Commit graph

134209 commits

Author SHA1 Message Date
Kubernetes Release Robot
08b536721b Release commit for Kubernetes v1.35.0-rc.1 2025-12-09 13:33:54 +00:00
Kubernetes Release Robot
0f7f13b86a Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-09 03:44:39 +00:00
Kubernetes Prow Robot
b4980b8d6e
Merge pull request #135635 from ahmedtd/fix-pcr-logging-nil-panic
kubelet: Fix nil panic in podcertificatemanager
2025-12-08 17:07:33 -08:00
Taahir Ahmed
8d4237fde8 kubelet: Fix nil panic in podcertificatemanager
If the the PCR that kubelet created gets deleted before it is issued, a
nil panic will be thrown while composing the error message.
2025-12-08 11:43:07 -08:00
Kubernetes Release Robot
8cfa927c4d Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-08 09:37:06 +00:00
Kubernetes Prow Robot
03e14cc943
Merge pull request #135271 from bzsuni/bz/etcd/update/v3.6.6
etcd: Update etcd to v3.6.6
2025-12-07 23:39:29 -08:00
bzsuni
2c811fdd3a etcd: Update etcd to v3.6.6
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2025-12-08 05:37:15 +00:00
Kubernetes Release Robot
0bc1238b81 Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-05 21:37:54 +00:00
Kubernetes Prow Robot
c70011cf10
Merge pull request #135620 from cpanato/update-rules
update publishing rules
2025-12-05 12:06:55 -08:00
Kubernetes Prow Robot
ff9971ec7f
Merge pull request #135586 from pohly/dra-upgrade-downgrade-skew-range
DRA upgrade/downgrade: roll over only after -alpha.0
2025-12-05 09:22:56 -08:00
Kubernetes Release Robot
ad22740b4b Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-05 15:34:37 +00:00
Carlos Panato
dede2886a8
update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 13:59:29 +01:00
Kubernetes Prow Robot
4e94e70dca
Merge pull request #135609 from cpanato/update-go-125
Bump images and versions to go 1.25.5 and distroless iptables
2025-12-05 04:42:59 -08:00
Carlos Panato
eae2a1bd5f
Bump images and versions to go 1.25.5 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 10:40:45 +01:00
Kubernetes Release Robot
b5f0a8229d Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-05 03:34:45 +00:00
Kubernetes Prow Robot
9293f9326d
Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-fallback
downgrade reflector watchlist fallback log to V(4)
2025-12-04 14:42:56 -08:00
Kubernetes Release Robot
fc01599055 Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-04 21:37:05 +00:00
Kubernetes Prow Robot
04e8064bcc
Merge pull request #135580 from serathius/client-go-transformer
Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
2025-12-04 12:55:04 -08:00
Kubernetes Prow Robot
de61f59895
Merge pull request #135536 from dims/bump-x/crypto-to-v0.45.0
Bump golang.org/x/crypto to v0.45.0
2025-12-04 12:54:56 -08:00
Kubernetes Prow Robot
2711e8cb53
Merge pull request #135499 from aojea/crazy_ipallocator
ipallocator: handle errors correctly
2025-12-04 10:21:02 -08:00
Lukasz Szaszkiewicz
3f42ca1401 downgrade reflector watchlist fallback log to V(4) 2025-12-04 19:05:46 +01:00
Patrick Ohly
91e221b047 DRA upgrade/downgrade: roll over only after -alpha.0
All version up to and including x.y.z-alpha.0 are treated as if we were
still the previous minor version x.(y-1). There are two reason for this:

- During code freeze around (at?) -rc.0, the master branch already
  identfies itself as the next release with -alpha.0. Without this
  special case, we would change the version skew testing from what
  has been tested and been known to work to something else, which
  can and at least once did break.

- Early in the next cycle the differences compared to the previous
  release are small, so it's more interesting to go back further.
2025-12-04 14:25:12 +01:00
Jordan Liggitt
91368adbb5 Use transformer in consistency checker 2025-12-04 14:17:22 +01:00
Valerian Roche
76da8d6de0 Add unit tests for Data Consistency Detector 2025-12-04 14:17:19 +01:00
Valerian Roche
88c20d46a4 [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
Signed-off-by: Valerian Roche <valerian.roche@datadoghq.com>
2025-12-04 13:46:08 +01:00
Kubernetes Release Robot
07f3251315 Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-04 03:33:30 +00:00
Kubernetes Prow Robot
615ac0d299
Merge pull request #135560 from lalitc375/map-debug
Fix MAP failure on objects with duplicate list items
2025-12-03 16:14:20 -08:00
Kubernetes Release Robot
3b883c5c42 Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-03 15:35:40 +00:00
Kubernetes Prow Robot
3025b0a7b4
Merge pull request #135553 from neoaggelos/neo/publishing-bot-rules-v1.35
add release-1.35 publishing bot rules
2025-12-03 05:40:21 -08:00
Angelos Kolaitis
c6fa10dbb7
add release-1.35 publishing bot rules 2025-12-03 14:33:16 +02:00
Kubernetes Prow Robot
579d4c6d06
Merge pull request #135568 from neoaggelos/neo/etcd-supported-versions
add skew -2 version in SupportedEtcdVersion
2025-12-03 04:10:26 -08:00
Angelos Kolaitis
03066850f6
remove TestEtcdSupportedVersionLength, no longer relevant
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:19:09 +02:00
Angelos Kolaitis
aa54ffa485
fix etcd versions after rotation
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:15:49 +02:00
Angelos Kolaitis
4a944d1a3f
add skew -2 version in SupportedEtcdVersion
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:11:10 +02:00
Antonio Ojea
51f614a156 ipallocator: handle errors correctly
The ipallocator was blindly assuming that all errors are retryable, that
causes that the allocator tries to exhaust all the possibilities to
allocate an IP address.

If the error is not retryable this means the allocator will generate as
many API calls as existing available IPs are in the allocator, causing
CPU exhaustion since this requests are coming from inside the apiserver.

In addition to handle the error correctly, this patch also interpret the
error to return the right status code depending on the error type.

Co-authored-by: carlory <baofa.fan@daocloud.io>
2025-12-03 10:39:57 +00:00
Kubernetes Release Robot
151bde57fe Merge remote-tracking branch 'origin/master' into release-1.35 2025-12-03 09:34:40 +00:00
Lalit Chauhan
de1b8e076a Fix MAP failure on objects with duplicate list items
When a Mutating Admission Policy (MAP) using ApplyConfiguration was applied to an existing object containing duplicate items in a list (e.g., duplicate environment variables), the operation would fail with a conversion error from Structured Merge Diff.

This change updates the `ApplyStructuredMergeDiff` function to use `typed.AllowDuplicates` when converting the `originalObject`. This allows MAP to process existing objects that may have technically invalid (duplicate) entries but are permitted by legacy validation.

New patches generated by the policy are still strictly validated and cannot introduce new duplicates.

Tests have been added to verify:
1. MAP can process an object with duplicate env vars.
2. MAP can modify an existing env var in an object with duplicates (which has the side effect of deduplicating the entry).
2025-12-02 23:27:55 +00:00
Kubernetes Release Robot
76b76c2d52 CHANGELOG: Update directory for v1.35.0-rc.0 release 2025-12-02 17:16:33 +00:00
Kubernetes Release Robot
496077da56 Release commit for Kubernetes v1.35.0-rc.0 2025-12-02 16:12:28 +00:00
Kubernetes Prow Robot
ec1bf8a4f3
Merge pull request #135545 from cpanato/update-rules
update publishing rules
2025-12-02 05:18:25 -08:00
Carlos Panato
f8be8d320f
drop rules for release-1.31 as it is EOL
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:07:18 +01:00
Carlos Panato
7e3e9b6a64
update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:03:45 +01:00
Kubernetes Prow Robot
cb689abdfb
Merge pull request #135492 from cpanato/update-go-125
[go] Bump images and versions to go 1.25.4 and distroless iptables
2025-12-02 02:18:24 -08:00
Kubernetes Prow Robot
d4d5fd8f9b
Merge pull request #135535 from Rajalakshmi-Girish/remove-test-watch-stream-sep
Remove TestWatchStreamSeparation from storage/cacher related tests
2025-12-01 23:10:26 -08:00
Davanum Srinivas
5302b929ae
Bump golang.org/x/crypto to v0.45.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-01 14:11:01 -05:00
Rajalakshmi-Girish
fcdc4e2495 Remove TestWatchStreamSeparation from storage/cacher related tests 2025-12-01 10:25:10 -08:00
Kubernetes Prow Robot
9998041e0f
Merge pull request #135278 from aman4433/KUBE-134468
Fix goroutine leak in CRDFinalizer
2025-11-30 21:04:23 -08:00
Carlos Panato
3661554f87
Bump images and versions to go 1.25.4 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-11-28 10:21:55 +01:00
Kubernetes Prow Robot
61c629cc57
Merge pull request #135426 from kfess/update-relaxedservicenamevalidation
Fix: Check `defaultBackend` in `allowRelaxedServiceNameValidation`
2025-11-28 00:00:22 -08:00
Adrian Moisey
dae1dbc1ff KEP-5311 - Revert RelaxedServiceNameValidation promote to beta 2025-11-27 20:52:35 +09:00