1121 Commits
Author SHA1 Message Date
kubernetes-prow[bot] 3242b140ad Merge pull request #142890 from borg-land/ginkgo-gorunner-static
build ginkgo & go-runner as a static binary
2026-10-14 01:02:49 +00:00
upodroid f7af19185a build ginkgo, test and go-runner as a static binaries 2026-10-14 03:11:46 +03:00
kubernetes-prow[bot] a5081d9651 Merge pull request #137633 from luxas/impl-conditional-authz-3
Conditional Authz [3/n]: Make the webhook authorizer support conditions
2026-10-10 03:01:18 +00:00
Lucas Käldström 71b4ddbb6e Add AuthorizationConditionsReview API 2026-10-09 19:41:19 +03:00
Jefftree 4c74172170 hack: match OpenSSL 3.5 CN=127.0.0.1 output in client cert check 2026-10-09 16:21:30 +00:00
Davanum Srinivas fd2349e9c1 build: drop kustomize Go plugin support from the binaries
kubectl never loads kustomize Go plugins. With cgo, the std plugin
package makes the linker treat the binary as dynamically linking Go and
keep every method, exported or not. kubectl built on darwin with cgo:
60.8 MB to 56.8 MB. Static release builds are unchanged.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-10-07 08:55:17 -04:00
kubernetes-prow[bot] a30693dd26 Merge pull request #142700 from borg-land/delete-kubemark
delete kubemark
2026-10-06 22:46:41 +00:00
Jon Huhn ff57aedb45 Bump cfssl to v1.7.1 2026-10-06 14:08:27 -05:00
Jon Huhn 7f4767daaa Detect platform arch for cfssl download 2026-10-06 01:57:11 -05:00
upodroid 8739d508bd delete kubemark 2026-10-06 00:30:23 +01:00
Ryan Phillips a83b26e66c local-up-cluster: add support to enable quantum (mldsa) crypto 2026-09-30 16:35:27 -05:00
Carlos Panato 248bd2c871 Bump images and versions to go 1.27.1 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2026-09-17 13:39:48 +02:00
Jefftree 31b62dbf6d Stop serving apidiscovery.k8s.io/v2beta1 and drop its feature gate 2026-09-09 19:05:41 +00:00
Davanum Srinivas 81922ce9b5 Build kubelet as a static binary (CGO_ENABLED=0)
Add kubelet to KUBE_STATIC_BINARIES so it is built without CGO by
default, like all other core Kubernetes binaries. This eliminates
the glibc version dependency, improving portability across Linux
distributions.

To restore the previous behavior (CGO enabled):

  Regular builds:
    KUBE_CGO_OVERRIDES=kubelet make WHAT=cmd/kubelet

  E2e node tests:
    KUBELET_CGO_ENABLED=1 make test-e2e-node

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-09-08 11:12:47 -04:00
Humble Devassy Chirammal bc0b8a75d5 etcd: update etcd image to v3.7.1
Update etcd images to v3.7.1 across build dependencies, kubeadm defaults,
GCE manifests, test manifests, and sample-apiserver deployment.

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2026-09-02 20:33:39 +05:30
Filip Křepinský fc558fb4e9 introduce EvictionRequest and Eviction API
to new lifecycle group

- EvictionRequest is managed by a requester
- Eviction is managed by the evictionrequest-controller
- add storage, strategy, printers and validation
2026-07-22 21:32:12 +02:00
Jefftree 5836a6111f etcd: update etcd image to v3.7.0 2026-07-08 16:07:09 -04:00
Michael Aspinwall acbede86cb Promote SVM to GA 2026-07-07 17:22:30 +00:00
Jefftree 2544f4dda2 etcd: update etcd image to v3.7.0-rc.0 2026-06-01 20:29:57 -04:00
dom4ha 88948acc38 Remove v1alpha2 API definitions
Update client-go lister and informer imports to v1alpha3
2026-05-22 12:50:19 +00:00
dom4ha 69636c9707 Create v1alpha3 API as copy of v1alpha2 and update package names 2026-05-22 12:50:12 +00:00
Kubernetes Prow Robot 300eda2f2f Merge pull request #138746 from humblec/update-etcd-image-3.6.11
etcd: update etcd image to v3.6.11
2026-05-12 17:39:32 +05:30
Patrick Ohly a2b0ea30b0 DRA upgrade/downgrade: run etcd directly
The local-up-cluster.sh script was used as proxy for controlling the etcd
lifecycle because the script was using a helper function that didn't support
dry-run mode. That approach was flawed in several ways, causing etcd to be left
running:

- Cmd.Stop wasn't actually called for the script by Cluster.Stop.
- If it had been called, the additional output during shutdown wouldn't
  have been processed, which might have caused the command to block instead
  of terminating (untested).
- It's unclear whether the script would have handled the signal properly.

A cleaner approach is to enable dry-run mode also in etcd .sh and then let
Cluster manage it like any other long-running process. Then we can let
local-up-cluster.sh terminate when it's done with its work. Cluster.Start can
check it's result immediately.
2026-05-04 09:24:47 +02:00
Humble Devassy Chirammal ea67842860 etcd: update etcd image to v3.6.11
Update etcd images to v3.6.11 across build dependencies, kubeadm defaults,
GCE manifests, test manifests, and sample-apiserver deployment.

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2026-05-03 19:28:50 +05:30
Humble Devassy Chirammal d5c1f165c1 etcd: update etcd image to v3.6.10
Update etcd images to v3.6.10 across build dependencies, kubeadm defaults,
GCE manifests, test manifests, and sample-apiserver deployment.

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2026-04-15 16:18:52 +05:30
Antoni Zawodnyandyongruilin 3f094dc228 Create Workload API v1alpha2 (#136976)
* Drop WorkloadRef field and introduce SchedulingGroup field in Pod API

* Introduce v1alpha2 Workload and PodGroup APIs, drop v1alpha1 Workload API

Co-authored-by: yongruilin <yongrlin@outlook.com>

* Run hack/update-codegen.sh

* Adjust kube-scheduler code and integration tests to v1alpha2 API

* Drop v1alpha1 scheduling API group and run make update

---------

Co-authored-by: yongruilin <yongrlin@outlook.com>
2026-03-10 07:59:10 +05:30
Kubernetes Prow Robot 3369e51e09 Merge pull request #137080 from cpanato/update-go-1.26
Bump dependencies, images and versions used to Go 1.26.0 and distroless iptables
2026-03-05 21:56:21 +05:30
Kubernetes Prow Robot a0594a28a4 Merge pull request #136954 from BenTheElder/kube-runner
switch server images to kube-log-runner
2026-03-04 06:30:17 +05:30
Benjamin Elder 9f8eca1566 add kube-log-runner to images on the fly, replicating the same /go-runner path as the current base image
https://github.com/kubernetes/release/blob/d98562ea2eedb105e8a0134dd997d531b9792c2f/images/build/go-runner/Dockerfile#L68-L70
2026-03-03 16:00:02 -08:00
Jefftree 292e4ca469 Use localhost for etcd peer listener instead of ETCD_HOST 2026-03-03 10:22:39 -05:00
Jefftree 553dc9c2aa Use ephemeral port for etcd peer listener
Port 0 lets the OS assign a random free port, avoiding conflicts
when running multiple etcd instances for parallel tests. Peering
is unused in single-node test setups.
2026-02-27 17:24:32 -05:00
Carlos Panato d9956b7fde Bump dependencies, images and versions used to Go 1.26.0 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2026-02-26 09:09:39 +01:00
joshjms 7c54689847 etcd: update etcd image to v3.6.8
Signed-off-by: joshjms <joshjms1607@gmail.com>
2026-02-18 21:29:56 +08:00
Humble Devassy Chirammal 8dc8edf49b etcd: Update etcd to v3.6.7
ETCD 3.6.7 has some critical bug fixes
https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.6.md

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2025-12-18 19:05:14 +05:30
Kubernetes Prow Robot 508074f023 Merge pull request #135615 from soltysh/drop_autoscaling_v2betaX
Drop autoscaling v2beta1 and v2beta2
2025-12-17 23:28:25 -08:00
Kubernetes Prow Robot 99b27386d9 Merge pull request #135211 from AkihiroSuda/fix-135210
hack/lib/util.sh: support uutils' `date` command
2025-12-17 19:59:32 -08:00
bzsuni 2c811fdd3a etcd: Update etcd to v3.6.6
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2025-12-08 05:37:15 +00:00
Maciej Szulik e347aa994b React to removing autoscaling v2beta1 and v2beta2
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2025-12-05 11:59:30 +01:00
Akihiro Suda 0c0bc0d533 hack/lib/util.sh: support uutils' date command
`make` was printing the following warning on Ubuntu 25.10,
which switched away from GNU coreutils to uutils:

```
!!! [1107 12:46:24] Failed to find GNU date as date or gdate. If you are on Mac: brew install coreutils.
<GOPATH>/src/k8s.io/kubernetes/hack/lib/version.sh: line 166: DATE: unbound variable
```

Fix issue 135210

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2025-11-18 17:27:50 +09:00
Michael AspinwallandStanislav Láznička 3b72759d1b Update SVM to Beta
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
2025-10-29 19:36:11 +00:00
Benjamin Elder 1877809f59 cleanup unused rsync related env vars 2025-10-16 10:26:13 -07:00
Benjamin Elder feeeb4aa19 switch from rsync to cp, drop rsync requirement 2025-10-16 10:26:13 -07:00
Benjamin Elder 30c3c990d0 prevent shellcheck warning
https://www.shellcheck.net/wiki/SC2153

this is not a mispelling of KUBE_OUTPUT_SUBPATH, the unprefixed version is an optional override which sets _KUBE_OUTPUT_SUBPATH, which is handled in hack/lib/init.sh where golang.sh is sourced
2025-10-15 20:18:31 -07:00
Benjamin Elder 563919c685 don't update _output/bin symlink in dockerized builds 2025-10-15 20:18:31 -07:00
Benjamin Elder 605f402d44 use relative symlink for output path
resolves issues with creating symlinks inside the build container via bind mount instead of rsync-ing them out
2025-10-15 13:12:38 -07:00
Jordan Liggitt 39d37a1e92 Remove invalid SAN certificate construction 2025-10-13 10:27:22 -07:00
Kubernetes Prow Robot 51e35e61ce Merge pull request #133870 from pohly/build-data-race-detection
build: also support KUBE_RACE for test binaries
2025-10-08 12:57:01 -07:00
joshjms 070d4c1846 bump etcd to v3.6.5
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-03 18:19:15 +08:00
Benjamin Elder 88d6e6c465 drop automaxprocs hacks now that go 1.25 handles this built in
https://go.dev/doc/go1.25#container-aware-gomaxprocs
2025-09-17 16:36:15 -07:00
Davanum Srinivas 6dbc13fd13 Bump to go1.25.1 based images 2025-09-16 22:42:29 -04:00