Commit graph

13042 commits

Author SHA1 Message Date
Neeraj Krishna Gopalakrishna
001dcf63ba Add test and doc for processing all the sub-directories in drop-in folder 2026-01-23 21:58:31 +05:30
Kubernetes Prow Robot
a46ff14f97
Merge pull request #136089 from ngopalak-redhat/ngopalak/config-dir
Improve logging, doc and test for kubelet config-dir file extension
2026-01-23 18:57:31 +05:30
Kubernetes Prow Robot
caf327583f
Merge pull request #136273 from neolit123/1.36-bump-create-job-timeout-to-1-minute
kubeadm: bump the CreatJob check timeout to 1 minute
2026-01-19 22:31:48 +05:30
carlory
be0e68ba84 remove featureGate from PluginManager
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-01-19 11:35:30 +08:00
carlory
c8fc0a1b98 remove CSIMigrationPortworx and InTreePluginPortworxUnregister feature gates
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-01-19 11:35:29 +08:00
Kubernetes Prow Robot
02e674769e
Merge pull request #136014 from SataQiu/fix-20260104
kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join'
2026-01-18 18:33:10 +05:30
Lubomir I. Ivanov
283df2214c kubeadm: bump the CreatJob check timeout to 1 minute
During upgrade on Windows nodes the pause image is
bigger and there are various other factors that differ from
Linux.

Users can prepull images with `kubeadm config images pull
--kubernetes-version TARGET`, but it seems reasonable
to increase the rather short timeout of 15 seconds for
this preflight check.

Additionally users can always skip it with
--ignore-preflight-errors=...
2026-01-16 13:00:09 +01:00
Benjamin Elder
a60d114402 emeritus logicalhan, rest in peace
https://github.com/cncf/memorials/blob/main/han-kang.md
2026-01-15 12:18:02 -08:00
SataQiu
5e334d9b57 kubeadm: waiting for etcd learner member to be started before promoting during 'kubeadm join' 2026-01-15 10:52:16 +08:00
Neeraj Krishna Gopalakrishna
6045df84e0 Improve logging, doc and test for kubelet config-dir file extension 2026-01-13 08:55:13 +05:30
Kubernetes Prow Robot
997ca903d8
Merge pull request #136127 from carlory/fix-3279
kubeadm: fix a bug where kubeadm upgrade is failed if the content of the `kubeadm-flags.env` file is `KUBELET_KUBEADM_ARGS=""`
2026-01-12 15:24:10 +05:30
carlory
f96472556c
kubeadm: fix a bug where kubeadm upgrade is failed if the content of the kubeadm-flags.env file is KUBELET_KUBEADM_ARGS=""
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-01-12 10:09:05 +08:00
Kubernetes Prow Robot
6714aef4aa
Merge pull request #136130 from LoginovIlia/kubeadm_use_newclientset
kubeadm: switch tests to NewClientset
2026-01-11 03:53:57 +05:30
LoginovIlia
bfe4b7ecd7 kubeadm: switch tests to NewClientset 2026-01-09 04:30:53 -05:00
Lukasz Szaszkiewicz
4cccfe28e6 kcm: remove WatchListClient feature gate override
WatchListClient is enabled by default since 1.35, so the
kcm specific override in flags is no longer needed.
2026-01-09 10:23:25 +01:00
Anson Qian
a816a7b1d8
Make ConcurrentResourceClaimSyncs configurable (#134701)
* DRA resource claim controller: configurable number of workers

It might never be necessary to change the default, but it is hard to be sure.
It's better to have the option, just in case.

* generate files

* resourceclaimcontroller: normalize validation error message

* Update cmd/kube-controller-manager/app/options/resourceclaimcontroller.go

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

---------

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2026-01-08 19:31:39 +05:30
Kubernetes Prow Robot
caf5cdc58b
Merge pull request #135148 from neolit123/1.35-add-deprecated-api-flag-to-config-validate
kubeadm: add --allow-deprecated-api to 'config validate'
2026-01-04 18:30:37 +05:30
Kubernetes Prow Robot
a1f6c4171f
Merge pull request #135971 from DEVMANISHOFFL/fix-kubeadm-reset-crash
fix(kubeadm): prevent nil pointer panic in reset command
2025-12-30 21:56:35 +05:30
devmanishofficial
ecf7e6d41f fix(kubeadm): prevent nil pointer panic in reset command
Signed-off-by: devmanishofficial <devmanishofficial@gmail.com>
2025-12-30 15:53:10 +05:30
bo.jiang
e0d4e7075b
Optimize slice initialization in kubeadm
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2025-12-30 16:42:36 +08:00
Kubernetes Prow Robot
9bd81471eb
Merge pull request #135805 from humblec/etcd-3.6.7
etcd: Update etcd to v3.6.7
2025-12-22 16:28:39 -08:00
Kubernetes Prow Robot
3bde8d89a4
Merge pull request #135807 from carlory/fix-kubeadm-3108
kubeadm: remove --pod-infra-container-image flag from the unwantedFlags list
2025-12-21 20:32:30 -08:00
Kubernetes Prow Robot
589e695797
Merge pull request #135701 from neolit123/1.36-remove-special-flag-handling-for-older-etcd
kubeadm: remove the usage of 2 deprecated flags for etcd < 3.6.0
2025-12-19 09:30:42 -08:00
Kubernetes Prow Robot
032cd00f4c
Merge pull request #135400 from neolit123/1.36-dont-sort-extra-args
kubeadm: do not sort extraArgs alpha-numerically
2025-12-19 09:30:34 -08:00
Kubernetes Prow Robot
5262149cd6
Merge pull request #135742 from HirazawaUi/promote-4656-to-ga
Kubeadm: Graduate NodeLocalCRISocket feature gate to GA
2025-12-19 02:10:32 -08:00
Davanum Srinivas
8703640651
add utility for generating markdown for feature gates
Signed-off-by: Davanum Srinivas <davanum@gmail.com>

fix for review comments

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-18 22:53:56 -05:00
HirazawaUi
cbb227b0e4 promote NodeLocalCRISocket to GA 2025-12-19 09:57:59 +08:00
Kubernetes Prow Robot
430fef557f
Merge pull request #135531 from pohly/golangci-lint-bump
golangci-lint: bump to v2.7.1
2025-12-18 07:55:18 -08:00
Humble Devassy Chirammal
8dc8edf49b etcd: Update etcd to v3.6.7
ETCD 3.6.7 has some critical bug fixes
https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.6.md

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2025-12-18 19:05:14 +05:30
HirazawaUi
642d96dcb4 clean up unused constant 2025-12-18 19:45:38 +08:00
Kubernetes Prow Robot
34430b9127
Merge pull request #135589 from neolit123/1.36-revert-dynamic-etcd-map
kubeadm: revert to using a static list of etcd versions
2025-12-18 03:21:16 -08:00
Patrick Ohly
ad79e479c2 build: remove deprecated '// +build' tag
This has been replaced by `//build:...` for a long time now.

Removal of the old build tag was automated with:

    for i in $(git grep -l '^// +build' | grep -v -e '^vendor/'); do if ! grep -q '^// Code generated' "$i"; then sed -i -e '/^\/\/ +build/d' "$i"; fi; done
2025-12-18 12:16:21 +01:00
Kubernetes Prow Robot
bb52ae5e24
Merge pull request #135776 from neolit123/1.36-always-retry-on-patch-node-errors
kubeadm: always retry Patch() Node API calls
2025-12-18 02:11:01 -08:00
Kubernetes Prow Robot
9618ffd46f
Merge pull request #135773 from neolit123/1.36-remove-ControlPlaneKubeletLocalMode
kubeadm: remove the FG ControlPlaneKubeletLocalMode
2025-12-18 02:10:54 -08:00
carlory
e3c0292431
kubeadm: remove --pod-infra-container-image flag from the unwantedFlags list
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-12-18 15:52:04 +08:00
Kubernetes Prow Robot
1faee42453
Merge pull request #135548 from danwinship/conntrack-setup
Move kube-proxy conntrack setup code to pkg/proxy
2025-12-17 23:27:46 -08:00
Kubernetes Prow Robot
43cfcac7cc
Merge pull request #135434 from yliaog/quota_abuse
Fixes the loophole that allows users to workaround resource quota set by system admin
2025-12-17 22:35:28 -08:00
Kubernetes Prow Robot
cd48cabb04
Merge pull request #135232 from jsut21/kubelet/healthz-untilwithcontext-126379
kubelet: use wait.UntilWithContext for healthz server (structured logging)
2025-12-17 19:59:54 -08:00
yliao
3e34de29c4 fixed the loophole that allows user to get around resource quota set by system admin 2025-12-18 00:56:20 +00:00
Kubernetes Prow Robot
d6c073990b
Merge pull request #134623 from adrianmoisey/service-headless
Refactor 'Services should implement service.kubernetes.io/headless' test
2025-12-17 16:26:47 -08:00
Lubomir I. Ivanov
4d11e21fc9 kubeadm: always retry Patch() Node API calls
The PatchNodeOnce function has historically exited early
in scanarious when we Get a Node object, but the next Patch
API call on the same Node object fails. This can happen
in setups that are under a lot of resource pressure
or different network timeout scenarious.

Instead of exiting early and allow listing certain errors,
always retry on any Patch error. This aligns with the
general idea that kubeadm retries *all* API calls.
2025-12-16 19:09:01 +01:00
Lubomir I. Ivanov
df44db129b kubeadm: remove the FG ControlPlaneKubeletLocalMode
The FG went GA in 1.35. It can be removed in 1.36.
2025-12-16 17:32:50 +01:00
Lubomir I. Ivanov
08a339bdd7 kubeadm: do not use deprecated etcd flags
In local.go there are a couple of flags that changed their
format for etcd > 3.6.0. kubeadm 1.36 no longer supports
deploying a k8s version that maps to etcd < 3.6.0, thus
the branching and the deprecated flags can be removed.
2025-12-10 14:33:31 +01:00
Lubomir I. Ivanov
05c4e3febe kubeadm: revert to using a static list of etcd versions
The introduction of dynamic keys in the etcd version
map in constants.go introduced a couple of problems:

1. The size of the map could no longer be unit tested
because at UT runtime there was only one key "0".

2. Once a new k8s release branch is cut the version map
has mismatched versions. The latest k8s version mapped to the
future prerelease alpha (placeholder), the previous was the current
WIP release version and the oldest version in the map is the
current stable. This introduces a undesider shift of versions
where we are applying the wrong version to the current WIP
release unless an contrubutor PRs it.

The old static approach on the other hand is safer because
it hardcodes the versions, and the utility function
EtcdSupportedVersion() ensures that we get a relevant etcd
version even if the input k8s MINOR key is out of bonds for the map.

- Revert to using static version in the map.
- Revert the unit test TestEtcdSupportedVersionLength.
- Add additional comments over the map.
2025-12-08 13:40:11 +01:00
bzsuni
2c811fdd3a etcd: Update etcd to v3.6.6
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2025-12-08 05:37:15 +00:00
Angelos Kolaitis
03066850f6
remove TestEtcdSupportedVersionLength, no longer relevant
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:19:09 +02:00
Angelos Kolaitis
aa54ffa485
fix etcd versions after rotation
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:15:49 +02:00
Angelos Kolaitis
4a944d1a3f
add skew -2 version in SupportedEtcdVersion
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:11:10 +02:00
Dan Winship
fe84ab85f1 Move conntrack sysctl setup from cmd/kube-proxy/ to pkg/proxy/conntrack/
Eventually this code will be called from the backends themselves.
2025-12-02 11:03:00 -05:00
Dan Winship
d8a481a696 Move setupConntrack from server_linux.go to conntrack.go 2025-12-02 11:02:58 -05:00