142649 Commits
Author SHA1 Message Date
Kubernetes Release Robot 485c9dec11 CHANGELOG: Update directory for v1.36.6 release 2026-10-28 04:56:31 +00:00
Kubernetes Release Robot 8c627c9bd3 CHANGELOG: Update directory for v1.37.2 release 2026-10-28 04:37:49 +00:00
Kubernetes Release Robot efb91efb52 CHANGELOG: Update directory for v1.34.13 release 2026-10-28 04:37:34 +00:00
Kubernetes Release Robot 76ae0845a9 CHANGELOG: Update directory for v1.35.10 release 2026-10-28 04:37:25 +00:00
kubernetes-prow[bot] 4a5f6add1b Merge pull request #143287 from kvalliyurnatt/dra-consumable-capacity-validation
DRA consumable capacity validation
2026-10-28 02:39:21 +00:00
kubernetes-prow[bot] 48ee25655b Merge pull request #143156 from tico88612/fix/flaky-testeventseries
Fix TestEventSeries flaky only focus on testPod namespace
2026-10-28 01:15:18 +00:00
kubernetes-prow[bot] 107acab22b Merge pull request #142746 from yongruilin/131447-move-code
Move CRD types and clients to new staging repo k8s.io/apiextensions-api
2026-10-28 00:19:19 +00:00
Yongrui Lin cd95e9b0a1 address comment: mark the client alias variables deprecated 2026-10-27 23:16:06 +00:00
Yongrui Lin e6eac1061e Update generated files 2026-10-27 23:16:06 +00:00
Yongrui Lin 9c1235e9d5 Use k8s.io/apiextensions-api for CRD types and clients
Code that needs the conversions to the internal version still imports
them from k8s.io/apiextensions-apiserver.
2026-10-27 23:16:06 +00:00
Yongrui Lin bfd654f78f apiextensions: move the CRD clients to k8s.io/apiextensions-api
Generate the clients into k8s.io/apiextensions-api and replace the old
client packages with generated, deprecated aliases.
2026-10-27 23:12:24 +00:00
Yongrui Lin 627c2ac477 apiextensions: move the CRD API types to k8s.io/apiextensions-api
Add the k8s.io/apiextensions-api staging module and move the v1 and
v1beta1 types there. The old packages keep the conversions and alias the
moved identifiers in a generated deprecated.go.
2026-10-27 23:12:24 +00:00
kubernetes-prow[bot] 7f2897a0f4 Merge pull request #143471 from alimaazamat/test-flatten-podgroup-policy-compatibility
test: flatten PodGroup preemption policy compatibility steps
2026-10-27 21:57:24 +00:00
kubernetes-prow[bot] 1b7ee51d46 Merge pull request #143445 from natasha41575/node_authorizer_graph
auth/node: update NodeAuthorizer graph edges when pod volumes change
2026-10-27 21:57:16 +00:00
kubernetes-prow[bot] 3e6f6b9abb Merge pull request #143436 from seans3/websockets-e2e-attach-heartbeat
e2e: check the container log in the WebSocket attach test
2026-10-27 19:42:14 +00:00
kubernetes-prow[bot] 9e959fb032 Merge pull request #143396 from seans3/kubectl-explain-no-v2-fallback
kubectl: remove OpenAPI v2 fallback in explain
2026-10-27 19:42:06 +00:00
kubernetes-prow[bot] 5b798680ff Merge pull request #143334 from my-git9/kube-network-policies-rbac-ns
addons: remove namespace for network-policies clusterrole
2026-10-27 19:41:56 +00:00
Guy Yankovitch c705e82833 Fix PDB controller to enqueue all affected budgets on pod changes (#143111)
* Fix PDB controller to enqueue all affected budgets on pod changes

Wake previously matching PDBs when pod labels change, and enqueue every
overlapping PDB so status stays correct instead of picking one arbitrarily.

* PDB: warn on multiple budgets only for the current pod

Skip the MultiplePodDisruptionBudgets warning for old labels on update,
and list matching PDB names in the event message.

* PDB: extract multi-budget warning from getPdbsForPod

Move the MultiplePodDisruptionBudgets event out of the lookup helper,
compare pod labels with reflect.DeepEqual, and quote matching PDB names
in the warning message.

* PDB: use controller.KeyFunc for updatePod sync map keys

Match enqueuePdb and use namespace/name keys when deduping PDBs to sync
on pod label updates.
2026-10-27 19:41:46 +00:00
kubernetes-prow[bot] 5bb921dbf2 Merge pull request #142706 from darshansreenivas/health-attribute-message
StorageHealthCondition: Status and Message
2026-10-27 19:41:36 +00:00
kubernetes-prow[bot] e0b0c97742 Merge pull request #142575 from QHarshil/unstructured-decode-list-once
apimachinery unstructured: decode lists with json/v2 in one pass
2026-10-27 19:41:27 +00:00
kubernetes-prow[bot] bccf5c3611 Merge pull request #141959 from luxas/impl-conditional-authz-4
Conditional Authz [4/n]: Add conditional authz support to `kube-apiserver`
2026-10-27 19:41:19 +00:00
Natasha Sarkar 253fa0d20d auth/node: update NodeAuthorizer graph edges when pod volumes change 2026-10-27 19:06:02 +00:00
kubernetes-prow[bot] 941f86ce91 Merge pull request #143467 from serathius/watchcache-correctness-successful-request-count
Ensure number of operations are executed succesfully
2026-10-27 18:33:36 +00:00
Antoni Zawodny 231b17fdf2 Extend the validation performed in workloadbuilder (#143278)
* Extend the validation performed in workloadbuilder

* Address comments from code review

* Address further review comments
2026-10-27 18:33:27 +00:00
kubernetes-prow[bot] 4273a8d4ce Merge pull request #142307 from supahero1/optimize-store-index-slice-equal
Optimize for when pods have >1 index
2026-10-27 18:33:18 +00:00
alimaazamat 2883b585b8 test: flatten PodGroup preemption policy compatibility steps
Signed-off-by: alimaazamat <alima.azamat2003@gmail.com>
2026-10-27 11:30:01 -07:00
kubernetes-prow[bot] b953974420 Merge pull request #143327 from seans3/kubectl-validate-list-items
kubectl: verify fieldValidation support per list item
2026-10-27 17:43:45 +00:00
kubernetes-prow[bot] 359918cda6 Merge pull request #142964 from pohly/dra-version-validation
DRA API: limit semver number range to int64
2026-10-27 17:43:36 +00:00
kubernetes-prow[bot] 9ac30b9c29 Merge pull request #143466 from skitt/publishing-bot-glog
Bump golang/glog to v1.2.5 in hack/tools
2026-10-27 16:33:38 +00:00
kubernetes-prow[bot] 8fa5e0bf67 Merge pull request #143351 from borg-land/fix-topology-hints-test
amend the topology hints test to work correctly with clusters that span multiple zones
2026-10-27 16:33:29 +00:00
kubernetes-prow[bot] d048b7806a Merge pull request #143253 from alimaazamat/fix-podgroup-preemption-defaulting
Fix PodGroup preemption policy resolution from PriorityClass
2026-10-27 16:33:20 +00:00
kubernetes-prow[bot] 7cc278e46d Merge pull request #143465 from serathius/watchcache-interval-resource-version
Use cacheInterval.resourceVersion in initWatcherIntervalLocked
2026-10-27 15:45:31 +00:00
kubernetes-prow[bot] 75b7d33b08 Merge pull request #140307 from pacoxu/pg-delete-event
[Doc] PodGroup name reuse caveat
2026-10-27 15:45:21 +00:00
Marek Siarkowicz dd47b239a4 Ensure number of operations are executed 2026-10-27 16:02:57 +01:00
Stephen Kitt 8ef65551ac Bump golang/glog to v1.2.5 in hack/tools
govulncheck complains about publishing-verifier's use of glog:

The package pattern matched the following 2 root packages:
  k8s.io/kubernetes/hack/tools/publishing-verifier
  k8s.io/kubernetes/hack/tools/traceparse
Govulncheck scanned the following 6 modules and the go1.27.3 standard library:
  k8s.io/kubernetes/hack/tools
  github.com/golang/glog@v1.2.2
  golang.org/x/exp@v0.0.0-20260212183809-81e46e3db34a
  golang.org/x/mod@v0.41.0
  gopkg.in/yaml.v2@v2.4.0
  k8s.io/publishing-bot@v0.5.0

=== Symbol Results ===

Vulnerability #1: GO-2025-3372
    Vulnerability when creating log files in github.com/golang/glog
  More info: https://pkg.go.dev/vuln/GO-2025-3372
  Module: github.com/golang/glog
    Found in: github.com/golang/glog@v1.2.2
    Fixed in: github.com/golang/glog@v1.2.4
    Example traces found:
      #1: publishing-verifier/publishing-verifier.go:167:32: publishing.verifyPublishingBotRules calls config.LoadRules, which calls glog.Infof

=== Package Results ===

No other vulnerabilities found.

=== Module Results ===

No other vulnerabilities found.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-10-27 16:02:21 +01:00
kubernetes-prow[bot] 7214565f5b Merge pull request #143461 from skitt/grpc-1.85.0
Bump grpc to 1.85.0
2026-10-27 14:35:36 +00:00
kubernetes-prow[bot] 12c0370748 Merge pull request #140520 from ingyeoking13/master
kubelet-config: (v1beta1) improve documentation readability
2026-10-27 14:35:26 +00:00
kubernetes-prow[bot] 78fe20a84c Merge pull request #137396 from atiratree/imperative-eviction-interceptor
Add imperative eviction responder for EvictionRequest API
2026-10-27 14:35:16 +00:00
Marek Siarkowicz d349365684 Use cacheInterval.resourceVersion in initWatcherIntervalLocked
Both setInitialEventsEndBookmark and getBookmarkAfterResourceVersion are only called
when isListWatchRequest(opts) is true, where getAllEventsSinceLocked always builds
cacheInterval from the store snapshot with cacheInterval.resourceVersion equal to
c.watchCache.resourceVersion. Reading cacheInterval.resourceVersion directly avoids
accessing c.watchCache.resourceVersion under lock while keeping bookmark resource
versions tied to the snapshot being served.
2026-10-27 14:39:19 +01:00
kubernetes-prow[bot] 4fc327fb3a Merge pull request #143462 from serathius/watchcache-correctness-selectors
Test all combinations of selectors
2026-10-27 12:07:02 +00:00
kubernetes-prow[bot] 4ebb620746 Merge pull request #143457 from serathius/watchcache-separate-snapshot
Watchcache separate snapshot
2026-10-27 11:19:08 +00:00
kubernetes-prow[bot] c4fbdfa169 Merge pull request #143211 from divyanshuprakas-h/fix-compositepodgroup-preemption-flake
test(scheduler): fix composite pod group preemption fixture
2026-10-27 11:18:59 +00:00
Darshan Murthy 462a32e51c storage: migrate CSINode StorageHealthCondition validation to declarative tags 2026-10-27 03:40:36 -07:00
Marek Siarkowicz 9abea733a4 Test all combinations of selectors 2026-10-27 11:17:11 +01:00
Stephen Kitt 657a553aae Bump grpc to 1.85.0
This gets rid of a number of unwanted dependencies and updates x/net
too.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-10-27 10:59:54 +01:00
kubernetes-prow[bot] 69b0ddb913 Merge pull request #143431 from serathius/watchcache-init-watcher-interval
Extract initWatcherIntervalLocked
2026-10-27 09:53:10 +00:00
kubernetes-prow[bot] 46b2730d7d Merge pull request #143411 from serathius/etcd-delegator
Etcd delegator
2026-10-27 09:53:01 +00:00
Marek Siarkowicz 3c712318be Seperate reading snapshot from constructing response in waitUntilFreshAndListRecursive 2026-10-27 10:38:59 +01:00
Divyanshu Prakash 1069de3ace test(scheduler): fix composite pod group preemption fixture 2026-10-27 14:28:21 +05:30
kubernetes-prow[bot] b5cf787e5e Merge pull request #143438 from serathius/watchcache-waitAndList
Flatten waitAndList* methods as midstep to unify snapshot code
2026-10-27 08:48:59 +00:00