resource v1beta2 API
    e761be47a45 Run make update
    39507d911f3 Add resource v1beta2 API
    52298cf36a6 DRA kubelet: fix potential flake in unit test
    2350e7a9118 deflake pod-resize-resource-quota-test
    2073252d5ab Ginkgo skip needs to run inside leaf node otherwise it panics
    d429c8b17d4 debug cpu_manager_test failure
    478a6f9d053 Add a tests for PreferSameNode
    0ee6b0dbfa2 Add "multi-node" TrafficDistribution test
    7956b37f62d Add test for `trafficDistribution: PreferSameZone`
    23aff5dabd5 Split out the pieces of the TrafficDistribution test
    10cd54bee46 Streamling the node/zone-picking logic
    bc81a860b08 Abstract the logic of the TrafficDistribution test
    b1a0fea4c6f Remove a level of indentation in the TrafficDistribution e2e
    8f7bb964de5 TrafficDistribution e2e cleanups
    52c3010c8b7 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA
    d6d9a354d7d Generated files
    f035e37c4bf Added e2e test and fixed existing pod test
    94ddb3a98fd Implementation
    cc466aa355f CRI API changes
    0380f2c41cd Validation
    70540c9f43e API changes
    2037f39e204 kubeadm: use 'writer' everywhere in util/apiclient/wait.go
    310723b21c8 kubeadm: fix WaitForAllControlPlaneComponents with anonymous auth
    a75cd2e0f47 Adjust metrics ranges to reflect additional CI job environments
    2bd0481d2c3 Use established pattern for kubelet metrics url
    0486790592d Fix container_spec_memory_swap_limit_bytes in ci-cos-cgroupv1-containerd-node-e2e CI jobs
    a264b0015ec kube-up.sh: set inotify limits
    4db8e8cc1dc Add configurable tolerance e2e test.
    ac107137ce8 Refresh autogenerated files following the configurable tolerance updates.
    dc1696d8074 Fix API doc and tolerance field handling when gate is flipped.
    2dd9eda47ff Add configurable tolerance logic.
    11b6e2a3752 Update test fixture to account for new tolerance field.
    a41284d9fa3 Add the HorizontalPodAutoscaler tolerance field.
    463b15b9b22 Add the HPAConfigurableTolerance feature gate.
    a237f429fc2 Revert "Separate SeparateDiskTests from eviction"
    914a4ba8bfa generated
    c86ff2339d4 Unit and E2E tests
    dcc67d08c6d Increase number of pods in PreemptionBasic and PreemptionPVs
    33fbce73ae2 benchmark to show inefficient  linear search lookup
    6bbaf8cb104 Extend CRI stats provider to support PSI
    77118d4ca06 Extend CRI API to support PSI
    92a42e65ec2 Surface cadvisor PSI metrics to summary API and prometheus metrics
    c7fc9d5f91a API definition for PSI metrics
    a18354c60dd DRA API: fix DeviceTaintRule REST storage test
    2d7518df6db Revert "Add e2e test for Regular Container image change"
    a9526f6c7e0 add comment to the CPUManager feature label
    0882efaf8e6 Remove general available feature-gate CPUManager
    16f5fe6a26b Fix infeasible resize test
    8cfb9adbf60 overwrite existing labels during pod Binding storage
    17acc4a5eeb Move queue.Done() before Prebind, add tests
    6873e819297 Run in-place resize tests in default CI jobs
    a09cb22e4db disable in-place vertical pod scaling for non-restartable swappable containers
    a490960c92b fixup! KEP-4742: Node Topology Labels via Downward API
    01ae1b1b5a5 remove kubernetes.io/hostname label copying
    934e247030b Remove kubernetes.io/hostname label copying, skip overriding, and support direct spec.nodeName changes.
    6ddabb6ee64 updating to reflect latest KEP design
    5e7e1e7cf16 KEP-4742: Node Topology Labels via Downward API
    67bdfa7d6ee Add alpha feature gate KubeletPSI
    2670462eb03 Remove TopologyHints and TrafficDistribution feature flags
    3b3df8ba728 CI integration scripts: reduce log noise from installing etcd
    cfb9486417d DRA taint eviction: avoid nil panic
    56adcd06f37 DRA device eviction: fix eviction triggered by pod scheduling
    7b38bff6ec9 Move pod level hugepage test from e2e to e2e node
    98e362c0495 Revert "Pod level hugepage for cgroup when unset in container"
    fd50d9207f5 End to end tests for pod level hugepage resources
    b9e0d4ad666 Unit tests for pod level hugepage resources
    51db93c3fb4 Use pod level hugepage limits for cgroup when unset in container
    e3f4c6e62ab Containers with hugepage volume mounts with unset hugepage limits
    aa17082a160 Default pod level hugepage limits
    e5020285fa2 Hugepages to pod level supported resources
    5856d3ee6fa DRA taint eviction: fix waiting in unit test
    ac6e47cb142 DRA taint eviction: improve error handling
    d62e766dad1 Fix function comment
    c7919f5e22e Pop from the backoffQ when the activeQ is empty
    a67cc3aac12 Reduce locking duration on cache to fetch data in DaemonSet Controller
    b726f2cf579 Add an integration test for PreferSameTrafficDistribution
    919c2b478ee Refactor TrafficDistribution integration test
    64034307c22 Fix comments in TrafficDistribution integration test
    323d55e67f9 Rerun update-featuregates.sh
    c10dc416815 Ensure --enable-logs-handler help appears in kube-apiserver help
    3043fbc3daf Added feature gate to unit test
    c0a1489bc86 Fix unit tests
    d46050aa5d3 PodLifecycleSleepActionAllowZero to Beta
    8fdd6fe4768 Unify should delegate list
    8b4aab5451f e2e_node: add a test to verify kubelet fails to create pod if userns isn't supported
    a6494ec3134 features: bump proc mount to on by default beta
    3701f878d65 Fix the logic on TestGetStaticPodToMirrorPodMap
    2d05c3849a4 DRA E2E: fix "cluster must manage ResourceSlices" test
    ca42addbdff chore(scheduler): add filter integration tests for missing part plugins: NodeResources plugin
    2a9a3ea827d test: switch gotestsum quiet output format
    f82c9e56d92 Serve LISTs with exact RV and continuations from cache
    657ccc30995 Ensure that the pod has the proper phase upon re-initialization
    3c7ed00e224 node: kep-2625: cpu manager policy options GA
    1a34095f75b KEP-3094 Promote NodeInclusionPolicyInPodTopologySpread to Stable
    1208f25b3f4 Verify oom_score_adj for containers that have been restarted in pod resize e2e
    c6d6e0414c0 KEP-3619: rename variable in TestPodAdmissionBasedOnSupplementalGroupsPolicy
    586af6b568c KEP-3619: move SupplementalGroupsPolicy e2e test from /e2e/node/ to /e2e/common/node/
    4055b1a9b50 KEP-3619: update e2e test to check a pod with SupplementalGroupsPolicy=Strict should be rejected when the node does not support the feature
    eda274ed7e3 KEP-3619: merge SupplementalGroupsPolicy dedicated validation tests into standard ones
    64a4e349893 KEP-3619: fix field path in validating ContainerUsers in PodStatusUpdate
    2a0e51825bb KEP-3619: kubelet now rejects Pods with SupplementalGroupsPolicy=Strict on Nodes not supported this feature.
    45846f6b4ea KEP-3619: Set Beta for SupplementalGroupsPolicy featuregate in v1.33
    16abcd78bd4 [FG:InPlacePodVerticalScaling] surface pod resize actuation errors in pod resize conditions (#130902)
    bfaa2496b2f Remove SidecarContainer feature-gate check
    ec1b493a088 Populate status memory requests from actuated resources
    1ee7d946d77 WIP add tests for regular container image updates
    f04cfdf6e76 Update gofmt.
    39d6396aea0 Promote the DisableNodeKubeProxyVersion feature gate to be enabled by default.
    c2927727107 Consider AllocatableResources when computing pod requests
    aba588cd14e Deprecate IPPVSAllocatedStatus: always set allocatedResources with InPlacePodVerticalScaling
    798ce5bde25 e2e framework: add BetaDefaultOff feature gate testcase
    507621e0da4 implement WithFeatureGate label proposal
    1738c0bc4c9 Add ltsc2025 for windows-servercore-cache test image
    ea2f8881093 Auto gen
    6d7f11689dd Complete feature impl, fix issues, add perDeviceNodeSelection support, add tests, address comments, etc.
    ecba6cde1de Allocator updates
    ece1d76e802 API manual changes
    deaaa124a5b DRA: Feature gate for Partitionable Devices
    baaa38c0992 Remove mutation of authn options by binding flag setters to a tracking boolean in options
    7fe7754e67f Fix unit test, remove wait after resize
    0ec6566c68c chore: update emulation version help msg.
    a2c739f3d50 chore: [e2e/framework] Updates test feature gates to versioned feature gates
    7b5cbbb9618 chore: Remove unused unversioned feature gate map by consolidating feature gate files
    d7ed3f1c9b6 Add image volume subpath e2e tests
    7f4b9a52db2 Consider memory requests in determining if resize is in progress, set termination grace period to 0
    f73945aae56 Websocket HTTPS proxy support
    ba09a97341d node: cpu-mgr: Graduation of `distribute-cpus-across-numa` to Beta
    dab8758a59d chore: avoid resetting config of emulation verison and featuregates when adding flags
    7d74a504caa Remove unused VAP for DRA admin access e2e test
    1889e0cad65 scheduler sets observedGeneration in pod conditions
    951e33fdf94 Fix gofmt issues
    10c6a4258f8 feat: graduate MatchLabelKeysInPodAffinity to GA
    917c4b310bd Fix lint issues, use kuberuntime's minGracePeriod const, boost container restart wait period
    327ebcffc85 node: cpumgr: e2e: Define constants and use them instead of literals
    c90f0539c88 node: cpumgr: e2e: Tests for `distribute-cpus-across-numa` policy option
    b6a3ac47de0 node: cpumgr: e2e: tests for NUMA allocation spread metrics
    3edeb60c089 Create Snapshotter interface to fake the implementation
    7da942ca748 Change precedence order for continue and legacy exact match
    e367dca6c5b Change backoffQ less function to order pods by priority in windows
    88f8e6697dc Implement PreferSameNode traffic distribution in kube-proxy
    c85083589c8 Clarify hostname vs node name in kube-proxy
    ff640c3679a Minor updates to kube-proxy topology code
    19952a2b7bd Implement the EndpointSlice controller side of PreferSameZone/PreferSameNode
    90c8f9aef1a Don't write out dummy zone hints in clusters with no zones
    413af836b38 Minor updates to traffic distribution unit tests
    af3584778e0 update generate docs for PreferSameTrafficDistribution
    4435ead24a1 Add PreferSameTrafficDistribution feature gate and associated API.
    6ca82f9c164 Update the use of sets in EndpointSlice validation
    929a9c0cad9 Extend shouldDelegateList testing incorportating state of cacher
    09fdae408fb pkg/kubelet/userns: add idsPerPod tests
    1592bfa4a81 kubelet: config: add userNamespaces.idsPerPod
    9f161590bee metrics testing: add type aliases to avoid direct prometheus imports
    37b47f47244 DRA helper: support dropped fields and TimeAdded defaults
    2499663b84e DRA E2E: tests for device taints
    5760a4f2820 DRA scheduler: device taints and tolerations
    a027b439e58 DRA: add device taint eviction controller
    07a275437f3 kubectl debug: Display a warning message that the debug container's capabilities may not work with a non-root user (#127696)
    d5d008a6bd4 Invoke UpdateContainerResources or trigger container restarts (for RestartContainer policy) when memory requests are resized
    0301e5a9f88 DRA: AdminAccess validate based on namespace label
    2f1f19a992f flake: fix data race for func TestBackoff_Step
    75a4d136aba Update kube-openapi and integrate streaming tags validation
    cd1a5c6d5cf Fix Kubelet unit tests
    506e4fed14e In TestListCorruptObject corrupt the object in etcd instead of changing encryption key
    413e867f537 [KEP-5100] WinDSR to Beta
    8b2cee83c15 Replace StorageVersion API with aggregated discovery to fetch served resources by a peer for MVP
    c09d87f79c9 Implement watchcache returning error from etcd that caused cache reinitialization
    13d04d4a92f DRA device taints: copy taintseviction controller
    6478ca58594 ktesting: fix per-test logging in TContext.Run and WithTB
    939c9c0c6ba DRA: add ResourceSlice tracker
    99dbd85c45f DRA: generated files for device taints API
    797475e1137 DRA: add device taints API
    7fb028a433f DRA: add DRADeviceTaints feature
    c766a52356a Implement KEP 4876 Mutable CSINode (#130007)
    9be73c0d67f Graduate InPlacePodVerticalScaling to beta
    691398c8563 add API approvers to generated applyconfigurations
    aa32537e9a0 Add workqueue for node updates in DaemonSetController
    381ccf0f4c7 Fix empty describedObject in hpa status (#124555)
    5625483527c KEP-4540: added e2e tests for strict-cpu-reservation option
    269bbac6e8d KEP-4540: moved StrictCPUReservationOption to beta feature gate
    4c2be4bdde2 kubelet sets observedGeneration in conditions
    d95d6ba5264 DRA scheduler: fix potential panic during unit test verification
    582b421393d DRA kubeletplugin: add RollingUpdate
    b471c2c11f6 DRA kubelet: support rolling upgrades
    760903c0de6 DRA kubelet: give DRA drivers a 30 second grace period for updates
    0524c807864 e2e/node: Remove outdated comment
    c11077f417b e2e/node: Skip userns tests on windows
    c348bd10e6c pkg/kubelet/userns: Log userns mapping information
    69e270f509c pkg/kubelet: Explain why a user is required to get userns kubelet mappings
    c984f0f08a1 tests/e2e: Add tests for userns kubelet mappings
    1be3f8961bd Fix a race when closing activeQ
    0effe155434 Move scheduler_perf topology spreading tests to a separate package
    b3890d9fa0d bump RemoteRequestHeaderUID featuregate to Beta, on by default
    decd11414b0 fix typo
    091b450057c Replace PodResourceAllocation with PodResourceInfoMap type for extensibility for pod-level resources support
    349e079abeb Update release notes in changelog-1.30 to fix example claim validation rule
    af291a44c3a Add unit test to validate email_verified in claim validation rules
    5d0caaa1a66 feat: Add alpha feature verification to feature gates
    916c7867f7e fix godoc for email_verified requirement when username contains claims.email
    a15520fbeaf Move pod resize status to pod conditions
    61863035803 Adding Unit tests for windows-dsr and overlay support
    984b475e749 Extract delegator.Helper interface to allow making delegate decision based on cache state
    4f1912abf2d Fix missing recursive in consistency check, enable panic on failed check and fix typo in logs
    5402baf4a2b Fix KUBE_BUILD_IMAGE_CROSS_TAG mismatch when KUBE_CROSS_VERSION is passed
    9837a61528f update cri-api comments for Windows HostProcess withdrawal
    a666451e8a3 withdraw Windows HostNetwork support
    2b504a7089f Fix failing git_repo e2e release informing tests.
    aa187d2d5ac add separate container runtime filesystem tests
    c30eb9d9e5c feat: graduate the async preemption feature to beta
    e394d430c48 Promote E2E to conformance tests for JobSuccessPolicy
    0490b9f0b72 kubelet: document seamless upgrade support and guidance
    f1031be019c node: cpumgr: metrics: add metrics for allocation per NUMA
    5c4948ff314 controller: factor out pod node name indexer helper function
    9e7c080b863 Use ValidateListOptions in watch cache
    414bfc707ff Split subfunction to allow adding more subtests
    6d21d8f2376 Test continue with negative RV for reading consistent RV
    8c9452f4ca9 e2e tests: remove unneeded storage feature label
    d66330609c3 Remove the not-even alpha feature setting
    bc74476bdb9 Remove VolumeCapacityPriority feature gate
    43382b1b394 Switch control from VolumeCapacityPriority to StorageCapacityScoring
    f6ddee95f96 Add storage capacity scoring to VolumeBinding plugin
    410dc1d6549 Trying to fix kubelet_config_dir_test
    8f69d596e81 Fix pkg names != dir in tests
    b47e839e4ec Comment on origin and JSON schema
    46d5438c144 Fix import groupings
    1ff4433c87e Fix whitespace in validateFalse test fixture
    4c0c2d21ea6 Use origin in validateFalse's own test
    d1d77cd553c Use test.Helper in helper funcs
    1ae091e7187 Add validation for the NodeSwapStatus field
    9d38a85c709 Ensure unit tests are guarded by a feature gate
    18139b9845f Add unit tests
    16871a1faa0 populate the new node.status.nodeInfo.swapInfo field
    a9b02114099 add auto-generated files: make update
    ee4ac3d70a3 add auto-generated files: ./hack/update-openapi-spec.sh
    4bdaf6cbbde add auto-generated files: ./hack/update-codegen.sh
    a53a517022c Add the Swap field to NodeSystemInfo
    3e48d143fa9 kubectl: Remove duplicate selector calculation logic and add missing test cases for the 'describe DaemonSet' functionality
    1f04af7947b Remove general avaliable feature-gate PersistentVolumeLastPhaseTransitionTime
    a548688ffe1 fix: add feature-gate is disabled unit tests
    03934974688 Add protection finalizer to vac when it is created
    06482b6bd3b address comment
    41e3efdb60a change doPodResizeAction to call updatePodSandBoxResources inside setPodCgroupConfig
    95d3d4a22d7 Gate apidiscovery/v2beta1 serving with a feature gate
    a758e725b86 Non-pointer VariableGen
    4e3d114c267 Refactor VariableGen - no interface needed
    6a59dcfa1dc Non-pointer FunctionGen
    0b295553232 Refactor FunctionGen - no interface needed
    282e1490d43 KEP-5040: Disable git_repo volume driver.
    9aeeb530952 Remove usage of TopologyAwareHints feature-gate from kube-proxy packages.
    25e041470eb Run ./hack/update-featuregates.sh
    619957c9762 Graduate TopologyAwareHints feature-gate to GA in 1.33 and LockToDefault
    a6c94ea605d Enable DeclarativeValidation feature gate by default
    146515ac4a8 kubelet: pullmanager: write to pulled record if secret matches during query
    788b7abe406 kubelet: pullmanager: move to a separate package
    b8fc6042ca0 kubelet: GC for image pull managers
    3793becbb94 kubelet: integrate the image pull manager
    95d411382f2 Fix comment for GetServiceAccountFunc type
    01302639f59 Add unit tests for credential provider in service account mode
    f6a35c55f2d Wait for node to appear in cache in TestUpdateNominatedNodeName integration test
    ef40e670bf1 Update hostpathplugin image to v1.16.1
    cf20c21ef82 Revert "stop overriding max concurrency in CI, let automax procs handle it"
    04ac6df8a91 add dra to edit role and add featuregate test
    718ed7d0b58 dra: add user rbac
    5a98d4dbb4a Limit declarative validation to spec until subresource support is added
    b8361f9c6ea Revert "pkg/kubelet: Fix userns tests on Windows"
    1057407cee3 DRA e2e: more flexible socket listening
    b3befff631d implement a file-based image pull manager
    0ca23338462 make update
    47827f4d9a5 kubelet: modify KubeletConfiguration API with image pull policies
    311e589534b Emit comments before validation code
    ad96b3aed58 kubelet: implement image pull policies
    1a660d3d0c9 flake: fix data race for TestApfWatchHandlePanic unit test
    c4d77a07993 Add test cases for negative resource version in TestList
    58d9b5c7b64 Test bypass for negative RV
    d263344a9b4 Simplify bypass test by just testing shouldDelegateList function
    ec127279571 DRA kubeletplugin: revise socket path handling
    c6252daccb8 DRA kubeletplugin: turn helper into wrapper
    37dee3c2824 [KEP-4817] DRAResourceClaimDeviceStatus to Beta
    dc8dc314421 fix error treatment and remove annotations from proto
    86169a7a1e0 Fix flaky RunTestConsistentList
    09817b320f0 move generate podsandbox request to platform specific
    ce4de97c2e3 make kubelet call updatePodSandboxResources on PodResizeAction
    b27c303ac24 update cri-api runtime interface and cri-client add new method
    8f11574f3d4 update proto files to add new method UpdatePodSandboxResources
    64c0164cec0 kubelet: add the ImagePullManager interface
    37e0fd50aac imagepullmanager: add v1alpha1 config API
    cb7468b0774 kubelet imagepuller: PullImage() - accept TrackAuthConfigs directly
    09284d926cc credentialprovider: track kube secrets as creds sources in DockerKeyrings
    e549eeb7964 introduce the KubeletEnsureSecretImages featuregate
    9df0f6b6043 Call PreEnqueue plugins before adding pod to backoffQ
    8d4eaa024d3 Add SchedulerPopFromBackoffQ feature gate for KEP-5142
    5c17e7bd9c6 node: cpumgr: metrics: add uncore cache alignment metrics
    9cfe1863ce9 node: e2e: clarify test description
    cea7d97d8bc node: cpumgr: use String representation in output
    52e0f522ba0 node: cpumgr: test: use Equals for comparison
    a07510fade8 node: cpumgr: test: abort on failure
    3e70a1bc9c8 remove unneeded e2e features
    6979567c449 Enable proper API in CLE integration test
    f7296b31f0d Add declarative test cases for RC.Spec.MinReadySeconds
    177193ed197 Mark RC.Spec.MinReadySeconds as k8s:optional
    1e336160681 Add declarative default for RC.Spec.MinReadySeconds
    1059dbdee18 Declaratively validate minimum value of RC.Spec.MinReadySeconds
    20b69a54bff Add declarative test cases for RC.Spec.Replicas
    0f4786536f7 Declaratively validate RC.Spec.Replicas optionality
    21b3da7e5aa Add declarative default for RC.Spec.Replicas
    e08bbf254c4 Declaratively validate minimum value of RC.Spec.Replicas
    a9514b05911 Add update-featuregates to update.sh
    088daf472b7 feat: Refactors featuregate lifecycle management script
    14934b481ef refactor: detach Info from apimachinery util version
    a3094ccbe6f feat: extend version information with more detailed version fields
    8d71f74fcdb pkg/kubelet/userns: Remove skip on windows
    691fd360ba2 pkg/kubelet/userns: Wrap error to get mappings
    925416bc370 pkg/kubelet/userns: Provide stub implementation for windows
    74b069d0fab pkg/kubelet: Fix userns tests on Windows
    1ddfc7bdce1 benchmark-dockerized.sh: don't redundantly install gotestsum
    8898868fea4 install-ectd.sh: brace PATH and suggest user export
    d798d86981d cleanup CI integration scripts
    d9a2dee622c Fix subresource parsing for declarative validation
    7848744bf9c remove kubelet fake status manager
    d6e5d4f20d4 make update
    8eb74b96e33 Add validation to StatefulSet's .spec.serviceName
    7315d0a6878 Change internal-version RC.Spec.Replicas to a ptr
    e0011c72367 Support emulation versioning of formats
    8f83f2446a5 Fix detecting consistent read when watchcache starts handling continue
    6d3bff83213 Test recursive in TestGetListCacheBypass and separate overrides
    8b0294daed2 Fix typo and pass the environment variable required to enable watchcache consistency checking in GCE tests
    987bdd9e466 Sync pkg/credentialprovider/OWNERS with k8s.io/client-go/tools/auth/OWNERS
    aab7a079fa4 make each scheduler test independent
    27706a0b54c Add quota support for PVC with VolumeAttributesClass
    2db729cfa42 Add flatz to kubelet auth.
    ed08387663e Enable versioned validation fuzz testing for core v1 group
    b5bc2838089 ReplicationController: Add declarative validation test suite
    5a5ed81e1f2 ReplicationController: Enable declarative validation
    256a576651c Add featuregate, feature and unit and e2e tests
    e8547d8a540 Cleanup unused container parameter from allocation state Delete
    05a9c062125 Don't update checkpoint file for deletion
    30bca329c52 Don't re-write the checkpoint file when the content is unchanged
    e856356225d Enable validation-gen on core/v1
    9e42056a0df stop overriding max concurrency in CI, let automax procs handle it
    cb7afbccf6e delete hack/test-integration.sh
    08745086e2d chore: change Info->Error log level related to declarative validation runtime tests and refactor panic wrapper names
    3b88db4f235 Promote CLE to beta
    a7505f02621 generated
    5ba4a90fdad Add LeaseCandidate v1beta1
    ef3cb5c5afa skip admission for unsafe delete
    a0cc02e264e Simplify shouldDelegateList
    b27735be2ee Define type alias for getServiceAccount function
    ad22c0d4954 Fix IP/CIDR validation to allow updates to existing invalid objects
    78e58b8c49f kubectl: expose context parameter in DefaultRemoteExecutor
    37ddc637f55 Revert PR 125102: Add unit tests to client-go/tools/cache/listers.go
    692785d25b6 Add legacy versions of IsValidIP/IsValidCIDR
    ac6790450ac Move TestListOptions setup before we start API server
    ba189de78ff Slightly improve EndpointSlice address validation
    fc4bb4fdb90 Add validation.IsValidInterfaceAddress
    f79bccf4d99 validation unit test cleanups
    76f1684117a Rename ValidateNonSpecialIP to ValidateEndpointIP
    2090a01e0a4 add e2e test with the gcp-credential-provider test plugin
    ad8666ce88d Update credential provider plugin to support using service account token
    69dd6b3c0e5 CHANGELOG: Update directory for v1.32.3 release
    dd25c6a6cb4 CHANGELOG: Update directory for v1.31.7 release
    de904f80992 feat: add declarative validation metrics and associated runtime verification tests
    34349e735ca CHANGELOG: Update directory for v1.30.11 release
    1d365762a53 Introduce versioned validation test utilitizes and add fuzz tester
    3eaa0478509 CHANGELOG: Update directory for v1.29.15 release
    6defd8c0bdb node authorizer changes to allow read on svcaccounts
    d398de294dd Add KubeletServiceAccountTokenForCredentialProviders feature gate
    dd7b9f6171b Add service account token and annotation to v1 CredentialProviderRequest
    ba2eecca0d2 Add TokenAttributes field to v1 CredentialProvider
    003f2157671 *: reduce tracing events during streaming JSON objects
    2d810ddfa9c Apply feedback
    b9cb44a5933 Add approver permission for jpbetz in component-base/compatibility
    d6f61438e01 CHANGELOG: Update directory for v1.33.0-beta.0 release
    9fe18bf4866 Update core v1 fuzzer and validation tests to use util/ptr instead of util/pointer
    775b118a6d2 Remove invalid emulated version and add lexographical order test
    9eef88c8446 Add CLE e2e tests
    f5dd7107f71 Implement streaming proto encoding
    d6ef05b9a82 Add +k8s:minimum validation tag
    b7b1e78d629 Fix context usage
    cfcf7e93a3a chore(validation-gen): rename flag --extra-pkg -> --readonly-pkg in validation-gen
    ca4f7857576 Update hack/verify-golangci-lint.sh
    cd9df2f115a chore: change error_matcher.go to use test interface instead of importing testing pkg
    c36b1c901f8 KCM: CTB publisher: tolerate NotFound during discovery
    24e8fa769bc move ClusterTrustBundles featuregates to beta
    1f1dbc35a90 kubelet: ctb: use generics to handle alpha/beta APIs for CTB projection
    5b3b68a3a14 KCM: CTBPublisher: use generics to handle both alpha/beta APIs
    d3f44a5bc0f kubelet: lazy enabling the ClusterTrustBundleProjection feature
    0cd2976cabe integration: ctb: apiserversigner test to use certbeta api
    ccd2d4d62ad generate code
    e0f536bf1fa use the ClusterTrustBundles beta API
    f598b4860c5 copy ClusterTrustBundle API to v1beta1
    efac8fdea24 Delete todo comment to ignore update where 'old' is equivalent to 'cur' (#130322)
    f9e5dd84ad4 Graduate image volume sources to beta
    b38bfaa2ac9 fix: shared informer typos
    cdac61b9025 use generic set in sig-node
    63cd30e3f6c use diff port for TestCreateConfigWithoutWebHooks from TestCreateConfig
    9e53371ddaa Fix test cases that may potentially cause a panic.
    e4d73c56cd0 Implement consistency checking
    4c6971007be Refine logging levels in Job, IPAM, and ReplicaSet controllers.
    92aeb63a5be Handle optional value-types with defaults
    f1674543718 remove feature gate AdmissionWebhookMatchConditions that was GAed in v1.30
    8195f82fe82 remove AggregatedDiscoveryEndpoint that was GAed in v1.30
    141e98ed050 Add comments to FunctionGen
    989d68d7577 chore: update DeclarativeValidation featuregate
    03f0475ebd2 Add Complete reason verification to all e2e conformance tests
    8a20e908398 [FG:InPlacePodVerticalScaling] Drop 'Proposed' resize status
    3460b2238eb Disallow optional/required on non-pointer structs
    dcbfe67b1ca Prevent usage patterns we don't want to support
    3d2d8db8350 Add option to explicitly enable future gv or gvr in runtime-config.
    8eb90fe136d Add CoveredByDeclarative to field error struct
    628d107b619 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates
    9828ad64da4 e2e framework WithFeatureGate adds [Feature:OffByDefault] (when passed a feature that is not Default)
    819cb8fe22f Add emulation forward compatibility into api enablement and RemoveDeletedKinds.
    46ac2af06a8 Fix validation test for ReplicationController
    6d0b6278cd3 Rename some allocation.Manager methods
    d4444dd5986 Use actuated resources to determine resize status
    660bd6b42d1 Track actuated resources in the allocation manager
    af9ac325b13 controller sets observedGeneration on pod conditions
    42abc2a73b9 Mark StatefulSet's .spec.serviceName optional
    4deb4f2b5f0 Trigger rescheduling on delete event also when unscheduled pod is removed
    80f4f62ea86 hack: fix shellcheck
    77758c185b1 hack: verify to verify-golangci-lint.sh
    67f0e95b3ac hack: fix text
    a9d558de263 hack: verify golangci-lint config, update text
    89440b1239b DRA: integration tests for prioritized list
    ccb607f06b9 Unify ListOptions validation between cache and etcd
    dbf780a48ae authn-trust: don't react to target CM updates
    aab083972db fix handle terminating pvc when kubelet rebuild dsw
    ce163947aa6 fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode
    085d23388ad Mark VAC roll-forward test as flaky
    dc806188177 Use SetFeatureGateEmulationVersionDuringTest() for testing ServiceTrafficDistribution feature-flag disablement in control plane components
    4e317265c77 Remove usage of ServiceTrafficDistribution feature-gate from kube-proxy packages.
    2492eddd20b Bump ServiceTrafficDistribution feature-gate to GA in 1.33 and set LockToDefault=true
    ca43bb17190 Run 'make update'
    0d0b81b9375 Update trafficDistribution API spec docs for GA graduation
    770ce2d874b Better handling of YAML that tastes like JSON
    f08e640b9e2 Lock down gofuzz in deps
    0ce4268b1fe Vendor randfill
    e54719bb667 Use randfill, do API renames
    6798e2d8635 Add time to extra-pkgs for validation-gen
    8c98dee1edb Add utiliptables.NewDualStack
    b0312589692 Improve utiliptables error handling when there's no iptables binary
    f1d0eb4fe47 Add a unit test for utiliptables.New()
    9c98d297953 Remove exec arg from utiliptables.New
    e5e76d7c7ce chore: Fix incorrect AppArmorProfile.Type marker
    3f5d30543d8 Add integration tests for using SAR with node audience restriction
    b09ca8c2c84 Use SAR to allow dynamic audiences for node audience restriction
    97a54dc4b04 update to v1.22.0-rc.0
    337f1c211d3 Build etcd v3.6.0-rc.2 image
    41469004282 Add normalization support to CEL semver library, enable in base env
    7316d831377 Add warnings to all IP/CIDR-valued fields
    d4c55d06cfa Export endpoints, endpointslice, mirroring controller names
    610adebdb75 Add utilvalidation.GetWarningsForIP and .GetWarningsForCIDR
    34717000dae Split out IP validation functions into their own file
    5e067b6781c Minor IP/CIDR validation cleanups/fixups
    b62503dd66e Remove a dead error check in winkernel
    f001b3916d4 Remove a stale comment in metaproxier.go
    303593cafe1 Fix some pkg/proxy comments
    b5e9a8262e4 Remove exec arg from utilipset.New
    36f5820ad15 Remove some unused proxy args/fields
    13f0449e4ca Fix up kube-proxy import ordering/organization.
    834a0d92cfa hack: fix settings for forbidigo linter
    c510b93d28f Add tolerant parse option to semver
    fabd449d7fe fix typo
    e1d3aaf8612 Return correct error upon websocket message read failure
    325a54f73dc ./hack/update-codegen.sh
    d6ea91cf93d client-gen/fake: pass ListOptions to Watch method
    dfb8ab65210 DRA scheduler: fail in PreFilter when DRAPrioritizedList is disabled and used
    0a32e7d6e79 make sure that container is running when execute kubelet exec command
    d76f40d2f39 fix(scheduler): skip best-effort pods in BalancedAllocation PreScore
    032b05114c7 chore(scheduler): add filter integration tests for missing part plugins: TaintToleration plugin
    9765fe4abb7 Add all extra_pkgs needed by main API types to validation-gen
    0140842add1 update testdata for roundtrip and client tests
    701b76f10d7 pod gc controller sets status.observedGeneration upon pod failure
    40e7d88f022 Kubelet sets pod.status.observedGeneration behind FG
    749f03a49fe Gradeate Job SuccessPolicy to Stable
    6f1f7beff3a sort client-gen output
    20230f22514 Fixing unit tests in k8s.io/kubernetes/pkg/volume/util/subpath on Windows
    bb3ba9d073f Preserve old observedGen if incoming attempts to clear it
    12d34624ba4 add observedGeneration to pod's dropDisabledStatusFields
    6edd9217469 run 'make update'
    eab9197d1a8 Add observedGeneration and validation to pod status and conditions
    6645022d8bc Update status before returning err
    b345f64c767 Skip test if cri proxy is disabled or undefined
    abdc760ba54 call dropDisabledPodFields from pod status strategy
    46c09d30178 add more uncore test cases
    919e8a62e9c uncore: more testcases
    5a7697dfe0c Fix unit tests for volume ownership
    15cb82b3b3f Separate compactWatchCache from increaseRV
    2fc3cd90b15 Store pod backoff expiration time in QueuedPodInfo
    5917343e457 Parallelize lease candidate ping
    627bfbdfdf1 windows does not support sleep infinity
    a1cfb13099d we no longer need to track the go version in staging/src/k8s.io/kms/internal/plugins/_mock/Dockerfile
    ed326fea133 Always report pod status resources consistent with the current pod sync
    0e7e025c599 use kube-cross to build kms plugin
    a3009258dac fix dockerfile warning
    4d7f6eadf10 kms-e2e: use setup_env / respect GOTOOLCHAIN
    97db9a7843a feat: Add flagz endpoint for kube-controller-manager
    e2505b0d27c Update OpenAPI
    c597cc1f309 Allow OpenAPI verification to pass both with and without strict alpha handling
    0a9f492eedf Fix up ErrorMatcher from feedback
    e6cf9dd1663 Pass storage.ListOptions to WaitUntilFreshAndList
    796690637d6 Propagate error when creating CustomResourceStorage instead of panic'ing
    4001c819f09 fix
    b88f026053a Implement tests for encoding collections in Proto
    7a84e7630f9 Run lists tests in subtests
    5ecddb65715 update to latest cadvisor @ v0.52.0
    8202b791e96 Job: Use jobSuspended util for suspended detection
    32fd0de21c5 tweak
    8e4b00e9494 use Cleanup instead of defer
    186e6ee2bd5 Debug latencies in request handler
    8fac9c68e18 Change allocation manager pod UID to types.UID
    3a80473cda2 CHANGELOG: Update directory for v1.33.0-alpha.3 release
    4f7ce7513e2 chore: migrate logging featuregates to versioned
    04129d1dc82 node: metrics for alignment failures
    4fda41c6509 Update base image for addon-manager to fix a build failure.
    ffc1b32c660 Add declarative validation utility for use from strategies
    5ff334a1589 Add declarative validation to scheme
    c4ea350ef66 Add "endpoints.kubernetes.io/managed-by" label to Endpoints
    41577dea1b0 delete opIndex wrapping
    33bf509eb06 Use CamelCase for memory manager policy name check in InPlacePodVerticalScalingExclusiveCPUs
    6975572a801 Add missing increments of queue_incoming_pods_total metric in scheduling queue
    96bae53a375 Promote SELinuxChangePolicy and SELinuxMount to beta
    afb4e96510f Expose NodeInfo to Score plugins
    94471a5c5cf feature(scheduler): add more requeue case for CSI plugin when the VolumeAttachment is deleted
    cb5c8d159c8 Don't automatically clear in-progress status when resize is not allowed
    b0621e6955d Update CHANGELOG for addon manager v9.1.8
    9598e5a1a57 Mark the feature gate on by default since it's a security fix.
    523a19aa44e Extract isInPlacePodVerticalScalingAllowed to shared function
    460db5c1372 Always use allocated resources for pods that don't support resize
    6df3ea46d92 Never attempt a resize of windows pods
    ca9734afaa7 Add third party strategy to the coordinate leader election integration test
    074d9653b14 Bump addon manager kubectl version to 1.32.2
    ea3fa1c5196 Add e2e test for MutatingAdmissionPolicy.
    8bb597c0d24 Clean up some confusion around TrafficDistribution metrics
    fdddd8d18c9 Port k8s.io/endpointslice from utils/pointer to utils/ptr
    526960f9885 Change FailedScheduling Event message to be more intuitive
    a2f47e6586f Add validators: immutable
    63050550c35 Add validators: optional/required/forbidden
    31f46372170 Add validators: eachkey, eachval, subfield
    b5f9a00258e Add validation-gen core tests
    8c41bdf05b1 Add validation-gen test infrastructure
    3210f46b5b0 Add validation-gen to codegen scripts
    e892dfac7d5 Add validators: opaque
    c1f9e6b8eed Introduce validation-gen
    7f5e1baeeea Bump gengo/v2 to latest
    9a843790a30 Adding tests for consistency
    a94403e9429 add BytesToXConfiguration function
    77647cdfc3e rename SplitYAMLDocuments function
    2d8d972cb85 Add warning logs for uninteresting kind
    6a59c98a9e8 distinguish between YAML and JSON file formats during log output
    09427ab5586 Update test/e2e/network/netpol/network_policy_api.go
    bb79c29dd51 remove feature gate RemainingItemCount that was GAed in v1.29
    3842d74d97d restrict trace context propagation to system:master and system:monitoring
    f8b080a4be7 Update test/e2e/network/netpol/network_policy_api.go
    2f6f8d083e0 Update test/e2e/network/netpol/network_policy_api.go
    438d496555b Add test for ReconcileConntrackFlowsDeletedEntriesTotal metric
    e5ad4a18781 e2e network policies test support network policies with finalizers
    da987eb762d Wrong matcher - use BeNil instead BeEmpty
    1e64a890385 Reduce number of (versions of!) images we pull in our e2e tests
    29c219dcebe update go.opentelemetry.io dependencies to v1.33.0/v0.58.0
    05a90bf642a Revert "Add LeaseCandidate v1beta1"
    1a1b566d61f Revert "LeaseCandidate alpha -> beta,"
    71622aee49d Revert "generated"
    d5c072117db Clarify host_port field in CRI
    2c062117d00 fix lint
    2bed3333bc5 fix lint error
    75b09b40540 separete runOp
    df9d5f0bf8b Clarify ordering requirements of client-gen --input
    e43de183cf1 conntrack reconciler must check the dst port
    7fcaaa08ee9 Run make update
    e2d1fcc1628 Addressed comments
    3d318b57e30 revert the old loop to check if the node is rebooted
    7555cbca90f DRA: Updates the e2e tests for Prioritized Alternatives in Device Requests
    36d8a44b9c3 DRA: Update controller for Prioritized Alternatives in Device Requests
    2229a78dfe6 DRA: Update allocator for Prioritized Alternatives in Device Requests
    cc35f9b8e8d DRA: Update quota calculations for Prioritized Alternatives in Device Requests
    a716095a8af DRA: Update validation for Prioritized Alternatives in Device Requests
    68040a31736 Run make update
    8f7b43b6fdc DRA: Update types and defaults for Prioritized Alternatives in Device Requests
    0faebe30fdc DRA: Add DRAPrioritizedList feature gate for Prioritized Alternatives in Device Requests
    0d7c9aa816e Prevent node-problem-detector from being scheduled on Windows nodes.
    ac0b30db6da Update dns OWNERS in line with kubernetes/dns
    f91105a77e5 fix prep and validation for pod subresource updates
    c8111709e56 Add an error matcher, convert 2 tests
    052f1fe8203 Update tests
    8a1057a804b test: sched: replace `pointer` use with `ptr`
    486d12efc5f call cleanup func position change
    bee19638f19 tweak
    e7c743b2ebf Streaming JSON encoder for List
    a86cca4e185 Improve error reporting of KCM metrics
    f9051901cee client-go certificate: context-aware APIs and logging
    6b7e38f0180 Fix nits from PR 130355
    c7cf852086c test: Add Origin field support to ReplicationController spec.Replicas validation test
    07477c656e7 test: convert ValidateEndpointsCreate to use error Origin field in test
    f63359efb03 fix(pod/util): typos in getting pod validation options
    5eb37b073c6 Fixing k8s.io/kubernetes/pkg/util/filesystem unit tests for Windows
    3010618efee feat: add DeclarativeValidation and DeclarativeValidationMismatchMetric feature gates
    c3de5b707e2 Do not look for SSH external IP for NFSPersistentVolumes tests
    2d10dec3a29 generated
    ac7a95efb09 LeaseCandidate alpha -> beta,
    0fede7b8a2f Bump x/oauth2 and x/crypto
    dca3f56f64b Add e2e test for topology manager with restartable init containers
    fad4594fd9f Add LeaseCandidate v1beta1
    038b90d475e return error instead of fatalf
    fb3b163ca0b Ensure we switch to k8s root directory for dockerized builds during e2e-node ci job
    b7c80f7f159 Fix implementation of ContainsCIDR to allow non-equal addresses
    f2e8fe93fb5 Fix bad CIDRs in a NetworkPolicy test
    f73f6fd2ab5 client-go/gentype/fake: sets opts.Watch true
    cc0faf086d7 [kube-proxy:nftables] Skip EP chain updates on startup.
    65c792ca9ba e2e_node: remote: fix getting pod logs
    e5becd01c84 correct ResyncPeriod comments
    28d359beec1 promote HonorPVReclaimPolicy to GA
    a4885091974 test: Improve error comparison in resource validation tests
    02f7dc55d16 feat: Add Origin field to Error and related methods
    94f3b552bf3 Fix linter warnings
    b0dc96e71ec Add unit tests for progress tracking and remove fullpath from reporting
    20cecaee97f Add Watch to controller roles (#130405)
    d44ac38891c Promote e2e to conformance tests for JobBackoffLimitPerIndex
    a91ed902fed Graduate Backoff Limit Per Index as stable
    5942cd81382 Added tests for log file modes and compressing unknown log error conditions.
    f214d8e27a0 delete unnecessary init
    650db7fab97 golangci-lint: temporarily suppress known issues in the code base
    45b323d6a5f use Cleanup func
    e8b9d1d93f8 feature: Added filter integration tests for missing part plugins: NodePorts plugin
    2472f4965fe Implement chunking for gzip encoder in deferredResponseWriter
    239aad8e4b2 chore(scheduler): use framework.Features in scheduler plugins
    168c338f7cb Remove limit support from btree store
    43509b63d76 Bump hack/tools to github.com/golangci/golangci-lint 1.64.5 for go 1.24
    8090db5dcfd Switch to private instances of rand for seeding for tests
    88300c406b9 bump go.mod to set min go1.24
    597b54720e1 Bump images, dependencies and versions to go 1.24.0
    fea89f25d1b Move GetCurrentResourceVersion to storage.Interface
    4205f04ce35 Replace uses of reflect.DeepEqual with cmp.Diff in pkg/scheduler tests
    bed838955fa Removed parallel execution for test/subtest where AllocsPerRun is used
    4c635ecf825 Rename CacheProxy to CacheDelegator
    3c9cc93dbcc Bump etcd v3.6.0-rc.1 image
    eeabc3ac6c4 selinux: Ignore pods with Recursive policy
    d66928b842a Add Job e2e for tracking failure count per index (#130390)
    740db0f01d9 Move watch progress to separate package.
    145bc8a2ccf chore(kubelet): Use ptr.To to replace the custom function unit64Ptr.
    04f0bd4e83b storage/cacher/ready: dynamically calculate the retryAfterSeconds
    eb0f003d252 Fix a bug where the `ResourceQuota` admission plugin does not respect ANY scope change when a resource is being updated. i.e. to set/unset an existing pod's `terminationGracePeriodSeconds` field.
    f7c17992973 Handle returned error as placeholder variables for now
    fbce6bd6107 Fix typecheck errors
    b51cbb1d17c Change plugin interfaces to use progress monitoring
    32752fe395a Add recommendation for using OnRootMismatch
    49dabe56d04 Monitor progress tracking for permission change
    f484ae5bcbd Fix kernel version check condition in nftables proxier
    ae991725b79 e2e uses websockets by default for portforward
    071b1bd839d e2e test use websockets as default for exec operations
    a97c6a70451 Added the mergeDefaultEvictionSettings Kubelet Config
    4c0b24b06d4 e2e_node: eviction: fix ImageGCNoEviction test
    d02401dea92 start setting pod metadata.generation
    2de2093bcef Add snapshotting of watch cache behind a feature gate
    0f24b9ff451 Split backoffQ into backoffQ and errorBackoffQ in scheduler
    059dee36f84 Allow ImageVolume for Restricted PSA profiles Stop referring to ImageVolume as an unknown type during pod security admission validation. Avoid restricting ImageVolume for the Restricted profile, as users who can create a pod with a certain image should also be able to use ImageVolume with an image.
    2173a0fafd4 Add watch cache capacity upper bound adjusting logic
    56bd8d86a58 test/integration: use default API groups in test apiserver
    cf70b06e376 e2e_node: improve logging for eviction test
    b56d30e32a5 fix flaky test: Subpath Container restart should verify that container can restart successfully after configmaps modified
    d92c70b8269 enable go-required check
    afa266d7ef9 remove genernal available feature-gate AppArmor
    2feecd46bdb [e2e/node] update base image from busybox to agnhost
    c2afe4909d0 fix copyright year
    de51ce79c01 ./hack/update-vendor.sh
    3ae5312c97e Generate register files for all examples
    fb11415a690 add simpletype pkg in v1 for register-gen test
    e9c47f86018 Add codegen::register to hack/update-codegen.sh
    dc4fce61ce6 Add missing imports in register-gen
    bc4ae15d77b fix wrong assertion on tests
    a933481f797 use const rather than string in cgroup_v2_manager_linux.go
    b1f6cfcfae0 change defer order to pass test
    a20a959b2c0 hack: split up test-dockerized.sh
    86f504284c1 feature(scheduler): add queueinghint for volumeattachment deletion
    f540197768f chore: add more error info for validateResourceSliceSpec
    ddd4c56893b Fix pod resize E2E tests after forbidding memory limit decrease
    1f642c79c31 Drop winsymlink go 1.23 workaround
    237aadab89b [hostutil_windows] Remove unix workaround
    2a32b213723 [test] handle ModeIrregular in getFilePerm for Go 1.23
    b9f6013c12c fix: handle socket file detection on Windows
    dfc8b271cf1 [kubelet] Make use of os.ModeSocket info
    9492a2ca9ba DRA: add dedicated integration tests
    9024140468e Cleanup allocation checkpoint failure message
    fe4671356c0 Call allocationManager directly
    2418b54ee2a Revert "Add random interval to nodeStatusReport interval every time after an actual node status change"
    f904c6f46c0 fix e2e
    1289f43f73f Build etcd v3.6.0-rc.0 image
    034285dc477 Test continuations and exact revision LISTs
    0f40600b316 add e2e test to reproduce unexpected unmount after kubelet is restarted
    e1b3c8fd9b4 Add e2e test
    06fa6158a06 Update namespace deletion process when feature gate `OrderedNamespaceDeletion` enabled.
    7098221ae54 Fix TweakContainers comment
    f1612003ff0 Fix the node reboot validation failure
    4e651addd8c Add statusz endpoint for kube-scheduler
    e986217c217 Update Generated API Code
    d5c804b14db Remove Flagz feature-gate check before populating serverRunOptions.Flagz
    a49b336e83e test(statefulset): return errors in framework function GetPodList for upstream handling
    92cc680c8ae Fix SelfSubjectReview test to decouple beta and GA types from the same apiserver
    2636aa35e3b Require canonicalization of NetworkDeviceData IPs
    ec66befdcb2 Fix dup word in API doc
    8ee35583912 node: topology-mgr: resolve lint errors
    9e1d6d5cdc1 node: topology-mgr: Add logs in the happy path
    04b048dcec6 flake(scheduler): fix allWaitSchedulingPods data race failed
    f9e7b15c001 ktesting: add Run
    c2ad724e9a1 ktesting: add Parallel
    9a795c31fa3 remove release-1.28 config due to EOL
    98fd7b4deac update publishing rules for rel 1.29/30/31 to use go1.23.6
    764e13e27ae Refactor TestList and validate continuations to allow testing pagination and more exact RVs in the future
    bf63e0046cb selinux: rename allMetrics
    ee36b817df0 events: ensure the name is valid
    ff69b5bcf37 generated
    bdf2e2d0646 Fix non-recursive list should also read RequestWatchProgress feature when consistent list from cache is enabled
    9e27ae27258 Remove gate for leasecandidate strategy
    4cc32f817a1 Remove cloud-provider arg for kube-apiserver in local-up-cluster.sh
    c186de00809 Fixing k8s.io/kubernetes/cmd/kubeadm/app/util/staticpod unit tests on Windows
    697293906a8 Fixing k8s.io/kubernetes/cmd/kubeadm/app/util/dryrun unit tests on Windows
    97cb563cae0 Require auth for all new Kubelet endpoints
    2b1b20b3b15 Fixing k8s.io/kubernetes/pkg/proxy/winkernel unit tests
    993f3c361f2 Fix DRA flaky test for ResourceClaim device status
    21f899596ef Promote AnyVolumeDataSource to GA
    a0a226d1584 integration: svm: wait for CR to be stored as v2 after CRD v2 switch
    80966ce5c44 integration: svm: use consistent path args pattern in etcd fetch functions
    e1557f80a2a integration: svm: use k8s ktesting package for test ctx init
    faf5b3ec765 integration:svm: refactor utils
    293a6c5c916 fix typo: optimitically -> optimistically
    553e9bf84d1 adjusting loopback certificate validity in kube-apiserver
    99881453838 Ensure that btree threadedStoreIndexer implements orderedLister
    3d007532e0d Introduced additional log formatting to windows kubeproxy.
    faf6dc13134 Add retries to runner.List()
    b6f49d0728c Add retries to conntracker.ClearEntries()
    90a42e0dc04 Add retries to conntracker.ListEntries()
    84ec78ede71 Extract pod allocation manager from status manager
    81e54a2a016 Move allocation state out of statusmanager
    3100bbab2f7 Update gorilla/websockets library from 1.5.0 to latest 1.5.3
    72b404f6aad CHANGELOG: Update directory for v1.33.0-alpha.2 release
    3f4ef42e9a5 Move PodResizeStatus cache out of allocated state
    d3eb639313e selinux: add tests for SELinuxController
    e15fd43d812 test(network): replace calls to e2erc.RunRC with Deployments in service latency tests
    cd0df9786ea test(network): replace calls to e2erc.RunRC with Deployments in service proxying tests
    7deb49e3a60 Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature"
    a2eeec5c5a7 Revert "Switch hard error to a WARNING for kernel version check"
    9315ddbb650 kubeadm: fix panic when no UpgradeConfiguration was found in the config file
    de984ec9b92 Update kubetl subresource to stable
    992c8e9479d selinux: explicitly specify NodeMetrics in function names
    7d5f3c57230 [kube-proxy:nftables] Read map/set elements on setup.
    26fe6bc6e09 Add tests for encoding collections in JSON for KEP-5116
    323410664c4 e2e: node: cpumgr: check CPU allocatable for CFS quota test
    bb49a05fb5a fix: adopt go1.23 behavior change in mount point parsing on Windows
    004c5f5a398 chore: remove unnecessary check for node is zero
    45e2f3e438e Add a test to validate deferredResponseWriteron multiple write calls
    a36f64e0743 Add more log information to help debug flake #129779
    a70b6b9105b Add lock for csiNode update
    2050d6fc696 selinux: add a new SELinux translator to the controller
    3b7926824ec e2e_node: Don't use userns in DefaultPocMount tests
    5d726e32c4d remove duplicated test on configmap volume
    c48499d3604 fix ci
    2382c0125b3 remove Removed generally available feature-gate DisableCloudProviders and DisableKubeletCloudCredentialProviders
    29e5d429797 kube-apiserver: removed the deprecated the `--cloud-provider` and `--cloud-config` CLI parameters. Signed-off-by: carlory <baofa.fan@daocloud.io>
    438df173e32 kube-proxy: metric to track entries deleted in conntrack reconciliation
    fcce8aaad8a workloadExecutor's member use value not pointer
    e353086e6ad test(network): replace RCs with Deployments in util function StartServeHostnameService
    bdd83038e83 kube-proxy: metric to track conntrack reconciliation latency
    98d600bef94 test(network): replace RCs with Deployments in util function CreateServicePods
    6b16f051484 modify SchedulerCacheSize field comment because it will be removed at v1.34
    e52274a9e2e Don't allow resize policy mutation
    7a1b2aea741 fixing k8s.io/kubernetes/pkg/kubelet/apis/config/validation unit test failures on Windows
    a1595d9dca7 Don't allow memory limit decrease unless resize policy is RestartContainer
    f6090185a80 e2e: fix node conformance flake
    0ce48b56368 Honor KUBE_HACK_TOOLS_GOTOOLCHAIN
    6d58125111b Bump KEP-4427 : AllowRelaxedDNSSearchValidation to Beta
    dc59c0246fb proxy: should add PingPeriod for websocket translator
    844c2ef39d2 e2e: node: cpumgr: cleanup after each test case
    f5e86dfea65 Deflake the PodReplacementPolicyFeatureToggling Job integration test
    5e6611af559 fixing various unit tests on Windows that create abstract sockets by now having them create file-based sockets on windows/darwin
    453e22a1667 Remove unused service account creation from node_authn.go
    36c6c7778b4 Use `sudo` for dmesg in hack/local-up-cluster.sh
    83595f500a4 NFTablesProxyMode to GA
    ca8a0f5f1be separete sleep func
    6d291ddc21b fix lint
    a9ee6bdf81a use *e.tCtx
    cc87cb54ab7 delete unneccesary define
    3ce36b3b3ce rename doXXX to runXXX
    d202a683f54 rename workloadExecutor member name
    c40e69bb4cc remove double comments
    3725c6f7650 pkg/kubelet: Make newTestKubeletWithImageList allocate a userns manager
    96c2b81670c features: Enable user namespaces by default
    447c74ca2cb DRA E2E: fix race between container start and check
    4724870b971 test: remove implicit inclusion of "name" label in utils functions
    d6a6dda2fa7 KEP-3857: Recursive Read-only (RRO) mounts: promote to GA
    2642d8222d8 CHANGELOG: Update directory for v1.32.2 release
    976eae5ee7c CHANGELOG: Update directory for v1.31.6 release
    fc219cd3843 CHANGELOG: Update directory for v1.29.14 release
    08ea6ca8da2 CHANGELOG: Update directory for v1.30.10 release
    93a88f55182 GetRandomReadySchedulableNode nerver return MetricsGrabbingDisabledError
    ec165ca5601 fixing k8s.io/kubernetes/pkg/kubelet/eviction unit tests on Windows
    df1e9eeeb8c skipping InPlacePodVerticleScaling unit tests on Windows
    569eb41f238 fixing k8s.io/kubernetes/pkg/kubelet/cm/memorymanager unit tests on Windows
    f8728b62228 Bump konnectivity-client to v0.31.2
    dbb34a04cc6 Reduce the number of processes used in e2e to prevent unexpected OOM
    b9cd017a214 Fix intermittent test failure
    b346ac0f8e0 Limit ResourceQuota LIST requests to times when informer is not synced
    def95202175 node: topology-mgr: Add metadata to logs
    f2f4634bd35 Add LegacySidecarContainers feature gate
    54e2416210b update sig cl owners in k/k
    da2f36be583 remove NodeOSDistroIs from test/e2e/framework/pod
    358afb38f59 update publishing rules to use go1.22.12 for some active release branches
    c83a5e0ad2b HonorPVReclaimPolicy: add more e2e tests
    e31a3989fcf Make kubelet always canonicalize the PodIPs
    6512de76ce3 Make EndpointSlice mirroring controller always canonicalize the IPs it writes out
    29be52b3f70 Make EndpointSlice controller always canonicalize the IPs it writes out
    7259742e233 Make Endpoints controller always canonicalize the IPs it writes out
    26fe80855d1 Update build/pause/Makefile
    faa23642f51 Bump windows pause image base to mcr.microsoft.com/oss/kubernetes/windows-pause-image-base:v0.4.1
    1bd3d34d6f9 Remove some dead code in the Endpoints controller
    eaab9081955 Mark v1.Endpoints deprecated in the API
    fc3e649ef4d make update
    2a903dd7a3a Mark v1.Endpoints as deprecated in the documentation
    d3feb5080c1 Update websocket logging levels for better debuggability
    c7a90b670c4 Introduce kuberc as new flag to customize defaulting and define aliases in kubectl (#125230)
    f75965e5d9b aim to fix runtime class error
    1c5170ff528 disable cfs quota when exclusive cpus allocated per static cpu policy requirements
    437cd38e19a add feature gate
    953954168c9 Modify how to check the status
    0c68aa6a35f test(network): fix jig deployment scaling
    d728eb47dc5 test(network): replace RCs with Deployments in util function jig.Run
    ab02cda1683 make error consistent
    8a797e42e12 resource metrics e2e tests: expect swap node and container level stats
    676116359db Scheduler: update the error log
    464fd0765d0 test(network): replace jig.CreateRC with jig.CreateDeployment
    af3b9e613d3 reduce dependencies in apimachinery net testing utils
    938b5f82620 chore(scheduler): add more log info when no preemption candidates is found in preemption
    297b35873fe use workloadExecutor
    4facb872247 kubeadm: update preflight check
    445183a31fa nominate myself as an approver for storage e2e tests
    479f9cd898d can pass all testcase
    8ee64ba6b54 Bump images, dependencies and versions to go 1.23.6 and distroless iptables
    819bf72b0c2 Remove feature disablement ConsistentListFromCache in update openapi script
    fff99141581 Fix the flaky Job test: TestSuccessPolicy_ReEnabling
    dc51c81751a kubeadm: update v1beta4 docs
    523ed5498e1 Fix comment for FailIndex as JobBackoffLimitPerIndex is beta
    b30944b0715 chore(dra): move pool validity check to the beginning of pool processing
    5d278c138c0 fix labelvalues for scheduler-perf
    b1d72a5b7c9 test: Add emulated-version flag verification in flagz test
    c8804bff6d1 fix: flagz endpoint to return parsed flags value
    8ab075578a5 feat: promote CRDValidationRatcheting to GA
    ee25fed97d2 update publishing rules to use go1.22.10 for some active release branches
    d195ea8756d fake/clientset: improve TestNewSimpleClientset
    46ff62d6e49 Run ./hack/update-featuregates.sh
    9ebe4422a98 Add support for Debian and Ubuntu
    533a1211d30 Add completion in kubectl debug
    6971779d0dc pkg/proxy/conntrack: refactor log levels for conntrack cleanup
    07c279d06bf bump netlink
    7edc7fbd47e kubeadm: add --etcd-upgrade flag to kubeadm upgrade plan
    dbefbd593ed remove unnecessary unnecessary
    03b59d8eef2 propagate context
    88410368cd5 test: fix a typo
    0907f745a0d Add the feature gate `OrderedNamespaceDeletion` for apiserver.
    cd9fc8bc71f Enable ServiceAccountNodeAudienceRestriction feature gate by default in v1.33
    5738ee4def9 Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32
    62809dd0de9 node audience restriction: use csi translator to convert intree inline_vol/pv to csi
    ecd67e25373 node: memory-mgr: Adhere to the message style guidelines
    d6c50c391d1 node audience restriction: add unit tests to simulate intree inline_vol/pv to csi failure
    f4496974573 node: device-mgr: Adhere to the message style guidelines
    40c86d8e064 node: device-mgr: Ensure consistent use of named arguments
    19e406a3574 node: device-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...)
    9cd041156fb node: device-mgr: Add logs in the happy path
    a585bd74c48 node: device-mgr: Keep log level consistent across all gRPC calls
    4b613ae96fe node: device-mgr: Bump log level for expected skips
    584e224b431 node: device-mgr: Add metadata to logs
    a10b3c35559 node: memory-mgr: Add logs when memory allocation is skipped due to QoS
    6240febf4c5 node:memory-mgr: Add logs on the happy path
    ee7f2616c62 node: memory-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...)
    07d83acce56 node: memory-mgr: Update log levels and add logs to capture state update
    34fd61a3ef1 node: memory-mgr: Add metadata to logs
    7997c93cfdf node: cpu-mgr: Adhere to the message style guidelines
    ca2c46a2730 node: cpu-mgr: Add logs when CPU allocation is skipped
    01a546fe53a node: cpu-mgr: Add logs on the happy path
    14c0bc19ac2 kubelet: improve allocated resources checkpointing
    b05d56e5a54 Fix pod worker and prober log message typos
    46a17f60e4d E2E node: fix --timeout default
    8fc3a33454b Refactor compatibility version code
    e54be1e1337 CHANGELOG: Update directory for v1.33.0-alpha.1 release
    8bd4e1bab22 Update test/integration/serving/serving_test.go
    6c093b1699e kubeadm: fix dry-run for kubelet-wait-bootstrap phase
    065bf2004d2 Deprecate WatchFromStorageWithoutResourceVersion
    20fbdeac96e kubeadm: fix upgrade to be able to rollback ControlPlaneLocalMode
    bb36212342e kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta
    b1ad53c5331 Disable StorageNamespaceIndex feature gate when BtreeWatchCache is enabled and deprecate it
    c5f66bfe70b Add statusz endpoint for kube-proxy
    8431aa75390 Use %w to format errors and fix lint error.
    3de770d5985 Use uncompressed kubelet log file permissions when compressed.
    1a8d8c9b4a3 client-go watch: NewIndexerInformerWatcherWithContext -> WithLogger
    e1ab6073ab1 Add more tests for optional.
    3701e393279 fix: remove the mention that DRA uses Pending
    8a3d0d68a20 Update the env option.
    7b1c7c639ef Fixed the estimated cost for opt map.
    c1e0443232f Bump cel-go to v0.23.2.
    0ca45bd4f80 Bump images, dependencies and versions to go 1.23.5 and distroless iptables
    5281152f077 feature: Added score integration tests for missing part plugins: TaintToleration plugin
    e2ff03486d1 scheduler_perf: add thresholds to DRA test cases
    949385731f5 golangci-lint: remove "strict" checking
    8d27bf2108c Leave TODOs in pkg/kubelet/kuberuntime for later removal
    0bee0bcaa7d Promote SidecarContainers feature to GA
    81f09811cad Fix kubelet_authz_test.go
    e0f548183c4 Graduate BtreeWatchCache feature gate to GA
    4a5bbc4c159 Flip SeparateCacheWatchRPC feature gate to false and deprecate it.
    f6b527cb54e Additional timeout to receive all watchEvents
    4619a89ebaa e2e: expand error conditions when test-ing port-forward
    0d5d714c2a6 Fix the remaining flaky integration tests in Job controller
    da5a76bd396 Fix flaky test for container life cycle
    f7df3ec07fa move log restored state to better location.
    829fa63b5b1 DRA: fix allocation mode `All`
    e766b04ade9 node: cm: use maps.Clone instead of reinvent it
    8cc74e8a266 client-go informers: provide ListWatch *WithContext variants
    6688adae142 client-go + apimachinery watch: context support
    274ad0391fc Add scheduler_perf test case for default PodTopologySpreading constraints
    71b91148409 kubelet: Migrate pkg/kubelet/sysctl to contextual logging
    ce7d2130ad3 Fix kubelet_authz_test.go
    f891092b87d Add the check of node rebooting in windows rebootnode test
    a9aab298b47 switch to using the real FIFO
    24b43ea96ec make a real FIFO implementation
    424c7ca7e58 Remove unused ClearState function
    b7fd30c8712 update generated docs
    8f11a3b3679 WIP: fix the flaky Job integration tests
    7936d64e037 Replace IsExternalSigner boolean with ExtendedSigningDuration throughout apiserver to ensure consistent token signing length between local and external token signing.
    1b0ad78718e fix
    ab80d577321 Try to clarify EndpointSlice semantics some more
    f310ac03f45 kubeadm: graduate WaitForAllControlPlaneComponents to Beta
    82f0303f899 node: e2e: Remove flaky label as device plugin reboot test is deflaked
    0c34b706b28 Revert "kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta"
    9ac25f1d9ed update of CRI API readme file
    bde75d60200 chore: use NotFound error for missing components
    8c80d384b2b feature: add scheduler queuesort plugins integration test
    ed826dddfec fix(dra plugin): when there is no resourceclaim, return directly
    8a0937c0346 feat: add a lint rule to prevent Add unversioned featuregate
    509bbed0985 Add a test ensuring all /scale sub-resources return table
    b04e1b80be8 kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls
    1fa995224aa Update scale sub-resource to return the same error everywhere
    9d893aed0c7 Use GitHub release for downloading `crictl`
    601c0e359dc cacher: decrease the running time of TestConsistentReadFallback
    cfd6d9a2b44 cacher/cacher_whitebox_test: newTestCacherWithoutSyncing allow passing a clock
    88090c49732 prevent deletionTimestamp from moving into the past
    cfa0349159b Update validation code
    c31b1b3332f Resolved some review comments
    c479f007d84 Update field  to use feature gate
    ab964a776c8 Fix e2e tests failure
    5889da1bbc7 Resolved latest review comments
    242dec3e341 Updated some unit tests and resolved some review comments
    5ed5732fa22 Refactored status manager code of updatePodFromAllocation
    8fa8277908a Added some unit tests
    2ba61325f69 Fix e2e test error due to ContainersToUpdate map not created
    9a5c57817a0 test: pod-resize tests for sidecar containers
    6c5cf687229 Resolved latest review comments
    6cf5b80c644 Fix some unit test error
    1cf45872773 Fix build error
    1eb966cb455 Added unit test for sidecar containers in TestValidatePodResize
    a0d3cb0a2c7 Added proper validation msg when non-sidecar containers are resized
    591b0f547ae Fix issue of pod spec mismatch if there is any non-restarble init container present
    5d5e903e27b Revert e2e tests added for sidecar
    3885d2f8abc Added sidecar support in ValidatePodResize and dropNonResizeUpdates
    cdddaed8419 Added sidecar support in  and
    34ddb91f187 Fix some unit tests error
    0e392f90170 Disable e2e test for now
    d1fac494f4d resolve merge conflicts
    5742f3deeb9 Cleanup running dmesg process in `local-up-cluster.sh`
    b3e1d57339b kubeadm: Promote ControlPlaneKubeletLocalMode feature gate to beta
    617c0944354 Add an e2e test
    bd8dee96379 Improve Goroutines metric calls in parallelizer.Until
    54500bfe692 cadvisor_provider, unit tests: ensure container-level metrics are collected
    ceeba21d3d0 cadvisor_provider, unit test: Add swap stats to cadvisor CPU and Memory stats
    c1112666098 cadvisor_provider, bugfix: Add swap stats to CPU and Memory stats
    e6c19f315f9 cri_provider, unit tests: ensure container-level metrics are collected
    748b52a1308 cri_provider, bugfix: Add cadvisor container stats
    a85f489b28d client-go/transport: structured, contextual logging
    44ca3b36545 Passed context for Wait methods in integration test utils
    659804b765c refactor runWorkloads
    4e05bc20db9 Linter to ensure go-cmp/cmp is used ONLY in tests
    3a780a1c1b5 KEP-2862: Graduate to BETA.
    28896d2f90c e2e: bump port-forward timeout
    013f65b2576 DRA: fix test-driver examples
    7f766762d91 Updated Concurrentmap iter
    d3e8572d706 cluster ip allocator should check first on the legacy allocators
    627e83c841f Passed context for Wait methods in integration test utils
    27ec5de8638 chore(scheduler): improve log output for podtopologyspread filter plugin
    156b9fbadc1 Bump kubedns and nodelocaldns to 1.25.0
    38a21e06f5d fix: Fix the issue of relist caused by client-side timeout
    e263b878eef Deployment controller should count terminating pods in the status
    dc1914c61c0 ReplicaSet controller should count terminating pods in the status
    28437797b52 update generated files and feature gates
    14783b8a9bc add validation, field disablement and tests
    f7c46df6651 api: add terminatingReplicas field to ReplicaSet and Deployment statuses
    067012f5844 `client-go`: transform `watchErrorStream` to wrap the underlying error (#129765)
    2b24c518b04 Drop declaration of IP/CDIR type CEL variables
    0b38e6cd9e6 e2e network: remove test for funny ips
    87139335b0e Switch from using a function to just pure map in create token
    3030b1dc6a4 Finish extracting ExplainFlags structure
    06077806cab Add dom4ha to SIG Scheduling reviewers
    91afef615ad Refactors explain command to split flags from options
    da999fbc1b5 Update CNI plugins to v1.6.2 and avoid using k8s-artifacts-cni bucket
    fdebfb44857 e2e log info on nodeport allocation failures
    f150016fbec feature: Make Unschedulable scheduler performance test parametrized with the number of initial nodes.
    1065377f97e Revert "tests: include stdout of failed commands in JUnit"
    faf30b30679 update github.com/coreos/go-oidc to v2.3.0
    84b8f181e4d Concurrentmap Iteration
    db3ae754b1d e2e network: adapt dual stack tests for endpoint slices only
    69964319d14 remove GAed EfficientWatchResumption since v1.24
    d889bd15bda DRA CEL: skip estimating the cost in the scheduler
    a78983906f4 Adding support for providing version for functions in kube_codegen.sh (#129658)
    b7386467c8d client-go rest: store logger in Result
    7821abf2ae2 client-go/rest: finish conversion to contextual logging
    b15a1943d51 client-go/rest: backoff with context support
    48fb886325f client-go/test: warning handler with contextual logging
    9998a032b13 kubeadm: fix a wrong log message
    bda81f1b68e Kubelet server handler cleanup
    c56426bd9f6 node: device-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...)
    f8596d6d289 node: device-mgr: Change ErrorS(nil, ...) to InfoS
    c68fc01b774 return an error instead of recording a test failure
    c9e81cd84ca Switch to gopkg.in/go-jose/go-jose.v2 @ v2.6.3
    0452ae402a5 Use cached calculateResource result when removing pod from NodeInfo in preemption
    c5fc4193bbe Fix pod delete issues in podresize tests
    7712d34b9ee remove unrunnable tests from NFSPersistentVolumes
    969ecabc0f2 Remove all references to v1.Endpoints from non-network e2e tests
    da5bf27bc57 Remove no-longer-used TestUnderTemporaryNetworkFailure()
    bae4122f56f deprecate nodefeature for feature labels
    7266759b67f Nominate macsko to SIG Scheduling approvers
    238c32a1d9b Remove cache.ErrRequeue
    8e77ac00013 Remove Queue.AddIfNotPresent
    aaac13fc6a1 remove gke from e2e
    09c82fc58a2 integration etcd storage test
    8fcb4b5773a comment we keep storing v1beta1 by default to handle upgrades
    3606d52cd6d make update
    779b9cf90c7 update integration test
    b6c3dfdad5c e2e test for service cidrs
    7721590b9e5 update controller manager
    33ba5855340 update kube-apiserver
    bea17e14971 update internal API
    ad511cd249f update registry
    e340a07ccf4 update kube-proxy
    ddfc4d3e588 update text fixtures for rbac
    c26a5796fd9 update networking strategy
    e3b39758215 describe servicecidr and ipaddress v1
    eeae7b3fc8f promote ServiceCIDR and IPAddress to GA
    272f33de90a api rule exception for ServiceCIDR
    68cae5131a5 server both ga and beta servicecidr and ipaddress apis
    3b48b0627bf graduate DisableAllocatorDualWrite to beta disabled by default
    f97ff113fa0 graduate MultiCIDRServiceAllocator to GA
    5cd7325cd7e e2e: expand error conditions when test-ing port-forward
    7d02a18a645 add a comment to InTreePluginPortworxUnregister
    03a3288ddde tests: include stdout of failed commands in JUnit
    5ed3164d322 Update in-tree gcePersistentDisk tests
    e26fb1c393a remove duplicated test case of `pvc not found`
    e1fdced21f3 Put the target plugin names in the Qhint integration test cases
    aecf3238bf6 fix lint errors
    8b4eae24ab1 Move some exec helper functions from framework/volume to framework/pod
    d3974065c8e Remove GetDeviceNameFromMount from HostUtils
    612fcdaf737 add a comment for features.Flexvolumes
    45529062e76 KEP-3836: 1.33 - remove feature gate
    ce9e398641b hack/ginkgo-e2e.sh: forward TERM/INT to Ginkgo
    1d4acfb8822 Update EnvFromSource.Prefix doc to mention Secret as well as ConfigMap
    25a6fa144f4 There is no need to set the worker to nil to avoid potential timing issues.
    110868691b2 node: cpu-mgr: Update klog.Infof(..., err) to klog.ErrorS(err,...)
    b3fed900526 Remove unnecessary feature label Recreate
    8d7aed698b7 remove APIListChunking which was GAed since v1.29
    e68cc0a6eda remove feature label FSGroup
    9898bfdbdae Remove unused test code
    fca697aca08 Add logic to check for new ephemeral containers on pod update and update secret cache if they exist.
    92e35e7618f update credential provider godoc with unique provider name req
    9a331bbf59c credential provider config: validate duplicate names early and preserve provider order
    1fc514cfe99 Bump sample-apiserver test image to 1.32
    2504c6e73ae Update VERSION to 1.32.1 for sample-apiserver
    2cc3dbf2250 DRA CEL: add missing size estimator
    1714fbfa754 node: memory-mgr: Change ErrorS(nil, ...) to InfoS
    dac6b34a618 kubeadm: improve message in 'reset'
    4aeedcde3b8 Fix CSI migration UTs
    14936a7f582 Promote Portworx CSI migration to GA
    40b9a297389 Fix Portworx plugin's CSI translation to copy secret name & namespace
    479ff5a02b0 remove duplicate getAttrsFunc calls to reduce temporary memory allocations
    e578dcab3ad CHANGELOG: Update directory for v1.29.13 release
    7f1abe993cb CHANGELOG: Update directory for v1.30.9 release
    8ad8ad4681e CHANGELOG: Update directory for v1.31.5 release
    cba6300414c Document nftables kube-proxy's "public API"
    e5b326c0505 CHANGELOG: Update directory for v1.32.1 release
    c78ee00e963 add missing KEP link for AuthorizeNodeWithSelectors feature gate
    271b8cf1c1e kube-proxy healthz handler ip family aware
    226b43b8ee7 Prevent alpha feature gates from being enabled by default
    94d90fafeed fix name
    3986472b3c7 Revert to go-difflib and go-spew releases
    fef67f64c7b Update compatibility matrix and maintenance status upto release-1.32
    c911ddd8a48 Fix: touch /dev/null permission denied on macos
    936f249fa05 Add introduced and removed version information in etcd fixtures
    43d86c2a3ef Drop github.com/asaskevich/govalidator
    0d8a8fe3065 Update to latest kustomize/v5.6.0
    bfce77d1c0f We still can't rely on first condition being fs-expansion pending condition
    aa6a72f76ff Bump CSI sidecars to fix CI issues and such
    59850b58230 Promote ServiceAccountTokenNodeBinding to GA
    d66ced5730f client-go/tools/cache: fix TestAddWhileActive
    8221e28e4d9 Add ffromani as approver for kubelet resource managers and their tests
    bc488020870 remove WatchBookmark feature-gate comment from types.go
    c0b49120e53 lint: removed empty line
    a7937f53915 Remove WatchBookmark feature gate
    561c1d235a0 full sync per one hour with BFR
    0ddab169457 shrink the cache.Queue interface to what is actually used
    12345a14c34 kubelet: use env vars in node log query PS command
    e179f0e364d Add test for compatible version
    2f4bd13fe57 kubeadm: remove misplaced error during image pull
    a92297f1a76 kubeadm: remove the GA EtcdLearnerMode FG
    aa1d79c3701 Use DeepCopyJSON to copy testcase input
    a2b12ba4061 Simplify schema sentinel subresource logic
    f886f3b7f10 e2e: expand error conditions when test-ing port-forward
    17030f19b6c e2e services: avoid panic on service creation retry
    2c58e274760 storage e2e tests: add more tests for pv relaim policy
    fd35f652d41 fix state mem constructor and adjust restoreState
    018ee41e6f5 kubeadm: fix a wrong comment
    3274dc40edc pkg/proxy/healthcheck: consolidate IsHealthy and isHealthy
    1c1fc736162 pkg/proxy/healthcheck: enhance testing
    729deef4542 bump kube-network-policies to v0.7.0
    0e55e47cff1 Remove unnecessary logging in FilterActivePods
    64aac665fd9 pkg/proxy/healthcheck: bug fix for last updated time
    4a4fc9da801 Extract and unify cache bypass logic by creating a CacheProxy struct
    2d826871146 Improve topologyToMatchedTermCount map in InterPodAffinity PreFilter
    1b7ddfe6bbb e2e: deflake subpath tests
    1b2bacda5bd Only test requests that pass validation
    7226a3084e8 DRA e2e: adapt to increased ReservedFor limit
    0899cf892d4 add documentation that 0s duration will be overwritten for 5m
    ba816967a0c Simplify status subresource ratcheting testing
    8d79998058b remove workaround for vsg testing
    c6f19d3c2a1 update snapshot CRDs to v1 in cluster addons
    e5a3bdb3a71 Refactor shouldDelegateList
    bdd0f5dd238 test: add Junction file type test on Windows
    1cee3682da9 DRA API: bump maximum size of ReservedFor to 256
    fe895563d92 Test all possible combinations of input for shouldDelegateList
    13a21d58548 Add benchmarking of namespace index
    8eb31f8aa16 Fix service's nodePort already allocated
    a2a0a752102 Cleanupï: only initiate http2 server options when http2 is not disabled
    2653caa248d fix dra test lint
    5b2c1dde79d Add namespace to DRA adminAccess ValidatingAdmissionPolicy message
    41f805b4761 Added check for multipath device mapper
    a6c7d22f44f update publishing rules to use go1.22.10 for some active release branches
    0645f0e50ec pkg/proxy/healthcheck: file rename
    d6c575532ab pkg/proxy/healthcheck: rename 'proxier' to 'proxy'
    4a0578e3dee Improve benchmark to handle multiple dimensions
    091fa293908 Fix status subresource ratcheting
    f1834f06f4f client-go event: add WithContext expansion methods
    e681a790584 apimachinery wait: support contextual logging
    77eae7c34f9 feature(scheduler): remove dra plugin resourceslice QueueingHintFn
    fb47caa689f Update coredns to 1.12.0
    cad12e5a415 Lower verbosity for topologycache messages
    efdd6bea2e9 kubelet checkpoint: refactor state memory
    42a5e5f4255 Pass context down to wait.PollUntilContextTimeout
    8e872978e84 kubelet: improve allocated resources checkpointing
    75131475fdf Remove general available feature-gate PDBUnhealthyPodEvictionPolicy
    a7be958884d Remove general available feature-gate JobPodFailurePolicy
    a811427020a Remove general available feature-gate AppArmorFields
    7c887412c88 Add validation for revisionHistoryLimit in sts to prevent negative value (#129017)
    4114a9b4e45 [kubectl] Enhance describe output for projected volume sources to indicate optional Secret/ConfigMap (#129457)
    02fbcb4e69b kubeadm: should not warn on non-detect sandbox image
    b1cb471982b Use generic btree in watchcache
    a97ed3c98bc Update github.com/google/btree
    977c4e9138d remove nsenter package
    00a7849ef90 kubeadm: add preflight check for losetup on Linux nodes kubeadm: remove preflight check for nsenter on Linux nodes
    c9bfc3b4556 use ginkgo.DeferCleanup to do cleanup tasks
    129418b9a98 e2e: ctb: make it possible to run the tests in parallel
    df503e54c85 Update etcd from v3.5.16 to v3.5.17
    4c6deed07ec kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfiguration is not respected by 'kubeadm upgrade node'
    61681433869 Remove use of deprecated functions
    5aa4dd4a6ea Make it possible to pass a scheduler profile to RuntTestCoreResourceEnqueue
    78a64027559 Extract list response struct to manage all the response fields
    9d55fba36a0 fix featuregates_linter
    deb234c9d5c refactor: simplify boolean expressions in CRD handler
    2fd16abbe8d kubeadm: bump supported etcd version
    cff0f4009f1 webhook: alter regex to account for x509sha1 GODEBUG removal
    a9b641464eb chore: adding support for staticPortRange
    2c305d71f05 kubeadm: add system verification check(including kernel version check) for upgrade
    c3a54926a44 Fix PodTopologySpread matching pods counts for constraints with the same topologyKey
    2cb1cc9e3a0 Bump images, dependencies and versions to go 1.23.4 and distroless iptables
    215d0b094b6 Add tests for kubectl qos (#129388)
    5f4d646ea33 Add Device status const comments
    8e1403563a6 client-go cache: fix TestHammerController
    b649c113661 chore(printers): add miss unit test for resourcequota
    b406ba5cc36 kubeadm: skip disabled addons in clusterconfig on upgrade
    f47e6d04283 fix: enable len rule from testifylint in module component-base
    35f584187a6 accept GINKGO_FLAGS for test-e2e-node.sh (#129215)
    976aefca1b2 fix: adopt go1.23 behavior change in mount point parsing on Windows
    e99fea7e3f1 deflake volume tests
    63ddf4bf33f test: Add integration test for apiserver statusz endpoint
    2ddbfd19670 Fix Borg pub link in README
    176730b0f08 test: fix pv deletion timeout
    7c515cd1cb6 remove kubeadm.alpha.kubernetes.io/cri-socket annotation when kubeadm upgrade
    ca4529574e9 remove node special feature typos
    0b6e3718340 Bump x/net to v0.33.0
    59fcd7b770d fix metrics test
    6c94adcc630 expand etcd storage tests to test for 1.31..1.33
    dc476e968d9 remove emulated version test for un-emulatable 1.30
    cf28c0405c0 Expand emulated version range to n-3 with 1.31 floor
    4e8477bd3bd Bump binary version to 1.33
    f20eb2e7c16 client-go workqueue: add optional logger
    446252b0c35 Add crd from external snapshotter
    c71d27cb020 remove v1.30.0 api testdata
    cf1e2e6c2da Add v1.32.0 API testdata
    db6bf022173 feat: Add flagz endpoint for kube-scheduler
    4396511e43a kubeadm: removed preflight check for `touch` on Linux nodes.
    e3b12d89d0d fix(dra): support multiple resources to publish in PublishResources
    769e7990d61 remove container-runtime-endpoint flag when upgrade
    efdb7357506 kubeadm: fix idempotency retain, address deprecation
    78f9f214c02 apiserver/admission/cel: add unit tests for JSONPatch expressions
    a88e08c3971 Do not attempt to truncate revision history if revisionHistoryLimit is negative
    db4c509e716 kubeadm: generalise CreateOrUpdate etc.
    4411a3f3be8 lint
    bc46e3d9b3f apiextensions: replace panic with error handling in DiscoveryController
    4638ba97166 client-go/tools/cache: add APIs with context parameter
    00dab9dffa6 Add Validation to versioned feature specs.
    f3ff7d0518f chore: update comment for NamedFlagSetsReader
    8495df64b22 deprecate nodefeature for feature labels
    68ab918df76 Bump filepath-securejoin to 0.3.5
    13b84453df5 Coerce null label and annotation values to empty string
    4a2b7ee5699 Configure watch cache history window based on request timeout
    04426633c0b Use OS-agnostic path separator in pod warnings check
    b963e1514e9 fix check errRaw != nil but return a nil value error err
    fd8a61ae1b3 kubeadm: update owners for v1.33
    19aef482fae fix incorrect variable reference in handleUpdateEndpointSlice
    75e5bd6a4f0 Fix unit test.
    3ec97a445f0 kubectl: add test coverage for cordon command (#129202)
    b9fc5678d96 Not using fine-grained auth.
    a87dd67a3c8 feature(kubectl): use autoscalingv2 in kubectl autoscale
    a7340ff36c0 [windows] Don't chown existing directory in MkdirAll
    e1ef9e40f57 chore: Update apidiff.sh script description
    0c1b1e04501 Address comments
    6a608c3cdb1 drop NodeSpecialFeature and NodeAlphaFeature from e2e-node
    e67c24bdbb4 Bump kubedns and nodelocaldns to 1.24.0 (fixed)
    67a13f5355d Revert "Bump kubedns and nodelocaldns to 1.24.0"
    c3a3a54822a Add `github.com/golang/protobuf` to unwanted dependencies
    2c24a12804c Update generated clients after removing always-nil setConfigDefaults error return value
    c3eba35aa2c Remove always-nil setConfigDefaults error return value in generated clients
    1d13ff2a05e make update
    11d68ecc4eb ResourceClaim.Status.Devices.Data as pointer
    f5969adb14a Clean up NewServiceChangeTracker/NewEndpointsChangeTracker args
    79d1c078bb1 Make change trackers just ignore the "wrong" IP family
    2c348bf1863 Use a constructor properly in change tracker unit tests
    7e578bdb6d9 lint
    ed7f7ce92b0 fix race conditions in polling functions
    532607ecbbb Revert "Change default filestore permissions to 0700"
    d84ab830ad8 Remove shouldServeBeta parameter in apiservice storage
    b2c84061c9b Change default filestore permissions to 0700
    3269f4bb94c bump kube-openapi
    8f782fea930 Add client-go README
    3cd1c8dd2d2 Drop v1alpha1 VAP in CEL tests
    68631d8f7c1 Remove v1alpha1 serving for VAP
    1b15876e266 test: reduce container resources in in-place pod resize tests
    90e64a57c6c kube-proxy,nftables: add debug logging for failed transaction.
    b7d6e787268 make update
    ca5f1deed44 Fix ResourceClaim status API inconsistency
    161a817812e Clean up v1alpha1 serving for authorization API
    c1d0e870f4f Replace `github.com/golang/protobuf` with `google.golang.org/protobuf`
    3571992ffcf Add watch permission to namespace-controller for WatchListClient feature
    39e7db9cc92 kubeadm: remove iptables/ip/tc/ethtool binary preflight check
    80735180ab2 Update x/crypto/ssh dependency
    a69efaeb765 Shut down webhook after apiserver
    9e46be86470 CHANGELOG: Reflect correct approvers/reviewers
    137ccd2a73b OWNERS(sig-release): Add `release-team-subproject-leads` alias
    0c1ccd133b0 OWNERS(sig-release): Reflect Marko's position as RelEng subprj lead
    5c283cbb453 flowcontrol: remove testing dependencies
    8fce9b0db68 apidiff: default from prowjob env if available, default before doing anything else
    c9066d75f6d Fix data race in CBOR serializer's custom marshaler type cache.
    e8087b3f6ac Remove the limitation on exposing port 10250 externally
    f9d9649f567 Bump kubedns and nodelocaldns to 1.24.0
    f93e6f3d3ae kube-proxy implement dual stack metrics
    b95c7880005 remove release-notes of reverted PRs
    0ba43734b4c client-go/tools/cache: goroutine leak checking
    e3c584030c3 k8s.io/apimachinery: add HandleCrashWithLogger and HandleErrorWithLogger
    ae11c7deb1b DisallowInvalidLabelValueInNodeSelector
    0cc92622006 kubectl: fix wait --for=create to work correctly with label selectors (#128662)
    5b06498cb24 fix: fix miss makezero bug (#125132)
    2f9fb220ba6 CHANGELOG: Update directory for v1.32.0 release
    ebb02bb6cc0 feat: Adds flagz page for kube-proxy
    88365488062 test: Add integration test for apiserver flagz endpoint
    7caff55fd9c Add statusz to kubelet auth.
    353118c0475 e2e: don't panic asserting inside wait.Poll
    63992e1790d dra e2e tests: add feature-gate label when these tests depend feature-gate
    5d3c07e89db kubelet: only emit one reboot event
    f367122f302 scheduler plugins changes are API changes, not upgrade action required
    9bd5dc86d31 Fix grammar mistake in kubeadm config v1beta4
    e35c9b2cd22 add comment for features.BootstrapTokens
    3698050dc79 network e2e tests: add feature-gate label when these tests depend feature-gate
    902dedbb522 fix:  Move statusz to debugging handlers.
    816cd402806 Unify ComponentKubelet and add unit tests.
    a04df83f86b add statusz for kubelet
    804f8c75843 kubelet: fix DRA registration test
    bfed2323105 Update cri-tools to v1.32.0
    74090f8eb4a updated bootstrap-discovery link
    247555c2b79 test: deployment patch status test should  check the modified fields
    d1cc270f139 local-up-cluster: only wait for coredns if enabled
    bb2db379c79 test/e2e/apimachinery/watchlist: select only wellknown secrets
    8f48a82e6ed docs: `-l/--selector` example for set-based requirements
    060c653b53a scheduling e2e tests: add feature-gate label when these tests depend feature-gate
    04669c5d644 add warning for duplicate port name definition
    5a8d77a2ae2 Add statusz endpoint for kube-controller-manager
    c5f0e63c624 Add Podresize endpoints to pending_eligible_endpoints.yaml
    22c41caca9f Add integrate test to OOS node
    dce863e5e61 fetch cni plugins from GitHub releases
    f0c5de00600 Fix volume expansion offline
    29d26297a1f e2e: node: fix misleading device plugin test
    a0b74011b2b add kubelet validation for containerLogMaxFiles
    cb74323e070 refactor:  Simplify the code logic.
    617e5c79bb4 storage e2e tests: apply feature-gate label when these tests depend feature-gate
    1fd76884b96 Isolate mock signer for externaljwt tests
    b71763ef386 Remove unnecessary log msg.
    0a02c74ca63 update-vanity-imports.sh: remove script
    8a908e0c0bd remove import doc comments
    326c84a1515 [e2e, service] Add total timeout for affinity check curl command.
    b330eeac2ff prune-junit-xml: preserve system out + err text during test pruning
    e0e4af8a58b prune-junit-xml: smarter concatenation when pruning tests
    53e9f29d29f Fix kubelet e2e tests incorrect message
    8f4e425daf2 chore: ignore dat files generated by scheduler-perf
    0d18ae303bb apiextensions: add pkg/test with CEL unit test helpers
    9e99be7c2b4 Fix: typos for volume package
    e5ebbdc3c7f Ignore internal packages messages
    ebe5bab2cb4 Move common code to an httputil package
    27608fa25db refactor(scheduler):  Rename UpdatePodTolerations for code style consistency.
    f92bde1894f parallalize the apidiff dump
    affafd906da improve report on failures summarizing the modules with incompatible changes
    7de94d43cab handle the case when modules are added or removed
    52386915a83 use relative paths and modules that are not visible to golagn workspaces
    48ea6fc4651 oom_watcher: fix testifylint failures
    f622be03338 kubelet: Migrate pkg/kubelet/oom to contextual logging
    e6fccc36d8e apidiff support internal go modules
    79d62d8bb3b change current and desired
    6f06cd6e057 Do not reload kubeconfig from disk
    a43b00b429c make test-cmd: use kube::util::find-binary to get kubeadm binary
    65b243fcd60 chore: remove repeated scheduler prefix metrics for CacheSizeMetrics
    bf1280014bb pkg/volume: remove unused function
    31958838318 UnitTest: kube-proxy EndpointSliceCache cleared correctly
    78b440a74af Fixed: kube-proxy EndpointSliceCache memory is leaked
    05ebf451146 e2e: wrap DRA ResourceQuota Forbidden claim check in gomega.Eventually
    eb6bb5f84d8 Record dataTimestamp as float
    67b74696f8c Adjust performance test threshold limits
    8312c3ec242 Use generic Contains rather than deprecated ContainsString
    7c3a9d65fca Don't set default resize policy in E2E tests
    da4dc0aec78 Stop defaulting container ResizePolicy
    3baa6f08c0a Add modern-go libraries to unwanted dependencies
    b63593715ff Test EndpointSlice in dual-stack e2e tests
    9dbdfe7ecb1 Remove provider specific operations from the autoscaling tests and reintroduce the tests.
    c3f15fd707a Use generic sets rather than deprecated sets.String
    bfea4890c59 cleanup: remove pod_scheduling_duration_seconds
    36245509e86 fix flaky behavior due to the test ordering between DynamicProvisioner and Retroactive StorageClass Assignment
    4a876e21bce fix: params typo
    7e977d824cf update the github.com/golang-jwt/jwt/v4 dependency
    dd1300df986 📝 output log when server shutdown is failed
    7280d58f856 Don't allow to tolerate flakes
    b577972a551 set user.DefaultInfo.UID from x509 cert
    4e21f535475 Add test case for service with same named port for regular and sidecar containers
    e637659d893 Fix named ports of restartable init containers don't propagate to EndpointSlice
    a6e995379af Add test cases for Service with restartable init containers
    f87bcd9b3a8 fix: remove duplicated unit tests in JSONPatch and ApplyConfiguration
    90922f5c946 Fix linting issue in test
    a9c311b96a3 static pod upgrade test with hostNetwork
    2581d2fadd2 Add self to sig-instrumentation leads
    588408df1cd Bump konnectivity-client to v0.31.1
    0ba8af9006f DRA: enable performance tracking with scheduler_perf
    36f9ee958e2 proxy/util: remove unused function
    179fa16f467 Remove user privilege checks from preflight tests
    30a7664c3f5 Change way to create a pod in test
    c725e18e079 feature(scheduler): more fine-grained QHints for interpodaffinity plugin
    cd6f4153e05 Fix a bug in framework.IgnoreNotFound where it will panic when  a function type's final input parameter is a "..." parameter.
    22c3db6f7f9 Added unit test for validation check of sidecar containers
    de8e8c5404c Add integration tests for event handling cases in scheduler_perf
    7e067396c2a Build etcd image v3.5.17
    36144e07085 test: add a check that a specific error has occurred.
    49080bf02a1 Document the existence of nftables as a kube-proxy mode.
    80ed375e373 Fixed time
    8b90c9e885c lint
    991651353d6 lint
    fe46e47bd13 chore: update deprecated polling methods in apiextensions-apiserver
    dc258e65ac1 memmanager:cleanup: drop `Experimental` prefix
    3d069b2a8a6 Add myself to client-go reviewers
    b1830bd1de2 Improve validation for missing storedVersion
    5db88777c4f change the CapExec value to false by default
    636419cdd7f Fix nil pointer dereference in selectable fields check When checking specVersion.SelectableFields, if specVersion is nil, a nil pointer dereference could occur. This change updates the conditional to use || instead of &&, ensuring that the check for specVersion being nil happens first, avoiding potential runtime panics.
    50ed36229ce cleanup todo comment in node restriction integration tests
    c478e4bd382 Add e2e tests
    11594fabe64 csi: update snapshot controller to the v8.1.0
    de6a43c43c5 generate
    93d66a216fa Update API docs that are shared between VAP and MAP
    a67cf0ba4da Add volume modificatoin recovery e2e test
    b01b016668a Use Go 1.21 min/max builtins
    6f97d063775 add device-plugin-test e2e log
    e5fd9cfb189 Job: Remove JobTrackingFinalizer annotation specific testings
    94f6422562e test:Fix typo
    734c36851fb test:Add podgcCtrl to attachdetachClients
    6910e766991 test:Add podgcCtrl to attachdetachClients
    bf1b9c45ea9 add test for inmemory response writer
    50f71e948c6 prevent unnecessary resolving of iscsi/fc devices to dm
    e5ffba17bec Report event for the cases when probe returned Unknown result
    4dcddabb7e1 update vendor
    e2f62322586 preserve options after remount for bind mounting
    49b479116f4 [e2e][webhook] Retry update webhook configurations
    f97abdbee07 allow ContainerResource calculations to continue with missing metrics like Resource calculations
    1b371d0d469 Add test for CEL reserved symbols without double underscore
    b53ea554f88 Adds more flexible version of test ccm server
    568255ac7d8 e2e_node: add test about container metrics from cadvisor
    d9e278711cb Fix GetVolumeName for image volumeplugin and add unit tests for CanSupport
    8e877096161 testes written for cache/listers.go
    6e82d974510 fix: Ensure testForceDetachMetric works on the delta of ForceDetachMetricCounter
    ee3e9a7bd44 apiserver: decrease timeout for TestKMSHealthzEndpoint

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 4 insertions, 4 deletions

diff --git a/recipes-containers/kubernetes/kubernetes_git.bb b/recipes-containers/kubernetes/kubernetes_git.bb
index 7a35afd5..ad8fc089 100644
--- a/recipes-containers/kubernetes/kubernetes_git.bb
+++ b/recipes-containers/kubernetes/kubernetes_git.bb
@@ -5,9 +5,9 @@ applications across multiple hosts, providing basic mechanisms for deployment, \
 maintenance, and scaling of applications. \
 "
 
-PV = "v1.32.0+git"
-CVE_VERSION = "1.32.0"
-SRCREV_kubernetes = "5fe148234f8ab1184f26069c4f7bef6c37efe347"
+PV = "v1.33.2+git"
+CVE_VERSION = "1.33.2"
+SRCREV_kubernetes = "f208b6c73d17f7c2535393117ab93cd18b673e47"
 SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
 PE = "1"
 
@@ -23,7 +23,7 @@ PV:class-devupstream = "v1.28.2+git${SRCREV_kubernetes}"
 
 SRCREV_FORMAT ?= "kubernetes_release"
 
-SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.32;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
+SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.33;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
            git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/release;protocol=https"
 
 SRC_URI:append = " \