Validation unify all #6

…pes and remove unused code.

…Lifecycle Changed code to improve output for files under test/e2e/lifecycle

…leanup more iptables proxy cleanups

kubeadm: fix inverted warning message

…rocessTestFromOrphans fish out ShareProcessNamespace from orphans tab

Before we write the template.

kubeam:node-proxier -> kubeadm:node-proxier This causes e2e test failures: "[area-kubeadm] proxy addon kube-proxy ServiceAccount should be bound to the system:node-proxier cluster role" in: - kubeadm-kinder-latest - kubeadm-kinder-latest-on-... - other tests

…ePages The DownwardAPIHugePages feature is beta now, set true by default.

Clean up some service logging

…sGateNodeConformance PodReadinessGate is stable feature and test runs all green

build: use debian-iptables:bullseye-v1.1.0

The featureGates field in ClusterConfiguration ends up as a map[interface{}]interface{} in the test suite and cannot be casted to map[string]bool directly. Adapt the test to use map[interface{}]interface{}.

Includes support for btrfs in the Docker validator which was added in kubelet ~1.22.

…aced-params-ga Graduate IngressClassNamespacedParams to GA

Add wired off code for Validation rules for Custom Resource Definitions using the CEL expression language

TestFlowControlSignal has been flaking occasionally (somewhere around 0.5% on my machine using golang.org/x/tools/cmd/stress with -p 20). The intent was to sample the number of times the signal fired at the moment a backend receives a connection from the proxy as an alternative to test doubles, but the signal count was being sampled (and recorded) immediately on calls to (net.Listener).Accept() -- before blocking -- instead of immediately after unblocking. The flake no longer occurs on my machine (again, using stress -p 20) with this patch.

…sgroup-ga Move configurable fsgroup to GA

Fixed nil pointer dereference

make kubectl cp resume on transfer error

* Wire contexts to Batch controllers * (hold) feedback + updates that overlap with Apps controllers * fixup errors

…m-validators-to-1.6.0 vendor: update system-validators to v1.6.0

Co-authored-by: Eddie Zaneski <eddiezane@gmail.com>

The current memory notifier on cgroupv2 relies on reading `cgroup.event_control` which is unsupported on cgroupv2. For now, let's disable the feature on cgroupv2.

…belet-units [test][kubelet]: Fix out of bounds in TestSyncLabels unit

don't expand $(ls -A /scrub) in PV_RECYCLER_TEMPLATE

…mpty-in-scoring-stragety ScoringStrategy RequestedToCapacityRatio's shape should not be empty

Remove redundant forwarding rule in filter table

…ource-check Fix check for subpath source

It's not available in the node e2e environment.

…nal-flake Fix flake caused by sampling signal counter too early.

…5841 Migrated remaining lines of `server.go` and `csi.go` to structured logging

Taking an opportunity to prune myself from some aliases/review paths to reduce my workload. If: - I am no longer reviewing in an area, prune - There were under five reviewers, remain - I was already an approver for the area, prune from review path - I was a reviewer as part of Release Managers, comment out with "approvals only" Signed-off-by: Stephen Augustus <foo@auggie.dev>

Add NodeFeature tag to ephemeral containers e2e

Functionality added in systemd 240: https://github.com/systemd/systemd/blob/1977d1477f635057a87c0a5a59fc5d4e0b8ed6ec/NEWS#L3919-L3921

…-failures-1 kubeadm: fix test failures in the e2e_kubeadm suite

…rune OWNERS(justaugustus): Prune extraneous reviewer roles

…-test-flaky Mark restart_test as flaky

Append node e2e logs to file where possible

addresses feedback by adding a test to make sure that the manager pipeline will not return the same instance used as input, and that the output does not input managedFields

…ions() There's only one caller of setPodHostAndAnnotations() and it always passes an empty 'oldMachine'. Signed-off-by: Dan Williams <dcbw@redhat.com>

Fix staticcheck failure in pkg/kubelet/cm/cpuset

Wire contexts to RBAC controllers

Move a number of scheduler metrics to STABLE

…tions-docs Remove outdated metric IMPLEMENTATIONS, update links

…achine pod/storage: remove always-empty 'oldMachine' in setPodHostAndAnnotations()

…indows

kubeadm: add mutation for Linux paths in KubeletConfiguration on Windows

Remove some dead code in the ipvs proxy

The test should not depend on current set of default feature gates, it should always ensure the ones necessary for the tests are set.

Fix nil check in map merge

Signed-off-by: Neha Lohia <nehapithadiya444@gmail.com>

…te-liveobj Don't clear managedFields on live object

kubelet: fix file descriptor leak in log rotations

Switch from arguments to an input structure for kubectl command

Ensure there is one running static pod with the same full name

…erd-networkstats Get Windows network stats directly for Containerd

…_import_e2elog_package test/e2e: cleanup e2e core framework's import from sub package e2elog

kubeadm/certs/renew:remove deprecated flags csrOnly and csrPath

upgrade kustomize-in-kubectl to v4.4.1

Revert strict-in-alpha to false

…5426 Fixed using reference in for loop

…ifier kubelet: cgroupv2 disable memcg notifications

The nodeIPs to be used for nodePorts were collected using netlink which was unnecessary complex and caused se kubernetes#93858

This avoids the assumption that the kinds are populated in the schema, and is arguably a little more efficient also.

If a namespace deletion is blocked, finding the reason why can require reading the Conditions on the namespace. Currently, `kubectl describe namespace` does not include Conditions. This change adds Conditions to the output. Example output: ``` Name: example Labels: <none> Annotations: <none> Status: Terminating Conditions: Type Status LastTransitionTime Reason Message ---- ------ ------------------ ------ ------- NamespaceDeletionContentFailure True Wed, 15 Jan 2014 00:00:00 +0000 example reason example message No resource quota. No LimitRange resource. ```

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>

…able-onrootmismatch-e2e Skip OnRootMismatch tests if the CSI driver supports VOLUME_MOUNT_GROUP.

* capture loop variable * capture the loop variable and don't fail on not found errors * capture loop variable * Revert "Mark restart_test as flaky" This reverts commit 990e950. * skip e2e node restart test with dockershim * Update test/e2e_node/restart_test.go Co-authored-by: Mike Miranda <mikemp96@gmail.com> * capture loop using index Co-authored-by: Mike Miranda <mikemp96@gmail.com>

…atency_metric Added requestSloLatencies metric

Use HPA v2 in E2E tests.

package log runner as part of Kubernetes releases

…emetad leaderelection: populate the apiVersion/kind when reporting events

The test waits for the container to be running, but the test command sleeps for 2 seconds before writing output, creating a race.

Update comment on ResourcePolicyRule

…etcd-3.5.1 Upgrade etcd to 3.5.1

…umentation-reviewer Add dgrisonnet as sig-instrumentation reviewer

In support of csi-migration proposal here: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/csi-migration.md Will help with migration of in-tree RBD plugin ( kubernetes.io/rbd) to RBD CSI driver ( rbd.csi.ceph.com ). Fixes kubernetes/enhancements#2923 Signed-off-by: Humble Chirammal <hchiramm@redhat.com>

Kube-proxy/ipvs; Use go "net" lib to get nodeIPs

…a_isci_test_fix_panic_nil_pointer_exception e2e_node: fix nil pointer exception under quota lsci test

Signed-off-by: Davanum Srinivas <davanum@gmail.com>

…escriptions

Fix deletion protection unit test

…ed-files Exclude generated files from the static check

De-flake ephemeral containers e2e test

Simplify kubelet file config field allowlists

…sig-cluster-lifecycle Add missing alias - used in staging/src/k8s.io/cluster-bootstrap/OWNERS

…olicy tests

…ersDescription updated probe handler types descriptions

DelegateFSGroupToCSIDriver feature gate to beta

Increase the duration to expire an assumed pod

…il_as_a_failure fix init container oomkilled as a failure

Add more msg when exec probe timeout

…tions extension fields

…ensions and CEL property name escaping

prevents garbage collection from removing pinned images

Reduce the number of expensive calls in the Windows stats queries for dockershim

…able-onrootmismatch-e2e Remove feature gate check when skipping OnRootMismatch tests

RBD in-tree plugin migration to CSI driver using migration translation lib

Fix timeout flake in restart kubelet e2e

Feature implementation: Validation rules for Custom Resource Definitions using the CEL expression language

Add wait json

…servers Factored TimedObserver into less surprising pieces

Signed-off-by: Stephen Augustus <foo@auggie.dev>

CHANGELOG/1.9: Fix up GCS bucket references

Signed-off-by: haoyun <yun.hao@daocloud.io>

It iterates over the wrapped transports until it finds one that implements the CloseIdleConnections method and executes it. add test for closeidle http1 connections add test for http1.1 reconnect with inflight request add test to reuse connection request add test for request connect after timeout add test for client-go request concurrency

Don't use a custom dialer for the kubelet if is not rotating certificates, so we can reuse TCP connections because we don't need a customer dialer. Kubelet needs to be able to recover from stale http connections. HTTP2 has a mechanism to detect broken connections by sending periodical pings. HTTP1 only can have one persistent connection, and it will close all Idle connections once the Kubelet heartbet fails. However, since there are many edge cases that we can't control, users can still opt-in to the previous behavior for closing the connections by setting the environment variable DISABLE_HTTP2.

…atch-fix fix edit of non-registered custom API types

Watch HPA v2 instead of v1.

…eprecation kubectl: add deprecation notice to flag usage help

failures

CRON_TZ variable slipped in during upgrading github.com/robfig/cron library. It allows setting a time zone which is a long requested feature but one that is not officially supported. This adds warning event since users should not rely on unsupported features.

CloseIdleConnections of wrapped Transport RoundTrippers

…or-flag Remove ignore error flag for drain, and set this feature as default

comment change to on by default in 1.23

disable CSIMigrationGCE in some unit tests

…ault storage class

…ailure-123 Recover expansion failure

…ditions Include Conditions in `kubectl describe namespace`

…-test Fix sample_and_watermark_test.go for bad luck, repeated test

Signed-off-by: Oksana Naumov <trierra.dev@gmail.com>

turning on the CSIMigrationGCE feature flag

…types-feature-enablement Add Support for OpenAPIEnum in OpenAPI v2

…-mapper ResettableRESTMapper to make it possible to reset wrapped mappers

…AlreadyRegisteredError-in-unit-test Fix metrics AlreadyRegisteredError on TestRecordOperation and TestGetHistogramVecFromGatherer unit test

Graduate TopologyAwareHints feature gate to beta

…tworx Csi translation portworx

…iguration migrate --register-with-taints to KubeletConfiguration

…t-extension Scheduler simplified MultiPoint plugin config

Turn CSIMigrationAWS on by default

Add warning about using unsupported CRON_TZ

…orwarding

Bump discovery burst for kubectl to 300

oidc authenticator: allow http.Client to be overridden

…fer-with-os-exit Fix(kube-proxy): remove os.Exit from cobra.Command

OpenAPI v3

…nciler-codefmt kubelet: extract multiple ignore errors validate logic to isExpectedError

… 'ineffective assignment'

Make verify-golangci-lint.sh work across modules and take an optional argument for a package.

TODO: port options from verify-staticcheck.sh and delete it

golangci configuration file disable soon to be deprecated golangci linters remove useless comments on golangci config

… (staticcheck)

…hedularMigration migrated schedular to structured logging

Close connection and stop listening when port forwarding errors occur so that kubectl can exit

…ticcheck use golangci-lint

Implement grpc probe action

Implements server side field validation behind the `ServerSideFieldValidation` feature gate. With the feature enabled, any create/update/patch request with the `fieldValidation` query param set to "Strict" will error if the object in the request body have unknown fields. A value of "Warn" (also the default when the feautre is enabled) will succeed the request with a warning. When the feature is disabled (or the query param has a value of "Ignore"), the request will succeed as it previously had with no indications of any unknown or duplicate fields.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Validation unify all #6

Validation unify all #6

Commits on Nov 10, 2021

Commits on Nov 11, 2021

Commits on Nov 12, 2021

Commits on Nov 13, 2021

Commits on Nov 14, 2021

Commits on Nov 15, 2021

Commits on Nov 16, 2021

Commits on Nov 17, 2021

Commits on Nov 19, 2021

Validation unify all #6

Are you sure you want to change the base?

Validation unify all #6

Commits on Nov 10, 2021

Commits on Nov 11, 2021

Commits on Nov 12, 2021

Commits on Nov 13, 2021

Commits on Nov 14, 2021

Commits on Nov 15, 2021

Commits on Nov 16, 2021

Commits on Nov 17, 2021

Commits on Nov 19, 2021