kubernetes: update to v1.35.2

Bumping kubernetes to version v1.35.2-20-gb6f632ba56e, which comprises the following commits:

    b57e146aec7 cmd/kubeadm: ignore EINVAL error during unmount
    af6488c9d55 Use localhost image reference in PodObservedGenerationTracking test
    61003ad140a drop publishing rules from dependencies.yaml on release branch
    b9be60a8c53 start scheduler after creating binding/non-binding slices
    659d489e8dd dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first
    02115b6ee1f Update CHANGELOG/CHANGELOG-1.35.md for v1.35.2
    fdc9d74cbf2 Release commit for Kubernetes v1.35.2
    1c0c911c3ca kubeadm: do not add learner member to etcd client endpoints
    d05c5065395 Fix flake TestDeviceTaintRule test by adjusting event hanlder status update logic Co-authored-by: Pohly <patrick.ohly@intel.com>
    69d9b9ba0c4 Bump images and versions to go 1.25.7 and distroless iptables
    2371267d2f2 add dockerized go cache to  `make clean`
    de51841dbf7 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.1
    8fea90b4524 Release commit for Kubernetes v1.35.1
    bd399917375 fake client-go: un-deprecate NewSimpleClientset
    9bfc5ec55a7 Apparently some EC2 images we use do not have /proc/net/nf_conntrack
    33b34518bae test: cleanup from review
    9aad4027810 test: Fix KubeProxy CLOSE_WAIT test for IPv6 environments
    701cf03e7bb test: Read /proc/net/nf_conntrack instead of using conntrack binary
    f12bff04ab6 csi: raise kubelet CSI init backoff to cover ~140s DNS delays
    0ac5e229e14 test(ut/dra): add unit test for pod requesting prepared and new claims
    fe7f31bdcb1 test(e2e/dra): add test for pod requesting allocated and new claims
    261b29aaa2f DRA integration: more pods per node, more parallelism
    4885212b5b9 DRA integration: add "uses all resources" test
    82b2a9d543f DRA scheduler: fix another root cause of double device allocation
    f296d4a9a46 DRA scheduler: fix one root cause of double device allocation
    a1f4382971f fix(kubelet): convert V().Error() to V().Info() for verbosity-aware logging
    a77bd451173 fix(expansion):Resolve the issue of UTF-8 characters being truncated, resulting in invalid UTF-8
    06a4889419e Bump images and versions to go 1.25.6 and distroless iptables
    1d79222fd52 kubelet(dra): fix multiple claims handling
    0a9d14b01c4 Fix flaky TestApplyCRDuringCRDFinalization test
    6d23c3f5403 Fix for preferred dualstack and required dualstack in winkernel proxier.
    ecc28f9d84a kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'
    72a5892dca9 kubectl: Fix panic in exec terminal size queue
    353648793e1 bump go to 1.25.6 for CVE fixes
    41e2e598dc9 kubeadm: fix a bug where kubeadm upgrade is failed if the content of the `kubeadm-flags.env` file is `KUBELET_KUBEADM_ARGS=""`
    870c561aeea Fixes the flaky test (Issue #132953)
    646e656a561 Switch ipvs and winkernel back to more regular forced syncs
    69e322920ef mark QuotaMonitor as not running and invalidate monitors list
    923cb5be10e Add unit test with CSIDriver.SELinuxMount=false
    1f001b78805 Added e2e tests with disabled SELinux
    2aeedbd767b Use only enqueuePod to add pods to the controller queue
    44b1306e553 Fix policy of Pods with unknown SELinux label
    b1c7820806d selinux: add e2e test with a completed pod
    7d9af54b956 Add new unit tests
    6edce1ddecb Rework unit tests to builder pattern
    b84206f5af2 selinux: Do not report conflits with finished pods
    9993d83107f refactoring: use a common function to enqueue Pod
    802ed9eaa9f add StatefulSetAvailabilityCheck test
    04da1f09e5d replace "k8s.io/klog/v2/ktesting" with "k8s.io/kubernetes/test/utils/ktesting"
    f8578e8d8b7 schedule pod availability checks at the correct time in StatefulSets
    e7c2ecf799f wire now (time) to the availability checks in the StatefulSet controller
    c52a5384b91 Fix race condition in DRA health e2e test pod status update
    28fffe71c46 kubeadm: always retry Patch() Node API calls
    2a663d9a3a2 Disable SchedulerAsyncAPICalls in v1.35 due to performance issues
    62b0580535f kubeadm: do not sort extraArgs alpha-numerically
    778b9a97713 Update vendored hnslib to v0.1.2
    624047b4f31 refactor: Ensure metricIdentifier uses scheme for kind resolution
    b9d3560f7ea Fix apiserver_watch_events_sizes metric.
    5345aa5a9b4 hack/lib/util.sh: support uutils' `date` command
    e63eccd82f1 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0
    66452049f3d Release commit for Kubernetes v1.35.0
    ea0dce1df19 CHANGELOG: Update directory for v1.32.11 release
    f58f81d9175 local-up-cluster.sh: support more recent containerd like 2.2
    04d87a4b6e7 CHANGELOG: Update directory for v1.33.7 release
    f887a29fe22 CHANGELOG: Update directory for v1.34.3 release
    612122f1d79 CHANGELOG: Update directory for v1.35.0-rc.1 release
    91b0dfb7a49 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.0-rc.1
    08b536721bb Release commit for Kubernetes v1.35.0-rc.1
    8d4237fde8a kubelet: Fix nil panic in podcertificatemanager
    2c811fdd3a1 etcd: Update etcd to v3.6.6
    dede2886a84 update publishing rules
    eae2a1bd5f5 Bump images and versions to go 1.25.5 and distroless iptables
    3f42ca14011 downgrade reflector watchlist fallback log to V(4)
    91e221b0471 DRA upgrade/downgrade: roll over only after -alpha.0
    91368adbb55 Use transformer in consistency checker
    76da8d6de02 Add unit tests for Data Consistency Detector
    88c20d46a4e [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
    c6fa10dbb7c add release-1.35 publishing bot rules
    03066850f63 remove TestEtcdSupportedVersionLength, no longer relevant
    aa54ffa485a fix etcd versions after rotation
    4a944d1a3fa add skew -2 version in SupportedEtcdVersion
    51f614a1562 ipallocator: handle errors correctly
    de1b8e076a3 Fix MAP failure on objects with duplicate list items
    76b76c2d523 CHANGELOG: Update directory for v1.35.0-rc.0 release
    496077da56d Release commit for Kubernetes v1.35.0-rc.0
    f8be8d320f3 drop rules for release-1.31 as it is EOL
    7e3e9b6a64b update publishing rules
    5302b929ae5 Bump golang.org/x/crypto to v0.45.0
    fcdc4e24950 Remove TestWatchStreamSeparation from storage/cacher related tests
    3661554f872 Bump images and versions to go 1.25.4 and distroless iptables
    dae1dbc1ff1 KEP-5311 - Revert RelaxedServiceNameValidation promote to beta
    6bf802807b7 Make unique signerName per pod certificate test
    d80e73c0a9f cleanup: removed  uncached client plumbing, keeping the sequencing fix for quota validation
    c33c0464db3 DRA: Fix flaky integration test
    950dfd612b4 test: add test for Ingress Update
    ac90e6a809a Fix: Check defaultBackend in allowRelaxedServiceNameValidation
    5ed9501d3cc Fallback to live ns lookup on admission if lister cannot find namespace
    4cf195304ca CHANGELOG: Update directory for v1.35.0-beta.0 release
    3e19cc51601 Address review comments
    04eb121d32e Fix failing scheduler_perf test cases that don't set any feature gate
    f60f5b24605 Refactor: Contextualize CRDFinalizer to fix goroutine leak
    e08c1e4ce35 Fix alpha API warnings for patch version differences
    a66c025dc9e test/e2e_node: Update procMount test to use Restricted PSA level
    f76d0e5aa48 test/e2e: replace forbidden gomega.BeTrue usage with Eventually(...).Should(Succeed())
    216aaf76cba vendor: update vendor and license metadata after replacing BeTrue usage in csi tests
    cee5b837da9 Resolve lint restriction on BeTrue by introducing Succeed() with contextual error messages
    854e67bb51e KEP 5598: Opportunistic Batching (#135231)
    c68b35c4c75 Update vendored dependencies
    1ce140d1055 update github.com/opencontainers/selinux to v1.13.0
    f33a6e5a925 CHANGELOG: Update directory for v1.32.10 release
    ea83385231f CHANGELOG: Update directory for v1.31.14 release
    b6e83d29fc6 CHANGELOG: Update directory for v1.33.6 release
    4b20e5c3fe3 CHANGELOG: Update directory for v1.34.2 release
    71ddb98ae4d Remove image volume e2e test because CI has containerd < 2.1
    5ac2ffcc1e3 Enabling NodeDeclaredFeatures in unit tests
    0e883083bf9 Add InPlacePodLevelResourcesVerticalScaling declared feature.
    10b73f8ef9f Test fixes
    21920bb37e9 Test fixes
    0f88a9a17e4 verioned_feature_list update
    8920eb91077 Unit test for AddPod with PLR resources
    66248c262c3 Unit tests for allocation manager
    1733d8fc8c8 e2e tests
    edc3b77cf8a Kubelet changes and unit tests
    11ff4efcdeb Kubelet changes to support IPPR + PodLevelResources
    7645eb70e92 Scheduler changes to support pod level resources in place resize
    84776abaff4 Modifying validation logic and pod strategy for PodResize to accommodate for Pod Level Resources resize
    b8777c32633 Generated files from API changes
    efc3126b768 Adding Resources and AllocatedResoures fields to the list of expected fields in PodStatus in admission test
    69c1fd72aa0 API changes for Pod Level IPPR related PodStatus fields
    6d301342569 Adding InPlacePodLevelResourcesVerticalScaling feature gate
    d26b44540e3 move Ensure Secret-Pulled Images feature to beta
    805eb885e3e node e2e: add tests for Ensure Secret Image Pulls default policy
    0b47a378611 Keep pod in running state and prune past container status from runtime
    2f55207dffd Fix volume performance tests with performance constraints
    094b1bf0188 fix [sig-node] Container Runtime blackbox test when running a container with a new image [Serial] should be able to pull from private registry with secret [NodeConformance]
    2c81b6e8adc fix: replace BeTrue with BeTrueBecause for better failure message
    bb822259984 ImagePulledRecord API: don't serialize nulls
    99ceb201738 kubelet/image-manager: pulled images records storage version migration
    6fd9878056c kubeletconfig: copy ImagePullIntent, ImagePulledRecord to v1beta1
    aceb89debc2 KEP-5471: Extend tolerations operators (#134665)
    aac951d9022 Add dependency for NodeDeclaredFeatures
    97c3f575b98 Refactor validation
    2eb1eeeabf0 add disruptive tests
    83c5cd5526f Implement restartPod action
    fab280950da Add client-go credential plugin to kuberc
    d979816a40d Fix e2e test cases for EnvFiles
    d82fa1eb98c test: use localhost and HostNetwork for registry, mark test as disruptive
    8d0fb17a18f e2e test registry: force IPv4 localhost IP
    ad0a3de152c node-conformance-e2e: restart the kubelet after loading credential config
    1225ce509e6 scheduler: KEP-5007 add integration tests
    368e699ed2e scheduler: KEP-5007 move BindingConditions integration tests to separate file
    e88aa1e04d7 Integration tests for setting and clearing NominatedNodeName
    9c5959e9de8 Fix failing test for pod group scheduling timeout on Windows
    3b3e4dd2c48 fix missing major.minor in golang: upstream version
    e6d95a7b381 Promote NominatedNodeNameForExpectation and ClearingNominatedNodeNameAfterBinding feature gates to beta
    b5dae0ffaa0 DRA: Update e2e tests for Partitionable Devices
    4d29f88c886 DRA: Update integration tests for Partitionable Devices
    7861714e6cc DRA: Add validation in resourceslicecontroller for Partitionable Devices
    38b5750e33a DRA: Update allocator for Partitionable Devices
    c7b277a32e1 KEP 4639: Move ImageVolume to on by default beta
    6689fa7b006 DRA: Update ResourceSlice max size tests for Partitionable Devices
    93fc7422ee8 DRA: Update validation for Partitionable Devices
    ef3f6a25075 Run make update
    e73fd4204d8 DRA: Update types for Partitionable Devices
    f8ccc4c4d78 dra scheduler plugin: refactor extendeddynamicresources.go for readibility
    b9e59e8ea9a test: Add integration tests for peer-aggregated discovery
    8f2c0a9a60f kube-apiserver: Enable peer proxy and peer-aggregated discovery
    2f5f1749e5d apiserver: Add peer proxy and peer-aggregated discovery support
    c72f9f73d92 discovery/aggregated: Add invalidation callback support
    6b8f7938889 discovery/aggregated: Add peer-aggregated discovery handler
    d6907457723 peerproxy: Refactor into separate files and add exclusion filter
    6a07342d37a discovery: Add profile-based content negotiation
    3b89deb6b37 util/sort: Add MergePreservingRelativeOrder for topological sorting
    3be9af427fa Fix revert conflict
    e6574b416fd Revert "Unit test for emulated storage version selection"
    e8176f6f9f4 Revert "Don't pick versions that have a replacement as storage version"
    2d3e0639230 mark device manager as haelthy before it started for the first time
    da9f1d8eed7 dra scheduler plugin: move extended resources functions into separate file
    b07c8698b9f test: add retry to getMetricsFromNode
    fbe8d4c63cf upgrade go to 1.25.4
    1c4cab9dda8 DRA scheduler unit test: fix race with ResourceSlice informer
    789f06544de DRA allocator: fix result logging
    fc404b6a3d8 Cache DRA state for scoring extended resources
    f86a456ea3d Switch kube-proxy/server.go to context-aware logging APIs (HandleErrorWithContext, UntilWithContext)
    e986000e6a7 KEP-5607: Allow hostNetwork pods to use user namespaces
    54702182c2d graduate PodTopologyLabelsAdmission feature gate to Beta and on by default
    d25c5251f94 Fix the DRA extended quota test
    bf7dbb129fb DRA: test performance for scoring extended resources
    a9dcc8e2c94 Fix sending OnFinish to in-flight async API calls in scheduler
    6b764d555f1 test: update MutableCSINodeAllocatableCount tests for the new attacher
    da1981248e3 test: update CSI manifests
    049cb8558e8 Add integration test for gang scheduling
    4a067cc022e Add read Workload permissions to kube-scheduler
    c086bdeaa22 Add integration tests for gang queueing
    8d67173de0d Implement Gang scheduling in kube-scheduler
    5d1f9107ef8 test: fix sed in update-hostpath.sh
    a3093a95f26 test: don't remove group snapshot script
    54b6ab67479 e2e: Add tests for Workload API
    02acdd60574 kubectl: Add Workload to kubectl describe pod
    078f462a955 api: Workload API and Pod WorkloadReference generated files
    96392746769 api: Create Workload API
    9677ac4c0be api: Add WorkloadReference to Pod spec
    b6006528e1e Add feature gates
    dfaed0586f2 test: skip snapshot-metadata sidedcar in update-hostpath.sh
    6da8d6e94d4 remove deprecated Ingress api from describe
    edbc32fa602 DRA: implement scoring for extended resources
    fc9f02e2541 refactor: rename and suitable docstring
    8be985d4fab kubelet: fix concurrent map write error when creating a pod with empty volumes when the LocalStorageCapacityIsolationFSQuotaMonitoring feature-gate is enabled
    a02748c1243 kubelet: delay looking up pod image pull credentials until necessary
    95a59d0cfb5 DRA scheduler_perf: write JSON where perf-dash expects it
    1499524e8e9 E2E node: temporarily disable flaky "pull from private registry"
    78a8c2e6a35 mention MutablePVNodeAffinity in the API doc
    3882f0cf177 allow PV.Spec.NodeAffinity update
    b622363659b add feature gate MutablePVNodeAffinity
    ee481b97e0b fix sorting logic after after normalizing errors
    71c02338df3 Fix the failing e2e test case in Standalone mode.
    a2dfa0fd731 run gofmt to fix formatting issue
    6b949e79931 Add integration test for admission controller.
    c06297b3298 Add integration test for kube-scheduler plugin.
    540ffbd7230 feat(usecase): Introduce IPPR with static CPU policy support to use node declared features framework.
    e7a42e8e8e0 feat(admission): Add NodeDeclaredFeatures admission plugin
    649d9c532a5 feat(scheduler): Add NodeDeclaredFeatures scheduler plugin.
    192d93f7cb9 add e2e tests for static pod and standalone mode
    879d81ff062 promote EnvFiles to beta
    0976b6ada37 Improve env file syntax
    47fb373c317 run update-codegen.sh
    a5a2cfdb353 fix(validation-gen): Correct ratcheting for uncorrelated old values
    c30b75b0085 feat: Implement node declared features reporting and validation.
    3c22291a4b0 autogenerated files from "make update"
    e1f181e3632 feat: Add common library for declared feature discovery, inference and matching.
    c9327d00b11 feat: Add NodeDeclaredFeatures feature gate and API fields.
    801de96635b DRA: ConsumableCapacity update allocating and registry test cases
    870062df4f1 adjusts DRA extended resource quota to include devices usages from regular resource claims
    66769823160 fixed non-sidecar init container device requests and mappings
    4eb0d39bf51 emit more events when the pod resize status changes
    481f30bd645 hack/update-conformance-yaml.sh
    30965ea3ce6 drop MinimumKubeletVersion for unsupported kubelet versions
    da6d15adf6b Fix NPE in CEl accessors of additionalProperties=true objects
    030d72959e8 feat(validation-gen): Refactor testscheme and add ratcheting bug tests
    499bff4ca46 Revert "controller: duplicate utility method cleanup"
    5a7c90fb767 Allow mutable scheduling directives for suspended Jobs
    60744fc8b9c DRA device taint eviction: track evicting rules
    95279872936 DRA device taint eviction: use NOP queue during simulation
    eaee6b6bce0 DRA device taints: add separate feature gate for rules
    8d823b65236 add minimum kubelet version for ippr tests
    eea7c1403fa [DRA] Add ShareID to kubelet plugin API
    3f8444210cb Add e2e tests, metrics and events for podcertificaterequests v1beta1
    53df4f9be69 CHANGELOG: Update directory for v1.35.0-alpha.3 release
    fbfeb33231f DRA: Add scoring for Prioritized List feature
    374baacf92c Check HealthCheckTimeout in updateHealthInfo comparison
    a49bc6f2fbb kube-proxy/winkernel: fix stale RemoteEndpoints due to premature clearing of terminatedEndpoints map.
    79dc7908ff3 Fix potential dryrun failure when NodeLocalCRISocket reaches GA
    7db53119521 feat: Add MutablePodResourcesForSuspendedJobs feature gate
    949be1d132b fixed comments due to switch from class name to class for GetDeviceClass
    c77a39c06fe Address review comments and fix failing tests
    320987ead3a Addressed comments
    902c2e0c150 Fix lint errors in dynamicresources_test.go
    396a7c1a12a test/e2e/node: add minimum kubelet version to some pod tests
    c5b14939253 Add test case for claim creation failure in DRAExtendedResources
    ea7561b243a Implement scheduler_resourceclaim_creates_total metrics for DRAExtendedResources
    5102591a6b9 Refactor resource claim metrics to use structured labels and add "source" dimension.
    9cad3f87876 Introduce kuberc view/set commands under kubectl alpha (#135003)
    326b7eaa526 e2e/storage: deflake CSI Mock volume expansion quota validation
    18967f53ddd enable commentstart check on adminssion API group
    3b0913c8666 fix test case
    693f42bfc16 KEP-3619: deleted unused SupplementalGroupsPolicy in e2e/feature
    120bcee0578 KE-3619: fix emulation version in unit tests
    d12663248d5 KEP-3619: fix removal version for SupplementalGroupsPolicy feature
    0aea256ef96 revert of 8f0a6583ca81a64475e69a8b6b4d06bbe0c2ac67
    4acafd92452 [DRA] Fix unexpected errors on ResourceClaim strategy update
    9ca74a33595 test: register kube features in unit tests
    024382658b6 controller/volume/vacprotection: Improve goroutine mgmt
    e08d03b1b5c controller/volume/selinuxwarning: Improve goroutine mgmt
    1e6ad423bf1 controller/volume/pvprotection: Improve goroutine mgmt
    0caae6f7041 controller/volume/pvcprotection: Improve goroutine mgmt
    ed74779a0f9 controller/volume/persistentvolume: Improve goroutine mgmt
    8eab454e38e controller/volume/expand: Improve goroutine mgmt
    27774052abd controller/volume/ephemeral: Improve goroutine mgmt
    12205df76de controller/volume/attachdetach: Improve goroutine mgmt
    9d4ff6ecf2b controller/tainteviction: Improve goroutine mgmt
    d2a443db75e controller/serviceaccount: Improve goroutine mgmt
    c641df792b6 controller/resourcequota: Improve goroutine mgmt
    d908a470a55 controller/garbagecollector: Improve goroutine mgmt
    90f0fd09f20 provision 10G disks for testing pvc instead of 1 byte or 1GB
    90d32919ee5 chore: cleanup unneeded imports
    2a3f66d3f6b KEP-5284: Implement Constrained Impersonation
    8200f9a22c7 add missing apiversion to run_group_snapshot_e2e.sh
    3f45a675fc7 DRA integration: test eviction through DeviceTaintRule
    bbf8bc766e3 DRA device taints: DeviceTaintRule status
    0689b628c7d generated files
    f4a453389d2 DRA device taint eviction: configurable number of workers
    256591520a5 feat: add OWNERS files for flagz server and api with approvers and reviewers
    09dfeeb9881 test: add integration test for /flagz endpoint in scheduler
    ba059168c35 test: add integration test for /flagz endpoint in KCM
    16db8e2375f feat: add integration test for /flagz kube-apiserver endpoint
    2422bc0bb8c feat: Implement structured /flagz endpoint
    b3222498fdb added comments, and refactoring to make it explicit and easier to understand.
    a181fd2eb81 removed NodeAffinity in the test cases as it is not needed
    336a3e92757 Update pkg/scheduler/framework/plugins/nodevolumelimits/csi_manager.go
    611b4c1408f Adding batch handling for popping items from RealFIFO
    c67937dd352 switched from storing name to storing a pointer to the device class.
    c438f8a983c scheduler: Add BindingTimeout args to DynamicResources plugin
    a9ff1b19c18 remove deprecated IngressClass api from describe
    372328f2814 reverted the inititial device class change
    2e479e00f4e refactored the hint function, added test cases
    ed62db7acf3 e2e registry: run as pods even in seemingly in-cluster pull tests
    a275785bd4f node conformance e2e: log fake registry creds on test failure
    fba24a8e715 node-conformance-e2e: finite wait for pod status
    5cdb983c2e3 fetch node synchronously on node affinity failure
    27a81144b22 Add checkpoint for groupsnapshot data consistency (#134637)
    002774c3157 Address review comments
    bbbe23dac7c Reapply "prepare DRA kind config for kubeadm v1beta4"
    f1bd4f509eb refactor updateUnfinishedWork into separate function to use defer unlock
    9113013eb89 Introduce --as-user-extra persistent flag in kubectl (#134378)
    82d3c07f0ed test/e2e/apimachinery/watchlist: run WatchList test on most jobs
    ca8847149e3 client-go/features: enable WatchListClient for 1.35 release
    0639f7f40e0 Allow PSA controller tests to handle failure cases as errors
    a079e1ed256 kubeadm: add 'HTTPEndpoints' field to 'ClusterConfiguration.Etcd.ExternalEtcd' that can be used to configure the HTTP endpoints for etcd communication
    a92b987b3dc comments
    d132afc87ee DRA scheduler_perf: benchmark baseline test cases with different allocators
    191ab8d78d8 Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable
    9640da54524 Verify if pod has ongoing async preemption before evicting pods
    3dabd4417d9 KEP-4368: Job Managed By; Promote to GA
    c98804b77f3 Fix existing integration tests for NominatedNodeName
    81448febcf4 KEP-5278 Clear NominatedNodeName upon scheduling failure
    257ff6edcd6 kubelet/app/server_bootstrap_test: fix Test_buildClientCertificateManager
    1fc389c43f8 Revert "prepare DRA kind config for kubeadm v1beta4"
    cdbe3401431 KEP-3619: remove e2etestskipper in e2e tests for SupplementalGroupsPolicy GA
    b3aeead3e22 KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default
    9b95eaf5937 Fix pod resize validation when adding non-resizable resources
    0631a66d528 address feedback - refactor validateSlice and validateSet to use validateItems
    1e8fc543cc7 Fix report health for templated and renamed DRA claims
    14f17a3809a addressed review feedback
    713b7231d82 Merely check for presence of CSIdriver object
    fa31a593b9f Clean up event messages for errors in Portworx in-tree driver
    979c4427749 Fix spurious workload rollout due to null creationTimestamp in controller revisions
    7d186d870f9 Remove unused and fragile revision hash comparisons
    94e085e15ca Add unit test detecting spurious statefulset rollout
    a22b3d031fe address feedback
    b609d4713c2 added integration test case
    7aa849160a8 added queue hint function
    3b905ae4b5c added device class add/update events to noderesources plugin when DRAExtendedResource feature is enabled
    fe3722dfa9a Address review comments
    4bbe8f0cfb1 Add test that verifies scheduler behaviour
    b9118183cf1 Fix the boilet plate
    39ad8278e23 feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case
    eb1a5b6ddfb remove pod resize endpoints from pending eligible endpoints
    bdb2e37781a Fix queue to gracefully shutdown
    b83a6a83f0f pick the device class created latest, or with name alphabetically sorted earlier
    96edaa43d2e Set KubeletCrashLoopBackOffMax feature gate to default enabled for beta.
    a3bf2abddb2 Move a comment about ginkgo to code that runs ginkgo
    3e33e61968e Enable group snapshot tests
    f9ef0049160 E2E framework: start slow tests first
    321c1e37c06 Update group snapshot tests to v1beta2
    de9138f4fa9 Promote IPPR e2e tests to conformance
    c13c5814597 Add given namespace in dryrun=client output of HPA
    762b458700b Lock AggregatedDiscoveryRemoveBetaType to true
    3eab698884a fixed unit test and integration test failures
    363407c500d Re-enable SchedulerAsyncAPICalls feature in v1.35
    6dd086536ff DRA E2E: stop labeling tests as ConformanceCandidate
    5e0d06082d6 DRA allocator: partial support transition between nodes, fix "is incomplete"
    a0e500ace39 Revert "DRA: Allow AllocationMode: All from multi-node resource pools"
    30de4235970 Revert "added WithFlaky() to the device plugin test case: supports extended resources together with ResourceClaim"
    d3c2115441e Clean NewDefaultKubectlCommandWithArgs for readability
    ac9120f6076 Move PluginHandler to separate file
    c832203707d pkg/controller/garbagecollector/garbagecollector_test: wrap kubeClient with a client that doesn't support WatchList semantics.
    36510ccf56f devicemanager: fix cleanup of healthy and unhealthy devices
    12a0c8ce17f DRA extended resource: chain event handlers
    d8c66ffb63c Add a global cache to support DRA's extended resource to the device class mapping
    34021d451d3 Revert "E2E framework: start slow tests first"
    59e075e8d35 Promote PodCertificateRequests to v1beta1
    7c47b91ed2c Limit CONNECT proxy response header size
    2be8c36dba5 fix: additional nil check for workqueue shutdown
    ecbda22ea54 chore: more precise resync comment
    a85a9e13aa7 chore: cleanup outdated comment
    956964d6e58 fix: register feature gate dependencies
    36e6b9075e5 chore: move golang.org/x/time to required
    806cf9ef512 style: alphabetic ordering
    b68fd5e5336 docs: cleanup docstrings
    abf60333adb feat: add feature gate to kube features
    c2044c8d390 fix: feature gate min version
    0c775eec7ce fix: rate limit route reconciles
    9af329151a4 feat: minimal route resync period interval
    9e612f107a1 feat: update routes on resync
    0b41218ed4f fix: missing update of feature gates
    be7e0ddb74b fix: spelling
    8ef9e53ce5d fix: check error of AddEventHandler
    a5055cc407b feat(ccm): watch based route controller
    cff07e75519 E2E framework: start slow tests first
    6034321603b dependencies: ginkgo v2.27.2, gomega v1.38.2
    308a53dfa6d Add validation options for static pod
    264eab46db9 Remove unused delete reactor
    acdf891478a add e2e tests
    c99145805f1 [DRA] Fix DistinctAttributeConstraint match comparision with value
    97587e951b0 oidc: fix jwks metric name in comment
    2b0bfbfb8e6 removed unused functionality from run_group_snapshot.sh and prepare for kubeadm v1beta4 config
    a3ce49a11ea prepare kms kind config for kubeadm v1beta4
    a1ce4bb4686 Check for CSIDriver object before stopping pod scheduling
    d17ed9be174 prepare DRA kind config for kubeadm v1beta4
    2f0a84af1af Add csidriver lister to CSI scheduler plugin
    85d7626d2dc Do not schedule pods if CSI driver is not ready
    8b2babcbff6 PSA: fix lint with older policies
    d9ddd5c59b0 Allow PSA pass scenarios to be informed by the policy level
    e8bd3f629d4 drop UserNamespacesPodSecurityStandards feature gate
    f2d075ea655 Address review comments
    c69259cb713 DRA device taints: switch to workqueue in controller
    e5fcd20a264 DRA device taints: tighten controller test
    6ebd853f170 DRA: implementation of none taint effect
    75c91867928 generated files
    e4dda7b282e DRA device taints: fix DeviceTaintRule + missing slice case
    fee14ffca20 DRA API: device taints 1.35
    11e3147fdd2 kubelet: add a test to verify that dra plugin enforces timeout
    c71e45c7352 Implement a csimanager for managing storage related assets
    d4c6e0bfd04 change client go default features to versioned
    344df7835cd refactor dra fake grpc server
    1951e8dd887 kubelet/config/apiserver_test: expose IsWatchListSemanticsUnSupported on fakePodLW
    05f5051be3a kubelet/userns: Print podUID on errors
    35423364e2f apiserver/pkg/admission/plugin/policy/test: wrap trackers with ToListWatcherWithWatchListSemantics
    5993782d653 dependencies: various minor updates
    9e462123d64 client-go/tools/watch/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics
    ae201951a8a k8s.io/client-go/tools/cache/test: wrap the LW with toListWatcherWithUnSupportedWatchListSemantics
    f2257059d7a node: cm: fix linter failures
    1055d8541e6 k8s.io/client-go/testing/fixture: does not support WatchList semantics
    1ca34bd0d2d apiserver/pkg/storage/cacher/lister_watcher: pass RV for request from the watchlist consistency checker
    040516a6e76 fix linter changes
    67280d4df99 node: cm: update mocks for contextual logging migration
    bd11e52bfc1 Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
    b3415bfdfe2 kubeadm: added container runtime version check to preflight
    d80ac77d985 feat(dra): add k8s:optional for all DV migrated optional fields
    cde15e6450c Add ObservedGeneration to CRD conditions
    02289d08f6c refactor scheduler_perf test for extended resources by dra to have 10-50 device classes
    67143028e78 Add --min-compatibility flag.
    05f67d834ab node: cm: migrate container manager to contextual logging
    7bbec73192a Add a interface for sharing CSINode objects between scheduler and CAS
    d99d3c0b69d refactor ippr tests
    c1a95eb7e2f Structured statusz
    1d9c646892c fix unit tests for ippr ga
    2e543d151b6 DRA device taints: convert unit test to synctest
    2e534d6da10 DRA: Allow AllocationMode: All from multi-node resource pools
    fda069a5d62 update kal to fix markdown table bug
    9cc3a06f0b4 enable duplicate tags for kal and add exceptions
    0fac370625b sig-auth: fix KAS options OWNERS
    428be46ba25 node conformance e2e: move registry cleanup to ginkgo.DeferCleanup
    8d3bc085ce4 DRA integration: refactor helper functions
    89f1edd5169 kubelet/image_manager: rename EnsureImageExists arguments at the interface level
    01d1cb96793 test: fix flake in DRA DeviceBindingConditions by waiting for reallocation before status update
    79df44ca529 scheduler: KEP-5007 allocator test - devices w/wo BindingConditions
    7bc354e15d5 kubelet: add metrics for in-memory stored image-pull-related records
    ae7c6e8080e kubelet/imageManager: add metrics for MustAttemptImagePull
    429a96eda6e kubelet: add metric for the number of stored image-pull-related records
    7a9d718cdf5 Benchmark SharedIndexInformer
    9b80964efd2 add integration tests for pod replacement during scaling and
    b1942ae6b12 [DRA] Add dropDeviceBindingConditionsFields and fix immutable field on DeviceBindingConditions strategy test
    df3f5dd493b test(validation): add cases for validating maxItems in status.devices.networkData.ips
    2713803c78d feat(dra): migrate NetworkDeviceData.IPs maxItems to declarative validation
    a8c9bb1f168 test(validation): add cases for validating maxItems in status allocation requests
    0d6d2aa6a58 feat(dra): migrate DeviceAllocationConfiguration.Requests maxItems to declarative validation
    91614613170 test(resourceclaim): add unit test for unique DeviceAllocationConfiguration.Requests in status
    a553ac0e92a feat(dra): migrate DeviceAllocationConfiguration.Requests uniqueness to declarative validation
    a4e8b54dee7 test(validation): add case for handling duplicate request names in ResourceClaim status update
    cc0012b4502 Add Declarative validation unit test for duplicate IPs in NetworkDeviceData
    9bbf28e2f4e feat(dra): migrate NetworkDeviceData.IPs uniqueness to declarative validation
    1d2b87c2e9a updated nodeswap description only
    4f647b3f3df removed BlockOwnerDeletion
    2a217a9bfd2 promote pod generation tests to conformance
    3b72759d1bc Update SVM to Beta
    24a53fa6384 add JWKS fetch metrics for jwt authenticator
    ad2c6b443dd controller/validatingadmissionpolicystatus: Improve goroutine mgmt
    a51285e1f27 controller/servicecidrs: Improve goroutine mgmt
    63c15cbe83e controller/resourceclaim: Improve goroutine mgmt
    5f423d7ba8d controller/podautoscaler: Improve goroutine mgmt
    51ef94c5472 controller/nodelifecycle: Improve goroutine mgmt
    34e688eb3dc controller/nodeipam: Improve goroutine mgmt
    a265769245a controller/ttlafterfinished: Improve goroutine mgmt
    821a3f5affb controller/storageversionmigrator: Improve goroutine mgmt
    7240649e4f6 controller/ttl: Improve goroutine mgmt
    3ee8c53e537 controller/podgc: Improve goroutine mgmt
    1635a139b88 controller/storageversiongc: Improve goroutine mgmt
    502186ca933 controller/statefulset: Improve goroutine mgmt
    91cf8253a2a controller/replicaset: Improve goroutine mgmt
    5f48a52bf86 controller/namespace: Improve goroutine mgmt
    cb4ad791023 controller/endpointslicemirroring: Improve goroutine mgmt
    cd73e8777b3 controller/endpointslice: Improve goroutine mgmt
    ccd35f7c5ee controller/endpoint: Improve goroutine mgmt
    d9ba92ba3bb controller/disruption: Improve goroutine mgmt
    6e0a4da2f6a controller/deployment: Improve goroutine mgmt
    e8b0f274561 controller/daemon: Improve goroutine mgmt
    575e9eb64c7 controller/job: Improve goroutine mgmt
    7bf52d74d02 controller/cronjob: Improve goroutine mgmt
    d1eccb2377c controller/clusterroleaggregation: Improve goroutine mgmt
    5f3f39edc12 controller/certificates: Improve goroutine mgmt
    3a50f28ff80 controller/bootstrap: Improve goroutine mgmt
    c9825b8d279 kubeletplugin: clarify DRAPlugin comment about driver-specific claims
    4a991bbbd9c fix unit tests for pod gen GA
    e06abce75f1 node: mm-mgr: Refactor to use logger parameter instead of context
    d2f780e277f promote ippr to ga
    21c832b47dc promote pod generation to GA
    9bf2363333d restarting kubelet does not change pod status
    842cd0ea777 node conformance e2e: don't recreate test container on an error
    135b46974af e2e registry: have SetupRegistry() return registry address
    ee777bef916 test/utils: remove GcAuthenticatedRegistry from RegistryList
    bb1b23a34ee e2e fake registry: add function docs
    fc81e22735a fix Node Conformance Container Runtime test with fake registry
    a0e64c21f2f Use fake registry in Node's container runtime image pulling tests
    b29fdd1551f Forget pod from scheduler's cache immediately when it's deleted or has DeletionTimestamp set
    15029967870 Refactor scheduler event handlers for pods to handle binding event in one place
    a42581c7d39 Don't preempt pods with DeletionTimestamp set
    37ba7bb454c Address feedbacks
    94101ba6e0c Add new method to validate C Identifier
    ec8c2246b2c Use k8s-resource-fully-qualified-name format to validate MatchAttribute
    2de03899dae Add k8s-resource-fully-qualified-name format in valdiation-gen
    4a9a010c537 adding back v1alpha1
    68710ce086b add declarative validation test
    2e257dffd80 update code-gen for new tags and ignore v1alpha1
    8f0a6583ca8 Use eachKey DV in DRA resources.
    03e337cfb7a ktesting: support for synctest
    aad6cec749b DRA internal API: add JSON tags
    679ccee1938 reverting changes that were unrelated to me pr
    08b1b1d5a47 Do not log untolerated taint in pod status updates.
    9c32e488db1 use tweak pattern
    1dd384c44d4 Fixing unit test flakes in pkg/kubelet/winstats TestCollectMetricsData
    f82a139dc08 Promote KUBECTL_COMMAND_HEADERS to stable
    a3f242676cd Revert "remove failing test that depends on expired credential, remove credential, add TODOs"
    973779a398f kubelet/image_manager: add metrics for EnsureImageExists
    b1a8d8849ee Update OWNERS to sig-apps owned registry packages (batch & policy)
    b72c9e41792 Improve CEL Policy admission test
    51beeb26762 dynamic-resource-allocation/client: expose IsWatchListSemanticsUnSupported
    4fd41778b87 watchlist: wrap remaining LW with ToListWatcherWithWatchListSemantics
    fb228c47048 Fix DRAConsumableCapacity to be able to allocate the same device that previously consumed the counterSet
    86bfcd5eec1 oopsie missed two, should fix failing tests
    11f9d32a0ea kept sidecar feature to enable default FeatureGate. will clean up in separate effort
    a277269159c updating sidecar feature to node conformance
    92663144b98 Graduate a few soaked alpha tags to beta
    bda0e6a83c5 remove deprecated EndpointSlice api from describe
    1e903a4b5a8 DRA: e2e: test extended resources after device plugin uninstall
    7b2acb74c07 DRA: fix admit logic for extended resources
    1cb45e2a27f DRA: fix scheduling of pods with extended resources
    62b23aeb0cf Remove FromName for VAC external tests
    b40df46b0ba test/e2e: remove unused v1beta.VolumeAttributesClass field
    04fb0931aec test: remove usage of storage v1beta1 APIs
    65dcb4ce2cd refactor(kubeadm): including dns addon version to signature
    816eee64e80 cpumanager: hack: add golang ci config for contextual logging
    fd5b2efa76e node: cpumanager: migrate to contextual logging
    2cd69e0d0e6 Rewrite claim with extensions in allocator test
    a35785c0331 Drop loopback clients if unused
    bbd44717c15 fix: allow job startTime updates on resume from suspended state
    d10f4f39503 DRA allocator: Add the requests corresponding to the config FromClass
    f8ca585b666 test/images: Update tf-wide-deep container image with Python 3.11 and TensorFlow 2.20.0
    36654a9ecbc --no-edit
    cff8bc86865 fix the unknown flag: --logtostderr error
    b2571fe170a Add WithNodeConformance to KubeletPSI test context
    8a6b3caaa0d use union member DV in the DRA
    97f9819f7e7 address feedback
    f64797580a8 DRA internal API: remove unnecessary types
    294ff153426 kubeadm: improve the etcd version mapping
    8b87df028d8 avoid Stop() racing with sync()
    8b6f98b06ea DRA: lock to default-on
    30a6d4b389a Add CSI driver opt-in for service account tokens via secrets field
    0e7d42dd456 Clean up OWNERS for all api machinery owned controllers
    167ccbc8ec0 Improve cmd tests for kubectl events
    fcef697a45a kubelet: add nil check for ContainerStatus in GetContainerStatus
    715228f4789 Remove LoadBalancerIPMode feature gate
    b5297b18ab2 Remove AllowServiceLBStatusOnNonLB feature gate
    c403fd44811 kubeadm: validate the KubeletVersion for cgroups v1
    5f083e3b9f5 controller: duplicate utility method cleanup
    5d4d6cc980f Test: Add unit test for PreStartContainer
    491f7f9ba89 Add a preshutdownhook to cleanup apisever identity lease
    c247514f47f Remove year from copyright header boilerplate
    f0e88857f7b Return error in case of discovery client failure
    8a331a59d13 test: Fix data race on policy refresh interval
    78796239cf0 feat(validation): add k8s:optional tag to InterfaceName and HardwareAddress in NetworkDeviceData across all versions
    9ba536c2e44 feat: add subfield +k8s:format=k8s-long-name validation for DeviceClass ObjeMeta.Name field
    9e5b6ad7488 fix error checks
    c764de03dc6 vendor: update system-validators to v1.12.1
    724cdb5cf38 feat: migrate off deprecated NewSimpleClientset to NewClientset
    1b863d81c92 kubectl: Add support for tracing
    9d369f32a3d kubectl: Refactor profiling helpers
    1e3a6e18d08 node: e2e: update podresources check post fix of kubernetes#119423
    28507d0e921 [test] Add case for existing driver on old csi node
    a14230ae82d [test] Validate migration annotation are still applied
    1e2817d5890 Avoid no-change lambdas
    2061ec2be9d Enable DV for resourceslice
    f851bc7ce5a test(validation): add cases HardwareAddress length in ResourceClaim status
    833c026435b feat(dra): add k8s:maxLength tag on HardwareAddress in NetworkDeviceData
    c3006a9bb96 test(validation): add cases for valid and invalid NetworkDeviceData.InterfaceName length
    6fa8cb4a993 feat(dra): add k8s:maxLength on NetworkData.InterfaceName
    2b4495f66a0 feat(dra): add k8s:optional on AllocatedDeviceStatus.NetworkData
    8124b22f903 feat(validation-gen): add k8s:maxLength tag
    e762d9fc441 dra: Use context-aware client-go informer functions
    196d3abcd53 CHANGELOG: Update directory for v1.35.0-alpha.2 release
    fa59ed7f82e pkg/controller: Use informer.RunWithContext in tests
    70ac573619b adopt consistent way to set feature gate based on emulation version for kcm and scheduler test server.
    d764e81a66b Revert "Implement validation-gen lint for CI"
    7d1500bb1ea feat: Add exceptions for conflicting markers in kube-api-linter
    12b5106809d bump kube-api-linter tool to latest and go mod tidy
    5fc2f3e5a93 feat: Enable conflicting markers linter to detect mutually exclusive field markers
    c49bdda383f kubeadm: remove the GA WaitForAllControlPlaneComponents FG
    a99a5c4bdc0 avoid updating when endpoint subsets are merely sorted differently
    764918a4ddf remove deprecated CertificateSigningRequests api from describe
    3fbd1a17871 etcd: bump etcd to v3.5.24 for k8s v1.32, v1.33, v1.34
    7f99d6672f7 etcd: bump etcd sdk to v3.6.5
    804708df532 /test: use a different image for hostname override e2e tests
    5bfc9aba9f0 Disable unwanted gocritic checks instead of filtering them
    9d48e7d2d40 fix missing involvedObject.apiVersion in event
    38373335cd1 kubeadm: adjust the etcd version map for release 1.35
    81e3dbdc33f Fix DRAConsumableCapacity to schedule more than one devices
    8fc99212944 Delete dead code
    8346bed9e7a Introduce pod queuing in endpoint/slice controllers
    f2a4ffd5b8b Promote ContainerRestartRules to beta
    0a301490f61 Fixing k8s.io/kubernetes/pkg/kubelet/kuberuntime unit tests on Windows
    4e29dcdf756 remove deadcode HashObject from k8s.io/kubectl/pkg/util
    6cb2849928b switch endpointslice hashing from md5 to fnv-1a
    edbc0dc2587 switch endpoints hashing from md5 to fnv-1a
    dba6c30e964 switch kubelet static pod internal UID to fnv
    b3373320daf switch volumemanager reconciler tests to fnv-1a
    797d3165191 mark remaining md5 usage TODO and exclude from lint
    b0a15b9163c switch storage e2e tests from md5 to sha256
    e0df6b178a0 migrate kubeadm static pod hashing to fnv-1a
    886fdeefaea forbid new use of md5
    448584e1c8b feat: add step field and clarify comment for volume expansion
    d54f3b56ed9 Add OWNERS for controller/storageversionmigrator
    413c34f3192 Added feature gate and tests
    b1c85ef2fe3 golangci-lint: no need to enable deprecatedComment
    9902ae73872 apiserver/pkg/storage/cacher/lister_watcher: exposes WatchList semantics
    339dba881fe Add synthetic create authz check to pods/exec, pods/attach, pods/portforward
    229b33c4409 Address feedbacks
    95c42b99515 Fix rebase issues
    cf96486aed8 Add format validator for DeviceClass.ExtendedResourceName
    adbea00238b Add new format k8s-extended-resource-name
    3968f7ec5d6 apis/apps/fuzzer: add missing MaxUnavailable defaulting
    efeda8b0fd8 Use fast policy refresh interval for TestParamRef
    579579138c9 reformat
    b95439f6d1a docs: EphemeralContainerCommon.ResizePolicy: This field cannot be set on ephemeral containers
    26bbea8c071 Add RealFIFOOptions struct to provide structured configuration for RealFIFO
    6b82a823b1a client-go/clients: improve TestWatchListSemanticsSimple
    bd6fb65f833 Reduce fuzz test runs by 10x to avoid timeouts
    13511897bda node: e2e: extend wait for resources exported by sample device plugin
    c2e1fdeb7ad node: e2e: Ensure device plugin pod is Running/Ready before registration
    da80b554a7b DRA API: unify dropped field logic for ResourceClaim and ResourceClaimTemplate
    49e4fe9d2ba kubelet: fix kubeletconfig.cgroupDriver in configz
    ad2832977c7 fix(kubelet_node_status): remove the node.Spec.Unschedulable check, after remove the register schedulable
    dbb3941cfe4 Declarative validation coverage for RoleRef.Name and Subject.Name in RoleBinding#
    2e0319181de address feedback
    a817e2b923f test(validation): Mark bindingConditions and bindingFailureConditions errors as covered by declarative
    ce93309f4c9 test(validation): Add tests for bindingFailureConditions maxItems validation
    2a116e29ce6 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingFailureConditions field
    2ad5127a793 test(validation): Add tests for bindingConditions maxItems validation
    ab08274be10 feat(dra): Add maxItems tag on DeviceRequestAllocationResul.BindingConditions field
    9eb7750d7f9 features: bump image gc max age feature to stable
    7336f53439b remove usage o ExecProbeTimeout
    da77cf84baa pkg/kubelet/watch_base_manager: wraps the LW with WatchList semantics
    f8868e9cace client-go/kubernetes_test/clientset_test: intro TestUnSupportWatchListSemantics
    f3d1fd23c57 Fix comments and reformat import statements
    ba6074dd0b8 Promote HostnameOverride feature gate to beta stage
    8f2d7581eb1 client-go/dynamic/dynamicinformer: wrap the LW with WatchList semantics
    f6e2ea7b968 build/common.sh: fix support for Rootless Docker
    78fcb4475f4 client-go/metadata/metadatainformer: wrap the LW with WatchList semantics
    0613fdeccb5 kubeadm: add missing cluster-info context validation
    47e9686b4db feat(validation-gen): add +k8s:format=k8s-long-name-caseless declarative validation for DeviceRequestAllocationResult.Driver
    0cf91027638 feat: add +k8s:enum declarative validation to ResourceClaim DeviceTolerationOperator and DeviceTaintEffect
    44a268e2723 KEP: 5495 - Add deprecation warning for ipvs
    d7b83193c42 docs: quote PowerShell completion script path ($HOME may contain spaces)
    0f6bc57d118 docs: dot-source kubectl completion script in PowerShell profile
    d07b769418d Replace feature label with WithFeatureGate for KubeletPSI test
    2072acb3ba5 Add listType=map and listMapekeys on  ResourceClaimStatus.Devices
    4bd3d17e4aa Allow pointers for list keys
    03c7962d175 usernamespace and procmount are tightly coupled. Disable them together
    1f803aa314a Use DV for long name validation of spec.devices.requests[%d].firstAvailable[%d].deviceClassName
    af173926308 Setting the default feature-gate ExecProbeTimeout value to TRUE
    d0a2a0d22e7 e2e: find and fix reuse of test names
    51fc3c744a0 bump etcd to v3.5.23 for release v1.31, v1.32, and v1.33
    9864c29861e Lock SystemdWatchdog feature gate
    6ae916a577c rbac: Remove PolicyRule.Verbs from declarative validation migration
    2ea3d3815cd feat(validation-gen): Add declarative validation support for rolebinding(v1,v1alpha1,v1beta1)
    4e660cc05b9 feat(validation-gen): Add declarative validation support for ClusterRole(v1,v1alpha1,v1beta1)
    70a8babb09e test: move kubelet GC tests to node conformance
    41cb2378b42 update publishing rules
    f23f716af46 drop support for policyv1beta1.PodDisruptionBudget
    5594d94e671 ./hack/update-codegen.sh
    f076736206c code-generator/cmd/informer-gen/generators: wrap the LW with WatchList semantics
    778ff5d5ab4 update after review
    d15b2893341 ./hack/update-codegen.sh
    4d9fcfeeca8 client-go/kubernetes_test/fake_client_test: TestDoesClientSupportWatchListSemantics
    2fd727bf923 address feedback - comment  on declarative defaulting gap w/ DV
    c284201b711 generators/fake/generator_fake_for_clientset: intro IsWatchListSemanticsUnSupported
    4bb2bd05322 client-go/tools/cache/reflector: supports watchlist.DoesClientNotSupportWatchListSemantics
    26cba8ee03d ensure permissions are consistent on dockerized binaries
    9d83f71cdec fix validation_test.go to use path normalization
    a77f845141a address feedback - remove origin for enum as NotSupported handles this
    6e95412c432 address nit
    77d87a0e633 fix normalization rule post-rebase
    f84423813bd address feedback
    9a7dace7347 feat: add +k8s:enum declarative validation to ResourceClaim DeviceAllocationMode
    91d135f3445 Include relevant dimensions in pod controller indexing
    5b9b8ec732b make localtime mount readonly
    1877809f59c cleanup unused rsync related env vars
    feeeb4aa19f switch from rsync to cp, drop rsync requirement
    e71aa02f96f we no longer need to delete old docker images as we don't build a build-image anymore, we use pre-built kube-cross
    ff0a5fff382 cleanup lingering references to kube-build
    b3ad67739a8 delete build-image
    4eead9306d5 add coverage for pod resize 'read' and 'replace' endpoints
    ae3605d1093 mark aggregator test LinuxOnly
    bec583bc3dd Enable MutableCSINodeAllocatableCount by default in Beta
    8324fc3e034 client-go/metadata/fake: expose IsWatchListSemanticsUnSupported
    82e516200a4 client-go/dynamic/fake: expose IsWatchListSemanticsUnSupported
    fface8ebfc9 Bump coredns version 1.13.1
    c7eb3751b9e Fix volume mount changePermissions test flake
    9763935518e Refine: VolumeGroupSnapshot tests
    9020a177318 feat: add enum validation for AllocationConfigSource
    7825b2fc766 drop go-socks5 from build/tools.go
    30c3c990d0e prevent shellcheck warning
    563919c6858 don't update _output/bin symlink in dockerized builds
    78830afba89 Enable external VolumeGroupSnapshot tests
    debe026b211 Fix unit tests to work with explicit depndencies
    605f402d44a use relative symlink for output path
    54f39033f03 Test status update for all APII versions
    36e3a8f2691 Record and require all kube-feature dependencies
    20af32e5c11 Stop serving alphas removed in 1.35
    33321022f83 Regenerate openapi with unserved 1.35 APIs
    bec429cd96f Review fixes
    ac5046786e0 DRA API: implement ResourceClaim and ResourceClaimTemplate strategy for DRADeviceTaints
    8a43852c35f build: build by running kube-cross directly should leverage a potential KUBE_GIT_VERSION_FILE
    2a488616bfa tests/e2e_node: Add test for userNamespaces.idsPerPod
    b38d7028075 userns: Return nil manager if feature disabled
    0b5aa1d491c userns: Use better defaults if idsPerPod are used
    db6a2b2318a kubelet: Don't ignore idsPerPod config
    97861325ae3 KEP-4622: node: topomgr: max-allowable-numa-nodes to GA
    cccb66bfbc2 test: topologymanager: handle panic in test
    00a8ddce91b node: topologymanager: don't leak options in tests
    96a9fe5f7b1 update debian-base and setcap
    15154374bca Bump images, dependencies and versions to go 1.25.3 and distroless iptables
    476824c2a1e [PodLevelResources] Add more comprehensive test cases to kubelet
    bf88ae7d737 Fix DisableAllocatorDualWrite dependency on MultiCIDRServiceAllocator
    d0f482129da Add stability level in the tags doc.
    678b79a173b Properly account APF seats for legacy watches that compute init-events
    6f820481d36 bump to go 1.25.3
    84b78307e28 fix: the failed unit test
    4c8b4347797 DRA: Fix socket binding error in unit tests
    6a455c669b5 fix panic for the crd with status subresource but lose openAPIV3Schema fileds
    da338ba1fff Warn on use of deprecated PreferClose
    3176ef27602 Update TrafficDistribution docs for PreferSame* GA
    c6a86d125f2 Merge the two TrafficDistribution integration tests
    02926c9563d Update PreferSameTrafficDistribution to GA
    b13564a63c3 Belatedly remove references to PreferSameTrafficDistribution being Alpha
    7ed61cfde16 chore(kubelet): migrate topologymanager to contextual logging
    c48a16ebd8e fix issue
    e9f66ea507f fix
    dfb02e7581e add TestUpdateStatusWithOldVersion integration case
    0554102ab33 test: Add CIDR allocator metrics test with multiple CIDRs
    3c2c64a7f65 Add integration test for invalid SAN certificate handling
    9292f1e82b6 refactor(resourceclaim): generalize tweakDuplicateRequestName to tweakAddDeviceRequest
    2260c9b9837 test(validation): Add unit tests for DeviceAllocationResult.Config maxItems
    b3eb152db43 feat(dra): Migrate DeviceAllocationResult.Config maxItems validation to declarative
    8c7a338afe8 test(validation): Add tests for status.allocation.devices.results maxItems validation
    a05fce7c228 feat(dra): Add maxItems tag on AllocationResult.Results
    f70142a6a90 feat(validation-gen): migrate ResourceClaimStatus.Allocation NoModify validation to declarative validation
    331ea387696 feat: add +k8s:update tag and associated tests
    86d06973197 remove blank line between comments and entry
    19311b932fb reorder kube-cross to be under go version and dedupe it from the go version
    39d37a1e926 Remove invalid SAN certificate construction
    ced2a40b9e9 kubeadm preflight checks: fix host URL construction
    1c950080155 Log when automatically disabling dependent features
    e669ccda0f4 update build/README.md to reflect removal of rsync/data containers
    7d2309f0591 cleanup unused rsync utilities
    faa62c8ce61 cleanup KUBE_RSYNC_CONTAINER*, KUBE_DATA_CONTAINER*, DOCKER_MOUNT_ARGS
    36526c38158 delete more now-unused shell functions
    5a05c062c3c delete now unused kube::build::copy_output and kube::build::build_image
    7ed65b466d7 remove defunct comments about updating copy_output
    dee429c1659 remove unused scripts
    eaeed1a5345 remove calls to kube::build::build_image and kube::build::copy_output
    581012fe063 build by running kube-cross directly
    52c734f1e6d kubeadm: print errors during control-plane-wait retries
    0a05490e08d fix broken gce jobs
    19a29de5ec9 style(kuberuntime-container): clean up redundant if branches
    4d61ba787d5 test(validation): Add tests for status.ReservedFor maxItems validation
    b0a511d3090 feat(dra): Add maxItems tag on ReservedFor field
    9ae5039b7f4 e2e: skip the reboot node test case
    e8d512d8221 extract build vars setup into reusable function
    6c9f2793ef7 Stop mentioning the removed gate CSIDriverRegistry
    5362c2858de Remove mentioning of the APISelfSubjectReview gate
    3b93755c0c0 client-go/tools/cache/listwatch: intro ToListWatcherWithWatchListSemantics
    83eebc22902 fix: Add CIDR filtering and overflow protection to IP allocator
    dc686f240be Remove deprecated pod-infra-container-image flag
    3f8a5219e2c Enable validation-gen on rbac/v1,v1alpha1,v1beta1
    20dafe678bd test: Add failing tests for IP allocator CIDR filtering and overflow protection
    d5ae324fb6b don't require build tools to clean
    dd3a713f6c4 fix ReplicaSet and Deployment tests for DeploymentReplicaSetTerminatingReplicas FG enablement
    2bf467170e7 make update
    b0e47a88f74 promote DeploymentReplicaSetTerminatingReplicas to Beta
    8b5cf608fd5 Add k8s-label-key format for toleration key
    b738e8c3caf fix panic in cron.ParseStandard
    7b4d4f72c90 fix lint error
    f27346db6c5 update warning to reflect kep changes
    4f8757b4c01 Remove flaky HPA deletion assertion in TestMultipleHPAs
    d6dec0b345a Revert "Merge pull request #134178 from HirazawaUi/remove-RootlessControlPlane"
    400f8eccc55 Remove the --pod-infra-container-image flag from kubeadm
    233ad2071ca refactor(serviceaccount-tokens-controller): Change the secret's MutationCache to SecretLister
    efda517d93f speed up make clean by narrowing recursive chmod
    9c2520b6334 test: mark duplicate device requests as covered by declarative validation
    4616d749a3d feat: Improve the robustness of SVM
    ebc4768ff3b Increase time out for verifying metrics
    861e397b054 Using processStart time to handle execution delays during stress tests
    4f7e9ff1efd bump cos-gpu-installer to support cos 121
    514b93d7e13 test: add validation test for duplicate DeviceClaimConfiguration requests
    ed932547cf5 feat: migrate DeviceClaimConfiguration.Requests to declarative validation
    c81fc12900b test: add validation test for duplicate DeviceConstraint.Requests
    63f8c0a4fe2 feat: migrate DeviceConstraint.Requests uniqueness to declarative validation
    0fa441f962b Promote KEP-5311 (Relaxed validation for Services names) to beta
    2341b3bcc86 test: add validation test for duplicate FirstAvailable names
    3ad7b189b70 feat: migrate DeviceRequest.FirstAvailable uniqueness to declarative validation
    d045a9dd3cd test: add validation test for duplicate device request names
    ca9e09b7d30 feat: migrate DeviceClaim.Requests uniqueness to declarative validation
    3ec711f91ee cluster/gce/gci: revert PATH change when using custom runc
    8e4cd1f3b60 address feedback
    d77cb206a09 feat: migrate k8s:format=k8s-long-name-caseless validation on OpaqueDeviceConfiguration.Driver to declarative validation
    7f58bb9abdf Regenerate vendor
    2fe6220968d Regenerate protobuf
    6d8adfe4025 Isolate generated ProtoMessage() methods in build-tagged files
    5fb0e16be6f Drop runtime use of gogo packages
    caea56f3847 Fix controller setup in storage version unit testcases
    cf099f4fc90 Update --chunk-size flag, dropping the beta information
    8dc51e11eff improve kubeup env parameters
    67c29eaafcd CHANGELOG: Update directory for v1.35.0-alpha.1 release
    b8670cbc31c reduce dependencies to apiextension objects
    6f51446802f DRA device taints: fix toleration of NoExecute
    9702a2dca2b E2E framework: enable data race detection only if needed
    5e216ae34d0 Replace HandleCrash and HandleError calls to use context-aware alternatives
    7eb7894dada refactor(apiextensions-apiserver): Make APIApproval controller context-aware
    f99d0e9759f Mark API server errors as transient in csi raw block driver
    2fa703bfb69 address feedback
    b4fa5794efa generate
    1c0f0add8a5 feat: add +k8s:immutable tag to ResourceClaim.spec and associated tests
    dfd7b230b4d feat: make it so that all ShortCircuit validators are run for short circuiting check
    10473da4f70 chore: add +k8s:immutable tag implementation and test
    c189e9d82f5 Split Endpoints controller and EndpointSlice controller conformance tests
    7b7145a5940 Update kubernetes.default endpoints test a bit
    e627b3b2bff Move some network conformance tests around.
    d46f15bd12f Fix some linter errors before splitting out code
    07959fd1680 Remove redundant test of "empty EndpointSlice for Service with no Pods"
    ff83235f352 Fix up EndpointSlice conformance test descriptions
    dd8d0e65d4e Dedicated package for scheduler interaction with DRA structured types
    1fb86743872 Add listType=map and listMapekey=uid for ResourceClaimStatus.ReservedFor
    01264d3970b With new changes we will also have a VolumeModifying condition
    cb01a28df40 Ensure CSINode is owned by node when installing CSI drivers
    13cd40d718b E2E volume: fix restarting of watch
    328f9da729d Add current and old nodeIDs in log messages
    111fc04e1d3 fix: update pkg/apis/resource validateDeviceRequest to short-circuit on the oneOf check
    e62523e1f56 address feedback
    fd12fc00c9f fix: remove unnecessary ValidateResourceClaim call from resourclaim ValidateUpdate
    4ca286819a9 Add DV for uids in resourceClaim Status
    d9fb647515d fix overlapping client CA and requestheader CA validation with proper certificate checking
    6965075ebd8 Address feedback: simpliy errormatcher instantiation
    6138a68f4e8 fix(validation): Mark covered errors in TestValidateClaim for better clarity
    763c01ef68f feat(validation): Add normalization rules for ResourceClaim validation
    32e64ec0e9a simplify getNodeAnyway func
    c82f2caaa46 DRA E2E: promote CRUD tests to conformance
    2b220dffa76 add integration test for endpointslice controller headless services
    d03fab555f1 kubectl config set-context: Add -n flag
    09ef1e08e96 Fix storage version test flake
    f9a893be37b Fix incorrect error messages
    d1767c10c01 fix: typo in internalversion printers
    ae8ea8994ef feat(validation): Enhance validation tests with normalization rules support
    7bbc7228aca run update-codegen.sh
    7366031541a feat(dra): Add maxItems validation tags for ResourceClaim fields
    4568ac300c1 changelog for 1.34
    b2073c3325d reordered changelog for cri api
    5b7e96219f8 remove cpuSharesToCPUWeight that is not used any longer
    84431876888 Warn when quota request > limit
    79678dd3935 feat: add resourcequota WarningsOnCreate request less than limits
    100cd47acbc Update SIG Scheduling leads in feature-approvers
    1137d51b358 Disable SchedulerAsyncAPICalls feature gate due to a known regression
    2ddc9555582 correct metrics function comments
    070d4c1846b bump etcd to v3.6.5
    7c596722137 Fix in code and integration test that verifies that when victim pod is stuck in binding, preemptor pod remains waiting in unschedulable queue until deletion of the victim pod is completed
    e9f61ce511d Move stats updates to getList
    4b3e562dc8c client-go/util/watchlist/watch_list: intro DoesClientNotSupportWatchListSemantics
    0b0a5974f82 integration test: webhook proxy behavior
    26c7846e6dd Use lock-free for unguarded isHidden/isDeprecated fields
    52dec274b36 add TODO to migrate when new metrics mature and old metrics are deprecated
    7c529f25f4d add apiserver_validation_declarative_validation_panic_total invariant
    84ce0f57f27 add test to verify invariants are fully specified
    41ae5cdf4b0 check invariant metrics after e2e tests
    748510b8ee0 refactor and increase coverage for pod resize tests
    e4a34ce343e KEP-4540: StrictCPUReservationOption moved to GA, modified unit tests to reflect this
    ae259797903 Use a dedicated delete channel in HPA test
    f79fb9e59e0 Fix rebase issues
    03da38a8023 feat: add path normalization support to error matcher
    f95d531b0ae DRA: CRUD conformance tests
    545526cfe09 DRA E2E: only check ResourceClaims in the test namespace
    2ac9ff1c1fb test: format unstructured as YAML
    a7b720ad5b8 upgrade to cos 121
    5af28702540 fix nested map segmentation fault
    d71e7e78595 fix typo for `AnonymousAuthConfigurableEndpoints` error
    6d3d7553fbe Lock all mutable fields when printing gc node
    940a2a7f070 Update hostpathplugin image version in DRA test driver manifest
    6e7762ef0ee Update cluster/addons/ip-masq-agent/ip-masq-agent.yaml
    b5805f28e72 Update cluster/addons/kube-network-policies/kube-network-policies.yaml
    c4c7efc4f95 apply feedback
    515b579945a feat(resource): Add maxItems validation for DeviceClass configs
    e693da72906 feat(resource): Add maxItems validation for DeviceClass selectors
    4986abe0b86 Automated refactoring to use SetFeatureGatesDuringTest
    6e574cabdd0 test/e2e_node: mark MirrorPod update tests as [NodeConformance]
    d4c5b8817ef Set test feature gates as a group, and auto-disable dependents
    46c15a1844a fix typo in comment for namespace validation to appease verify-spelling
    2fd76c8ed18 fix: Comment out ipSloppyValidator
    51f02aa58a2 fix: Update error origin in ValidateDNS1123Label to use k8s-short-name format
    6b11e6433cc run update-codegen to for ReplicationController
    0a26ff5cb47 Update CSR DV test to match RC style
    2d48dae391e Eliminate public ValidateReplicationControllerName
    229c6b13ca7 Validate ReplicationController.metadata.name
    7cf99892224 Add ValidateObjectMetaWithOpts() to apimachinery
    b00e0f30208 Add cohort support to +k8s:item
    975df59fcd5 Add cohort support to +k8s:subfield
    efe4d17d15e Add support for validation cohorts
    8105dbe5bce Revert "Omit type names of emitted slice elements to appease gofmt"
    07991f41f00 Fix: Correct timestamp for node swap metrics
    5d067af5e1b Prefactor: Fix some bad tests
    7b938513956 Fix ReplicationControl double validation
    04d632dd050 fix: Adjust validation for pool names to ensure proper coverage in device requests
    c36c927d189 DRA ResourceSlice: nicer log output
    af9facf7bad Fix passing runtime.Object to HaveValidResourceVersion check
    af9b314fb45 Propagate backoff duration for crashloop backoff.
    5ae2372f1b6 Remove a "helper" function that doesn't really help much
    0cb916d4dcd Move metrics calculations to getList
    fc19fcfb73c improve httpstream handshake error logging
    89b975c6d36 Add comments
    199c9ac77ab Remove ExpectInvalid()
    8b08c8e59ce Remove ExpectRegexpsByPath()
    b922fd9db43 Make ErrorMatcher more strict about multi-match
    a51fb72c7f4 Simplify tests wrt ratcheting
    054ab36c913 Fix field path for embedded fields in root types
    9757d8d8efe Document 0 as a special case in RV comparison
    84f85712beb feat: Add matcher and conformance tests ensuring that RV is uint128
    02a51e3712d DRA ResourceSlice tracker: explain test a bit better, fix -run
    c524a5fba28 fix(cordonhelper): Avoid mutating local node before API call
    7c24e62d7cb Add additional types for resource version comparison testing
    68205ff40c5 DRA scheduler_perf: run with specific allocator implementations
    5832c915ace scheduler_perf: apply feature gates in deterministic, alphabetical order
    60eeaa6ebda DRA scheduler: add unit test for allocator selection
    7f57730ba4a DRA scheduler: fix selection of "incubating" allocator implementation
    b5bcac998d0 DRA scheduler: clean up feature gate handling
    723d1555a72 test: update CSI sidecar images to latest versions
    b0460eedbac Make legacytokentracking controller context aware
    37fcfcd29e9 feat: Add conformance tests for all resources for comparable resource version
    fe681cfd8f6 update comments
    83163d0b4a9 update comments on beta apis
    11291fb6c59 update featureflag list
    b656027b936 Update MaxUnavailableStatefulSet feature gate to beta
    2cef54c1450 feat: Add helper function for client-go to compare resource version
    f5e65af1737 add getters for event User and ImpersonatedUser on AuditContext
    8a03067211e fix resource claims deallocation for extended resource when pod is completed
    2c12d5731e4 fix validation_resourceclaim_test.go with MarkCoveredByDeclarative
    9380248ad69 generate
    ef2b68388ea add +k8s:maxItems tag logic and tests
    b6afe986c62 kubeadm: rework the FetchInitConfigurationFromCluster node flags
    03a1a22478b Add declarative validation tests, use tweak pattern, and additional test structure changes
    11df50453fc Add maxItems limits to ResourceClaim
    212a9c6a60c test/e2e/apimachinery/watchlist: select only wellknown secrets for table test
    a20b34aa82e devicemanager: fix golangci-lint errors
    bb91913017e Migrate sample-device-lugin to contextual logging
    7e27b9c241f change default for failCgroupv1
    6a5d0ef4230 gce: fix etcd manifest
    1cfc29a179b cluster/addons: update container images to latest versions
    574ac5b4978 disruption: remove unused pdb parameter from getExpectedScale method
    574b09b7de4 nodelifecycle: fix ComputeZoneState method comment
    2b3f1877bee Update NPD to v1.34.0
    c4ec18b58a6 pkg/volume: improve code style and readability
    b40b67b9cff Deprecate caseless driver name validation and enforce lowercase warnings
    7af3377900b Add desired_replicas histogram metric to HPA controller
    96349a46088 chore: Move declarative validation featuregates to staging apiserver
    06c47136fef implement KEP-5573 by not starting kubelet on cgroup v1 by default
    e6e6c6fdfbb Remove unused WithTakeover and WithValidationIdentifier
    9a7e2291d1f refactor: Remove Validate(Update)Declaratively and improve error handling
    d2ec0308c7f simplify scale subresource testing and document expectations
    713cb97a850 test: Add unit tests for metricIdentifier function
    2d7dd9164fa Refactor: Centralize declarative validation and migration logic
    d559a4afe7f Add configurable tolerance e2e test.
    4a76cd84055 Remove configmaps related rules from the kube-controller-manager and kube-scheduler leader election roles
    d45a4557c1b Migrate device manager to contextual logging
    4347d4be812 Update coredns to v1.12.4
    5119b869668 refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration
    2c78bc981c2 Introduce API to codify and validate feature gate dependencies
    7efc77f493a Apply feedback
    7bab54a7c8b emit comment for uniqueness is disabled by k8s:customUnique
    059d1794e61 test(validation-gen): Enable uniqueness validation tests for listmap
    71797498f9c test(certificates): Add ratcheting test for CSR conditions
    3da0a255f7f Enable listmap uniqueness & run codegen
    3015e58e40f Improve tests devex for DV tests.
    adf0a916930 update autoscaling leads
    bd075eb98cb kubeadm: use JoinHostPort in WaitControlPlaneClient
    ad8f91fb0f5 Fix error messages in volume path handler
    53b81011e25 fix: add +enum tag to resource DeviceAllocatoionMode
    8138390e51d feat(certificates): Add k8s:customUnique tag to CertificateSigningRequestStatus
    09e96ae3f1d chore(validation-gen): Update output_tests for k8s:customUnique
    81e2d211767 feat(validation-gen): Add k8s:customUnique tag for disabling uniqueness validation
    6031ff29c14 make containerd download more robust
    051b29bde38 Add nil scheme check in GetReference
    0010d3992ac kubeadm: ensure waiting for apiserver uses a local client
    a96ac3a2766 update publishing rules for 1.33/1.34 to set go1.24.7
    2ffc06e09ae Make APIServerLeaseGC controller context-aware
    2b110c138ec Add RunWithContext method for debugsocket
    a28e452b44f refactor(apiextensions-apiserver): Make NonStructuralSchema controller context-aware
    90bd84798c8 refactor(apiextensions-apiserver): Make NamingConditionController fully context-aware
    409ad3944f7 added unit test for /statusz endpoints
    56eb9a1a960 [126379] [go-client] chore: use WithContext functions: do not use SleepWithContext inside Sleep, use CalculateBackoff inside CalculateBackoffWithContext
    dbe4143de68 generate
    7019a088c39 Add declarative validation tests for ResourceClaim status
    8606fa03dc7 Add declarative validation of ResourceClaim status pool field
    e8f243dac2a Add output tests
    83cf6358189 Add k8s-long-name-segments format
    697113f5f07 Add utility function to errors to allow format composition
    273912fb7f6 Improve BenchmarkSerializeObject benchmark
    d2e6be440c6 Revert "Merge pull request #133213 from sanposhiho/second-trial-conor"
    c1e74a1a982 Promote HPAConfigurableTolerance gate to beta
    bc7ea997a0c deflake e2e: ensure pod with sidecars restarts in correct order after node reboot
    a87068c685d Clean up gogo dependency tracking
    b7567b980b9 Remove non-generated use of gogo dependencies
    840aa4722e9 Drop unnecessary gogo dependencies
    7930c2db4c0 Fix SELinux e2e tests waiting for "container created" event
    48d56644308 update kube-cross image
    ac35a0a99a9 Remove some unused bits of verify-golangci-lint.sh
    911e46c08b4 fixed the CRD statusResetFields init issue
    784b842a44f Remove the --pod-infra-container-image flag from cluster/gce
    37592a026be bump gengo
    22551e56a65 Fix IPv6 allocator for /64 CIDRs
    51c525a1402 [126379] [go-client] chore: use WithContext functions
    1e4e6e10c19 Use context.Background() directly in kubeadm polling API calls
    c8138546201 Update comments around an old bug workaround
    a8a21aaf853 Add hpa object count metric (#134140)
    25893cb579a Promote regression-issue-74839 to 1.4
    fefcbdcff23 Bump  image version
    d957c90153a Track connection using IP+port in server to fix conntrack test flakes
    ea914d8077f Remove unused WaitForServiceEndpointsNum function
    01f7de46f6c Replace deprecated WaitForServiceEndpointsNum call with WaitForEndpointCount
    12db1e28dce remove unused file
    15b16e0090d Remove RootlessControlPlane feature gate
    343a5db9658 DRA E2E node: fix cleanup of tests using separate registrar
    89b75e998d3 expand coverage for resource quota and limit ranger tests
    4e719939170 Enable SSATags linter to enforce +listType on lists in APIs
    883b9e570af Wait the readiness of pods for all the containers generate logs
    4275b8b759d Don't limit the number of goroutines dispatched by the API Dispatcher
    736f7b9a1b5 update to latest sigs.k8s.io/json
    9d5ddd9faca change klog to log volume name instead of entire spec in GetDeviceMountPath
    19356ad1182 refactor(cloud-provider): Use WaitForNamedCacheSyncWithContext
    f44279647bf refactor: Use WaitForNamedCacheSyncWithContext in core components
    9d4b91dbd80 kubeadm: cleanup after ControlPlaneKubeletLocalMode
    c3a26a066d8 Bump golangci-lint to 2.4.0
    36e3adf318c Add e2e test for MaxUnavailable StatefulSet RollingUpdate (#133717)
    9382fa8b70b Remove KUBECTL_OPENAPIV3_PATCH feature gate as the feature is stable
    7028ba09dbb fix: duplicated 'the' in comment
    d7a2793fa65 bump system-validators to v1.11.1
    f8bfcfc8857 Drop utiliptables.NewDualStack()
    88d6e6c465a drop automaxprocs hacks now that go 1.25 handles this built in
    563d4d651ca bump go language version to 1.25
    f8d2df0f74b refactor: skip re-validating for unchanged resource claim specs
    9ca4ddf9699 add go.work.sum to dep-approvers file list
    c8d3b3fdd33 add go.work to dep-approvers file list
    4b0eeeb6184 Make pod-security-admission honor emulation version
    7f4ee652eaa Delete temporary ProbeHostPodSecurityStandards feature gate
    55419eca7a2 Plumb effective version into admission initializer
    67632f8229d Add support for k8s-long-name-caseless format.
    17665a39cf5 feat(validation-gen) enable declarative validation for resource.k8s.io DeviceClass
    871f87eaec6 e2e_node: test DRA plugin gRPC connection reuse
    6d5aece4d81 Ensure keys used in storage and cacher start with resourcePrefix
    0b10735cd72 Extract the prepareKey function
    709280ef6e7 Test requests send to etcd for all LIST requests
    56a4306fed7 kubeadm: graduate ControlPlaneKubeletLocalMode to GA
    fa9071302f8 Adding metrics for Maxunavailable feature in StatefulSet (#130951)
    f58d1e101ff refactor(controller): Use WithContext variants in cloud node controllers
    d12eeb98d0c Replace HandleError with HandleErrorWithContext
    69aca29e6de Update kitten base image from agnhost:2.33 to agnhost:2.57 (#133818)
    6dbc13fd134 Bump to go1.25.1 based images
    af231d2153c Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/
    eca1cfb259f chore(validation): add validation identifier for declarative validation in ResourceClaim
    c0fcb10acfa fix(tests): update fake client initialization and add resource version handling in validation tests
    7c45b1aa3b7 refactor: simplify declarative validation tests for ResourceClaim
    380c4c222ee feat(validation-gen): Add declarative validation support for ResourceClaim/(v1,v1beta1,v1beta2)
    3fc0498d6ec Bump distroless-iptables to v0.7.8
    fb184a9ff42 Update pkg/api/testing/OWNERS
    c51a8734b12 Update documented metrics list
    aefd2effc5e test: automatically lower Ginkgo parallelism when using race detection
    479d78851ab feat(apiextensions-apiserver): Add WithContext variant to EstablishingController
    7a62519b364 E2E: treat data races in e2e suite as failures
    f5cd1a16646 Address tests grouping comment
    50ea1f870ea fix incorrect warning whenever headless service is created/updated
    92dcd02459f Add helpers for declarative validation tests
    74faf1527fd Unify directory protection for recursive requests in storage
    cbb7b29bc24 print the current kubectl command encapsulated by kuberc on V(1)
    3799b8bf6a7 Add reviewers and approvers to api/testing
    1c41cb0550b fix gofmt
    842d6d29fc0 test/e2e/node: promote ConfigMap update test to Conformance
    1a5e77135b2 Add fine grained metrics to narrow down DV mismatches and panics
    4db49d0f4e9 feat(validation): enhance slice validation with declarative options
    4074be896bd Record SyncTerminatingPod error and set error status on span when non-nil err returned
    f99cb99a1b9 Wait for quota to report used before creating pvc
    8817dd65296 Update cmd/kubeadm/app/cmd/upgrade/node.go
    91a3a30eb5c Ensure consistent key schema requirements between cacher and etcd3
    938b23879a2 test/e2e/node: add [NodeConformance] label to ConfigMap update test
    5dac4ee1695 Improve dry-run error messages for clarity
    a825c72697e Update agnhost to version 2.57
    e39ed4a4b4b scheduler/volumebinding: add test for PVAssumeCache
    bbee7b9d6b1 scheduler/volumebinding: rename passive_assume_cache_test.go
    4b0eff59c07 scheduler/volumebinding: target AssumeCache UT generic passiveAssumeCache
    872981a2055 Rename CLE test directories
    1ce12710ec1 refactor(controller): Use context-aware WaitForNamedCacheSync in resourcequota and HPA tests
    d2ba13dac92 Add exceptions for existing issues for conditions linter
    894d724f98a Enable conditions linter for Kube API Linter
    e3b08f98713 Update KAL to latest and add shadow config for new options
    af6b3ed1f51 Add support for k8s-label-key
    aa0c5960edc Add support for k8s-label-value format.
    8fed05c5b78 DRA E2E node: fix test cleanup
    b81e87c02f9 fix: use iifname for input interface name matches
    5a708a7ff0d scheduler/volumebinding: remove Get[API]{PV,PVC}
    ed19492dc2b scheduler/volumebinding: passive assume cache
    09ab06b423c Remove container name from container event messages
    bbf896c35bb build: automatically choose a suitable base image
    4e907fad15d Explicitly set TerminationGracePeriodSeconds for mirror pod
    1e742f01ba6 Fix cacher resource prefix not having a "/" at the end in tests
    c385a229d4b scheduler/volumebinding: introduce testInformer
    1baa7936d89 Fix flaking RunTestDelayedWatchDelivery
    eaf87d59077 scheduler/volumebinding: pass testing.T to helper
    dce23dac036 scheduler/volumebinding: use subtest
    90109b21af7 Wrapper for DeleteLabelValues
    455a4376742 node_e2e: fix kubelet configuration setup
    c08b9ab3b5c Replace deprecated sets.String with sets.Set for Index type
    476325f6e5f Specify the deprecated version of apiserver_storage_objects metric
    cbedde7ef50 [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: also empty TokenFile if Token is set in ConfigFlags
    41307203ba4 Add additional test for root level, ignore mutation lint error
    029d314e150 Replace NewIndexerInformerWatcher with NewIndexerInformerWatcherWithLogger
    46cc610e6fe Drop PodIndexLabel after the feature GA-ed in 1.32
    16fa1501826 scheduler_perf: run garbage collection before measurement
    c52e3aafb32 skip creating storages for unserved versions
    74cf1db218e sort the device requests in the extended resource claim spec. removed the sortClaim in the unit test.
    bb21080626d standardize not found error message of kubectl scale
    ecff35e2fb4 deflake e2e tests: set cpu requests to avoid out of cpu
    0c0acbc5351 Disable too short scheduler_perf workloads
    9f31b009081 scheduler_perf: KUBE_CACHE_MUTATION_DETECTOR=false in docs
    4f6598e8a31 Fix tests not using proper resource paths
    6e5a5abb86c Fix version bump to follow semantic versioning
    97cd1c24085 replace fmt.Printf with fmt.Fprintf
    96463c1e9a7 kubeadm: fix the KUBEADM_UPGRADE_DRYRUN_DIR environment variable doesn't work forthe upgrade phase when it writes kubelet config files to disk
    9f49e3b9e16 deflake unit test: TestIsConnectionReset
    86028eecf2a Add ratcheting of selectableFields
    a89a36061c8 fix lint errors
    3da372354d6 add fake-registry-server command to agnhost
    480fad996d5 kmsv2: run TestKMSv2ProviderKeyIDStaleness in parallel
    dfcadb4f896 Replace WaitForNamedCacheSync with WaitForNamedCacheSyncWithContext in pkg/controller/garbagecollector
    5e66bb69720 ./hack/update-codegen.sh
    fe1aedd0bf7 applyconfiguration-gen: remove "Experimental!" comment as the code has been stable for several releases
    c911747f240 applyconfiguration-gen: preserve struct and field comments in generated code
    8dafb98e916 Update sample-apiserver and examples
    fc091d93d53 Update tests that depend on internal model names
    e9daf55b56a Add tests
    3fc59ee9a70 stop using util.ToRESTFriendlyName in favor of declared model names
    0dd2056045a Update violation exceptions
    5647c07179d generate
    e910c181cb9 Add model name generator tags
    cfbe326e3a2 Enable openapi model name accessor generator
    8b63ace66c5 Bump kube-openapi
    dd9917ddce8 Fix flaky resource claim metrics test
    3df195633a8 Add support for UUID format.
    7e6aafe1577 fix intergation test
    9e60e3593ec kcm/app: Add proper goroutine management
    79f8d1b1c5d fixed bug such that implicit extended resource name can always be used, no matter the explicit extendedResourceName field in device class is set or not.
    1ac067ae0e6 Fix tests to to only accesses keys from under resourcePrefix
    31e035ec39e Use increaseRV in TestWatchStreamSeparation to imply external RV increase
    83273e21b91 DRA scheduler_perf: clean up usage of steady-state pod scheduling
    9af3e868102 scheduler_perf: detect testcases with no pods scheduled
    3dfcda9afdb Fix minor inconsistencies in scheduler
    bf0429ed07c migrate kubelet/certificate to contextual logging
    edc8dafc699 Cleanup enabling resource size estimate
    5483c52e101 DRA: Fix ConsumableCapacity shceduler perf test (simplified)
    05fc3f65d82 CHANGELOG: Update directory for v1.31.13 release
    70af7708fcc CHANGELOG: Update directory for v1.34.1 release
    d884ed5e97b CHANGELOG: Update directory for v1.33.5 release
    6d0138d3f12 modify etcd data for integration test
    587f67052dd modify api version hash
    7184ac5a733 make v1 resource version first priority in resource
    f89e73a3038 CHANGELOG: Update directory for v1.32.9 release
    9ca3159e34c Fix fake runtime's image pull
    a77fc586c75 Fix negative pod startup duration
    bbdd27d91e5 Add tests for unique tag combo & update-codegen
    62662e3a08e feat(validation-gen): support unique tag on list
    a5b29fa812e refactor(validation-gen): move list-related validators to list.go
    81cb5b7df22 DRA: Fix PrioritizedList scheduler perf test
    c4d8c9b5440 Re-disable listmap uniqueness (for now)
    6fb020b1942 Temporary: Re-enable listmap uniqueness checks
    3e15dded75d Pass equiv func to subfield, like item and eachVal
    0d5e374da93 Don't ratchet-check inside type functions
    b6fdbe4a6ab Emit ratchet check for fields with a type func
    229954d1138 Revert "protect against race between deletion and adding finalizers"
    e2e7fa17990 switch our usage of expfmt.TextParser
    bdfca587f48 update prometheus' client_golang and common packages
    2d71a0d72b2 Refactor ItemTagValidator.GetValidations a bit
    8f679c74020 Make item validation just use a TagValidator
    c047bdf58fe Sort item criteria to match listmap key order
    26283acfb14 Clarify that union has field- or item-members
    3f068c7c64d Parse path early, clean up getDisplayFields()
    77c1ac6320b Improve error reporting in item tag
    1f61a8b814d Rename "fields" to "members"
    1417e56dffd Break processFieldMemberValidations into 2 funcs
    023c026d6fd Add ListSelector in validation Context
    3e2e2195ed8 Unions: replace `[2]string` with a type
    8130cf82b59 run "hack/update-codegen.sh valid"
    348d576c9f7 validation: Use JSON names in paths
    f51d57042e5 Update Context comments and fix some usage
    9e71a07abf5 Minor validator name-string fix
    fd3fcfe121a Add comments to generated code
    471256619f6 Put the nfacct e2e test back under the "KubeProxy" label
    9b696ff58cd build: also support KUBE_RACE for test binaries
    90c9a932d49 fix race condition in kubelet's PodCertsManager
    8b50c77eb6d scheduler_perf: measure DRA setup time
    bc8ce679984 delete v1.32.0 testdata
    d59d48e64a3 Add v1.34.0 API testdata
    b276c96ef86 Migrate kubelet/server to contextual logging
    1e3c3934cb9 e2e_node kubelet configuration: merge feature gates and system-reserved items
    c5882e38fff Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set.
    e3c9c277c33 fix CI failure: update pod image using the same one
    55700685bd0 Revert "Add retries to node's crictl test"
    801ee441630 Validate kubelet serving cert in local-up-cluster
    82eb8bd23a2 Populate memory requests from actuated resources at pod status generation time
    8ff5cec2617 scheduler_perf: block after creating ResourceSlices
    af6da561dd8 scheduler_perf: reset and stop testing.B metrics
    5170982540d chore(kubelet): migrate eviction to contextual logging
    39170e2ed63 chore: Clean up duplicate logs
    cfeeff7aced chore(kubelet): migrate stats to contextual logging
    5ed98e97e1c Remove getLocalNode to fix GracefulNodeShutdown e2e.
    b42b96f518f add paths section to scheduler statusz endpoint
    06c5eb992e8 DRA kubelet: avoid deadlock when gRPC connection to driver goes idle
    6b908c192cc [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate: use values from overrides when one of the field (file or data) is present in inverrides
    d38c1df3f36 chore(kubelet): migrate metrics to contextual logging.
    cd343aaf1e3 Fix OWNERS_ALIASES entry for SIG Docs
    7aa6cabd634 fix typo for forceDetachTimeoutExpired
    fc8907da38d [client-go] [cli-runtime] [133916]: handle properly config override logic when override provides ClientKey, ClientCertificate
    8118636321a Close container runtime connections after use
    1a0813598b7 Update SVM Discovery checks in response to jpbetz and stlaz
    bf851e8bcfa Apply feedback
    7d14367f57c Change WaitForNamedCacheSync to WaitForNamedCacheSyncWithContext.
    80e6f9e20a2 chore(kubelet): migrate container to contextual logging
    f1b28b0d1f7 chore(kubelet): migrate watchdog to contextual logging
    98f81fc2910 Remove redundant experimental prefix in wait command
    d75d4860e7f kubelet: migrate module `logs` to contextual logging
    9c1cf79d74c kubelet: migrate utils to contextual logging
    62cadde688c Fix incorrect description of feature PodObservedGenerationTracking
    c88f2f3142b Add k8s-long-name, k8s-short-name format validation tags
    c8681531abd fix typo for sattsfied
    4e200ca00e8 fix: Only warn for unrecognized formats on type=string
    cee1ea7225a Update client-go compatibility matrix to include releases up to 1.34
    ddb015f023b Resolve confusing use of TooManyRequests error for eviction (#133097)
    86e3ad233f7 Revert trapping TERM for podWithCommand
    21359d7b1f4 Switch to resourceVersion controller
    21ff3c196c2 kubelet/metrics: fix multiple Register call
    98c62936230 kubelet/metrics: misc optimization
    43c3b03685c Lock AllowOverwriteTerminationGracePeriodSeconds
    fbd33bd6b39 hpa: prevent integer overflow in external metrics sum
    09548c6bdf3 Move actuated resources state to kuberuntime.Manager
    683a76dd159 Enforce that all resources set resourcePrefix
    954ac21c6c8 Add Kubelet stress test for pod cleanup when rejection due to `VolumeAttachmentLimitExceeded` (#133357)
    3e84e16315a Disable estimating resource size for resources with watch cache disabled
    73cf278883a Mark some aliases as deprecated
    5f4b4a68249 Bump gengo
    7e9b228ff09 apply integration test: fix ordering test flake
    07faaec2c42 scheduler-perf: fix data race in createPodsSteadily
    c8f8f66e6de Increase termination timeout for `evicted pods should be terminal` test
    ef7cee89bf2 add events.events.k8s.io to clusterrole view/edit/node default
    8d31237c334 kubelet: poll after reloading logind conf
    c7ddceb8cb4 client-go/dynamic/fake: Stop ignoring options
    5e59c658d6c Organize enum tests
    f971ad76af2 Only pass type args when needed in enum init
    fa1f9d444cc apiserver: avoid default toleration seconds data race for all tests
    ad9ae3ab9d9 test: fix data race in test/integration/controlplane/transformation
    e32adad6570 apiserver: fix PriorityClasses creation data race
    a67468717c3 Omit value type from validation rule failures
    d6068db62ec CLI: log info about race detection
    23362e001c4 build: support -race in binaries
    9fb1ef4dd0d fix kubectl exec command in cmd test
    da0e7384d5e - Update Nautilus test agnhost images from 2.33 to 2.56 - Update VERSION to 1.8 - Addresses issue #131874 for updating outdated base images
    4babdf80264 Fix race in movePodsToActiveOrBackoffQueue
    fadb40199f1 Move interfaces: Handle and Plugin and related types from kubernetes/kubernetes to staging repo kube-scheduler
    82896feebbd cli-runtime: Return defined error from Builder
    f0be916f7a9 Update CNI plugins to v1.8.0
    584a9da5940 Use golang protobuf for etcd version monitor
    a41de8771af Bump github.com/spf13/cobra v1.10.0
    137d56c1c24 add paths section to kubelet statusz endpoint
    6ddf6261d44 Update to spf13/pflag to prevent CI break
    1fd7f308fc0 ci: remove httpd usage while using agnhost instead
    588276255ba Disable collecting stats for resources not setting prefix to prevent error logs
    9b47a096f4b Update to CentOS Stream 9 based on reviewer feedback
    ea02ce5b603 Update protobindings scripts to drop gogo paths
    70cd76c5cf2 DRA e2e node: skipping resource health disabled test
    1578267ebef Update volume/iscsi base image from fedora:38 to fedora:42
    73127eb86d0 Update volume/nfs base image from centos:7 to centos:8
    72847ee1f75 Replace deprecated strings.Title with cases.Title
    8a6f1736523 lock DisableAllocatorDualWrite
    158e4e82615 generate
    b6927088c83 Use consistent documentation of aliases in the API
    b159d2ca597 self nominate natasha41575 to be a sig-node reviewer
    799312a402c Update pod resize test to accept new cpu.weight conversion.
    bf13cd1b81d added resourceClaimModified to bindClaim to decide whether to update assume cache
    1ba96db35b5 ./hack/update-codegen.sh
    8b0d7efb43d applyconfiguration-gen: add ExtractFrom with subresource support
    f1d0c5dbc39 return an error in case nil selectors are passed to matcher functions
    81cec6df1d0 Bump to mockery v3
    7685612b9c2 refactor(event): simplify conditional logic in event handling for both v1 and eventsv1 APIs
    faa0f33b8be remove v1beta3 flowcontrol from rest storage
    fd2d2fd66ff Convert `k8s.io/kubelet/pkg/apis/dra` from gogo to protoc
    d1946199792 Fix linter
    36cf7282814 Drop SizeMemoryBackedVolumes after the feature GA-ed in 1.32
    9f8d9432e20 bump gopkg.in/evanphx/json-patch.v4
    f3d278e75d1 Fix completion of resource names
    233384d4e47 deflake e2e test: Services should implement NodePort and HealthCheckNodePort correctly when ExternalTrafficPolicy changes
    d85ce5310de Appease linters
    e6ae04e02ca generate
    15b29a0fa20 Add +k8s:ifEnabled and +k8s:ifDisabled tags
    243f47f3b33 Omit type names of emitted slice elements to appease gofmt
    5c955edfe04 Add support variable initialization using any literal type
    e8186d06790 Add output tests
    8435fbab983 Add +k8s:enumExclude and options support to +k8s:enum
    64d9ddcf9dc Add enumExclude support to enum validator
    ed170c1c0aa Add constant discovery, ScopeConst and StructLiberal. Remove ScopeAny.
    e1218922db0 Add unit tests to isResourceUpdatable
    aea27237443 populate pending and ineligible endpoints
    e5f4caf62a6 drop spammy xtrace from hack/test scripts
    f1d980adf91 separate resource-quota and limit-ranger resize tests
    541ff7cd169 DRA: Add configurable health check timeout per device
    f336f4c75a0 Close response body after the conn is closed
    2608a38d475 Increase port-forward broken connection detection client timeout
    2f356d02e29 make update
    09e357d31fd Drop StatefulSetAutoDeletePVC after the feature GA-ed in 1.32
    bf6a55cd062 e2e: node: address linter errors
    9aed0813e66 e2e: node: cpumgr: replace old testsuite
    c4f7272f621 e2e: node: cpumgr: keep only scaffolding
    37d678e098f e2e: node: cpumgr: remove old sidecar container tests
    666dec8c2f6 e2e: node: cpumgr: remove old reserved cpus tests
    d98069e22c8 e2e: node: cpumgr: remove old distribute-cpus tests
    e2624d0cce4 e2e: node: cpumgr: remove old smt alignment tests
    9e6073304fb e2e: node: cpumgr: remove old cfs quota tests
    bf9511eda63 Remove GA feature gate ComponentSLIs
    c35d5473ddd Remove the otel semantics override
    684473af623 Bump cadvisor to 0.53
    12a784b46bd cleanup: remove redundant type conversions in podautoscaler
    c16d72c4140 e2e: case for multiple volumes reference one PVC
    0e6b22b5c80 test: add assertion to check OuterVolumeSpecNames
    4abd40f6e3d kubelet: multiple volumes reference one PVC in one Pod
    7910cbb8842 kubelet/volumeManager: remove outerVolumeSpecName from ASW
    146f0c93453 remove MountedVolume.OuterVolumeSpecNames from logs
    52b7d035f96 cache: do not allocate chan for nothing (#133500)
    f1ceec70a68 feat(apis/batch): PodFailurePolicyOnPodConditionsPattern.Status can be omitted (#133479)
    66fdbe10583 fix using stale pod when evict failed and retry (#133461)
    5af2b732bee Change KYAML gate to on-by-default
    b9a8dffa51e Fix replicaCount calculation exceeding max int32 (#126979)
    7cf39066b34 Remove sleepAfterExecuting param from diskConsumingPod
    388046c3ea9 ImageGCTerminatedPodsContainersCleanup e2e node test
    c9ccbae0d9e Remove terminated pods eviction code
    2cad51f6c0d Add ImageGCTerminatedPodsEviction e2e node test
    a59ce54d79f TerminatedPodsEvictionOnDiskPressure e2e node test
    df54470e9b8 Test terminated pods are evicted on disk pressure
    146357aa395 Evict terminated pods on disk pressure
    ad8afd3ab09 add generated files
    ff37d8c3394 Drop experimental prefix from kubectl wait command
    388aaebbd7b Add HirazawaUi as a reviewer for sig-node
    b012e16b47e Remove use of pkg/scheduler/framework.NodeInfo in node_ports.go
    731e6def042 Fix the spelling error of grpc in the log
    b83e933d6a9 doc comments
    6dff95db798 CHANGELOG: Update directory for v1.34.0 release
    ac802de9f54 update openapi spec
    5a718ca28cb remove stale Godeps filter from rsync
    8512862161d cleanup tempdirs on exit in kube::verify::generated
    d4e1d134801 add note about not adding to rsync invocations
    33a58e4bef5 stop excluding GOPATH from rsync
    7a43f8bd273 Omit values from validation rule error expressions
    56e2f15c1a8 Show simple values in validation rule errors
    00c30b354df Reduce nested conditionals around validation rule errors
    d838611d6db api: Remove +listType marker for non-list field
    ae2d50cf1a8 Update MAP storage version to use v1beta1.
    2dc6f7501ee kubelet: fix error message for EnableNodeLogQuery
    3c00c3cb29d Move GetAffinityTerms functions from pkg/scheduler/framework to staging repo
    75d04e6c7b6 Add a note about Conflicts return value
    83da6f1a87c fix(controller/podautoscaler): do not print panic when .status.lastScaleTime is not set
    1c336e3fc6f Fix flaking readyz check in scheduler integration tests
    4fa6c70604b hack/logcheck.conf: add several converted packages
    63f304708a0 client-go leader-election: structured, contextual logging
    46e10103ff0 Take activeQ lock for part of the Update method
    a0a43e5f80e Drop CronJobsScheduledAnnotation after the feature GA-ed in 1.32
    09954ce369d Drop unused tests, after KEP-2599 graduated to GA
    f2bc8bdea5e Drop unused tests, after KEP-3335 graduated to GA
    9c8e03a40b2 gofmt cleaner.go
    3bf684b4ed0 fix: parsing the patch directly
    ac1f9fb73f2 util/sets: benchmark List()
    48399b1af14 util/sets: simply List() by using slices.Sort
    16d4f9ea1f6 kubeadm: clarify the comments for a few API fields
    3b7475c5226 kube-proxy: list available endpoints in /statusz
    8a95e8a71ca DRA E2E: clean up class creation for extended resource tests
    4a597f50b4b Fix panic in PodResources API test when FeatureGates is nil
    7debab65049 Apply feedback
    8b0b0df431a Don't run PreEnqueue when pod is activated from backoffQ
    8b760704fc6 fix(cleaner.go): exit early on check of CSR issue state
    6cefbb65d0f Apply feedback, minor cleanups
    2fc66ddaf25 update gofmt
    e1c586eb00f Add doc.go, example_test.go and ARCHITECTURE.md to apiserver
    3f5b678e980 Update nfacct_linux_test.go
    e792dcb8100 Update cri-tools to v1.34.0
    accdd9e27e7 Add doc.go and ARCHITECTURE.md to client-go
    08bd33e0dc1 clean up outdated in-place pod resize todo
    3bdaeea2155 feat: Add discovery check to SVM to ensure migration doesn't get stuck
    bb6a0ea6b2c HPA: optimize calculatePodRequests for specific container lookups
    94d3dc40b23 kubectl: include container fieldPath in event messages
    f6b3f916b1f scheduler_perf: fix data race warning around klog flush
    df64d3f8826 Remove rbd image and storage class
    f920b064d00 Promote VAC API test to conformance
    ebf3d814f4c Fix(cleaner.go): Add GC to handle Approved-Unissued CSRs
    770b749436d feat: Require SVM to use RealFIFO
    b46a5cceeff Fix missing control plane health check timeout
    dec23d58e4c Add remote runtime/image `Close()` API
    97a146d47df Refactor error handling: reuse `err` inside closures and avoid re-shadowing
    5c8f26f4803 kubectl: fix expose --selector help text
    2180b441dd7 gofmt and review feedback
    b9d5edd4445 remove stray strailing tabs from gocritic settings
    535b4e07e94 enable gocritic deprecatedComment check to help lint for malformed deprecation comments
    0b647319c44 hack: more output about running tests
    38da6d767db DRA: Fixed ResourceClaim UpdateStatus to wrap with RetryOnConflict to automatically retry in the event of a conflict.
    76e5929d1a1 chore: update CronJob casing for create job help
    c97f08793cb Fix startup probe worker termination for sidecar containers
    d4f8bebda08 Fix label selector parsing for consecutive commas
    8d4108bf935 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels
    189d6d726bf fix formatting of deprecation warning in test/e2e/framework.WaitForServiceEndpointsNum
    db5dd2fe8f8 update-codegen
    2b47e8e5b5a fix deprecation comment in register-gen
    668b3fe4afc update-codegen
    ef1878c6013 Update `sharedInformerFactoryInterface` context initialization example
    80071d16e18 fix deprecation comment in informer fatory generator
    fa5792a4664 fix k8s.io/component-base/metrics deprecation formatting
    1dd428d4c01 fix deprecation formatting for k8s.io/kubectl/pkg/cmd/config.NewCmdConfigSetAuthInfo
    9fabccd24c9 fix deprecation formatting for k8s.io/apimachinery/pkg/api/errors.NewGone
    30f4fc9ca38 update-codegen
    8c139fbe942 use correct deprecation comment in clientset fake generator
    a405844e66d scheduler_perf(fix): correct typos, clarify comments, and minor tweaks
    d3ba41467db set default log flush frequency in kube-proxy config validation tests
    69b3876fd17 set default flush frequency in kubeletconfiguration tests
    f9dcd5f7135 validate that flush frequency must be positive
    3995b6cf72b Register apiserver_resource_objects in TestDeleteStoreStats
    b77f4f2425a Align metrics hiding with deprecation policy
    0b16f0ae3cb Test that auth{z,n} hook clients honor Kubelet's request encoding.
    f0e52c1c476 add known example API group suffix to avoid race
    cb1d04655fa test-integration: set KUBE_PANIC_WATCH_DECODE_ERROR to false
    aa819af85a1 chore: update CoreDNS to v1.12.3
    e1dd085ffe2 Add retries to node's crictl test.
    7f4462398ab e2e/watchlist: normalize dynamic 'Age' column in Table test to prevent test flake
    3eb69eb8522 Fix DaemonSet misscheduled status not updating on node taint changes
    39e7b2ce5e4 Migrate pkg/credentialprovider to structured logging
    ddffd8e3893 Allow IfNotPresent to be used in node e2e tests Currently the node e2e tests overrides the image pull policy to PullNever, if the policy is not PullAlways.
    d4bd007d3b8 adds a list of available HTTP endpoints for the kube-controller-manager component under the /statusz page
    ea9d7ff8656 PSI test: add a CPU limit of 500m to cpu-stress-pod
    8612c57d216 e2e: node: linter fix
    e839adafb7c e2e: node: cpumanager: move shared code in topology manager tests
    af53d97786a e2e: node: cpumanager: move specific helpers
    d86d798eae4 e2e: node: trivial rename
    30ca634386e e2e: node: cpumanager: push utilities in util.go
    bb7cff161c5 e2e: node: split utilities to learn machine properties
    1a4e289cfac e2e: node: split kubeletconfig utilities
    a28eda435f2 Add sig-instrumentation as OWNERS for apiserver/pkg/storage/etcd3/metrics
    1ea47202688 Add e2e test for SELinuxMount to CSI drivers
    97edb4d5e43 Fix SELinux label comparison
    76bbaa9d47a test: Standardize labels for ResourceHealthStatus e2e tests
    9a6db5ad0ba remove allocationManager's reference to containerManager
    9a8a4a3b440 Add missing cases to SELinuxMount tests
    3fc91586a71 Fix metrics test
    993ba324cd4 Bump BV to 1.35
    29eb19e4228 Address feedback
    bd900111a8e Move ContainerRuntimeOptions flags to cmd/kubelet/app/options
    ff6f4e1f633 Move kubelet config code to kubeletconfig
    30b34fbcca3 Don't read AllocatedResources from PodStatus during admission
    dc0343c2f79 Split preemption integration tests to mitigate the timeout
    0c91e28360d Clean up service account print and describe
    aa59f930b35 Add lock to TestAsyncPreemption to prevent races
    c5ef7208373 Fix race in scheduler integration tests
    70794c4568e Add newline to fix owners fmt
    7242ddd9370 Add jefftree to OWNERS
    cf8ab1c3e7c component-base/metrics: add concurrent WithContext unit test
    45f61b5bc06 component-base/metrics: store WithContext ctx in a wrapper to avoid race
    1d792b00e65 move timeout to only cover the line under test
    640dabd58b0 Decouple term and remotecommand packages
    a2061e97f45 install appropriate version
    50fec6fc577 kubelet/volumeManager: (Get -> Has)PossiblyMountedVolumesForPod
    c20b105ac28 kubelet/volumeManager: GetMountedVolumesForPod() returns desired and actually mounted volumes
    09131604046 kubelet/volumeManager: verifyVolumesMountedFunc checks both desired and actual
    eac9da061dd Bugfix: DeleteOptions decode errors should return 400 instead of 500
    62dcfe3bc06 Added WithOrigin within apis/core/validation with adjusted tests
    b080dba14ec Add utam0k to SIG Scheduling reviewers
    6c56d2fd1bc Replace usage of deprecated ErrWaitTimeout with recommended method across all Pkgs
    d959186056f kubeadm: simplify error handling in getAPIEndpointWithRetry
    0a987f8f578 ServiceCIDR ValidationAdmissionPolicy for backkwards compatible behavior
    81e680e6d98 defaultservicecidr controller no shutdown eventbroadcaster on start
    efcf97f98c7 authz tests: delay response in context cancelled scenario
    d0816f84f9c feat: increment an internal metric when duplicate validation errors
    66f7e30c653 conversion-gen: use custom conversions for slices and maps of pointers
    a4763ee3cb8 conversion-gen: add test for custom conversion functions for maps and slices of pointers
    f154d43739d conversion-gen: avoid attempting to read or set unexported fields
    808f837c310 conversion-gen: add test for conversion of unexported fields
    531fdc67e28 Replace deprecated WaitForServiceEndpointsNum
    3b0a85170a7 Make kubectl auth reconcile retry on conflict
    25fee618fd9 Add helper command for comparing protobuf files
    78c9672deb7 migrate tracing tests to use the new otelhttp semantic conventions
    6852abc73c4 WIP: Use the tool directive instead of tools.go without sharing dependency
    ffa084f8112 kubectl: Fix current-context being written to wrong file
    c11759bdbfc golangci: Disable staticcheck QF1008 in hints
    391967c7b6a Report actionable error when GC fails due to disk pressure
    584eb8464cf Pod Certs: Fix flaking integration test
    3a86a4eb0dd fix: fix failed ci
    7c1d133dff7 Fix sidecar containers flaky tests
    bf088c12ff0 chore(kubelet): migrate images to contextual logging.
    b6f6731ab61 chore(kubelet): migrate prober to contextual logging.
    065899e95da chore: use ptr.Deref to replace int deref utils
    cd4771d7371 fix up types for 1.34 release - remove GA feature gates
    925bce297e4 Fix help for set selector
    908fb0266de Fix gocritic issues
    b04222a41c7 Fix non-existing PCI device hierarchy scenario in TestGetPCIeRootAttributeByPCIBusID
    c4e8e8310b8 Fix typo in test case name
    64d452d3b61 Fix non-existing PCI device hierarchy example in GoDoc for resolvePCIeRoot(pciBusID)
    725b17067a6 Do not remove PVC ClaimRef to fix flaky VAC test
    aa077145377 chore(kubelet): migrate userns to contextual logging
    ec9f0d55360 chore(kubelet): migrate nodestatus to contextual logging
    2b1f38a83b5 chore(kubelet): migrate config to contextual logging.
    cc4666cc94b kubectl/logs: Add LogOptions.RunLogsContext
    904ba748f12 fix(kubelet-windows): Typo in structured log user display name
    086a5add02d test: code coverage increase for kubelet/preemption
    a375b0aa367 Ensure CSINode belongs to current node on init
    ed07efbc579 Configure JSON content type for generic webhook RESTClient.
    5d20dc55bfd chore(kubelet): migrate pluginmanager to contextual logging
    ad47298caa6 Fix a typo in fake clientset generator
    53e7b175524 Fix CEL library doc string whitespace
    ba46831c87a bug: Remove duplicate storage resources update validations
    176ee0c2452 bug: Remove duplicate RBAC resources update validations
    1dd33c8e6de protect against race between deletion and adding finalizers
    49ebabb54e6 verify: additional validation of e2e.test --list-images output
    73627dd663b verify: improve output of verify-e2e-images.sh
    a352bf8815d Remove redundant MilliValue call in GetRawMetric for podautoscaler, which has no functional impact.
    7c1d0c93a2b added changelog for CRI API 1.33
    e7d76f37a45 flag: fix nil-ptr panic & typo messages
    dd37ad1bc2c metrics: don't record apiserver_request_sli_duration_seconds for dryRun requests
    6f1abad18e5 metrics: add dry_run label to apiserver_request_sli_duration_seconds
    9f1704dd9a1 pull mounter from dl.k8s.io
    e7cfbc6e14a gocritic: simplify bool expression
    a79865c0016 Added contribution info to sample-controller README
    a325cb42115 try order sandbox by attempt or create time
    947de3d0a49 Bump addon manager image to v9.1.8
    fe02b543aac Fixes pod status error when it has an error container

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions