k8s 1.25.0#1360

Merged

deads2k merged 2314 commits intoopenshift:masterfrom

soltysh:rebase-1.25.0

Sep 28, 2022

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 2, 2022

Merge pull request #111642 from harche/evented_pleg_cri_changes
k8s-ci-robot
authored
modify the signing/approving controller to tolerate either set of usages for kubelet client and serving certificates
pacoxu
committed
volume: use the effective uid
giuseppe
committed
pkg/apis, staging: add HostUsers to pod spec

giuseppe
and
rata
committed
Merge pull request #111448 from cici37/testForCelBeta
k8s-ci-robot
authored
Merge pull request #111467 from RomanBednar/retro-sc-assignment
k8s-ci-robot
authored
CRI changes to support implementation of in-place pod resize.
vinaykul
committed
Handle UpdateContainerResources for Windows in v1alpha2
vinaykul
committed
CRI changes to support implementation of in-place pod resize (generated files)
vinaykul
committed
Merge pull request #111435 from soltysh/cronjob_timezone_beta
k8s-ci-robot
authored
Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
alculquicondor
committed

Commits on Aug 3, 2022

Commits on Aug 4, 2022

Commits on Aug 5, 2022

Commits on Aug 6, 2022

Commits on Aug 7, 2022

Merge pull request #109090 from sarveshr7/multicidr-rangeallocator
k8s-ci-robot
authored

Commits on Aug 9, 2022

Commits on Aug 10, 2022

Commits on Aug 11, 2022

Commits on Aug 12, 2022

Merge pull request #111697 from thockin/master
k8s-ci-robot
authored

Commits on Aug 13, 2022

Merge remote-tracking branch 'origin/master' into release-1.25
k8s-release-robot
committed

Commits on Aug 15, 2022

Commits on Aug 16, 2022

Commits on Aug 17, 2022

Commits on Aug 22, 2022

Commits on Aug 23, 2022

Release commit for Kubernetes v1.25.0
k8s-release-robot
committed

Commits on Sep 20, 2022

Merge remote-tracking branch 'openshift/master' into rebase-1.25.0
soltysh
committed
UPSTREAM: 74956: apiserver: switch authorization to use protobuf client

mfojtik
authored and
soltysh
committed
UPSTREAM: 84466: gce: ensureInternalInstanceGroups: reuse instance-groups for internal load balancers

abhinavdahiya
authored and
soltysh
committed
UPSTREAM: 93286: wait for apiservices on startup

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: filter out CustomResourceQuota paths from OpenAPI

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: patch aggregator to allow delegating resources

mfojtik
authored and
soltysh
committed
UPSTREAM: <carry>: remove apiservice from sync in CRD registration when it exists

mfojtik
authored and
soltysh
committed
UPSTREAM: <carry>: hardcoded restmapper with a few entries to rebootstrap SDN when SDN is down

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kubelet: Expose a simple journald shim on the kubelet logs endpoint

smarterclayton
authored and
soltysh
committed
UPSTREAM: <carry>: kube-controller-manager: add service serving cert signer to token controller

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-controller-manager: exclude some origin resources from quota

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: add our immortal namespaces directly to admission plugin

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: allow injection of kube-apiserver options

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: priorize some CRD groups over others

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: Always test PDB's during service upgrade test

smarterclayton
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: allow rewiring

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: create termination events

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: bootstrap-rbac-policy: move over .well-known rules

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: warn only about unknown feature gates

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: disable AES24, not supported by FIPS

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: bump nodes ready timeout

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: Remove excessive e2e logging

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: conditionally fill the UserAgent from the currently running test

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: 89885: allow to read openstack cloud provider config from a secret

Fedosin
authored and
soltysh
committed
UPSTREAM: 90452: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

marun
authored and
soltysh
committed
UPSTREAM: <carry>: export HandleFlags
soltysh
committed
UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to allowed node labels

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: Skip unit tests incompatible with openshift ci

marun
authored and
soltysh
committed
UPSTREAM: <carry>: Stop ignoring generated openapi definitions

marun
authored and
soltysh
committed
UPSTREAM: <carry>: Release lock on KCM and KS termination

tnozicka
authored and
soltysh
committed
UPSTREAM: 96120: kubelet: Expose a simple Get-WinEvent shim on the kubelet logs endpoint

LorbusChris
authored and
soltysh
committed
UPSTREAM: <carry>: Override termination grace period on annotation

ehashman
authored and
soltysh
committed
UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: use hardcoded metrics scraping authorizer for delegated apiservers

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: openshift KCM volume plugin manager uses a disjoint set of featuregates

jsafrane
authored and
soltysh
committed
UPSTREAM: <carry>: add management support to kubelet

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: deprecateApiRequestHandler

sanchezl
authored and
soltysh
committed
UPSTREAM: <carry>: allows for switching KCM to talk to Kube API over localhost

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: Ensure service ca is mounted for projected tokens

marun
authored and
soltysh
committed
UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: annotate audit events for requests during unready phase and graceful termination phase

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: emit event when readyz goes true

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column

sttts
authored and
soltysh
committed
UPSTREAM: <carry>: only chown if non-windows machine

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: openshift's kube-apiserver is in openshift-kube-apiserver

deads2k
authored and
soltysh
committed
UPSTREAM: 103612: tolerate additional, but congruent, events for integration test

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-ca.crt for migration compatibility

deads2k
authored and
soltysh
committed
UPSTREAM: <carry>: skip posting failures to aggregated APIs to avoid getting false positives until the server becomes ready

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: Revert "Remove Endpoints write access from aggregated edit role"

danwinship
authored and
soltysh
committed
UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in

tkashem
authored and
soltysh
committed
UPSTREAM: <carry>: add max_housekeeping_interval

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: add control plane to allow roles

rphillips
authored and
soltysh
committed
UPSTREAM: <carry>: add CSI migration feature gates for vSphere and Azure File

bertinatto
authored and
soltysh
committed
UPSTREAM: <carry>: delay queuing deletion for PV to allow nodes some time to unmount

deads2k
authored and
soltysh
committed
UPSTREAM: 90452: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: hardens the aggregated API e2e tests in an HA setup

p0lyn0mial
authored and
soltysh
committed
UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled

Artyom Lukianov
authored and
soltysh
committed
UPSTREAM: <carry>: use console-public config map for console redirect

atiratree
authored and
soltysh
committed
UPSTREAM: <carry>: e2e-framework: don't autosync PodSecurity labels

stlaz
authored and
soltysh
committed
UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated

tkashem
authored and
soltysh
committed
UPSTREAM: <carry>: Remove reserved CPUs from default set

authored and
soltysh
committed
UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateNamespace

antoninbas
authored and
soltysh
committed
UPSTREAM: 110039: Add readinessProbe to aggregated api service test

pacevedom
authored and
soltysh
committed
UPSTREAM: 112076: Revert "promote LocalStorageCapacityIsolationFSQuotaMonitoring to beta"

rphillips
authored and
soltysh
committed
UPSTREAM: 112046: rate limite etcd healthcheck request
soltysh
committed
UPSTREAM: 112515: container_probe test: fix race by checking for pod deletion

rphillips
authored and
soltysh
committed
UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule

sjenning
authored and
soltysh
committed
UPSTREAM: <carry>: don't fail integration due to too many goroutines
soltysh
committed
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready

tkashem
authored and
soltysh
committed
UPSTREAM: <carry>: Skip session affinity timeout tests

jluhrsen
authored and
soltysh
committed
UPSTREAM: <drop>: add missing import restrictions

tkashem
authored and
soltysh
committed
UPSTREAM: <drop> update dependencies
soltysh
committed
UPSTREAM: <drop>: make update
soltysh
committed