[WIP] Update to tip of kubernetes/kubernetes#1614

Closed

bertinatto wants to merge 2564 commits intoopenshift:masterfrom

bertinatto:ocp-next

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 17, 2023

Commits on Jul 18, 2023

Commits on Jul 19, 2023

Add impl for uvip
richabanker
committed
Add integration test
richabanker
committed
Merge pull request #117740 from Richabanker/uvip-impl
k8s-ci-robot
authored
cmd/kubelet: implement drop-in configuration directory for kubelet

sohankunkerkar
and
yuqi-zhang
committed
Merge pull request #119390 from sohankunkerkar/add-dropin
k8s-ci-robot
authored
apiextensions: validate status updates with status schema
Alexander Zielenski
committed
Merge pull request #115952 from pacoxu/cleanup-cronjob
k8s-ci-robot
authored
[KEP-2876]Add reason and fieldPath into CRD validation rules (#118041)

cici37
and
jpbetz
authored
Merge pull request #118212 from Jefftree/updated-lazy-aggregator-v2
k8s-ci-robot
authored
Merge pull request #119166 from nilekhc/log-decryption-failure
k8s-ci-robot
authored
Use debian-base instead of distroless for conformance image
saschagrunert
committed
Add a haveKeys() helper function to match multiple keys
iholder101
committed
Add pod_swap_usage_bytes as an expected metric in e2e test
iholder101
committed
Merge pull request #119340 from alexzielenski/apiserver/apiextensions/use-statusSchema
k8s-ci-robot
authored
Include ignored pods when computing backoff delay for Job pod failures
mimowo
committed
add podReplacementPolicy and terminating field to job api
kannon92
committed
CHANGELOG: Update directory for v1.27.4 release
k8s-release-robot
committed
CHANGELOG: Update directory for v1.26.7 release
k8s-release-robot
committed
CHANGELOG: Update directory for v1.25.12 release
k8s-release-robot
committed
CHANGELOG: Update directory for v1.24.16 release
k8s-release-robot
committed
Merge pull request #119301 from kannon92/pod-replacement-policy-job-api-only
k8s-ci-robot
authored
Merge pull request #119434 from mimowo/include-ignored-failures-in-backoff
k8s-ci-robot
authored

Commits on Jul 20, 2023

Merge pull request #119421 from iholder101/swap/adapt-resource-metric-test
k8s-ci-robot
authored
Revert "refactor: simplify RunScorePlugins for readability + performance"
AxeZhan
committed
node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec
gjkim42
committed
Fix the semantic meaning of etcd server within component statuses and metrics.
serathius
committed
Merge pull request #119444 from AxeZhan/scheduler_score
k8s-ci-robot
authored
Merge pull request #119412 from marosset/mark-node-log-query-tests-linux-only
k8s-ci-robot
authored
add namespaceParamRef to v1alpha1 and internal
Alexander Zielenski
committed
update-codegen
Alexander Zielenski
committed
refactor: use the provided sharedInformerFactory for params
Alexander Zielenski
committed
refactor: make scope of ParamKind available to vap controller
Alexander Zielenski
committed
feature: add multiple params capability to VAP controller
Alexander Zielenski
committed
Merge pull request #119422 from saschagrunert/conformance-debian-base
k8s-ci-robot
authored
Merge pull request #119215 from alexzielenski/apiserver/policy/namespaceParamRef-alpha
k8s-ci-robot
authored
Merge pull request #119437 from serathius/etcd-semantics
k8s-ci-robot
authored
api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage
Alexander Zielenski
committed
test: adjust tests for v1beta1 validatingadmissionpolicy
Alexander Zielenski
committed
Refactor jsonpath parser and add tests.

cici37
and
jpbetz
committed
Address comment
cici37
committed
update documented metrics
Han Kang
committed

Commits on Jul 21, 2023

Commits on Jul 22, 2023

Commits on Jul 24, 2023

Commits on Jul 25, 2023

Use statusReason for reason under x-kubernetes-validations (#119544)
cici37
authored
Merge remote-tracking branch 'openshift/master' into ocp-next
bertinatto
committed
UPSTREAM: 74956: apiserver: switch authorization to use protobuf client

mfojtik
authored and
bertinatto
committed
UPSTREAM: 84466: gce: ensureInternalInstanceGroups: reuse instance-groups for internal load balancers

abhinavdahiya
authored and
bertinatto
committed
UPSTREAM: 93286: wait for apiservices on startup

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: filter out CustomResourceQuota paths from OpenAPI

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: patch aggregator to allow delegating resources

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: remove apiservice from sync in CRD registration when it exists

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: hardcoded restmapper with a few entries to rebootstrap SDN when SDN is down

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Extend NodeLogQuery feature

aravindhp
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: add service serving cert signer to token controller

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: exclude some origin resources from quota

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: add our immortal namespaces directly to admission plugin

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: allow injection of kube-apiserver options

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: priorize some CRD groups over others

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Always test PDB's during service upgrade test

smarterclayton
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: create termination events

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: bootstrap-rbac-policy: move over .well-known rules

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: warn only about unknown feature gates

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: disable AES24, not supported by FIPS

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: Remove excessive e2e logging

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: conditionally fill the UserAgent from the currently running test

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: export HandleFlags

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to allowed node labels

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: Skip unit tests incompatible with openshift ci

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: use hardcoded metrics scraping authorizer for delegated apiservers

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: add management support to kubelet

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: APIRequestCount Handler

sanchezl
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KCM to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Ensure service ca is mounted for projected tokens

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: emit event when readyz goes true

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: only chown if non-windows machine

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift's kube-apiserver is in openshift-kube-apiserver

deads2k
authored and
bertinatto
committed
UPSTREAM: 103612: tolerate additional, but congruent, events for integration test

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-ca.crt for migration compatibility

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Revert "Remove Endpoints write access from aggregated edit role"

danwinship
authored and
bertinatto
committed
UPSTREAM: <carry>: skip posting failures to aggregated APIs to avoid getting false positives until the server becomes ready

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: add max_housekeeping_interval

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Release lock on KCM and KS termination

tnozicka
authored and
bertinatto
committed
UPSTREAM: <carry>: use console-public config map for console redirect

atiratree
authored and
bertinatto
committed
UPSTREAM: <carry>: e2e-framework: don't autosync PodSecurity labels

stlaz
authored and
bertinatto
committed
UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: make the PSA workload admission warnings honor the changes that SCC will eventually make to the pod

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: disable failing dnsPolicy test

sanchezl
authored and
bertinatto
committed
UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies

stlaz
authored and
bertinatto
committed
UPSTREAM: 115328: annotate early and late requests

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: disable load balancing on created cgroups when managed is enabled

haircommander
authored and
bertinatto
committed
UPSTREAM: <carry>: Create minimal wrapper needed to run k8s e2e tests

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: add shutdown annotation to response header

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: APISelfSubjectReview: only test v1beta1 API
bertinatto
committed
UPSTREAM: <carry>: don't fail integration due to too many goroutines
bertinatto
committed
UPSTREAM: <carry>: Export internal code from k8s.io/apimachinery/pkg/util/managedfields
bertinatto
committed
UPSTREAM: <carry>: legacy-cloud-providers: azure: do not detach masters from lb when unready

damdo
authored and
bertinatto
committed
UPSTREAM: <carry>: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy

haircommander
authored and
bertinatto
committed
UPSTREAM: <carry>: Create minimal wrapper needed to run k8s e2e tests

soltysh
authored and
bertinatto
committed
UPSTREAM: <drop>: disable transient dep check
bertinatto
committed
UPSTREAM: <carry>: add conditional shutdown response header

tkashem
authored and
bertinatto
committed
UPSTREAM: <drop>: update feature gates
bertinatto
committed
UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kubernetes.default.svc, don't wait for aggregated availability

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: disable new NodeLogQuery tests
bertinatto
committed
UPSTREAM: <carry>: disable tests for new PersistentVolumeLastPhaseTransitionTime and SidecarContainers alpha features
bertinatto
committed
UPSTREAM: <carry>: ignore vendor when generating code
bertinatto
committed
UPSTREAM: <carry>: ignore vendor when installing ncpu from hack/tools
bertinatto
committed
UPSTREAM: <carry>: move test rules from origin

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: UserNamespacesSupport feature was rename to UserNamespacesStatelessPodsSupport
bertinatto
committed
UPSTREAM: <carry>: watch-termination: termination.log file with resticted permissions

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <drop>: hack/update-vendor.sh
bertinatto
committed
UPSTREAM: <drop>: make update
bertinatto
committed