Commit graph

53062 commits

Author SHA1 Message Date
phuhung273
5d20dc55bf chore(kubelet): migrate pluginmanager to contextual logging 2025-07-11 20:20:13 +07:00
Kubernetes Prow Robot
2bdcad7419
Merge pull request #132803 from aramase/aramase/f/token_request_uid_check
Make kubelet token cache UID-aware to prevent stale tokens after service account recreation
2025-07-10 22:25:27 -07:00
Anish Ramasekar
7e37711d6e
kubelet: Add service account UID to token cache key for proper invalidation
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-07-10 23:20:27 -05:00
Anish Ramasekar
45dfb46448
Add TokenRequestServiceAccountUIDValidation feature gate with UID validation
This change introduces the TokenRequestServiceAccountUIDValidation feature
gate and implements feature-gated service account UID validation for the
TokenRequest API. When enabled, the API validates that the service account
UID in token requests matches the actual service account UID, preventing
token requests for recreated service accounts with the same name but
different UIDs.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-07-10 23:20:23 -05:00
Kubernetes Prow Robot
d269d10bfc
Merge pull request #132647 from princepereira/ppereira-incorrect-internalport
Ensure Loadbalancer internal port is set to container port from endpointslice if the targetPort is not specified in service info creation.
2025-07-10 18:41:27 -07:00
Kubernetes Prow Robot
62f6e213ce
Merge pull request #132342 from natasha41575/prioritized_resizes
[FG:InPlacePodVerticalScaling] Prioritize resize requests by priorityClass and qos class
2025-07-10 16:35:27 -07:00
Natasha Sarkar
237fbde8b1 clean up e2e test and sorting code 2025-07-10 22:30:21 +00:00
Natasha Sarkar
bfa7f38c6a fix TestPodResourceAllocationReset for windows 2025-07-10 18:37:47 +00:00
Natasha Sarkar
e8b914c4b8 address comments 2025-07-10 18:29:31 +00:00
Natasha Sarkar
6052c569db prioritize resize requests by priorityClass and qos class 2025-07-10 18:01:15 +00:00
Kubernetes Prow Robot
a6f32c0e63
Merge pull request #132832 from Goend/master
add SuccessCriteriaMet status for kubectl get job
2025-07-10 02:25:26 -07:00
Kubernetes Prow Robot
818b7ae681
Merge pull request #132850 from tallclair/pod-cache-mutex
Delete unnecessary mutex
2025-07-09 19:01:26 -07:00
Kubernetes Prow Robot
9538d53353
Merge pull request #132456 from aroradaman/nftables-etp-fix
nftables short-circuit local traffic to external addresses
2025-07-09 17:53:27 -07:00
Kubernetes Prow Robot
13dcec3d1b
Merge pull request #131612 from natasha41575/move-resize-logic
[FG:InPlacePodVerticalScaling] Move resize allocation logic out of the sync loop
2025-07-09 15:49:27 -07:00
Natasha Sarkar
381b3f376b clear just the errors rather than the entire in-progress condition when a new resize is allocated 2025-07-09 21:44:08 +00:00
Natasha Sarkar
b89ab301f5 feedback round 2 2025-07-09 20:50:07 +00:00
Tim Allclair
7a6f6fdf72 Delete unnecessary mutex 2025-07-09 11:25:33 -07:00
ylink-lfs
26f54e5c0e chore: replace int64ptr with ptr.To 2025-07-09 21:35:45 +08:00
Kubernetes Prow Robot
3b12bcd546
Merge pull request #132777 from PatrickLaabs/132086-pkg-plugin
chore: depr. pointer pkg replacement for pkg/security and plugin/pkg
2025-07-08 20:01:26 -07:00
Goend
ce456c87f1 add SuccessCriteriaMet status for kubectl get job 2025-07-09 10:40:49 +08:00
Natasha Sarkar
c925243779 address feedback 2025-07-08 21:53:20 +00:00
Kubernetes Prow Robot
b8450dc451
Merge pull request #132806 from PatrickLaabs/132749-toPtr
chore: replacement of toPtr helper functions with ptr packge
2025-07-08 14:33:40 -07:00
colg
c6fef9752c
fix: improve the pod level request validation (#132551)
* fix: improve the pod level request validation

The pod level request should be larger than the aggregated container
requests. The fix is to skip those resources not supported at the pod
level for better efficiency.

A minor unit test is also added.

* Align with the limit check section using the pod spec to check
existence.
2025-07-08 13:25:26 -07:00
Natasha Sarkar
b46a124db3 skip pending resize evaluation if sources aren't ready 2025-07-08 17:14:49 +00:00
Natasha Sarkar
35bf1522b0 update allocation manager unit tests to cover push and retry of pending resizes 2025-07-08 17:14:48 +00:00
Natasha Sarkar
e6d165b879 move resize allocation out of the sync loop 2025-07-08 17:14:47 +00:00
Natasha Sarkar
87fe2491a1 add some additional helpers to kubelet status manager 2025-07-08 17:07:59 +00:00
Natasha Sarkar
cb2baef912 move handlePodResourcesResize unit tests into allocation_manager_test 2025-07-08 17:07:57 +00:00
Kubernetes Prow Robot
9fbd2dae14
Merge pull request #132339 from adrianmoisey/relaxed-validation-for-services-names
KEP-5311 Relaxed validation for Services names
2025-07-08 09:03:26 -07:00
Kubernetes Prow Robot
3aa0bb9725
Merge pull request #132772 from saschagrunert/protoc-jwt
Convert `externaljwt` from gogo to protoc
2025-07-08 07:53:27 -07:00
Kubernetes Prow Robot
beb3d92ee0
Merge pull request #132680 from milesbxf/topology-hints-dont-log-for-empty-endpointslices
Don't log irrelevant zone hints message on no endpoints
2025-07-08 06:45:34 -07:00
Miles Bryant
1cec0acebf Short circuit CategorizeEndpoints when there are no endpoints
PR feedback
2025-07-08 11:14:08 +01:00
PatrickLaabs
c530b02257 chore: depr. pointer pkg replacement for pkg/security and plugin/pkg 2025-07-08 11:22:07 +02:00
Kubernetes Prow Robot
49a220699d
Merge pull request #132717 from togettoyou/use-HandleError
cleanup: use HandleErrorWithXXX instead of logger.Error where errors are intentionally ignored
2025-07-08 01:43:27 -07:00
PatrickLaabs
e909e0cf73 chore: replacement of toPtr helper functions with ptr packge 2025-07-08 09:48:56 +02:00
Kubernetes Prow Robot
3d13f39f24
Merge pull request #132788 from ylink-lfs/chore/strptr_removal
chore: remove strPtr usage with ptr.To
2025-07-08 00:35:36 -07:00
Sascha Grunert
841886df76
Convert externaljwt from gogo to protoc
Use standard protoc for the `externaljwt` package instead of gogo.

Part of https://github.com/kubernetes/kubernetes/issues/96564

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2025-07-08 08:08:30 +02:00
Kubernetes Prow Robot
7948fec34b
Merge pull request #132792 from ylink-lfs/chore/typo_invaILd
chore: typo 'invaILd' occurrence replacement
2025-07-07 21:45:25 -07:00
Kubernetes Prow Robot
5f34f9233b
Merge pull request #132794 from PatrickLaabs/132749-boolptr
chore: replacement of boolPtr helper functions to ptr packge
2025-07-07 20:13:26 -07:00
Junhao Zou
1b730abf8d cleanup: use HandleErrorWithXXX instead of logger.Error where errors are intentionally ignored 2025-07-08 09:34:49 +08:00
ylink-lfs
830a088d1b chore: remove strPtr usage with ptr.To instead 2025-07-08 09:03:38 +08:00
Kubernetes Prow Robot
41477c9748
Merge pull request #132361 from yongruilin/master_vg_enable-csr
Enable Declarative Validation for CertificateSigningRequest
2025-07-07 17:05:25 -07:00
Kubernetes Prow Robot
bedb915a4e
Merge pull request #132781 from PatrickLaabs/132086-pkg-controller-1
chore: depr. pointer pkg replacement for pkg/controller (1/2)
2025-07-07 12:32:24 -07:00
Kubernetes Prow Robot
f41b45838d
Merge pull request #132779 from PatrickLaabs/132086-pkg-api-2
chore: depr. pointer pkg replacement for pkg/apis (2/2)
2025-07-07 12:32:17 -07:00
Kubernetes Prow Robot
4708b078a7
Merge pull request #132778 from PatrickLaabs/132086-pkg-api-1
chore: depr. pointer pkg replacement for pkg/apis (1/2)
2025-07-07 12:32:10 -07:00
Kubernetes Prow Robot
dabbf44567
Merge pull request #132412 from liyuerich/volumehost
remove kvh.exec
2025-07-07 12:31:48 -07:00
Kubernetes Prow Robot
a64c266f0d
Merge pull request #132294 from SergeyKanzhelev/securityContextOwners
add securitycontext OWNERS to be SIG Node as the package is mostly us…
2025-07-07 12:31:40 -07:00
Kubernetes Prow Robot
4a40077fb8
Merge pull request #132064 from natasha41575/unexportIsPodResizeInProgress
unexport the allocation manager's IsPodResizeInProgress method
2025-07-07 12:31:33 -07:00
Kubernetes Prow Robot
66cf6286a8
Merge pull request #130909 from Edwinhr716/minreadyseconds-fix
Fix StatefulSetMinReadySeconds healthy concept
2025-07-07 12:31:26 -07:00
PatrickLaabs
cfd65c5f74 chore: replacement of helper functions to ptr packge 2025-07-07 21:28:54 +02:00