upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-07-11 10:45:48 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
139212 commits 61 branches 1234 tags 3.1 GiB
Commit graph

139212 commits

This branch
This branch
All branches
Author SHA1 Message Date
kubernetes-prow[bot]
2f448e8d98
Merge pull request #139789 from suii2210/bump-agnhost-2.66.0 
test/images/agnhost: bump to 2.66.0
 2026-07-08 03:02:25 +00:00
kubernetes-prow[bot]
6b27b6da6b
Merge pull request #139419 from hoskeri/cbor-apply-patch-fix 
Fix CBOR apply patch request audit
 2026-07-08 02:14:26 +00:00
Abhijit Hoskeri
7e7c100cdc Fix patch request audit logging 
Non-JSON patch requests (such as CBOR or YAML apply patches) and malformed
patch requests currently cause audit event JSON serialization to fail when
the event is recorded with the application/json content type.

This fix introduces early payload validation and transcodes valid CBOR and
YAML patches to JSON prior to audit logging, ensuring audit events can be
successfully serialized.

TAG=agy

Change-Id: I74067fa22dfd4f486f796278f2bedd575b2b554b
 2026-07-08 01:21:58 +00:00
kubernetes-prow[bot]
6e8a59751d
Merge pull request #138560 from michaelasp/svmGA 
Promote SVM to GA
 2026-07-08 00:52:26 +00:00
kubernetes-prow[bot]
63373922a5
Merge pull request #140294 from jpbetz/revert-smd-306 
Bump SMD to v6.4.2 to revert #306 to fix regression in SSA for nullable container types
 2026-07-08 00:02:29 +00:00
Joe Betz
dafea0f440
Update managed fields trailing data test for structured-merge-diff v6.4.1 
Update TestManagedFieldsTrailingData in managedfields_parsing_test.go to match the strict JSON lookahead check introduced in structured-merge-diff v6.4.1.

In v6.4.1, trailing data after a JSON object in fieldsV1 causes decoding to return an error. When creating an object with invalid managed fields, the apiserver falls back to the live object's managed fields (which is empty on create) to prevent buggy clients from accidentally deleting or corrupting existing managed fields. This commit updates the test assertions to expect 0 managed field entries instead of 1.
 2026-07-07 19:15:43 -04:00
Joe Betz
d7546e4ed2
Add e2e test for setting maps and slices to null via SSA 2026-07-07 18:41:17 -04:00
Joe Betz
51033909f5
Bump sigs.k8s.io/structured-merge-diff/v6 to v6.4.2 2026-07-07 18:41:17 -04:00
Sreeram Venkitesh
5b1891eae8
Added warning in kubelet for invalid static pod priority and priorityClassNames (#136705) 
* Added warning in kubelet for invalid static pod priority and priorityClassNames

* Moved logic to function and added test

* Fixed duplicate import

* Fixed log lines from review

* Fixed tests

* Added LRU cache to reduce volume of warnings

* Fixed linting in tests

* Fix boilerplate text

* Updated messages after review
 2026-07-07 22:10:35 +00:00
kubernetes-prow[bot]
5c96a1a6ef
Merge pull request #135050 from itzPranshul/master-vg-clusterrolebinding 
Enables Declarative validation for ClusterRoleBinding
 2026-07-07 22:10:28 +00:00
kubernetes-prow[bot]
d764a40ae6
Merge pull request #140265 from yongruilin/dv-condition-transitiontime 
Migrate metav1.Condition.lastTransitionTime to declarative validation
 2026-07-07 20:38:26 +00:00
kubernetes-prow[bot]
722b7e96a9
Merge pull request #140279 from Jefftree/fix-rangestream-unimplemented-recv 
etcd3: fix RangeStream fallback for etcd older than 3.7
 2026-07-07 19:43:23 +00:00
kubernetes-prow[bot]
6853a78839
Merge pull request #140261 from dlanov/contextual-logging-small-fix 
Use context-aware wait in kubelet config mux
 2026-07-07 19:43:15 +00:00
kubernetes-prow[bot]
5b7016e5d0
Merge pull request #140260 from dlanov/harden-probe-stress-test 
Harden probe stress test container state checks
 2026-07-07 19:43:06 +00:00
kubernetes-prow[bot]
c71291f0c9
Merge pull request #140165 from liggitt/metrics-fixtures 
Add metrics API roundtrip test fixtures
 2026-07-07 19:42:57 +00:00
kubernetes-prow[bot]
ffa0d878d4
Merge pull request #140038 from tico88612/cleanup/pod-logs-deprecated-metrics 
cleanup: hidden metrics for pod log
 2026-07-07 19:42:50 +00:00
kubernetes-prow[bot]
126bbe7c9b
Merge pull request #139242 from liyuerich/commentstartcoordination 
enable commentstart check on coordination API group
 2026-07-07 19:42:42 +00:00
kubernetes-prow[bot]
8880c323d5
Merge pull request #138593 from YurDuiachenko/enable-defaultorrequired-kube-api-linter-rule 
Enable defaultorrequired kube api linter rule
 2026-07-07 19:42:35 +00:00
kubernetes-prow[bot]
172722a925
Merge pull request #137513 from luxas/impl-conditional-authz-2 
Conditional Authz [2/n]: Implementation of core Conditional Authorization machinery
 2026-07-07 19:42:27 +00:00
kubernetes-prow[bot]
1a7c84e962
Merge pull request #140269 from nojnhuh/dra-inflight-check-allocated 
DRA: check for allocated claim before marking in-flight
 2026-07-07 18:14:35 +00:00
kubernetes-prow[bot]
125b58ca34
Merge pull request #140001 from lalitc375/val-log-storm 
apiserver/admission: publish all VAP audit failures in a single annot…
 2026-07-07 18:14:27 +00:00
Michael Aspinwall
acbede86cb Promote SVM to GA 2026-07-07 17:22:30 +00:00
Lucas Käldström
405b0220cb Add PartiallyEvaluateConditionsAwareDecision 2026-07-07 20:19:18 +03:00
Lucas Käldström
5ac7f9ba28 Implement conditions for the union authorizer 2026-07-07 20:19:16 +03:00
Lucas Käldström
566398d3b6 Add a reference implementation for evaluating a ConditionsMap 2026-07-07 20:18:52 +03:00
Lucas Käldström
4f35cdc86f Add the ConditionsMap decision variant 2026-07-07 20:18:46 +03:00
Lucas Käldström
8a41710094 Add PossibleDecisions, FailureDecision, ContainsUnconditionalAllowOrDeny methods to ConditionsAwareDecision 2026-07-07 20:14:52 +03:00
Lucas Käldström
4dbbc14276 Represent the ConditionsAwareDecision variants using an internal enum 2026-07-07 20:13:50 +03:00
Lucas Käldström
2b149fc24b Move some definitions from conditions.go -> interfaces.go and add or refine comments 2026-07-07 20:13:01 +03:00
kubernetes-prow[bot]
a1f910169d
Merge pull request #138452 from SergeyKanzhelev/cgroupreconciliation 
e2e_node tests for cgroup reconciliation
 2026-07-07 16:54:31 +00:00
Jon Huhn
7825e69cce DRA: check for allocated claim before marking in-flight 
After PodGroup Pods have passed the scheduling cycle, the binding cycle
asynchronously invokes the Reserve and PreBind phases of the
DynamicResources plugin. When a shared ResourceClaim is first allocated,
other Pods in the group may have yet to reach the Reserve phase. If an
in-flight allocation is recorded in Reserve for a claim that is already
allocated, later removing that in-flight allocation results in
`Restore`-ing the claim in the assume cache to an old version that may
be unallocated. If the restored claim is unallocated, then the scheduler
continuously falls into a loop:

- Claim in AssumeCache is unallocated
- Pending allocation is recorded
- API GET in PreBind yields the allocated claim
- "claim got allocated elsewhere" error

This change cuts off that cycle by verifying that claims are actually
unallocated in the Reserve phase before recording an in-flight
allocation.
 2026-07-07 11:38:27 -05:00
Jefftree
c5e3513bd3 etcd3: fix RangeStream fallback for etcd older than 3.7 2026-07-07 11:17:34 -04:00
kubernetes-prow[bot]
88ada82bd6
Merge pull request #139054 from net0pyr/master 
scheduler: fix snapshot AssumePod/ForgetPod affinity and PVC indexes
 2026-07-07 13:54:27 +00:00
kubernetes-prow[bot]
61807a84c4
Merge pull request #140218 from kannon92/mark-inplace-resize-tests-slow 
Mark newly NodeConformance-tagged resize/restart/device-plugin tests as Slow
 2026-07-07 10:44:27 +00:00
kubernetes-prow[bot]
66f05086c2
Merge pull request #140042 from mdzraf/fixWindowsTest 
Adding ClientNodeSelection Configuration to Second Pod In Expand Test
 2026-07-07 09:40:26 +00:00
kubernetes-prow[bot]
eea41af21b
Merge pull request #140264 from nojnhuh/disable-flaky-dra-schedperf 
scheduler_perf: Disable flaky DRAWorkloadResourceClaims tests
 2026-07-07 07:04:28 +00:00
kubernetes-prow[bot]
70e2a4e6ba
Merge pull request #140222 from googs1025/dra-postfilter-event-cleanup-upstream 
scheduler: reduce scheduler PostFilter event noise
 2026-07-07 05:50:25 +00:00
Yongrui Lin
041eb77d2d test/declarative_validation: add lastTransitionTime condition test cases 
Cover the required lastTransitionTime check (zero value and set value)
in the shared condition test cases.
 2026-07-07 05:10:57 +00:00
Yongrui Lin
f0cad89c62 apimachinery: migrate Condition.lastTransitionTime to declarative validation 
Wire the required check for Condition.lastTransitionTime into declarative
validation via +k8s:customValidation, since no existing tag expresses the
"must be non-zero" check on a non-pointer Time struct.

The handwritten check in ValidateCondition is retained and marked
CoveredByDeclarative during the alpha phase.
 2026-07-07 05:10:57 +00:00
kubernetes-prow[bot]
2fbe972648
Merge pull request #140212 from bart0sh/PR243-kubelet-dont-unprepare-not-referenced-pod 
kubelet/dra: skip unprepareResources when claimInfo doesn't reference the pod
 2026-07-07 01:34:27 +00:00
Sergey Kanzhelev
ae875a861b e2e_node tests for cgroup reconciliation 2026-07-07 00:49:19 +00:00
kubernetes-prow[bot]
32a43a3cc6
Merge pull request #140201 from jpbetz/fix-map-dynamic-fallback 
Fix VAP/MAP params to consistently used the typed representation when available
 2026-07-07 00:18:36 +00:00
kubernetes-prow[bot]
32d5e2530d
Merge pull request #140166 from yongruilin/dv-tag-promote 
Promote declarative validation API tags from alpha to beta
 2026-07-07 00:18:28 +00:00
kubernetes-prow[bot]
9bad9aefcf
Merge pull request #140226 from sreeram-venkitesh/cleanup-static-pod-strict-validation-feature-gate 
Remove PreventStaticPodAPIReferences feature gate
 2026-07-06 23:08:33 +00:00
kubernetes-prow[bot]
431b4ebbb4
Merge pull request #138676 from pohly/dra-device-taints-1.37 
DRA: Device Taints and Tolerations GA graduation
 2026-07-06 23:08:26 +00:00
Jon Huhn
c58c2b61ef scheduler_perf: Disable flaky DRAWorkloadResourceClaims tests 2026-07-06 17:48:58 -05:00
Dennis Lanov
96fd0cb1d0 Use context-aware wait in kubelet config mux 
Signed-off-by: Dennis Lanov <dennis.lanov@gmail.com>
 2026-07-06 16:15:25 -05:00
Joe Betz
d78b2abd36
Fix VAP/MAP params to always use unstructured representation 2026-07-06 21:03:57 +00:00
pranshul gupta
4c8eb04935 addressing small nits 2026-07-07 02:10:36 +05:30
Dennis Lanov
040d5fd8d4 Harden probe stress test container state checks 
Signed-off-by: Dennis Lanov <dennis.lanov@gmail.com>
 2026-07-06 15:16:41 -05:00