summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
* containerd: upgrade from 2.0.0-beta to 2.0.5Chen Qi2025-07-082-34/+6
| | | | | | | | 0001-Makefile-update-default-PACKAGE-to-v2.patch is dropped as it has been merged in new version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2025-6032Praveen Kumar2025-07-082-0/+62
| | | | | | | | | | | | | | | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6032 Upstream-patch: https://github.com/containers/podman/commit/1569c209829530b1f42e8c2fce851de8003ab3fe Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: Fix CVE-2024-9675Praveen Kumar2025-04-192-0/+114
| | | | | | | | | | | | | | | | | | A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah. References: https://nvd.nist.gov/vuln/detail/CVE-2024-9675 https://security-tracker.debian.org/tracker/CVE-2024-9675 Upstream-patch: https://github.com/containers/buildah/commit/cffa820dc8be07efdb7fc4e8e8b9ff44c70aaf93 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: fix Upstream-Status formatMartin Jansa2025-04-092-4/+2
| | | | | | | | | | | | | | | | | * fixes: DEBUG: Executing python function do_qa_patch ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36620.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36621.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: Fatal QA errors were found, failing task. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36621Praveen Kumar2025-04-022-0/+84
| | | | | | | | | | | | | | | | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36621 Upstream-patch: https://github.com/moby/moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36620Praveen Kumar2025-04-022-0/+41
| | | | | | | | | | | | | | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36620 Upstream-patch: https://github.com/moby/moby/commit/ab570ab3d62038b3d26f96a9bb585d0b6095b9b4 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: Adjust to glibc __rseq_size semantic changeGuocai He2025-04-022-1/+96
| | | | | | | | | | | On criu version 3.19.0: When use "criu restore -d -D checkpoint" to restore, the error is: 1272: Error (criu/cr-restore.c:1498): 1295 killed by signal 11: Segmentation fault The root casue is that the glibc updated and criu should adjust to glibc __rseq_size semantic change. Signed-off-by: Guocai He <guocai.he.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: Support posix basename from musl libcKyungjik Min2025-03-242-0/+77
| | | | | | | This fixes building with musl libc. Signed-off-by: Kyungjik Min <dpmin7@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix CVE-2025-24976Chen Qi2025-03-062-0/+50
| | | | | | | Backport patch to fix CVE-2025-24976. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: patch CVE-2025-24965Peter Marko2025-03-062-0/+46
| | | | | | | Pick commit https://github.com/containers/crun/commit/0aec82c2b686f0b1793deed43b46524fe2e8b5a7 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.30.8Chen Qi2025-01-301-2/+2
| | | | | | | | | The following two patches are dropped as they are in 1.30.8: - CVE-2024-5154-0001.patch - CVE-2024-5154-0002.patch Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: upgrade 1.1.12 -> 1.1.14Hugo SIMELIERE2025-01-071-2/+2
| | | | | | | | | | | | | Alignment with runc-docker version Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Add runtime dependenciesLeonard Anderweit2025-01-071-1/+4
| | | | | | | | | Add missing runtime dependencies on python modules asyncio, json and getpass provided by unixadmin. Sort the dependencies alphabetically while at it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: upgrade 1.1.12 -> 1.1.14yocto-5.0.5scarthgap-5.0.5Divya Chellam2024-11-021-2/+2
| | | | | | | | | | | Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-host-config: Remove centos registryLukasz Czechowski2024-11-021-1/+1
| | | | | | | | | | Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Use dup3 for riscv64Mingli Yu2024-07-222-0/+43
| | | | | | | | | Use dup3 instead for riscv64 as there is no dup2 on riscv64 linux to fix the below build failure: vendor/github.com/bugsnag/panicwrap/dup2.go:10:9: undefined: syscall.Dup2 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Enable support for riscv64Mingli Yu2024-07-221-2/+0
| | | | | | | | | Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix meson build issuePawan Badganchi2024-07-221-2/+1
| | | | | | | | | | | | | Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Switch branch to mainDaniel Schultz2024-07-101-1/+1
| | | | | | | | The podman-compose repository has no stable branch anymore and release 1.0.6 is located on main now. Signed-off-by: Daniel Schultz <d.schultz@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: upgrade to 1.34.3Yogita Urade2024-05-291-2/+2
| | | | | | | | | | | | | | | | | | | | Includes fix for: CVE-2024-1753 Changelog: ========= 2db756331 (tag: v1.34.3) [release-1.34] Bump Buildah to v1.34.3 699d1ed51 [release-1.34] CVE-2024-24786 protobuf to 1.33 4ffe07267 Merge pull request #5419 from TomSweeneyRedHat/dev/tsweeney/cve-1.34 968e8ab62 [release-1.34] Bump to Buildah v1.34.3-dev 776a1463d (tag: v1.34.2) [release-1.34] Bump to Buildah v1.34.2 afc086b65 conformance tests: don't break on trailing zeroes in layer blobs 3deda1913 [release-1.34] CVE-2024-1753 container escape fix 14d60c988 Merge pull request #5365 from edsantiago/skip_unshare_on_rhel--1.34 4f775b4a1 tests: skip_if_no_unshare(): check for --setuid dbeb097c6 Merge pull request #5352 from TomSweeneyRedHat/dev/tsweeney/buildah_1_34_1 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Pass -trimpath to buildChangqing Li2024-05-021-0/+1
| | | | | | | | | | | | Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd-opencontainers: fix wrong version displayChangqing Li2024-05-022-4/+31
| | | | | | | | | | | | | | * Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: skip textrel QA warningChangqing Li2024-05-021-1/+1
| | | | | | | | | | | | | | | -buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Fix missing brace in FILESTheodore A. Roth2024-05-021-1/+1
| | | | | | | | | When converting to use {systemd_user_unitdir}, the closing brace was omitted Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com> Signed-off-by: Theodore A. Roth <troth@openavr.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix location of user systemd service unitsLukasz Czechowski2024-04-221-2/+2
| | | | | | | | | | | The value of USERSYSTEMDDIR is currently set to ${systemd_unitdir}/user, which might not be present in user unit search path. Use dedicated bitbake variable ${systemd_user_unitdir} instead. Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix broken test casesXiangyu Chen2024-04-093-0/+166
| | | | | | | | Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.12Bruce Ashfield2024-04-091-2/+2
| | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 5.0.1Bruce Ashfield2024-04-041-2/+2
| | | | | | | | | | | | | | | | | | | Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits: 63f6a78eb Packit: Enable CentOS Stream 10 update job e22c9dd65 Bump to v5.0.2-dev 946d055df Bump to v5.0.1 131f3d089 Add release notes for v5.0.1 2967eb9a2 [v5.0] libpod: restart always reconfigure the netns 92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns b1dbd477e [v5.0] Bump Buildah to v1.35.3 ebe3f395b hyperv: error if not admin 4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD 312313872 Use built-in ssh impl for all non-pty operations 70fe2a1c9 fix remote build isolation on client side bfc63cc32 fix remote build isolation when server runs as root Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose: update to v2.26.0Bruce Ashfield2024-04-044-566/+589
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits: 33712277 chore(desktop): revised feature detection for file shares e9dc8201 Add Navigation Menu to compose up 39504607 Add support for volume Subpath option 3b541b07 Bump docker v26.0.0 25671ae6 introduce config --variables to list compose model variables 0191e69d Fix docs on default build image name 897d239f Bump compose-go to v2.0.2 c5a760ce add support for annotations 26f687a1 Revert "Bump compose-go to v2.0.1" ad414613 Bump compose-go to v2.0.1 db4ed895 feat(desktop): synchronized file share integration (#11614) 1b5fa3b9 feat(experiments): add experimental feature state (#11633) 4f97edf3 reduce timeout of the Otel tracing command bc5fc6ba fix `compose config --format json` f937e42a Bump compose-go v2.0.0 f46ca459 services shell completion bugfix b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig 5a1ba0ef only use ToModel when --no-interpolate is set 17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593) 4efb8970 chore(deps): upgrade go to 1.21.8 (#11578) f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566) 34b11c4f Add test summary for test jobs in ci c525373a make code simpler e99b8ace avoid duplicated "xx exited with code 0" message 8ab8df86 introduce --watch de178267 move code into small functions for better readability 1680f9a8 restore support for `config --no-interpolate` 5c4f3370 remove docker cli step in ci.yml 58ec0e9f get log to manage `attach` 349d9f34 bump compose-go to version v2.0.0-rc.8 697a48af use an dedicated compose file --quiet-pull e2e test 9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state d10a179f add support of QuietOption to create command 94246f3c pass QuietOption when starting dependencies from run command 9630cc58 when ran with ANSI disabled, force progress=plain 6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable 9b0e3d53 ci: bump engine version to `25.0.3` de3da829 sort containers to optimize scale down c79aabde discard stdout for laaarge log test 0aad3221 use listeners to collect include metrics b1c06770 docs: update cli reference link e330f590 docs: unify no trailing dots in docstrings and help (#11301) 16c8099c Use listener for file metadata 07bda596 fix deadlock collecting large logs d2034029 chore(watch): remove old `docker cp` implementation 894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481) 3ba66453 pass All option to backend api.Service when length statuses is not equal to zero 2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu) 1fea7c1b build(deps): bump github.com/opencontainers/image-spec acf2ffb0 feat(tracing): add project hash attr 0d48a93f chore(load): ensure context passed to load aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44 6ef55a53 bump compose-go to v2.0.0-rc.4 a553db33 CI: docker engine version matrix 05bec55d build(deps): bump github.com/docker/cli 8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382) a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426) 05820018 Fix canonical container name da1a34a8 don't check external network existence when swarm is enabled 8b023ae0 build(deps): bump github.com/docker/cli 8c80297c build(deps): bump github.com/docker/docker 7e991515 Add support for storage_opt d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1 71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues 25d16d1f build(deps): bump actions/upload-artifact from v3 to v4 ab97dcc7 update MAINTAINERS file a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE 811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail 1551fcb4 introduce stopAndRemoveContainer to share logic scaling down eb4249ec bump compose-go to v2.0.0-rc.2 1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381) 053a5604 docs: update link to use canonical URL for command 34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1 56e38260 go.mod: github.com/google/uuid v1.5.0 c28bf522 bump version of compose-go to v2.0.0-rc.1 51c113b6 build(deps): bump github.com/docker/docker 7cdc7e15 remove watch command from the alpha command fb026543 build(deps): bump github.com/docker/cli d688d3bf fix(tracing): batch span exports to prevent blocking 898e1b60 signals/utils: always handle received signals f414bf78 fix engine version require to use healthcheck.start_interval 3c4593f2 Stop the resource timer after last expected event d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347) 26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349) 191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348) 5d05df6e update compose-go to version using immutable Project functions b621948c feat(cli): report more useful User-Agent on engine API requests f5c53c2d ci(deps): bump golangci-lint to v1.55.2 1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331) 2bf2b22f Add source policies for build 575f2ed7 watch: remove requirements for tar binary and for sync target to be rw 5f4b22ed make docs dcf6bd77 make mocks 80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach 2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach) d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317) 27987415 gha: update DOCKER_CLI_VERSION to v24.0.7 566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1 d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1 a1d36379 go.mod: github.com/klauspost/compress v1.17.4 0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4 2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0 dcbf005f up: gracefully teardown when command ctx cancelled e105f165 introduce `stats` command ce5a0c65 Fix cancellable context detection in `AdaptCmd` f58f23a6 remove ServiceProxy which was introduced for archived compose-cli 9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3 ccd83b8a go.mod: github.com/gorilla/mux v1.8.1 9e57850c go.mod: github.com/docker/distribution v2.8.3 35d3a7ca go.mod: golang.org/x/crypto v0.17.0 6c998602 go.mod: golang.org/x/crypto v0.16.0 402f3688 go.mod: golang.org/x/text v0.14.0 30dd3e66 go.mod: golang.org/x/term v0.15.0 0c4fa017 Bump compose-go v2-beta.2 b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0 17da54da introduce build --with-dependencies 1baa4f44 up: fix write/close race condition in logPrinter 7781b7c9 deps: update docker/cli to fix go version selection issue 785835b1 Add support for endpoint-specific MAC address e4fb5545 build do not require environment to be reslved 74cc0912 github.com/golang/mock is deprecated 5e61c62e collect services to build using WithServices fb3868ff add support for start_interval bdbda790 include disabled services for shell completion ae4fd791 bump golang to version 1.21.5 26aca867 avoid use of service.Name when iterating on project.Services 138facea project.Services is a map cda04f28 adopt compose-go/v2 85a1aec1 regen docs 9c29d223 use custom config type for OCI v1.0 df6fe59f tweak help message on oci version flag 07df9cc4 fix typo 7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0 111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR 8026d0e2 adopt container.RestartPolicy* df1533a1 [lint] don't use deprecated types 8639fbae go mod tidy 56e2ad9e update to v1.25 for RunAttach ce1ddb6c fix combination of --pull always --no-build c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 1f148244 send out a cancel event on SIGINT/SIGTERM 9faef4ae Update README.md to use standard compose.yaml file name 59f11ecb Fix configs are mounted under /<id> 750553c8 introduce compose logs --index to select a replica container 8c964f5a Update E2E test 90ca13b7 Fix E2E test to have index in the correct position f9946127 Fix docs ddda59a1 Add index option to compose logs command e981c358 Add failing test 16c4241c log we don't expose service ports when --verbose 9025d63a bump ddev a1de0b96 Restore `Project` is ps json output caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project 29e9fdba let contributor know we might close unanswered issues c665c53c bump buildx to v0.12.0 and adapt code to changes a39cf75e build(deps): bump github.com/compose-spec/compose-go 46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 5c5d30c6 build(deps): bump github.com/docker/cli 36fa8d4e build(deps): bump github.com/docker/docker 2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible 5e77ae92 avoir use of []types.ServiceConfig f5572201 identify services to build and don't display 'building' if none 8e1b3236 fix --remove-orphans not to consider disabled services as orphaned 7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features cb01186c push also consider build.tags 9c4efbdd Strip project prefix from docker-compose up output 8ea7c9e0 Make it context aware and add test skipping options c1694360 render quiet after filtering applied 254a94b0 bump golang to version 1.21.4 cf608fa9 bump compose-go to v1.20.1 426377a4 reject compose file using `secrets|configs.driver or template_driver` 493f6c80 skips flaky e2e tests on watch and attach 646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint 2945532f fix --pull documentation e5cd265a improve watch configuration logging Add action associated to each managed path d646d757 lint 71237ef6 do not resolve cache dir until remote resource is in use 0d905a89 add a copyright notice with original author b847c7f5 implement runtime file selection 5e3d8f67 re-implement cache folder detection 67279088 introduce --resolve-image-digests for publish to seal service images by digest 4cd61957 fix build 0d4cbbdb fix 9631a49d ENGDOCS-1764 328ca3f2 add docs upstream validation workflow e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 616bba0a linter errors fixed ee6e3c2a NetworkList to NetworkInspect for ID search c7e31a3c Squashing feature branch commits in order to add signoff message. 704a9fd3 Use project.ServiceNames() if no service specified in hash d9e0e42d Add branch configuration for pull_request trigger c48e3c4a Initial codeql.yml commit dd0803db fix SIGTERM support to stop/kill stack 39008c53 align with OCI artifact best practices 6c345b37 refactor(cmd/compose/run): remove redundant `len` check 1ffa194e fail start if depependency is missing b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used 3d0207eb remove uncessary return value of pullComposeFiles function 16a7c209 enable profile when down is ran with explicit service names 818bc3c3 add sync+restart action to watch attribute 38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 9b4d577c remove refrecence docs generation 14b43c1a remove cucumber tests as we haven't added new ones for a while 9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files 2c0b0232 add dry-run support for publish command 599e4b24 extract method to reduce cyclomatic complexity fe8c2780 warn user remote resource is disabled a345515f Don't delete dependent services 8967df7a Apply platform before hashing 4f694919 deps: remove deprecated github.com/pkg/errors 6ecab957 Include image name in error message 12e0ac89 pkg/compose/publish: use empty config descriptor mediaType a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType 991901f2 pkg/remote/oci: refer to the manifest as manifest 2d971fc9 update the watch warning message when no services with a develop section 78f33619 ci: enable verbose output for e2e tests (#11045) 44d21280 truncate command by default, introduce --no-trunc flag to get the full command ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ab81db5b config --xx don't need `env_file` being parsed 61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed 6be5f300 move watch from alpha to main command c34c306c TestWatch to use new `develop` section 5ca35c88 implement publish 805541be watch: use official `develop` section (#11026) 8f489d6d build(deps): bump github.com/opencontainers/image-spec 9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 a697a069 introduce pull --missing flag to only pull images not present in cache 8af49ff3 resolve service reference into container based on observed state f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state 6d5eb6fd update to go1.21.1 9d7e0ad6 correct scale error messages formatting 1a98a70b add scale command 19bbb12f ci: tweak restricted imports in linter (#10992) 7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991) 13115468 cli: fix `--build` flag for `create` (#10982) e1aa4f77 otel: add args & flags to cli traces (#10974) d7b0b2bd watch: build & launch the project at start (#10957) e0f39ebb pull OCI remote resource c9d54f09 introduce publish (alpha) command 52e54ef9 doc: updated README.md to remove broken link f4f2e934 migrate to github.com/distribution/reference 32c3d0a3 Enable service explicitly requested to be restarted 1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues 407a0d5b up: fix various race/deadlock conditions on exit (#10934) 8caa6f1f pkg/api: replace uuid for basic random id Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add new kernel module rrecommendsBruce Ashfield2024-03-231-1/+8
| | | | | | | | | | | Testing podman + netavark without kernel-modules installed in the image shows some are missing from the rrecomends. It could be argued that they belong in netavark, but since podman + netavark are almost always used together, we group them here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 5.0.0Bruce Ashfield2024-03-221-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tested with cni: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep cni cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64 root@qemux86-64:~# rpm -qa | grep neta Tested with netavark: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep netavark netavark-1.10.3-r0.core2_64 Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits: bfc63cc32 fix remote build isolation when server runs as root f32338dfc bump version to v5.0.1-dev e71ec6f1d New release: v5.0.0 6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753 eb2b16d6d [v5.0] Bump Buildah to v1.35.1 43b9ea8b9 Adjust to the standard location of gvforwarder used in new images 4a84f39b3 Switch to 5.x WSL machine os stream using new automation a03de4c14 rpm: use macro supported vendoring 069439820 Bump to v5.0.0-dev f8888a13b Bump to v5.0.0-RC7 2e387df07 Add release notes for v5.0.0-rc7 d36ce9c2b fix invalid HTTP header values when hijacking a connection 8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote 59512272b pkg/machine: make checkExclusiveActiveVM race free 51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM() 412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting 1ca93f3fb pkg/machine: refresh config after we hold lock 71320df8e rpm: update containers-common dep on f40+ e58cb97de Change API socket to be machine name isolated dbf38779b Makefile: drop tests-included from validate target 0fdd83173 Add release notes for v5.0.0 d7bc7b7b4 do not require policy.json 82597144b Machine decompress.go refactoring follow-up abaa179aa Add target win-gvproxy in winmake.ps1 4c5d26f6f Add final machine endpoint 068ddfd19 update API doc version to 5.0.0 f2af295e4 Bump to 5.0.0-dev d26113ca8 Bump to 5.0.0-rc6 52ed774c2 docs: generate-systemd: add clarification statement 3d6758a61 docs: quadlet: improve docs on root/rootless dirs 885dd2add [CI:DOCS] performance: fix URL and kernel version requirement e6ac569a1 [CI:DOCS] Remove outdated references 364813da6 Add note for RHEL 8.5 e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY] f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY] 9b21a5b79 Bump to v5.0.0-dev bbad09bb0 Bump to v5.0.0-rc5 432f4fbf9 Fix Mac CI d54a37399 Complete policy.json inclusion b234bb55e Bump Buildah to v1.35.0 5d3a19f8d podman compose: enable machine socket connection 6f4ee16d9 [CI:DOCS] Add farm command to commands list 25f3a8ce7 podman machine start/stop do not write config unlocked 75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer 7a7591492 podman machine init: do not write config unlocked 7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter 5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users 4c6505be5 Fix the logic for detecting an unexpected close error 81906081e vendor libhvee-0.7.0 3c9c5be7d podman machine set: change options only locked a65b546c6 Remove copySparseFile 2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath 724c5a06b Don't read full VM File before decompressing ff81cf7c7 [CI:DOCS] Fix windows installer action 4d2fc293c machine: make more use of strongunits 92b67a69a Fix wrong units size return 79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c d6d260174 [CI:DOCS] Migrate podman container image a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0 39851a0b9 CI: try to fix more flakes 835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package 945995be1 e2e: fix potential race in file-locks test 02403c2e6 Makefile: podman should have correct selinux label 9ee96a956 properly implement pull-error event status 155cd463d fix(deps): update module golang.org/x/tools to v0.19.0 6272abbbb Resurrect auto-port reassignment, but for all providers ef7727238 Refactor env dir and port functions into new leaf pkgs eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0 3b72f9178 Revert "Expose as-tested Mac/Windows repository state" 24516f3ef fix(deps): update module golang.org/x/term to v0.18.0 e8bf9a323 Update podman-for-windows.md 8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af e09444327 machine init: print output to improve UX 530782e11 logformatter: fixes for Macintosh ebce0e71d test/e2e: check for stderr errors in cleanup() ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished) fc4e16366 Bump to v5.0.0-dev bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0 cfc5b8e0f Bump to v5.0.0-RC4 185981fa5 Copy past golang/expansion form ks8.io/kubernetes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: conditionally add cni build tagBruce Ashfield2024-03-221-1/+3
| | | | | | | | | | | We should ensure that cni is built as part of podman if that's the configured virtual runtime. Although cni is not a primary networking backend for podman, this also allows it to be skipped if netavark is used. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "docker-compose: update to v2.24.6"Bruce Ashfield2024-03-204-396/+451
| | | | | | | | | | | | One of the vendor components has deleted a commit that docker-compose is using (and has listed as a replacement in go.mod). Until docker-compose comes up with a solution, we temporarily revert to and older compose. We'll update to the latest 2.23.x if this isn't resolved in 2.24+ before release. This reverts commit 29ec8e5ceacdf20bd1f836268cf01a6a12484ba3.
* k3s: package check-config.shBruce Ashfield2024-03-191-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In a similar way we package check-config.sh for docker, we package the contrib script for k3s. root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924] Verifying binaries in ./usr/share/k3s: - sha256sum: sha256sums unavailable - links: link list unavailable System: - /usr/sbin iptables v1.8.10 (legacy): ok - swap: disabled - routes: ok Limits: - /proc/sys/kernel/keys/root_maxkeys: 1000000 info: reading kernel config from /proc/config.gz ... Generally Necessary: - cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good - CONFIG_NAMESPACES: enabled - CONFIG_NET_NS: enabled - CONFIG_PID_NS: enabled - CONFIG_IPC_NS: enabled - CONFIG_UTS_NS: enabled - CONFIG_CGROUPS: enabled - CONFIG_CGROUP_PIDS: enabled - CONFIG_CGROUP_CPUACCT: enabled - CONFIG_CGROUP_DEVICE: enabled - CONFIG_CGROUP_FREEZER: enabled - CONFIG_CGROUP_SCHED: enabled - CONFIG_CPUSETS: enabled - CONFIG_MEMCG: enabled - CONFIG_KEYS: enabled - CONFIG_VETH: enabled - CONFIG_BRIDGE: enabled - CONFIG_BRIDGE_NETFILTER: enabled - CONFIG_IP_NF_FILTER: enabled (as module) - CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module) - CONFIG_IP_NF_NAT: enabled (as module) - CONFIG_NF_NAT: enabled (as module) - CONFIG_POSIX_MQUEUE: enabled Optional Features: - CONFIG_USER_NS: enabled - CONFIG_SECCOMP: enabled - CONFIG_BLK_CGROUP: enabled - CONFIG_BLK_DEV_THROTTLING: enabled - CONFIG_CGROUP_PERF: enabled - CONFIG_CGROUP_HUGETLB: enabled - CONFIG_NET_CLS_CGROUP: enabled - CONFIG_CGROUP_NET_PRIO: enabled - CONFIG_CFS_BANDWIDTH: enabled - CONFIG_FAIR_GROUP_SCHED: enabled - CONFIG_RT_GROUP_SCHED: enabled - CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module) - CONFIG_IP_SET: enabled (as module) - CONFIG_IP_VS: enabled - CONFIG_IP_VS_NFCT: enabled - CONFIG_IP_VS_PROTO_TCP: enabled - CONFIG_IP_VS_PROTO_UDP: enabled - CONFIG_IP_VS_RR: enabled (as module) - CONFIG_EXT4_FS: enabled - CONFIG_EXT4_FS_POSIX_ACL: enabled - CONFIG_EXT4_FS_SECURITY: enabled - Network Drivers: - "overlay": - CONFIG_VXLAN: enabled (as module) Optional (for encrypted networks): - CONFIG_CRYPTO: enabled - CONFIG_CRYPTO_AEAD: enabled - CONFIG_CRYPTO_GCM: enabled - CONFIG_CRYPTO_SEQIV: enabled - CONFIG_CRYPTO_GHASH: enabled - CONFIG_XFRM: enabled - CONFIG_XFRM_USER: enabled (as module) - CONFIG_XFRM_ALGO: enabled - CONFIG_INET_ESP: enabled (as module) - CONFIG_INET_XFRM_MODE_TRANSPORT: missing - Storage Drivers: - "overlay": - CONFIG_OVERLAY_FS: enabled STATUS: pass Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: set version.UpstreamGolang in binariesBruce Ashfield2024-03-151-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | k3s will refuse to start if the golang version it was built with doesn't match the VERSION_GOLANG linker variable. As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668 We query our version of the compiler and set it in the binaries to ensure they match. Note: this may cause issues if you bump the golang compiler, but k3s doesn't rebuild. We'll worry about that when it happens. With this change, k3s starts and the node becomes ready. root@qemux86-64:~# uname -a Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux root@qemux86-64:~# kubectl get nodes NAME STATUS ROLES AGE VERSION qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: patch cleanupsBruce Ashfield2024-03-154-68/+78
| | | | | | Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: pycriu RDEPENDS on python3-fcntlTim Orling2024-03-151-1/+1
| | | | Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: pycriu RDEPENDS on python3-ctypesTim Orling2024-03-151-1/+1
| | | | Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: pycriu RDEPENDS on python3-protobufTim Orling2024-03-151-1/+1
| | | | Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHONTim Orling2024-03-151-6/+2
| | | | Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: fix pycriu build of wheelTim Orling2024-03-153-9/+53
| | | | | | | | | | | | | | | | Inherit python_setuptools_build_meta instead of setuptools3, as this is the build-backend declared in the pyproject.toml We seem to need python3-protobuf-native as a DEPENDS, but then the dependency check complains because our version in meta-python is python3-protobuf_4.25.bb Workaround this (for now?) by telling python3 -m build to --skip-dependency-check This allows criu to _build_. Whether it is functional and proper is a different story. Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: build and install wheelsTim Orling2024-03-152-11/+108
| | | | | | | | | | | Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and do_install (python3 -m install) to build and install wheels and avoid the heavy handed pip install usage. FIXME: even though lib/pycriu/version.py is properly being dynamically generated, setuptools/config/expand.py is failing to detect the __version__ attr. Signed-off-by: Tim Orling <tim.orling@konsulko.com>
* criu: update to v3.19Bruce Ashfield2024-03-151-6/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping criu to version v3.19, which comprises the following commits: f8b14286b criu: Version 3.19 (Bronze Peacock) f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags 0b62f4267 lib: use separate packages for pycriu and crit 97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness. e076c11e2 ci: fix codespell errors 41938f14b zdtm/static: test the offset migration of ELF files 29026496d zdtm/lib: add missing signal.h header a77185dae files-reg: don't change the file pos in get_build_id 5d4179ddb criu/proc_parse: refactor the eventpoll parser cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check 36a84751e zdtm/cow00: fix typo 48d6a59a2 arch/x86: remove the redundant check 45670b655 apparmor: remove the redundant check 5e8d7dc94 tun: don't parse buffers that have not been filled with data 4c9d23d33 util: allow to run criu under strace c9fdd355f pie: Mark __export_*() functions as externally_visible 5d6c8bc58 clang-format: disable column limit constraint 81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings e86e8dac0 memfd: don't reopen file descriptors for memory mappings 28e854d66 amdgpu: fix clang warnings ba168ab78 ci: enable build with amdgpu plugin aa38a5989 amdgpu: print an error if the dup syscall fails 940a05c0b amdgpu: don't leak fd on an error path in open_img_file a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control 66f39adf1 criu: change the comment about magic numbers 9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy 28adebefb Return page size as unsigned long 00f8a56b6 zdtm: check userns once ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out. f6e820bed zdtm: Treat ESRCH from kill() as success. c29c5a1df zdtm: cgroup04: Improve skip check's robustness. 131e464a0 zdtm: cgroup04: Improve error messages. 785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes. 5e544dc44 ci: stop testing ubuntu overlayfs 7a2910f89 py/cli: add --version option 61d9cf6f9 crit/setup.py: use __version__ from pycriu 8adefc90d lib/pycriu: generate version.py 59fcfa80d compel: Add support for ppc64le scv syscalls d06c9b5cd criu/plugin: Add environment variable to cap size of buffers. 8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration 2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available 32241b00d vagrant: run tests with fedora 38 862cb5c1c vagrant: update to version 2.3.7 d2a0d1fa6 lint: don't fail workflow on indent fail 08f286ed9 CONTRIBUTING.md: improve coding-style related sections 38bf7f42e CONTRIBUTING.md: don't mention ctags b7a8bb088 zdtm: test execveat(memfd) c9b2633ca memfd: return original memfd fd for execveat() 480565437 kerndat: check_pagemap: close(fd) on error path d5284313f kerndat: Make errors from clone3() check more precise. badf8060c proc_parse: Log smaps entry while dumping VMA. 1800018bc test/other: add test for action-script ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user() f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages. 86ad52bc2 ci/loongarch64: compile tests before running zdtm.py 0085f992c memfd: don't set fd attributes not needed for vma mapping 8c17535f3 loongarch64: fix syscall_64.tbl 6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels 620e8c0a6 Put a cap on the size of single preadv in restore operation. 2547ac8ac zdtm: membarrier: test migration of membarrier() registration e07155e19 dump+restore: Implement membarrier() registration c/r. 5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs d1096e3b3 lib/py: add VMA_AREA_MEMFD constant d3b955e57 ci/docker: install all required packages 9477354de scripts/apt: don't hide apt output a4b49c46f amdgpu_plugin: remove duplicated log prefix 69200bec7 irmap: scan user-provided paths in order 2a131167b page-xfer: Pull tcp_cork,nodelay(). 6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr 3628589b5 zdtm/memfd00: test memfd file mode dfa541095 memfd: dump and restore permissions. ac1219f4e sk-inet: Extend 'TCP repair off' failure log. 25d033080 restore: Skip dropping BSET capability if irrelevant. fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting. 7df3f6595 restore: Fix capability migration requirements between different kernels. 7ab02639f restore: Skip setgroups() when already correct. 4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids. 99188cfbe tty: Avoid EPERM for no-op chown(). 113957270 memfd: Avoid EPERM for no-op chown(). 96fa42b79 cgroup: Replace restore_perms() with cr_fchperm(). b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes. f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes. 21560270d util: Implement fchown() and fchmod() wrappers. e25a243b2 ci: add workflow for loongarch64 788e1e92e zdtm: add loongarch64 support ae0811475 criu: add loongarch64 support to parasite and restorer ec6dc2d5c images: add loongarch64 core image c9df09eea compel: add loongarch64 support b304106e6 include: add common header files for loongarch64 8a24d4872 ci: add workflow to ensure self-contained commits 23313080a kerndat: don't leak a socket file descriptor b2d74fbfd zdtm: replace NR_fstat with NR_statx 8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled 6b8107cd1 irmap: Reduce error log severity to warning. 4eb6cc319 mount: Demote fsnotify logs for ignored failures. 3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits. 804c0ba82 soccr: Log name of socket queue that failed to restore. 4018b7877 soccr: Log offset when failed to restore socket's queued data. 1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket. 5a723937a compel: Log the status word with "Task is still running" errors. 664598dc7 files-reg: Debug "open file on overmounted mount" error. a5fe99d2c cgroup: Propagate error on cgroup mount failure. 056cac474 zdtm: drop python 2 compatibility 002f2372a lib/py: drop python 2 compatibility d388b91de test/others: drop setup_swrk() py2 compatibility ee9983d4a test/criu-ns: drop python 2 compatibility ede018176 make: remove checks for python 2 binary 642fd99bf remove python-future dependency 376f3d180 crit: add requirements.txt for pip>=20.1 f5d06571c crit: drop python 2 support 7825f4ebf coredump: drop python 2 support 05f0535de ci: clean up CentOS 7 related tweaks 362d8fa5c ci: disable CentOS 7 test in Cirrus CI 94c9e4787 readme: refactor asciinema link for video playback 7bda5e656 zdtm: Update netns purpose comment in zdtm_ct. 9ad59f58f util: Make CRIU run_id machine-level unique. eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing. bf8446ae5 kerndat: unexport kerndat_nsid() f2011e1c7 util: Downgrade ignored errors to warnings. 2aa9cb933 rpc: Support setting images_dir by path. 439b52243 rpc: Support gathering external file list after freezing process tree. 82a0db036 docker/podman: test c/r with action-script 28d005638 action-scripts: allow shell scripts in rpc mode 3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32(). f043cb22a build: Guard against libbsd's version of `__aligned`. c5142104a build: Use make-provided AR for building libzdtmtst. 88f8fdda8 build: Fix LIBS vs LDFLAGS order. cbbe6c683 build: Debug system feature tests. 1a1fa439c build: Remove HAS_MEMFD test 2bf10c8d2 restore: remove unused `secbits` field. e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host. eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case. ffa1e47fd sockets: Increase the size of sockets hashmap to 16K. 304a309ae test/thp_disable: fix lint c97cc6a6c Allow skipping iptables/nftables invocation. d0ac547b3 zdtm: sock_opts00: Improve error messages. 6bc00fcb8 zdtm: Implement test sharding. 1fb5c410c zdtm: Allow --keep-going for single test. ed88e3241 zdtm: Add timeouts for test commands. 516fade93 zdtm: Allow overriding /tmp. 4b764a9dc Allow passing --log_to_stderr via RPC. 1e5ebec39 Allow passing --display_stats via RPC. 0e88a91ff Allow passing --leave_stopped by RPC. 4455444ee compel/test: Return 0 in case of error in fdspy 4c1409b8f Fill FPU init state if it's not provided by kernel. 93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration 01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration a0c78a790 zdtm: thp_disable: Output a single failure message 2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected. 21ce76263 Restore THP_DISABLE prctl. 9943dcde1 Fix mount(cgroup2) for older kernels. 0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16. a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions 2ac15e3ad action-scripts: Add pre-stream hook c6ac396aa timers: improve and fix posix timer id sequence checks fc08fa907 criu-ns: Update shebang line to python 9cd09f586 criu-ns: Install Python pathlib module in CentOS 7 9c9e8ea3f criu-ns: Add tests for criu-ns script e4b6fb2d1 criu-ns: Add support for older Python version in CI 733f16551 criu-ns: Add --criu-binary argument to run_criu() 36709536e lib/c: add empty_ns interfaces to libcriu b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt cc607f810 criu-ns: make --pidfile option show pid in caller pidns 50e17a1cf scripts: make newer versions of shellcheck happy df7b897a2 ci: fix new codespell errors 727d79650 compel: support XSAVE on newer Intel CPUs fa6af25e7 dump: increase fcntl call failure judgment 1c0f8787b zdtm: Add tests for ip tos restore 04cdbd610 sk-inet: Add IP TOS socket option 4c1a2ac41 criu: Version 3.18 (Silver Sandpiper) b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid 9b3496043 log: fix timestamp logging when tv_sec>=100 94ac9ee3c proc_parse: fix while condition in parse_pid_status 45e4a6b27 netlink: fix netlink fd flags dump/restore failed 6c728df1d zdtm: modify rseq01 to include a thread f8da250bb cr-dump: properly apply rseq fixup for all threads 78c4e2c0f cr-dump: move rseq functions before dump_task_thread 85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread 9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test 0c5239932 ci: cancel preceding workflows run 5c8cdceec sk-unix: rework unix_resolve_name de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old ccc790d54 zdtm/lib: fix cwd path freeing 8e6fa9c3b net: Add net log prefix 7f0f07599 crit: fix compatibility with Python 3.12 bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job 66fd45d51 sk-unix: add some missed error printing a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization 12423abdb mount: allow bindmounts for external fuse mounts 65407616e ci/archlinux: initialize machine ID 34e2b0221 Optimized shell code with <'s (instead of cat + |) 7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump 69befdde1 cgroup-v2: make new field cg_set optional 529f29891 cgroup-v2: make new field is_threaded optional 6e681afb6 net: fail restore if nftables isn't supported but image is present 156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12 4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv 3f8e3220b CONTRIBUTING.md: document make lint / indent 42c4be2a9 net: use get_legacy_iptables_bin also on restore 298286718 pie/restorer: Fix fd leaking on error path 1d4777e45 test: add long command-line to coredump test edaec5d76 coredump: report missing files without a backtrace 3ca979f9a coredump: handle long command-lines a0cc95c03 lib/py: reduce code duplication 85b5c1e45 ci/podman-test: drop crun installation script 91ff24b47 ci: disable c/r of cgroups with podman e7ab6fe63 restore: don't miss futex abort in restore_task_with_children 676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return 7b8035344 mailmap: update my email 1ae9bac54 dump: improve error printing and readability of task_comm_info 11c71656b ci: add test for crit info 9b919ab74 crit: fix empty string comparison fa4af0430 dump: Show task comm early fd7e97fcf lint: exclude tags file from codespell 50e42c9dd Add documentation for --ghost-fiemap 4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options 7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported 14e883656 proc_parse: Handle btrfs files when map_files is not accessible d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem 144b467a0 shmem: pr_err -> pr_perror 6d7c0d007 compel/mips: fix parasite with GCC 12 7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns 63159c14c mount: simplify code around mount_cr_time_mount 43fa4e76d remap: refactor goto jumping to a while loop 757a2b46c remap: Fix typo 3837d31b5 ci/lint: make push action have at least too commits depth cec43025a criu(8): Add info about unprivileged mode limitations 80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs 95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files 951c56917 proc_parse: Set VMA_AREA_REGULAR where needed a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers 0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers 8cfda2748 log: remove all uses of %m specifier in pr_* functions 7459d0204 lint: prohibit to use %m specifier in pr_* functions f73ba7726 ci: switch from lgtm to codeql 0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing ba09fad39 zdtm: add mountinfo topology compare to test lib 2837a13ef zdtm: add mountinfo parsing to test lib 543501d5f zdtm/lib: copy xmalloc.h d800ef658 zdtm/lib: copy list.h be61624f4 clang-format: rework make indent to check specific commits a918093ce scripts/ci: use Fedora 37 for vagrant based tests 1bb84f96f tty: fix codding-style around for_each_bit call abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format aab709b60 log: Write more details in write_pidfile 7c6eb0b85 asm: fix for_each_bit macro bb3f7bef6 crtools: fix help message alignment for --network-lock a302b3694 zdtm: fix 'zdtm.py list' command 21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte 9686693aa test/javaTests: update org.testng:testng (Maven) 5c60d35be sockets: tiny style fix 5a19c3432 non-root: Don't dump socket option SO_MARK if 0 2180e03b9 non-root: Rework socket bufs for unprivileged mode e5ccfbb24 Fix typo in comment bdbccc315 zdtm: add two tests for highly sparse ghost file f3fdce81a files-reg.c: fiemap algorithm for ghost file 14b9ec195 ci: fix make indent d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python 095b3e84b ci/lint: install ShellCheck with dnf c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0 fa2c585c2 amdgpu: define __nmk_dir if missing c7211f52d Remove execute bit from source file f5e0f641a cgroup: Remove redundant code that handles zombie tasks c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned 153614cb1 ci: move cgroup unmounting to run-ci-tests.sh 516ebc4f5 ci: Do not fail if latest epel repository definition is already installed 2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy 07d538cef zdtm: Check threads are restored into correct threaded controllers 20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers 17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved d7e874659 zdtm: Add write_value/read_value helpers into zdtm library 167cfd366 cgroup-v2: Checkpoint and restore some global properties 8a336ab22 Switch aarch64 builds to Cirrus CI 840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach 3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements 1cba559da non-root: add non-root test case to cirrus runs 6743d608c non-root: extend zdtm.py to be able to run tests as non-root 251939992 Documentation: add details about --unprivileged 47b07d011 non-root: Introduce unprivileged mode to kerndat 6a30c7d1e non-root: enable non-root checkpoint/restore ce01f70d9 non-root: add functions to work with capabilities 4b4bf0421 non-root: add infrastructure to run as non-root 4c7f91aff ci: enable EPEL for CentOS 7 a39d41656 compel: Fix ppc64le parasite stack layout 17ec53913 compel: Add test to check parasite stack setup 556ab0dea compel: Fix infect test to not override failures 461fa7271 compel: Add APIs to facilitate testing debc9c16c seize: do not overwrite exit code from failpath 16f1c147c test/others/crit/test.sh: use bash array 0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings 75b859f23 scripts/ci: rm shellcheck disable annotations aeb6961f3 scripts/ci/run-ci-tests: use bash arrays b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings 9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning 968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning 86ac0f05e ci/gha/lint: install a recent shellcheck 2039d7320 files-reg: skip failed mount lookup for shell-job's tty 9e91e62a7 criu-ns: capture controlling tty 40e1aaf56 mount: add definition for FSOPEN_CLOEXEC 7bc24688d ci: Clean up and improve Java testing 0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu 39b3de60b ci: Rename openj9 Dockerfiles to hotspot f78d3d821 gitignore: Ignore top-evel build dir only aeaff6445 test/unix: check C/R of unix listen queues 83c606e02 zdtm: return 1 from pr_err, pr_perror, fail dca55d281 criu: fail migration if data was sent to an in-flight socket dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64 bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform 719fea2fc compel: clear a breakpoint right after it's been triggered d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls c089159a4 ci/cirrus: centos 8 job nits a202ec271 ci/cirrus: add CentOS Stream 9 2642b657d docker-test: handle race condition error 49319cd57 Add Alexander Mikhalitsyn to maintainers f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback cacddf19d cr-restore: rseq: dynamically handle *libc with rseq 1f9bd82a5 cr-check: optimize check for apparmor stacking a1262f55f cr-check: fix check for apparmor stacking f9bc0a750 docker-test: use containerd installed from package 750acec25 Revert "ci: Switch to non overlaysfs tests" e8a6765d1 criu: fix conflicting headers eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman da4803bea MAINTAINERS: Add Radostin (myself) to maintainers e62d541bd zdtm: add two tests for large ghost sparse file 2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files 01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns d12e2364c zdtm: make root mount private in criu mntns 70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux ad58553d9 Add --skip-file-rwx-check opt test 18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore 6cef6e726 zdtm: add tests for SIGTSTP c7858ba42 infect: add SIGTSTP support 49caf85b2 config: fail on --track-mem option if dirty tracking is not available 91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach dd0217976 amdgpu: Add gitignore b117b211a zdtm/scm: add scm09 test with closed sender fd 5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for 28358db13 Fix the check for mnt namespace in criu-ns 295dc85ca github: use git-clang-format instead of make indent ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump" b26e1fdbf mem: Skip pre-dumping on hugetlb mappings 9066f8741 cr-dump: do not report success to logs if post-dump script failed d46f40f4f criu: Version 3.17.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fix build with go 1.21+Bruce Ashfield2024-03-151-0/+5
| | | | | | | | | | | go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: allow go 1.20 buildingBruce Ashfield2024-03-152-0/+36
| | | | | | | | | | | Although k8s checks for, and demands, golang 1.21.x, runtime tests show that golang 1.20.x is properly building and providing enough for core functionality. In an effort to see what else may be lurking, we patch out the check to allow builds with our 1.20.x toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to 1.29.1Bruce Ashfield2024-03-151-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits: a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1 bc401b91f27 Release commit for Kubernetes v1.29.1 5350f0829f5 Revert "Graduate Evented PLEG to Beta" 5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 0da29848c53 Make OpenAPIGetter tolerant of nil 865f214fe53 use context for lazy evaluation. cde050c4d0b Initialize default attach func regardless of the value of flag b055126537b .*: bump golang.org/x/tools to v0.16.1 05937cba41d add ut 00045c3c9d6 fix b10ad75ab1d fix 4b8554018c1 fix: 119921 a5f64b743e4 Address comment ed501c1f080 Keep presence cost to 0 to ensure backward compatibility. 37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times 4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus 40d8e405b8e Use a separate function for checking if device was reconstructed d30fda3c68c Add tests for checking of uncertain device paths 910fa603a25 Fix device uncertain errors on reboot 62d0bd7260f Fix CSI migration for vSphere volumes ce513803ca9 Wire in field dropping for CRDs 9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency" 95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency" 85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0 3f7a50f3868 Release commit for Kubernetes v1.29.0 3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default 0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2 e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2 0ca3089bee6 Bump distroless-iptables to v0.4.2 1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5 4e5321c92e0 add beta comment for pod replacement policy 233949e05df Add an integration test to verify root path cleanup c769c2db6ed Revert conformance test addition of root paths ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation 022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release 71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1 96a32568e66 Release commit for Kubernetes v1.29.0-rc.1 f730dc39f9d Fix verify target to not update env var if already set 51daa8cbd5e api: run hack/update-api-spec.sh f042994cb03 releng: update publishing bot rules for 1.29 bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0 af34f62170c code-generator: fix invalid replace of klog d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status 005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister 64f8c6939f8 Replace -E with --setenv for systemd-run parameter dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated c3ff08250eb CHANGELOG: Update directory for v1.25.16 release 59c63185457 CHANGELOG: Update directory for v1.26.11 release bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release 3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release 34e620d18c0 Support score extension function in preemption. 99f7df3e1c1 improve default_servicecidr_controller startup c99b5a208de Check error from gomega 49e8c196c34 use framework gomega 8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11 6aa3002ad24 add kubeup label instead of a feature label 27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances 20853ef1200 Bump distroless-iptables to v0.4.2 4b1b9a198a6 Fix issue with client rate limiter when polling 7c5dfceff8a add false matchCondition benchmark f9ab24bf485 Refine test case 617f2132fed e2e: avoid redundant labels in JUnit file 172f680326a fix: smb file share unavailable issue when it's deleted 2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables" bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew' 2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt 11cdb8fd011 split compile and eval fe53db0dbdc authz: add benchmark for webhook authorizer 475bfa4a633 set LimitedSwap 819d1903a27 Add support for authorization-config to local-up-cluster b53134f129f Test anonymous and RBAC handling via config file 264cd648246 Run RBAC hook correctly when running from authz config file 1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified 76277f693d0 create a new KubeUp feature label for tests marked for removal 9e5b8402bb9 update go.mod 88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4 e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function f3dad977040 self nominate aroradaman as sig- proxy-reviewer 2645b22003d Self nominate Kevin Hannon for reviewer for job controller b12db6d9b55 fix test store delete collection function failed 9d5b2a44762 Fix API comment for the Job ready field 1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action 6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first bb315d13392 bump runc to v1.1.10 f77a4543d13 Unregister events in schedulingGates plugin 70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build 42a70cdbd16 codegen bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 5edb27aa382 ratcheting-cel: add optionalOldSelf field 6b6be38896b test: Fix NodeLogQuery tests ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set bd6431323a5 ClusterTrustBundle projection: e2e test 96e610ac188 ClusterTrustBundle: Enforce max size during validation 1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock 599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API ecfdc8fda55 Define ClusterTrustBundlePEM projected volume 0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging e5bba37f20a apiserver: promote flowcontrol tests to conformance 9ae1fc366b8 Store nodes before calling EnsureLoadBalancer 60338c79d77 KCCM: fix slow node sync + service update a8673fa5b4a KCCM: add test validating slow node sync issue b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests 2259ac2444f pause: add --provenance=false during etcd multi-arch build 50f092c1366 Add kubernetes.io/hostname to faked nodes in tests 5bf63036c7f Make EnablePodSchedulingReadiness public 0112d91a056 Add multi-webhook integration test b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL 34b2c4e1ed0 framework: add SSH support for Azure 44d89c8cf8c Include empty string attributes for CEL authz evaluation 2e2f51a4417 Plumb failure policy from config to webhook construction 0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release a000af25ff3 Require match condition version only if matchConditions are specified baebc376ff8 missed a few summary upper limits for major page faults 3c268b75244 etcd: Update to version 3.5.10 4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP 2d9128116b6 Use golang library instead of mklink 85b10c06fab update docs for v1.29 release (note this must be committed after code freeze) cda349cda49 Make service-cidrs-controller role feature-gated 26923b91e8c implementation of split disk kep 003e4886c6f Fix parameter passing error 18adc309337 refactor: rename TransitionRule to UsesOldSelf b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery. 338fe7ad55c e2e framework: validate test definitions f2cfbf44b1f e2e: use framework labels 248100ce6df golangci-lint: tone down comment checking ecb32a3e29c increase bounded limits for major page faults ceaacc88f0d add --provenance=false during etcd multi-arch build 833156b77e2 e2e: define environment 4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf 878d037d3ba dependencies: klog v2.110.1 bc1df9e7dab bump to newest etcd: v3.5.10 38905462656 Update APIs and adjust tests 77f4178c98a Promote CSINodeExpandSecret to GA 252e1d2dfee Imagepull per runtime class alpha release changes 0993bb78efe Redo service dispatch with maps 9d71513ac1e Redo no-endpoint handling with maps 4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets edaa1d735b8 Redo --nodeport-addresses handling with a set ef1347b06db Port NAT rules to nftables (and backend is now functional) 0c5c620b4f2 Port filter rules to nftables 6cff4153057 Port service/endpoint chain creation/cleanup to nftables 2735ad541e2 Port table setup/cleanup code to nftables bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync 93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup abb1a458a95 Create an nftables.Interface in nftables proxier 1a530457f90 Drop unit tests of iptables-specific unit test helpers 958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains 3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain 96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse 6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks 5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules 1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing 39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode cac26737cd4 apiserver: add conformance tests for flowcontrol API a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables ce5a22d54c1 hack/update-codegen 3b69bd6a9ba servicecidrs controller clarify condition false reevaluation fee07ad6080 make update with the new API with arrays 9917c727a1e test e2e: use new ServiceCIDR API 5d90d07f2d2 test integration: use new ServiceCIDR API 271900a0f05 integration etcd data: use new ServiceCIDR API 3edcce52e3c service cidr controller manager: use new ServiceCIDR API 016c3c9e363 repairip controller: use new ServiceCIDR API 881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API 7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API 513fdb54229 describer: use new ServiceCIDR API 5123a93b342 printers: use new ServiceCIDR API c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings 599597ca65a fix race on ServiceCIDR deletion e3a0df26a86 remove flag cidr max size validation if gate enable 8182c4d9ec8 make update cb509b01f31 e2e for ServiceCIDRs 46b13d48e20 etcd data ccbcadb0324 add integration test 4ff80864e1c service cidr controller manager 164276175fb plumb the new multicidr clusterip allocator 65e69389463 make repair loop multi service cidr aware 63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs d3386e171a2 add iptree radix tree util 3b450378e07 bootstrap controller for default ServiceCIDR 55a35bebee9 API printers 7e77e8b21d1 kubectl describe 2feb1503e29 Add ServiceCIDR to the REST Registry 391b25197b8 add apis to apiserver storage 632081a9078 add ServiceCIDR APIs 16363b6fb4a fix IPAddress.Name validation message df80775693f Include managed field comparison in test cc190e0ace1 add integration tests 26e3a03d12d Implement CEL and wire it with OIDC authenticator e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller 7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json 8b9fc325e28 Update to new cadvisor v0.48.1 e4776e0f85b avoid infinite recursion for type resolvers. fba2d2fadc1 Move invocation to not to cause ginkgo panic eb32969ab8f Lazy load OpenAPIV2 f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl e7216c66230 use OpenAPIV3 for kubectl diff 4f3b0b15182 Use OpenAPI V3 for client side SMP 6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration 168e016947c Benchmark job with backoff limit per index 6ac7da1da87 encryptionconfig/controller: run unit tests faster c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times" 98a2f22e740 Revert "Make the decode function respect the timeout context" c7fcef18756 apiserver: set APF featuregate to ga 8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range 31c76e9abb2 authz: add cel expression to webhook matchconditions 56ab6c59421 generated changes ae90a696772 volumeattributesclass and core api changes c4aab1036f6 Add sig OWNERS to registry packages 1daf1b0705f test that controller descriptors should not be feature gated fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor 5b268e6daf5 apply: Add test for duplicates in associative lists 9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1 b8cd792b368 rename the roundtrip annotation, forbid it in v1 76463e21d4d KEP-4193: bound service account token improvements a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList. 84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList. 8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides 70c1f2143fc Bump cel-go to v0.17.7 d3de47ceeed chore: updates api doc 2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 080fe8346da Fix typos in interface comments e95b7c6d8b8 feat: updates encryption config file watch logic to polling 6d59480a70f Try a single gcloud command for scp-ing all files bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times f78b367db63 Make the decode function respect the timeout context 79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 233bc2449d9 apiserver: fix apf enablement with runtime-config acd60896597 apiserver: remove prerelease annotation for flowcontrol v1 25447b95ad2 apiserver: add testdata for flowcontrol v1 730d10a8fb9 apiserver: add generated files for flowcontrol api change 9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field 430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1 90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3 17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API 25aebca8d54 apiserver: add etcd data and storage version hash for apf v1 5972037ffd6 apiserver: generate code for apf flowcontrol v1 API 03a9ad200d7 apiserver: remove copied generated files b24dd44904e apiserver: enable apf v1 API 5cb03064d95 apiserver: update copy, rename v1beta3 to v1 dc723080939 apiserver: copy apf v1beta3 to v1 05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins 5a20ff16173 fix wrong controller name for ephemeralController afc6c03ba74 Pass through static overrides in addtion to cgo overrides feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false 3a308140cd5 Fix e2e 2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node 070e7a38cb6 generic set 36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC 9a8ccdebc5a use sysctl utils to do pod spec validation 11de9543ee7 move sysctl namespace and some funcs to component helpers util 4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl 6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 04b21126e58 Add cel new validator into Kubernetes. 9ae77364e95 pkg/proxy: configure tcp-be-liberal a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier c1fd3f5f648 suppress per-expression cost limit for unmutated versions. 4bb7dc224c5 metrics: publish metrics from ratcheting across a request e50cc47a068 Improve execution time for job e2e tests 8c72be3b74e ratcheting: add benchmark 7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events 3f8e6d6f77f etcd: Build image 3.5.10 a73725d7999 Promote SidecarContainers feature to beta 1591a0e132c add unit tests for NewControllerDescriptors 44cac266673 move start controller pre- and post- checks/actions out of StartControllers b7689672802 move aliases into each registrable controller a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic 27a77e0ef3c Encapsulate KCM controllers with their metadata 77dfd63d1db fix volume conformance e2e test break other test 77e0adeb31d KEP-127: Update PSS based on feature gate b0491d71bd5 Support skipping pulling addons image. 760abc2a821 bump gomega to 1.29.0 5925dc07758 LegacyServiceAccountTokenCleanUp beta 69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA 9f06eb4ca2a don't run these tests on aws e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test af14f97cba7 sample device plugin: fix incorrect Errorf invocation fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154) b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added fd132665a8a extend VAP status controller for extensions type checking. 3f73cdcf2ad extend SchemaResolver for more types of schemas. 38fecc8319d opportunistically attempt to refresh RESTMapper 05cd3e66ef5 simplified e2e test for CRD typechecking. 60a602f1701 gce: fix test for non-existing instance in cloud 4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown 84faaf4427f Prevent sampledeviceplugin binary commit 7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.* 110ffa13b7d Delete binary file e07d898cfd2 Make StatefulSet restart pods with phase Succeeded 27f6fb2fa7e hack/tools: golangci-lint v1.55.1 6302f011211 e2e node: fix broken assertion d0a5cd16da8 e2e upgrades: fix broken assertion fb872e86384 test: fix storage status update test 53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test 071a67d8c29 export time function 9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta c6b42c8a72f Make e2e node image ID test more flexible 517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job 837090135f8 kubeadm: make super-admin.conf changes to app/cmd 30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases d0328df04e0 add time tracking to CorrelatedObject 1165609036c Add metric for e2e pod startup latency including image pull 702d911e226 working-config-otel e7a9a148489 replace CEL ValidateWithRatcheting with variadic options f71040f620e Remove the usage of feature gate 0ac35fe44f4 Update security contacts for sig-cli 8d3a25c7c98 [KMSv2] Add tracing c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy f91228ee719 Unexport BaseEndpointInfo fields, fix getter names e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit 2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo 27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status 2a8982b27b8 Remove problematic Dbus restart test 39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm 3738111337e Add unit tests 08b942028f9 DRA: call plugins for claims even if exist in cache 69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes 98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants e511edf11f7 Fix SELinux unit tests 2f5903b4cf4 Move SELinux warning metric to be counted once per pod d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN a92c1269e25 test: fixes hot reload flake 71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake 83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness. 8e0be64b8ff remove data race on the devicemanager client plugin aeceec72bbd add integration tests 97e72d792cc Remove independent tests for metrics 84cd6dbb0aa use the latest semver version for the badge b3525946d5e ratcheting: provide a shared correlated object dfeab6eca8c fetch a shared correlated object off the validation options if it exists 0a19b5ab6e2 fix usage 432e8937cfb add variadic options to ValidateUpdate 9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric 055e926a924 e2e: Increases the memory limit for downward API tests 88c0a8be1bd feat: add job_pods_creation_total metric b1ce529b2ac Remove unnecessary GetIndexer 1224e0e881d Add PodHostIPs test f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342) 12a972cc1e6 Promote KEP-2681 to beta in 1.29 2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler bd8ac8c7fac kube-scheduler: checked err for golangci-lint b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0 16b3acc27a1 cleanup UnknownCRISocket for unit tests 71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff' 20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta b06675724d6 Add e2e test for backoffLimitPerIndex 4b59d2b05c0 kube-proxy: Optionally do privileged configs only 35f4d29d735 Fix unit test b052c7b7cdf Update npd version to 0.8.13 in configure.sh a6f5246565b integration test for empty & unstructured. 168998e87bf StreamTranslator and FallbackExecutor for WebSockets c6b3a2f477c allow empty object to be CEL value. 8ae0d390d77 add container filesystem to CRI api 93951bc00d3 Add stability tests for CEL cost estimation. d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload 6d580da03fd ratcheting: ratchet CEL expressions for no-op updates 27afb7d75d2 e2e storage: use framework to tag tests 8a42be978bf Add CDI support to the sample device plugin d9131d5b390 [KMSv2] Drop the apimachinery 6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29" 55e3662b72d dra: refactoring overall flow of prepare/unprepare resources fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags 074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663) b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature. d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0 fb6b10997a7 cleanup: remove useless test 3f4d3b67682 Cleanup paging parameters in etcd3 store 2dbd4055834 Graduate ReadWriteOncePod to GA 42945ea6dc8 update suspend test to match other test cases 49c947ba15a metrics: add and use ImageGarbageCollectedTotal d8a5cd59c08 kubelet/images: add unit test for MaxAge 914aa746c18 kubelet/images: add and use freeOldImages function 76e623098c8 kubelet config validation: add validation for image max gc age d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration 9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates 34294cd67f2 locking feature-gate for ready pods job status b386120da23 Remove storageConfig.Paging parameter 106f58686d5 Remove disablePaging param b0d04d933be Introduce the job_finished_indexes_total metric 6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text a913abe191b e2e test for checking ready of job status fb0ffb07a76 kubeadm coredns use drop ALL instead of all 81b960efefe e2e framework: allow random ordering of tags and text, fix some functions a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster 4f5bc7e8d76 fix based on reviews 82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual eb3a11ea142 registry/core: wire NotFound getter instead of nil cbe3d897629 Promote CRD validation rule to stable fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown 32fdb551920 Use Patch instead of SSA for Pod Disruption condition a7adde53be4 bump golang.org/grpc to v1.56.3 a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests 441d2b40dfd Undeprecated kubelet cloud-provider flag 4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test cf836309dc2 Add validation for --storage-media-type option. 8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test 1a41ed394d6 convert pointer to ptr for sig-apps integration tests 27bb40a9d83 Remove GAed feature gates OpenAPIV3 c5e25637c64 fix typo a25b87d84a3 e2e apimachinery: use feature gate ceba3be6b58 e2e: add more feature definitions 9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go 00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses 6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta 8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API 259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate' 3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test aee73352853 add new test cases 220d5c2e543 remove dead code in test 79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once 8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities 0a6d9531f40 update generated code and openapi 4d21a23be35 pin openapi 31a1c00e49c cleanup: move unstructured check earlier in status update d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating ced56a6adab Restrict supported media types for new apiservers. f5cb2ada944 k8s.io/kms: drop direct dependency on klog db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules 6c4f71b31ce Fix spelling 02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release 9cf35f40016 CHANGELOG: Update directory for v1.26.10 release b7477c31b03 update versioned types 4780a75d5fb CHANGELOG: Update directory for v1.27.7 release d7556769e7f Job: Replace deprecated wait functions with supported one 1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release 989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create" d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity 2508f468a8f kubelet/userns: Add more unit tests 0dd495e6dc2 Address review comments 7ff866463af Refactor watch event serialization to allow caching 0cda42af7ab Unregister group path from apiserver when the group no longer exists a50d83c669e Add basic authz config integration test 22e5a806a73 Add --authorization-config flag to apiserver 75f20ee64da update pretty param description e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node 7bcc98c46b9 sidecars: terminate sidecars after main containers c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue 201c30fba82 Job: Handle error returned from AddEventHandler function (#119917) 7a1ac18bc84 Fix panic if there are more terminating pods than active pods fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests 007ef653ad0 add feature gates for authorization config 2ccf7e8e49b fix: minor lint issues and redundant check 056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods bf32f87d00e skip CEL validations for enum violation. e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones 72e67e0ef0d kubeapiserver/options: fix cloud provider validation 911700e64e3 Fix typos in markdown 2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types b500c3d6930 Correct the label selector used in TestSampleAPIServer c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster 7d077f9271e e2e: move AllNodesReady check to DeferCleanup ca6fda05ce5 Restart containers in right order after the podSandboxChanged 75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29 e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors" 9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection f46cdf1428c node: sample-dp: set default value for `pluginSocksDir` 211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations 6714e678d33 node: sample-dp: register by default and re-register on restarts 465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params d2b803246af Don't reuse the device allocated to the restartable init container a45a813d5e3 kubeadm: fix "eliptic" typo in API package fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly 1715fc0ca06 Fix issue in enabling evented pleg feature gate defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check 5d5958e3389 fix ImageLocality plugin score is inconsistent 76059738a4f update standard protocols to match KEP3726 4ae7150f05d remove pc pvc status endpoints 757597fabfa track unmaintained repo - mailru/easyjson 2e8f66afb39 Promote PV/PVC status e2e test to Conformance 28f335a3397 kubelet/images: refactor image gc unit tests e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated 56023e00cbc cri-api: compress OWNERS files f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases e3098225eaf bump kube-openapi b30c6bdff81 Fix v3 spec d1a6c0ae7df Update cri-api change in v1.29.0 2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case. 5d0f8530f6b fix Huge Pages failing test 7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret dd9c3358f5e Revert "podresources: e2e: force eager connection" 27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29 5c0618b848d codegen 011c65e17e2 configure npd to run as daemonset on cos 39dcad8a19e Populate CRI filesystem info error bfda244e54e pkg/proxy: dual stack health checker 73a8965e2a9 Graduate DevicePluginCDIDevices to Beta f69e1fed82f Remove GAed feature gates TopologyManager 957adfac498 fix invalid log calls 8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors fed4f16a7ad Remove GAed feature gates SeccompDefault 33f2d487e2d Promote KEP-2681 to beta in 1.29 18c3b6fce43 Register metrics for apiserver handlers 56836608303 remove deprecated framework.ExpectNotEqual for node b548bbb8cf8 When reading pvc status allow bound to be a valid value 11b0eed9e7f Work around bug in gcloud when downloading logs 1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls 4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier 6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole 332779a3b29 add a simple e2e test 3a96afdfefd implementation fa01dfdb0a4 validation 0f46033dca2 fixed miscalled function 9327f3a1734 api changes c2d473f0d43 remove ClusterCIDR 32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components fb1fc8b4a72 ratcheting: disable correlation by index d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc 0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments 60c90fc0854 cleanup: consistently support nil receiver and document abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment ddcbae734af Add a 0 × 0 case fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul 26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete. e1fa1df3ae8 cleanup: consistent interface{} and any 0495616230a cleanup: add godoc 4de3e73b8ac Add test cases for mostPositive and mostNegative 685ae024332 Add more unit tests 79325b6178d Multiply by a scalar 4381eb7237e quantity: Add multiplication methods 1ae54296291 add potential fixes for flakiness in eviction tests db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters b0c7956a869 Bump distroless-iptables to v0.4.1 a34d2f3b134 fix limitrange flaky test 10151a5e38f kubelet/sysctl: update log level cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests 4dedabf2a65 test: fix boilerplate 80e378181ea add rundir folder to gitignore 800a8eaba7f Prevent rapid reset http2 DOS on API server 968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1 78ffa882be2 chore: updates api doc de5dcdc79b7 cleanup: fix missing manual selectors in strategy test 761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy c94240e2e2e move kubelet constant for podreadytostart to staging 1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10 de01788deaa Switch to newer cos-gpu-installer - v2.1.9 adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases 7b1d87383ec add kubelet policy skew test for kubeadm 5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7 0149c1f8b31 test: few more correlatedobject test cases ba9347230e6 test: add correlatedobject test cases 15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts c08a9321eed cleanup: add header and fix spelling 27cb869e559 refactor: move correlatedObject to its own file b321e8bf0db refactor: make CachedDeepEqual independent of validation 921c0d01800 cleanup: add defaulting for job manual selector (#120206) c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState. 555c1b8091c bump kube-openapi 83760ae56c8 update openapi with required requestBody 5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3 a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668) 7989400bef5 Fix concurrent write when filling PVC labels 54714686bc6 Modify test PVC to detect concurrent map write bug d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy 2c1836bc245 remove deprecated framework.ExpectEqual 990a46f9bde Update QueueingHInt's KEP b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+ 0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts 4acaf9ebed7 Add service name tests 438c0daab75 add rest of accessors to common.Schema 0f989046d06 kube-apiserver: move cloud provider validation into options 5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216 80269d5d349 fix missing http.target trace attribute dc334b953d9 dependencies: update otel-go dependencies e76aad1813b refactor: use common.Schema in CorrelatedObject 83a1dbf885d refactor: export correlated fields e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject fc7c951d5a5 .: bump golang.org/x/net to v0.17.0 2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local 471e3ab8281 refactor: factor out object correlation 30cf9ed5677 refactor: directly implement ValueValidator 4fb5f1a6119 refactor: remove unnecessary lambda (noop) 19ecf93ec3d e2e: define features and node features f2d34426f86 e2e: enhance SIGDescribe 39b6916cbcc e2e: add wrapper functions to annotate tests 535ab743461 e2e framework: track and report internal bugs 3afdcc03ea5 e2e framework: list specs and labels aa4d2fc5edf e2e storage: remove useless info message 581af9ba6da kube-apiserver: use only one client in apiserver controllers 215c4627ef9 Update SECURITY_CONTACTS e9957d79aae make update 0eacff0baf9 compatibility (adapt testdata) b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef f538be659c7 hack: fix update of golangci-lint verify scripts 6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names 00ae26cda8f Create e2e test for PV/PVC status endpoints b190ea0c966 hack: update golangci-lint verify scripts 302d350e88e set maxLength to longest enum. d4a5a085a84 Improve error message in cpu assignment logic 79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0 52c58d970e5 fix data race in apf unit test a6b0a6c484d Bump distroless-iptables to v0.3.3 f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9 0be5fdb5ced Add volume plugin label to SELinux metrics 137ad9bf2b5 clean up deprecated funcs in e2e framework d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual 5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 122ff5a212a Move grpc rate limitter from podresource folder 9cca527c4b3 Migrated `pkg/scheduler/framework/plugins/examples/` to use contextual logging 62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion 7cba35f6519 nodeports: scheduler queueing hints 20db4ef3d64 kubeadm: fix wrong ut for util/etcd 4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command 3c4512c6ccc hpa: always update status metrics when updating the replica count 89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService 83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 3ee2f27e5bb kubelet: cloud-provider external addresses 619abfec70a [go] Bump images, dependencies and versions to go 1.21.2 8b5f30ef096 Don't reuse CPU set of a restartable init container e8e22f645d0 kubeadm: Optimize the logic to override the arguments 8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo a888fef242f Use timeout function to detect transient errors 1b489963c8d Add nil checks for hpa object target type values 0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA 3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty. a213edae2a6 Add package-level godoc to pkg/kubelet/cm b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat b96a074bcdf convert pointer to ptr for job controller 1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time 914210ee9a6 revert back to IsUnexpectedCloseError check e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received c03579bfa40 typed variables support. 4d157bb1427 add single boolean to composition e2e test. 69a3e3d1089 Add --extra-peer in conversion in kube_codegen 3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options 4b391501795 reflector: fallback to the previous mode on any error 11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration 5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599) 9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test c65fe450d8a Generated files 26f113be2fc reflector: close an established watcher when the StopCh was closed f17468ff060 Fixs a validation error in teh admission registration API 6d759aac910 delete addon-manager test e7b2aeee930 Fix API docs for audit APIs 38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node. 243ba5fb6b6 remove an e2e test specific to kubeup clusters 98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual 566fad5eda3 add metrics to the ipallocator repair loop 4eff70dcf9f add metrics to the nodeport allocator repair loop 6c9ddf300cf update generated 9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense. 44cb330aa00 Improve kube-proxy config / CLI documentation 0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows d2a3184c47c remove pkg/encrypt and pkg/value in kms e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services 2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM 74180aaf661 Fix scalability concerns in test runs 5ebde41efb5 Refactoring variable declaration and value setting 0e8a1f18163 e2e: remove redundant spaces in test names 6200eb04aff use generic sets in scheduler e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go d9002176649 fix missed branch - targets when building using arm64 61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec 7437ad2617a Add/update prechecks to verify-govulncheck.sh 59ad81a6157 controller/clusterauthenticationtrust: complete event filter a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int 63950491764 controlplane: make option structs uniformly optional a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions 5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods 27a68aee3a4 k8s.io/client-go/tools: support context for event recording 772b1f4cd84 handlers/watch: calculate and record WatchList latency metric. 4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI 394bcaf1820 Only configure swap if available on node 2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster 19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together ff5f5bc1613 Merge several NodePort tests into TestNodePorts f38231d5687 Merge all the "reject when no endpoints" tests together 2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral ce7ffa81754 Extend iptables packet tracer to support multiple node IPs 2172ea60836 Fix typos: update Enpoint to Endpoint 6297067ff1a apf: request ejected from queue should use reason 'time-out' 11ef9514dad apf: remove RequestWaitLimit from queueset config da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function f39213a7e44 apf: use context for queue wait 52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo) 9b32d2f67d4 Default clientset_pkg and clientset_name variables 36146ad686a e2e dra: enhance test driver 46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec 0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock 2ce4f85a465 update verify script to check deprecated fields e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27 70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability 4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds ca562fd280a storage/etcd: the watcher supports the API streaming 84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate 1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand 1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency 72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS b71d7f9305c use generic Set in scheduler 7c5219438df Remove an old compatibility check/warning 5c80007eccb cluster-bootstrap: make randBytes() be in constant-time 1b602ffd9a4 Bump Konnectivity to 0.28.0 06deb49d2c9 Fix panic testing intree vSphere dynamic PV. 0910fe4b983 Extend iptables packet tracer to check the protocol a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests 0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual 4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test 43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects 534a0941e8d kubeadm: change kubelet skew to apiserver to n-3 0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap 9345da51ac4 fix comment mistake, run "make update" 45a776d5ff4 update rules to switch from deprecated dir field 9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test 5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change b489beb365f Remove an old compatibility check/warning eb109e39480 e2e: bootstrap vsphere tests earlier d3d1827c054 Use local isCgroup2UnifiedMode consistently 8a31bb6786c workqueue unit tests to assert collapsing behaviors dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver 0786fcc941b kubeadm: Remove the support of configurable component configs 3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging 0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff. ed76c371df9 kubelet/lifecycle handlers: refactor port resolver e00551fe5d4 Allow storage migration of CTB without attest authorization c816601d834 reintroduce resourcequota.NewMonitor 7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed" f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err 41584bde233 fix code style de244b2678f Promote StorageClass e2e test to Conformance b23575d0fcf remove storageclass endpoints a62eb45ae2b Rename job reasons to JobReasons as part of api review 301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs 5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded" 5341890c96f add missing labels to kube-dns deployment 9e060590e6f skip kube-dns tests if kube-dns is missing 2a827767458 change rolling update logic to exclude sunsetting nodes 04668c00432 cache/reflector: check the value of the initial-events-end annotation 83c37acb21f e2e framework: adapt unit test to Go 1.22 5c28fd28478 vsphere: adapt to govmomi bump 4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test 26a395ecc28 Trigger CI 12c0c08e658 fix data race in test 9533cfe2eed fix: add unit test bad0593a686 fix kubelet image gc 91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic 272b23cc7ad kubelet: fix log when using --reserved-cpus 42356bfbb3e move common logic of highestSupportedVersion to util package fc6b19a4ba6 .: bump govmomi to v0.30.6 afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op) 3a96baf3fa8 storage/testing/utils: add helper functions c8b9d64d81f scheduler test: unify util to fake pod. b953708fa93 Update 1.29 Release Notes team a919079ff31 Check --show-events in kubectl describe pvc (#120380) 1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference. 108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config 52c582ca77c Bootstrap API Types for Structured Authorization Configuration bbb905c794c remove gce healthcheck interval e2e lb test b59d4afd14e fix typo exeucting => executing 62275e3cc8c fix typo dervied => derived 79a7833ade0 fix typo Mininum => Minimum 6e3ebdc68e7 fix typo Conext => Context 409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0. b4e5b868a8e Don't reuse memory of a restartable init container 10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation 6c59e8be5e2 hack/update-vendor.sh dad1b2a4306 Fixup kube-openapi/pkg/cached changes e1ffbacb7ae go.mod 7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates 39af594f312 storage/testing: a simple refactor 40618b765cc add loging and bump timers to avoid races 3cb0b520d60 Scheduler CSI tests: switch maxVols to int32 79d0dde4a83 replace hardcode string with exists variable 9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration 62267518b83 Fix systemd unit string matchs c6e9fba79b8 move reasons to api package for job controller e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged 0288367db80 test-e2e: Retrigger the RBD image post merge job 28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency 2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release 2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release 7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release 309876b5d78 CHANGELOG: Update directory for v1.28.2 release 710dceded51 Look for pods in ownerReferences of PVC (#120427) 80c8074e3be service controller: limit logging node names to 50. 349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed 21e26486ac3 sync Service API status rest storage 239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual 7fc11f47ff4 Mark a volume as uncertain-attached after detach error 99903071469 kube-scheduler: drop deprecated pointer package 9e34aa306cd Update hack/verify-govulncheck.sh 5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource af151eeba2c specifically check that the pod was successful 7710128636a kms: remove livez check 15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual 4f20a72ea00 variable name should not conflit with import package, replace the variable name 084deb7a7cf clarify the description of the metric apiserver_storage_objects 9da533ced6f API Chunking conformance metadata 3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489 4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal 819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test 6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing 868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9 6b4ab616a2c Increase range of job_sync_duration_seconds d765e40a988 pass GOTOOLCHAIN to build containers 7ad0e451aca remove unnecessary kube::golang::verify_go_version calls 43b434f66a8 sig-node: add rphillips to reviewers d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version 4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation. 09d64ed7d4f promote sli metrics to stable 0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525) 0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105) e6435e98eda promote component SLIs to GA; remove feature gates for component slis e2c1c0d34a6 kubeadm: drop deprecated pointer package 357d7804b8f kube-proxy: drop deprecated pointer package 678b958567e use universal decoder and add a check on default dns Policy of static pod for test 1fb4eee94e0 Use container log instead of termination log 190f9d0d4b9 Add govulncheck script to expose go vulnerabilities fc3ee07b512 e2e pods: fix WaitForPodsResponding retry 6f9140e421c DRA scheduler: stop allocating before deallocation 2dd7db306a6 Update modules.txt 61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient d3eb082568c Create a node startup latency tracker 2d86c333f57 add test case for generating etcd manifests 912041ce41b kubeadm: fix diff order and add test for new default value manifest 41b62c4dd71 Promote PV/PVC e2e test to Conformance 0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml f4467457776 Improve logging on kube-proxy exit df5c1bb1ea1 added documentation about the format of certificateKey 43ccf6c4e8f kmsv2: add apiserver identity to metrics c1a0aa08e31 Add cni plugin auto Arch and OS selection b443a841e30 kubeadm: add log for static pod manifest diff f135eed37b9 update codegen d7264d0af03 Make StatefulSet restart pods with phase Succeeded 4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins 7e4b5d0d49a Final Fix f499b4f8918 Bump distroless-iptables to v0.3.2 18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8 93e3b07e11c [cluster/gce] Add KCM specific args 48f453d6498 cloud-provider: Log additional options aa89e6dc978 Use ptr.To to retrieve intstr addresses 9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace 5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp 3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate a0a8765027a fix: update thirdpartyresources refs 5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates 43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient a69f56e1375 fix: check if initsystem service exists 7dea3d6c3bf New mock test framework for windows kubeproxy. 975da2fb239 fix typo in client-go package 3a1a67e33d7 add aojea as controplane reviewer cc77b97c5e9 add aojea as client-go approver 7a13b11af0e update e2e import restrictions 6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests 08006c842fd apiserver: rename request body size metric 8451c80b601 pin gengo 93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0 98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1 dbd3eb54191 remove logcheck.yaml f365cae9ee6 Fix typo in api.proto 2d1877c97b6 fix breaking pv creation when the validation webhook exists f33265cf5d0 HandleRetry has already called in the GetObject fc51a27c036 fix typecast missing 2ea47038b90 podresources: e2e: force eager connection 6cd446a2064 Add cloud library to unwanted deps 9f76d8d45a0 Track vendor status of unwanted deps 87d49a51bed fix(queue_test): make sure the first bind failure via counter 94afd6e3a4d skip the reason check for OOM tests if it will fail f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752) b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints 36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual 9c1df5ff0af move back to bullseye 67858e1ff06 Bump images, dependencies and versions to go 1.21.0 0593cfdd14f Fixed variable used for moving auth-provider-gcp binary c682d2b8c59 scheduler: add ResourceClass events 2ad4304e8f2 Add Windows support for IPPVS 15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 43fc6b5bdb0 Added suggests changes 355ae44a3ca Revert "bump npd to v0.8.14" e7ee3ae3d94 Create e2e test for StorageClass endpoints 418af0f4dcb register API types only once for encryption config 2144852f7c9 Commits merged 657cc2045ee kmsv2: enable KMSv2KDF feature gate by default b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values" c131c92b9f3 scheduler: unit test case for concurrent event with other pod a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol 0024c7e1668 Changed the generator codes for kubernetes metrics table cd943dd95e3 scheduler: fix tracking of concurrent events 933bcc123b4 only drop invalid cstate packets if non liberal 7c75b018d57 cmd/kube-apiserver: add .import-restrictions 43783aeb18c drop release-1.24 rules from publishing-bot e190e179b3c Document `cluster/gce/gci/mounter` as static binary 059e8353b76 check labels/annotations in the beginning 6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual e8564d6c5bc KEP-3895: Promote interactive delete to beta 14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28 ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout b35357b6c08 cleanup: omit comparison with bool constants 622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual 7c33b78418c remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29 9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps e6dfdb240fd Output the error message for better analylsis ff3cb43c300 remove labeld-deployment.yaml cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey c74d045c4b7 scheduler_perf: show name of one pending pod in error message 3c2cfd9a4fd resource claim controller: separate generated suffix from base 2c5a11a55bf Match on cri-o socket suffix only 214772c1104 dependencies: update opencontainers/selinux to v1.11.0 95118ec30c1 e2e_network:stop using deprecated framework.ExpectError 3f8f14397e1 Set external credential provider to true by default in kube-up.sh 410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external 45b9b0df41f Add namespace to apiserver tracing c83eb6dcaaa Add subresource to apiserver tracing bcb59a03ebb Add name to apiserver tracing 646053d73db Add api-version to apiserver tracing 8c34208a62f Add group to apiserver tracing 6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags 2e5f17166b9 pkg/proxy: fix stale detection logic 95121fe846f kmsv2: add legacy data integration test 42e8cfa28ac fix failing metadata test cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers 8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation 0fb1f59a881 Improve service unit test failure report 39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up 36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test 3e252857c1c Add unwanted cloud deps to track 875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test 6058540f3d0 storage: document ProgressNotify from storage.ListOptions f4fc4b16b1d doc: Add example for restarting all deployments in a namespace 936d67f6888 Update distroless-iptables image version to v0.3.1 bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError bfc3c2110fc e2e-node: fix TopologyManager test jobs. 3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError f1051f34a79 Remove deprecated framework 062c57ae92f dra controller helper: make allocation error message more readable f96e23e477d dra controller helper: merge log entries for informer events 78f3b76390b scheduler_perf: use different log names for different DRA drivers d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation fcff9969095 adjust error message a bit 889c8e919bd New repo who dis? distribution/reference 741f1461571 Revert to json-patch 4.12.0 b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric 8f6a79b29fa use external cloud provider by default with gce 903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion a46bab69308 Fix a job quota related deadlock (#119776) 696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime 63177db32c2 Add an e2e test for the pod sandbox changed scenario e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API 3c5a58c5f89 Refactor checkErr func f22d8540723 unwanted-dependendencies: updating references, and `jq` 0323fe42e23 adding more callbacks in kubedrain helper e01bd641447 Avoid creating local variables that don't change 10553a19668 Flatten switch case 1f4f2a5d601 Refactor common WithRange case ede524e1a6a fix a pidpressure test flake 3bc6ee6fef7 unwanted-dependencies: sort this list eb5695b0c5c unwanted-dependencies: adding archived repos 15c02f2a034 add integration tests 9e1ff1e5120 add loading config and wire feature flag 57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator 160589a0edb Refactor transformers for watch to implement Encoder interface 04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29 46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer bf41b0462cc Fix OpenAPI aggregation cleanup 16a7b536022 Fix typos in comments 2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs be4692864bb Remove duplicated returnRV variable 2e174a029f5 Add timeout to listContainerStats context 2825519da2c apf: remove v1alpha1 API a926f594da9 Bump runc to v1.1.9 7b44d73f73f bump npd to v0.8.14 879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join` 53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError 8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual 209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual 41adc93ca3a remove GAed FG DownwardAPIHugePages e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests 7e7b67f2ccd remove GAed FG GRPCContainerProbe af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active 5dbec5c715b local debugging should utilize the same defaults as prod d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI 8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases f5d6c65186d paginate initial list inside the storage watcher 8d9517318a4 Extend npd e2e timeout to fix npd e2e error 618e40c61b7 kubeadm: promote EtcdLearnerMode to beta b2c0d80c37f Test watch converter encoder 03126c54658 add comment 651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592 709721e0df1 feat: update google.golang.org/protobuf to v1.31.0 3fcc045bce9 Minor cleanup tranformers interface 172a41192c6 Cleanup setting non-nil Items field 5269e769902 scheduler: properly skip DRA events 1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry 580f83ab4a5 Avoid duplicated dots in pod condition 855b445d28d Remove deprecated selectorSpread c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin 87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators 0ea6522807d apiextensions-apiserver: generate applyconfigurations dbbce2aaba2 sort stability list of metrics in the shell command (#120197) 9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test 94d03ccc83b Squashed commit of the following: 030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer cc784cfe857 Mark Job onPodConditions as optional in pod failure policy 3d583398fe2 Avoid to build the error msg for twice 484510863bf e2e_windows: stop using deprecated framework.ExpectEqual f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual 05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual eb0afbc7d01 kubeadm: update swap warning for v1.28 change fa37bebcd4b Add comment about why AttachFunc be overridable d680bc540b5 fix(test): fix error handling condition in test 01df59a73b9 pkg/proxy: remove equal method from endpoint interface 6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration e9be1d7438b Test now has coverage! 628bbb9ef8a kubeadm: add supported etcd version for v1.29 dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig` 78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg 1bf90f9484c add StructuredAuthenticationConfiguration feature flag 1bad3cbbf59 wiring existing oidc flags with internal API struct f909eb630ca add AuthenticationConfiguration v1alpha1 api ff56d3b6914 Refactor WatchServer to prepare for using encoders a4ce32769ff fix pod delete log in deployment controller 0bc0256093b Update job_controller_test.go ff10df107a4 remove fake deployment 13a8ad12b82 apiserver: fix data race in etcd metrics dec1c361255 add kubectl rollout e2e test 22f4b1c56ad Static check fix 70e2deb32f9 Fixing lint problem 6ded53ce4dc Added back test changes 5fb049ff473 Added create job & cleanup ff1659cb798 Added syncjob f87cc43cdb0 Review Changes d08fc3a4d01 Another one creeped in ef6a0eb6d85 Final Lint Fix aa9f38c36d8 More Lint Fixes 601679446ae Lint fixes cf32ae9453b Initial Commit 297f04b74ae Added function to remove finalizers as backup 1d52fb2806e CHANGELOG: Update directory for v1.28.1 release 5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey 47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params 02e51b27a9a CHANGELOG: Update directory for v1.27.5 release 13b52a18483 fix crd finalizer validation ab018481342 Make sure skip score plugins alwarys returned 6805632abb8 CHANGELOG: Update directory for v1.26.8 release f847565c081 Move mount warnings to info logs for normal expected paths 63df8a5821a CHANGELOG: Update directory for v1.25.13 release 52e85074042 CHANGELOG: Update directory for v1.24.17 release 980fa6a2b9e Add CEL library lifecycle linter 3fb14cf4e7a Bump cel string lib to v2, add tests 640a2ec3327 Update k8s code to handle cel-go changes 1a850a00630 Bump cel-go to v0.17.6 24877f96fbb Incorporating feedback on 119341 2bede058f92 Use environment varaibles for parameters in Powershell c761c165627 Use env varaibles for passing path 1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness. 9ee94b0204a Remove duplicate codes in framework RemovePod f752ca2dc84 Make API chunking conformance test deterministic 28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name 79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments ce9e668a932 golangci-lint: suppress one issue, demote others to "hints" 6a16c076e76 hack: move common "verify generated" shell code into function 9c83c380e0c Add wait for cache sync b1223e0d1ac check for overflow 87cf890632c Fix CEL cost handling of zero length replacement strings b0e249f657a Handle edge cases in seat demand stats 037640af8c8 Apply suggestions from code review bd06c26d580 fix: concurrent map writes in e2e test 826f3a130ae promote to conformance Service multiprotocol tests 98d772ca3c4 Support multiarch/platfrom in find-release-tars c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf 93832de6246 stop using deprecated framework.ExpectNotEqual 145dbb6accf stop using deprecated framework.ExpectNotEqual d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set 0039f24d74d apf: refactor promise to use a context 3e9a4c15a85 Restrict what imports get into code within test/e2e_node c1eb18c00ca generated files 039859b9b72 e2e network test for udp services with hostNetwork clients 2472291790e api: introduce separate VolumeResourceRequirements struct a5600b69251 storage/etcd: simplify passing the transformer 6161752ecbe storage/etcd: remove newWatcher function 3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty a9308927691 Gate: disallow .status.loadBalancer on non-LB svc b8512cfe247 expect the new resource_scape_error metric 905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes" 5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid f93bd699aaf Trim managedFields in pod informer 2f576969eee reducae function calling to once 093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation 700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands 75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key c112a34642d add unit test for kube-proxy service cache with ipMode 7f805dc9354 fix test name 30ff937aaf9 add a fake load balancer class to fix e2e test failure 3cbecf218df kmsv2: add metric for DEK cache filled d86e72202c4 kmsv2 test feature enablement unit test bd6f5487463 mark the OOM killer as serial to reduce flakes afe9045e466 Add v1.28.0 API testdata a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io> 8163d244ede Update ccm flag help to describe disabling webhook serving 8291b847d58 Allow disabling both webhook ports in cloud-provider f407b31d42a kubeadm: Fix typo where API group is not correct 72af21e1a13 kubeadm: Cleanup the unused input parameters 1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go` e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig 48260b4a77b kubernetes mutual (2-way) x509 comment ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers 6c2cfac0a97 Revert testgrid url changes from CHANGELOG 577197559ae remove the legacy test dependency af26ebd0fa3 translate beta label to ga in volume_zone 4712025ea84 Graduate kubelet resource metrics to GA 6ef90979720 Update the URL of testgrid af9bf7b41e0 Prefer non-alpha storage versions when available 09fa21ab879 Store validating admission policies and bindings as v1beta1 a422d11c772 prep for go1.21: use -e in go list ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing 5567f288e74 api: change list type for node lists in PodSchedulingContext 79333684600 Update CNI plugins to v1.3.0 f07a3a3f263 calculate sidecar container resource in pod autoscaler 427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration 5bbc4f76055 Pass Pinned field to kubecontainer.Image a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858) b75c5d33e5c bump the busybox test version to resolve test failures bd36be02188 Make gomaxprocs install optional, limit to tests 9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature 5752cbd8c76 chore: add pod UID in event log 7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4 8314122382c e2e framework util subtle bug checking endpoints 9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 1e961af858b scheduler_perf: test case for DRA with multiple claims 0331e98957f scheduler_perf: fix installing DRA test driver multiple times 092897f061f drop v1.26.0 API testdata 4950521ad88 kubeadm: increase ut for certs/certlist 224087abfa0 Add Pod Scheduling SLI Duration metric (#119049) 3edae95e5ae Add unit tests for subdomain match in keyring 8cb979ae55d CHANGELOG: Update directory for v1.28.0 release a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family a161fa8017b pull Host from kubeconfig when needed 03415ebc1da Integration tests for IP mode field 86b1f095ca7 Proxy changes for IP mode field 47fec59a31a parse node selector in prefilter 4fb0ce28377 Fix broken link to testgrid 34a89f039b8 Update cri-tools to v1.28.0 29a6705dabc Generated code for IP mode field 3ac2899d2b5 Add IP mode field cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap 947c9376f6a change struct methods receiver to pointer e258228e4ac use a buffer equivalent to grace period to eliminate test flakes 717c149a734 fix mirror pod nfs test failure due to differing NFS versions 279a663f948 Update README.md 6f27733af8d Job: Replace deprecated workqueue library with supported one dd7b7073c38 e2e: add test for verification of timestamp for new PVs 8e661498702 e2e: remove extra spaces b9cf6991e63 Use tracing semconv types instead of own defines 765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip 1863a808b20 fix: add code comments 9646ae5a9ef Fix: null jsonpath serialization 8ab6bee676a Make seccomp status checks in e2e tests more robust 509ffe2938f Fix receiver names in legacyProvider 80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7 f73c253accf fix typos for pod replacement policy 5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate 62b063b74b5 wsstream: use a single approach to detect connection upgrade 74053e21519 Create e2e test for PV/PVC endpoints 49e00e8bdee Move adding GroupVersion log until after an update is confirmed 77b3bb0f69b fix race on etcd client constructor for healthchecks a6329ac4536 Fix to honor PDB with an empty selector `{}` 0e238409290 dra test: enhance performance of test driver controller 40b604e3741 Update pkg/apis/core/helper/qos/qos.go f355b22f5f7 implement Stringer for podActions e4d16f34c15 Add test coverage of result size of string operations 10fe3da87db Delete PSP API types and generated clients 69a5a528967 Bump cel-go to v0.16.1 6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed` 4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS. 5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once 37730c07dd6 apiserver/httplog: pretty up impersonation output 3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal 0944c00778a Fix some typo in kubelet component source code 3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout 24f32d9d185 Local PV Stress test: don't fail on deleting missing PV 074d5b53299 Rewrite the tests to be table driven 391c1a3eccd dra: cleanup manager unit tests a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules 85c385d4101 Update the container images used in cloudbuild to their latest version c4f4e3bc43b pkg/proxy: unit test refactoring 4bc9434f99d SSA: prevent usage of Extract calls via forbidigo b6ae858e01f Drop AvailableResources from controller context d5d90b7b228 add support for ExponentialBucketsRange 90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers a215b29d7cf remove makefile:generated_files in v1.29. f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status c23cee1be3c fix OOM killer 4b6abf10c6e Handle errors when preparing lease for update ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test. a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment 14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets 109cf6820d2 Update base image and add utilities to kubectl image 2a767c9916a update the busybox test image to 1.36.1 133696725ae implement secret empty string value integration test 7f53f7649e1 Use intstr.Parse instead of reimplementing it 1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy 63cf568251d e2e_node: stop using deprecated framework.ExpectEqual 18c46b2487a add validation for static pods to have a name 66aa2af0979 CEL lazy map: add test for boolean short-circuiting 307b0630aa6 cri-api: add CRI implementation maintainers as approvers c4739313b7f Track manually created secret-based tokens df89045b53c dependencies: update github.com/ishidawataru/sctp 2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait(). This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done). 213ed03c000 remove deprecated kube-apiserver identity lease garbage collector 57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual fb9646fd60d apiserver: add flow control metric current_inqueue_seats 4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy fdea6ad17d7 kubectl debug: Remove legacy server support baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one 41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath 3964f71fe02 e2e:podresources: verify count for terminal pods 6d244728b9e adjust order and fix typo for kube upgrade 479b2d03a43 kubectl: fix describe node output when sidecars are present 4e2e059c7b2 Graduate RemainingItemCount to GA 6acfa3cb4ac Graduate APIListChunking to GA e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual 9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster 2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual 60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection 7ffd3063cef dynamic resource allocation: reuse gRPC connection dbaa9fe6b46 added podgc orphaned pod unit tests 173b5a75b96 Trim managedFields in controller-manager c86f562f29b Run hack/update-codegen.sh informers subprojects 9c4651bd047 Add 'WithTransform' SharedInformerOption d1946392528 Cleanup kubectl legacy server fallback 106a931c299 fix intergration test d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag a35608cc614 Update debian-base for test images and others 43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls 2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration` 709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O b8336f399bf KEP-2305: add metric to track unbounded label values 1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest 654e98e0a2e add endpointslice repo to staging README b7cbebcd034 Added oomkill test for init container and fix typos d8c145d20da fixes the issue in the documentation of kubectl events 12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters 733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method 3bae26ae58b Check dbus error on container runtime start/stop 70f979c8da3 Alert message improved according to standards a6554b9d5d1 Make kubelet label types public f2fa6d5f6b3 Document PVLabeler as deprecated 7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile` fc36d2fee83 chore: improve error message for unstructured helper method b60a3a58df2 api-machinery: stop using deprecated io/ioutil 0da37d8c544 chore: omit comparison to bool constant 17e6c5cb9f0 Error Typofix 9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity 01c2c4f35f3 Error test cases added a609beb6b19 Decline on resizePolicy if the restartPolicy is Never f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress c1cced24aa9 WIP: don't exclude .git from rsync 396c8a67832 test: TestPodDeletionEvent 975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager ba49ccdbc9b Gracefully handle empty config error when local flag is used 96ab232f5f7 Remove reasons from PodConditionType 1d9eed9f950 chore: slice replace loop 9378e580cf4 chore: loop optimization fc1b8a823d4 cli: stop using deprecated io/ioutil b4d1440063d unittests: Fixes hostutil.GetFileType for Windows 01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric 07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func 208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container 72f89b63757 kubelet: fix comment typo 12f8eeaf9b1 fixed typo in get-kube.sh 3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32 8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0 887654160f9 Improve the performance of schedulinggates 0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32 847df6d9153 kubelet: output log even file is rotated 05f04f866eb Keep PLEG interruptions in a separate interface b109a585398 Improve the performance of isPodStatusCacheTerminal 84c14c65c6b Remove unnecessary type conversion 55d471601b1 [ut] increase covrage for kubelet/prober/results e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg 18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction 08a69d63413 Improve performance of method PodRequests 337f4e524aa Do not error log CRI stats for not cached partitions f2aeb3b0d91 Improve lock performance fb6fd36384e Add endpoint to skip topology aware log when missing zone hint Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.14.2Bruce Ashfield2024-03-151-3/+3
| | | | | | | | | | Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits: c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev b673eb60 [release-1.14] Bump Skopeo to v1.14.2 18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: upate to v0.17.0Bruce Ashfield2024-03-151-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits: b4350927 Bump to v0.17.0 db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2 49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4 c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1 00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3 bbba9ec9 go version update to 1.20 5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0 4d0b84f5 Bump to v0.17.0-dev cacf1b90 Bump to v0.16.0 67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2 be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0 2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11 9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3 519ed36f Bump to v0.16.0-dev f7f47149 Bump to v0.15.0 9ba724c1 gh action update 1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 fb1886ea github action use golang 1.21.4 for golangci-lint 6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0 54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2 bbb8c9a9 Bump to v0.15.0-dev c545dbd7 Bump to v0.14.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-16 02:47:47 +0000