kubernetes: update to 1.29.1

Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:

    a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
    bc401b91f27 Release commit for Kubernetes v1.29.1
    5350f0829f5 Revert "Graduate Evented PLEG to Beta"
    5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    0da29848c53 Make OpenAPIGetter tolerant of nil
    865f214fe53 use context for lazy evaluation.
    cde050c4d0b Initialize default attach func regardless of the value of flag
    b055126537b .*: bump golang.org/x/tools to v0.16.1
    05937cba41d add ut
    00045c3c9d6 fix
    b10ad75ab1d fix
    4b8554018c1 fix: 119921
    a5f64b743e4 Address comment
    ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
    37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    40d8e405b8e Use a separate function for checking if device was reconstructed
    d30fda3c68c Add tests for checking of uncertain device paths
    910fa603a25 Fix device uncertain errors on reboot
    62d0bd7260f Fix CSI migration for vSphere volumes
    ce513803ca9 Wire in field dropping for CRDs
    9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
    ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
    3f7a50f3868 Release commit for Kubernetes v1.29.0
    3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
    0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
    a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
    e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
    0ca3089bee6 Bump distroless-iptables to v0.4.2
    1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
    4e5321c92e0 add beta comment for pod replacement policy
    233949e05df Add an integration test to verify root path cleanup
    c769c2db6ed Revert conformance test addition of root paths
    ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
    022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
    71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
    96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
    f730dc39f9d Fix verify target to not update env var if already set
    51daa8cbd5e api: run hack/update-api-spec.sh
    f042994cb03 releng: update publishing bot rules for 1.29
    bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
    ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
    af34f62170c code-generator: fix invalid replace of klog
    d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
    005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
    64f8c6939f8 Replace -E with --setenv for systemd-run parameter
    dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
    c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
    59c63185457 CHANGELOG: Update directory for v1.26.11 release
    bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
    3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
    34e620d18c0 Support score extension function in preemption.
    99f7df3e1c1 improve default_servicecidr_controller startup
    c99b5a208de Check error from gomega
    49e8c196c34 use framework gomega
    8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
    6aa3002ad24 add kubeup label instead of a feature label
    27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
    20853ef1200 Bump distroless-iptables to v0.4.2
    4b1b9a198a6 Fix issue with client rate limiter when polling
    7c5dfceff8a add false matchCondition benchmark
    f9ab24bf485 Refine test case
    617f2132fed e2e: avoid redundant labels in JUnit file
    172f680326a fix: smb file share unavailable issue when it's deleted
    2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
    bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
    2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
    11cdb8fd011 split compile and eval
    fe53db0dbdc authz: add benchmark for webhook authorizer
    475bfa4a633 set LimitedSwap
    819d1903a27 Add support for authorization-config to local-up-cluster
    b53134f129f Test anonymous and RBAC handling via config file
    264cd648246 Run RBAC hook correctly when running from authz config file
    1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
    76277f693d0 create a new KubeUp feature label for tests marked for removal
    9e5b8402bb9 update go.mod
    88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
    e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
    f3dad977040 self nominate aroradaman as sig- proxy-reviewer
    2645b22003d Self nominate Kevin Hannon for reviewer for job controller
    b12db6d9b55 fix test store delete collection function failed
    9d5b2a44762 Fix API comment for the Job ready field
    1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
    6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
    bb315d13392 bump runc to v1.1.10
    f77a4543d13 Unregister events in schedulingGates plugin
    70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
    42a70cdbd16 codegen
    bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
    eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
    5edb27aa382 ratcheting-cel: add optionalOldSelf field
    6b6be38896b test: Fix NodeLogQuery tests
    ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
    ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
    bd6431323a5 ClusterTrustBundle projection: e2e test
    96e610ac188 ClusterTrustBundle: Enforce max size during validation
    1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
    e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
    599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
    ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
    0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
    2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
    e5bba37f20a apiserver: promote flowcontrol tests to conformance
    9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
    60338c79d77 KCCM: fix slow node sync + service update
    a8673fa5b4a KCCM: add test validating slow node sync issue
    b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
    2259ac2444f pause: add --provenance=false during etcd multi-arch build
    50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
    5bf63036c7f Make EnablePodSchedulingReadiness public
    0112d91a056 Add multi-webhook integration test
    b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
    34b2c4e1ed0 framework: add SSH support for Azure
    44d89c8cf8c Include empty string attributes for CEL authz evaluation
    2e2f51a4417 Plumb failure policy from config to webhook construction
    0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
    a000af25ff3 Require match condition version only if matchConditions are specified
    baebc376ff8 missed a few summary upper limits for major page faults
    3c268b75244 etcd: Update to version 3.5.10
    4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
    ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
    2d9128116b6 Use golang library instead of mklink
    85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
    cda349cda49 Make service-cidrs-controller role feature-gated
    26923b91e8c implementation of split disk kep
    003e4886c6f Fix parameter passing error
    18adc309337 refactor: rename TransitionRule to UsesOldSelf
    b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
    338fe7ad55c e2e framework: validate test definitions
    f2cfbf44b1f e2e: use framework labels
    248100ce6df golangci-lint: tone down comment checking
    ecb32a3e29c increase bounded limits for major page faults
    ceaacc88f0d add --provenance=false during etcd multi-arch build
    833156b77e2 e2e: define environment
    4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
    878d037d3ba dependencies: klog v2.110.1
    bc1df9e7dab bump to newest etcd: v3.5.10
    38905462656 Update APIs and adjust tests
    77f4178c98a Promote CSINodeExpandSecret to GA
    252e1d2dfee Imagepull per runtime class alpha release changes
    0993bb78efe Redo service dispatch with maps
    9d71513ac1e Redo no-endpoint handling with maps
    4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
    edaa1d735b8 Redo --nodeport-addresses handling with a set
    ef1347b06db Port NAT rules to nftables (and backend is now functional)
    0c5c620b4f2 Port filter rules to nftables
    6cff4153057 Port service/endpoint chain creation/cleanup to nftables
    2735ad541e2 Port table setup/cleanup code to nftables
    bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
    93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
    abb1a458a95 Create an nftables.Interface in nftables proxier
    1a530457f90 Drop unit tests of iptables-specific unit test helpers
    958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
    3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
    96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
    6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
    ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
    5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
    1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
    e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
    39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
    cac26737cd4 apiserver: add conformance tests for flowcontrol API
    a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
    ce5a22d54c1 hack/update-codegen
    3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
    fee07ad6080 make update with the new API with arrays
    9917c727a1e test e2e: use new ServiceCIDR API
    5d90d07f2d2 test integration: use new ServiceCIDR API
    271900a0f05 integration etcd data: use new ServiceCIDR API
    3edcce52e3c service cidr controller manager: use new ServiceCIDR API
    016c3c9e363 repairip controller: use new ServiceCIDR API
    881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
    7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
    513fdb54229 describer: use new ServiceCIDR API
    5123a93b342 printers: use new ServiceCIDR API
    c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
    599597ca65a fix race on ServiceCIDR deletion
    e3a0df26a86 remove flag cidr max size validation if gate enable
    8182c4d9ec8 make update
    cb509b01f31 e2e for ServiceCIDRs
    46b13d48e20 etcd data
    ccbcadb0324 add integration test
    4ff80864e1c service cidr controller manager
    164276175fb plumb the new multicidr clusterip allocator
    65e69389463 make repair loop multi service cidr aware
    63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
    d3386e171a2 add iptree radix tree util
    3b450378e07 bootstrap controller for default ServiceCIDR
    55a35bebee9 API printers
    7e77e8b21d1 kubectl describe
    2feb1503e29 Add ServiceCIDR to the REST Registry
    391b25197b8 add apis to apiserver storage
    632081a9078 add ServiceCIDR APIs
    16363b6fb4a fix IPAddress.Name validation message
    df80775693f Include managed field comparison in test
    cc190e0ace1 add integration tests
    26e3a03d12d Implement CEL and wire it with OIDC authenticator
    e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
    7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
    8b9fc325e28 Update to new cadvisor v0.48.1
    e4776e0f85b avoid infinite recursion for type resolvers.
    fba2d2fadc1 Move invocation to not to cause ginkgo panic
    eb32969ab8f Lazy load OpenAPIV2
    f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
    e7216c66230 use OpenAPIV3 for kubectl diff
    4f3b0b15182 Use OpenAPI V3 for client side SMP
    6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
    168e016947c Benchmark job with backoff limit per index
    6ac7da1da87 encryptionconfig/controller: run unit tests faster
    c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
    c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
    98a2f22e740 Revert "Make the decode function respect the timeout context"
    c7fcef18756 apiserver: set APF featuregate to ga
    8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
    b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
    31c76e9abb2 authz: add cel expression to webhook matchconditions
    56ab6c59421 generated changes
    ae90a696772 volumeattributesclass and core api changes
    c4aab1036f6 Add sig OWNERS to registry packages
    1daf1b0705f test that controller descriptors should not be feature gated
    fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
    5b268e6daf5 apply: Add test for duplicates in associative lists
    9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
    dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
    b8cd792b368 rename the roundtrip annotation, forbid it in v1
    76463e21d4d KEP-4193: bound service account token improvements
    a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
    70c1f2143fc Bump cel-go to v0.17.7
    d3de47ceeed chore: updates api doc
    2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    080fe8346da Fix typos in interface comments
    e95b7c6d8b8 feat: updates encryption config file watch logic to polling
    6d59480a70f Try a single gcloud command for scp-ing all files
    bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    f78b367db63 Make the decode function respect the timeout context
    79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
    ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
    233bc2449d9 apiserver: fix apf enablement with runtime-config
    acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
    25447b95ad2 apiserver: add testdata for flowcontrol v1
    730d10a8fb9 apiserver: add generated files for flowcontrol api change
    9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
    430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
    90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
    17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
    25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
    5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
    03a9ad200d7 apiserver: remove copied generated files
    b24dd44904e apiserver: enable apf v1 API
    5cb03064d95 apiserver: update copy, rename v1beta3 to v1
    dc723080939 apiserver: copy apf v1beta3 to v1
    05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
    5a20ff16173 fix wrong controller name for ephemeralController
    afc6c03ba74 Pass through static overrides in addtion to cgo overrides
    feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
    3a308140cd5 Fix e2e
    2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
    070e7a38cb6 generic set
    36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
    9a8ccdebc5a use sysctl utils to do pod spec validation
    11de9543ee7 move sysctl namespace and some funcs to component helpers util
    4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
    6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    04b21126e58 Add cel new validator into Kubernetes.
    9ae77364e95 pkg/proxy: configure tcp-be-liberal
    a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
    c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
    4bb7dc224c5 metrics: publish metrics from ratcheting across a request
    e50cc47a068 Improve execution time for job e2e tests
    8c72be3b74e ratcheting: add benchmark
    7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
    c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
    3f8e6d6f77f etcd: Build image 3.5.10
    a73725d7999 Promote SidecarContainers feature to beta
    1591a0e132c add unit tests for NewControllerDescriptors
    44cac266673 move start controller pre- and post- checks/actions out of StartControllers
    b7689672802 move aliases into each registrable controller
    a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
    27a77e0ef3c Encapsulate KCM controllers with their metadata
    77dfd63d1db fix volume conformance e2e test break other test
    77e0adeb31d KEP-127: Update PSS based on feature gate
    b0491d71bd5 Support skipping pulling addons image.
    760abc2a821 bump gomega to 1.29.0
    5925dc07758 LegacyServiceAccountTokenCleanUp beta
    69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
    a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
    9f06eb4ca2a don't run these tests on aws
    e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
    af14f97cba7 sample device plugin: fix incorrect Errorf invocation
    fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
    b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
    fd132665a8a extend VAP status controller for extensions type checking.
    3f73cdcf2ad extend SchemaResolver for more types of schemas.
    38fecc8319d opportunistically attempt to refresh RESTMapper
    05cd3e66ef5 simplified e2e test for CRD typechecking.
    60a602f1701 gce: fix test for non-existing instance in cloud
    4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
    84faaf4427f Prevent sampledeviceplugin binary commit
    7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
    110ffa13b7d Delete binary file
    e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
    27f6fb2fa7e hack/tools: golangci-lint v1.55.1
    6302f011211 e2e node: fix broken assertion
    d0a5cd16da8 e2e upgrades: fix broken assertion
    fb872e86384 test: fix storage status update test
    53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
    071a67d8c29 export time function
    9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
    c6b42c8a72f Make e2e node image ID test more flexible
    517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
    837090135f8 kubeadm: make super-admin.conf changes to app/cmd
    30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
    d0328df04e0 add time tracking to CorrelatedObject
    1165609036c Add metric for e2e pod startup latency including image pull
    702d911e226 working-config-otel
    e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
    f71040f620e Remove the usage of feature gate
    0ac35fe44f4 Update security contacts for sig-cli
    8d3a25c7c98 [KMSv2] Add tracing
    c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
    f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
    e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
    2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
    27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
    2a8982b27b8 Remove problematic Dbus restart test
    39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
    3738111337e Add unit tests
    08b942028f9 DRA: call plugins for claims even if exist in cache
    69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
    98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
    e511edf11f7 Fix SELinux unit tests
    2f5903b4cf4 Move SELinux warning metric to be counted once per pod
    d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
    a92c1269e25 test: fixes hot reload flake
    71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
    83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
    8e0be64b8ff remove data race on the devicemanager client plugin
    aeceec72bbd add integration tests
    97e72d792cc Remove independent tests for metrics
    84cd6dbb0aa use the latest semver version for the badge
    b3525946d5e ratcheting: provide a shared correlated object
    dfeab6eca8c fetch a shared correlated object off the validation options if it exists
    0a19b5ab6e2 fix usage
    432e8937cfb add variadic options to ValidateUpdate
    9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
    055e926a924 e2e: Increases the memory limit for downward API tests
    88c0a8be1bd feat: add job_pods_creation_total metric
    b1ce529b2ac Remove unnecessary GetIndexer
    1224e0e881d Add PodHostIPs test
    f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
    12a972cc1e6 Promote KEP-2681 to beta in 1.29
    2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
    bd8ac8c7fac kube-scheduler: checked err for golangci-lint
    b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
    bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
    bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
    16b3acc27a1 cleanup UnknownCRISocket for unit tests
    71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
    20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
    b06675724d6 Add e2e test for backoffLimitPerIndex
    4b59d2b05c0 kube-proxy: Optionally do privileged configs only
    35f4d29d735 Fix unit test
    b052c7b7cdf Update npd version to 0.8.13 in configure.sh
    a6f5246565b integration test for empty & unstructured.
    168998e87bf StreamTranslator and FallbackExecutor for WebSockets
    c6b3a2f477c allow empty object to be CEL value.
    8ae0d390d77 add container filesystem to CRI api
    93951bc00d3 Add stability tests for CEL cost estimation.
    d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
    6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
    27afb7d75d2 e2e storage: use framework to tag tests
    8a42be978bf Add CDI support to the sample device plugin
    d9131d5b390 [KMSv2] Drop the apimachinery
    6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
    55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
    fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
    e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
    e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
    074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
    b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
    d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
    fb6b10997a7 cleanup: remove useless test
    3f4d3b67682 Cleanup paging parameters in etcd3 store
    2dbd4055834 Graduate ReadWriteOncePod to GA
    42945ea6dc8 update suspend test to match other test cases
    49c947ba15a metrics: add and use ImageGarbageCollectedTotal
    d8a5cd59c08 kubelet/images: add unit test for MaxAge
    914aa746c18 kubelet/images: add and use freeOldImages function
    76e623098c8 kubelet config validation: add validation for image max gc age
    d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
    9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
    34294cd67f2 locking feature-gate for ready pods job status
    b386120da23 Remove storageConfig.Paging parameter
    106f58686d5 Remove disablePaging param
    b0d04d933be Introduce the job_finished_indexes_total metric
    6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
    a913abe191b e2e test for checking ready of job status
    fb0ffb07a76 kubeadm coredns use drop ALL instead of all
    81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
    a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
    4f5bc7e8d76 fix based on reviews
    82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
    eb3a11ea142 registry/core: wire NotFound getter instead of nil
    cbe3d897629 Promote CRD validation rule to stable
    fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
    32fdb551920 Use Patch instead of SSA for Pod Disruption condition
    a7adde53be4 bump golang.org/grpc to v1.56.3
    a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
    441d2b40dfd Undeprecated kubelet cloud-provider flag
    4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
    cf836309dc2 Add validation for --storage-media-type option.
    8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
    1a41ed394d6 convert pointer to ptr for sig-apps integration tests
    27bb40a9d83 Remove GAed feature gates OpenAPIV3
    c5e25637c64 fix typo
    a25b87d84a3 e2e apimachinery: use feature gate
    ceba3be6b58 e2e: add more feature definitions
    9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
    00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
    cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
    6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
    8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
    259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
    3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
    aee73352853 add new test cases
    220d5c2e543 remove dead code in test
    79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
    8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
    0a6d9531f40 update generated code and openapi
    4d21a23be35 pin openapi
    31a1c00e49c cleanup: move unstructured check earlier in status update
    d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
    cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
    ced56a6adab Restrict supported media types for new apiservers.
    f5cb2ada944 k8s.io/kms: drop direct dependency on klog
    db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
    6c4f71b31ce Fix spelling
    02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
    9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
    b7477c31b03 update versioned types
    4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
    d7556769e7f Job: Replace deprecated wait functions with supported one
    1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
    989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
    d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
    2508f468a8f kubelet/userns: Add more unit tests
    0dd495e6dc2 Address review comments
    7ff866463af Refactor watch event serialization to allow caching
    0cda42af7ab Unregister group path from apiserver when the group no longer exists
    a50d83c669e Add basic authz config integration test
    22e5a806a73 Add --authorization-config flag to apiserver
    75f20ee64da update pretty param description
    e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
    7bcc98c46b9 sidecars: terminate sidecars after main containers
    c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
    201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
    7a1ac18bc84 Fix panic if there are more terminating pods than active pods
    fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
    007ef653ad0 add feature gates for authorization config
    2ccf7e8e49b fix: minor lint issues and redundant check
    056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
    bf32f87d00e skip CEL validations for enum violation.
    e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
    bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
    72e67e0ef0d kubeapiserver/options: fix cloud provider validation
    911700e64e3 Fix typos in markdown
    2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
    b500c3d6930 Correct the label selector used in TestSampleAPIServer
    c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
    7d077f9271e e2e: move AllNodesReady check to DeferCleanup
    ca6fda05ce5 Restart containers in right order after the podSandboxChanged
    75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
    e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
    9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
    d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
    f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
    211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
    c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
    6714e678d33 node: sample-dp: register by default and re-register on restarts
    465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
    d2b803246af Don't reuse the device allocated to the restartable init container
    a45a813d5e3 kubeadm: fix "eliptic" typo in API package
    fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
    1715fc0ca06 Fix issue in enabling evented pleg feature gate
    defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
    5d5958e3389 fix ImageLocality plugin score is inconsistent
    76059738a4f update standard protocols to match KEP3726
    4ae7150f05d remove pc pvc status endpoints
    757597fabfa track unmaintained repo - mailru/easyjson
    2e8f66afb39 Promote PV/PVC status e2e test to Conformance
    28f335a3397 kubelet/images: refactor image gc unit tests
    e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
    d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
    56023e00cbc cri-api: compress OWNERS files
    f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
    e3098225eaf bump kube-openapi
    b30c6bdff81 Fix v3 spec
    d1a6c0ae7df Update cri-api change in v1.29.0
    2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
    5d0f8530f6b fix Huge Pages failing test
    7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
    dd9c3358f5e Revert "podresources: e2e: force eager connection"
    27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
    5c0618b848d codegen
    011c65e17e2 configure npd to run as daemonset on cos
    39dcad8a19e Populate CRI filesystem info error
    bfda244e54e pkg/proxy: dual stack health checker
    73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
    f69e1fed82f Remove GAed feature gates TopologyManager
    957adfac498 fix invalid log calls
    8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
    fed4f16a7ad Remove GAed feature gates SeccompDefault
    33f2d487e2d Promote KEP-2681 to beta in 1.29
    18c3b6fce43 Register metrics for apiserver handlers
    56836608303 remove deprecated framework.ExpectNotEqual for node
    b548bbb8cf8 When reading pvc status allow bound to be a valid value
    11b0eed9e7f Work around bug in gcloud when downloading logs
    1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
    4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
    6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
    332779a3b29 add a simple e2e test
    3a96afdfefd implementation
    fa01dfdb0a4 validation
    0f46033dca2 fixed miscalled function
    9327f3a1734 api changes
    c2d473f0d43 remove ClusterCIDR
    32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
    c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
    fb1fc8b4a72 ratcheting: disable correlation by index
    d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
    0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
    60c90fc0854 cleanup: consistently support nil receiver and document
    abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
    ddcbae734af Add a 0 × 0 case
    fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
    26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
    e1fa1df3ae8 cleanup: consistent interface{} and any
    0495616230a cleanup: add godoc
    4de3e73b8ac Add test cases for mostPositive and mostNegative
    685ae024332 Add more unit tests
    79325b6178d Multiply by a scalar
    4381eb7237e quantity: Add multiplication methods
    1ae54296291 add potential fixes for flakiness in eviction tests
    db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
    b0c7956a869 Bump distroless-iptables to v0.4.1
    a34d2f3b134 fix limitrange flaky test
    10151a5e38f kubelet/sysctl: update log level
    cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
    4dedabf2a65 test: fix boilerplate
    80e378181ea add rundir folder to gitignore
    800a8eaba7f Prevent rapid reset http2 DOS on API server
    968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
    78ffa882be2 chore: updates api doc
    de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
    761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
    b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
    c94240e2e2e move kubelet constant for podreadytostart to staging
    1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
    de01788deaa Switch to newer cos-gpu-installer - v2.1.9
    adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
    7b1d87383ec add kubelet policy skew test for kubeadm
    5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
    0149c1f8b31 test: few more correlatedobject test cases
    ba9347230e6 test: add correlatedobject test cases
    15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
    c08a9321eed cleanup: add header and fix spelling
    27cb869e559 refactor: move correlatedObject to its own file
    b321e8bf0db refactor: make CachedDeepEqual independent of validation
    921c0d01800 cleanup: add defaulting for job manual selector (#120206)
    c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
    baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
    ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
    555c1b8091c bump kube-openapi
    83760ae56c8 update openapi with required requestBody
    5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
    a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
    7989400bef5 Fix concurrent write when filling PVC labels
    54714686bc6 Modify test PVC to detect concurrent map write bug
    d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
    2c1836bc245 remove deprecated framework.ExpectEqual
    990a46f9bde Update QueueingHInt's KEP
    b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
    0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
    babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
    4acaf9ebed7 Add service name tests
    438c0daab75 add rest of accessors to common.Schema
    0f989046d06 kube-apiserver: move cloud provider validation into options
    5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
    80269d5d349 fix missing http.target trace attribute
    dc334b953d9 dependencies: update otel-go dependencies
    e76aad1813b refactor: use common.Schema in CorrelatedObject
    83a1dbf885d refactor: export correlated fields
    e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
    fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
    2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
    471e3ab8281 refactor: factor out object correlation
    30cf9ed5677 refactor: directly implement ValueValidator
    4fb5f1a6119 refactor: remove unnecessary lambda (noop)
    19ecf93ec3d e2e: define features and node features
    f2d34426f86 e2e: enhance SIGDescribe
    39b6916cbcc e2e: add wrapper functions to annotate tests
    535ab743461 e2e framework: track and report internal bugs
    3afdcc03ea5 e2e framework: list specs and labels
    aa4d2fc5edf e2e storage: remove useless info message
    581af9ba6da kube-apiserver: use only one client in apiserver controllers
    215c4627ef9 Update SECURITY_CONTACTS
    e9957d79aae make update
    0eacff0baf9 compatibility (adapt testdata)
    b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
    f538be659c7 hack: fix update of golangci-lint verify scripts
    6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
    00ae26cda8f Create e2e test for PV/PVC status endpoints
    b190ea0c966 hack: update golangci-lint verify scripts
    302d350e88e set maxLength to longest enum.
    d4a5a085a84 Improve error message in cpu assignment logic
    79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
    52c58d970e5 fix data race in apf unit test
    a6b0a6c484d Bump distroless-iptables to v0.3.3
    f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
    e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
    0be5fdb5ced Add volume plugin label to SELinux metrics
    137ad9bf2b5 clean up deprecated funcs in e2e framework
    d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
    5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    122ff5a212a Move grpc rate limitter from podresource folder
    9cca527c4b3 Migrated  `pkg/scheduler/framework/plugins/examples/` to use contextual logging
    62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
    ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
    c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
    bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
    7cba35f6519 nodeports: scheduler queueing hints
    20db4ef3d64 kubeadm: fix wrong ut for util/etcd
    4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
    3c4512c6ccc hpa: always update status metrics when updating the replica count
    89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    3ee2f27e5bb kubelet: cloud-provider external addresses
    619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
    8b5f30ef096 Don't reuse CPU set of a restartable init container
    e8e22f645d0 kubeadm: Optimize the logic to override the arguments
    8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
    a888fef242f Use timeout function to detect transient errors
    1b489963c8d Add nil checks for hpa object target type values
    0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
    3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
    a213edae2a6 Add package-level godoc to pkg/kubelet/cm
    b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    b96a074bcdf convert pointer to ptr for job controller
    1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
    914210ee9a6 revert back to IsUnexpectedCloseError check
    e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
    c03579bfa40 typed variables support.
    4d157bb1427 add single boolean to composition e2e test.
    69a3e3d1089 Add --extra-peer in conversion in kube_codegen
    3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
    4b391501795 reflector: fallback to the previous mode on any error
    11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
    5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
    9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
    c65fe450d8a Generated files
    26f113be2fc reflector: close an established watcher when the StopCh was closed
    f17468ff060 Fixs a validation error in teh admission registration API
    6d759aac910 delete addon-manager test
    e7b2aeee930 Fix API docs for audit APIs
    38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
    243ba5fb6b6 remove an e2e test specific to kubeup clusters
    98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
    566fad5eda3 add metrics to the ipallocator repair loop
    4eff70dcf9f add metrics to the nodeport allocator repair loop
    6c9ddf300cf update generated
    9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
    44cb330aa00 Improve kube-proxy config / CLI documentation
    0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
    d2a3184c47c remove pkg/encrypt and pkg/value in kms
    e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
    2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
    74180aaf661 Fix scalability concerns in test runs
    5ebde41efb5 Refactoring variable declaration and value setting
    0e8a1f18163 e2e: remove redundant spaces in test names
    6200eb04aff use generic sets in scheduler
    e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
    d9002176649 fix missed branch - targets when building using arm64
    61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    7437ad2617a Add/update prechecks to verify-govulncheck.sh
    59ad81a6157 controller/clusterauthenticationtrust: complete event filter
    a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
    63950491764 controlplane: make option structs uniformly optional
    a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
    5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
    27a68aee3a4 k8s.io/client-go/tools: support context for event recording
    772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
    4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
    394bcaf1820 Only configure swap if available on node
    2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
    de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
    19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
    ff5f5bc1613 Merge several NodePort tests into TestNodePorts
    f38231d5687 Merge all the "reject when no endpoints" tests together
    2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
    ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
    2172ea60836 Fix typos: update Enpoint to Endpoint
    6297067ff1a apf: request ejected from queue should use reason 'time-out'
    11ef9514dad apf: remove RequestWaitLimit from queueset config
    da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
    f39213a7e44 apf: use context for queue wait
    52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
    9b32d2f67d4 Default clientset_pkg and clientset_name variables
    36146ad686a e2e dra: enhance test driver
    46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
    cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
    0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
    2ce4f85a465 update verify script to check deprecated fields
    e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
    70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
    e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
    4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
    ca562fd280a storage/etcd: the watcher supports the API streaming
    84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
    1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
    1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
    72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
    b71d7f9305c use generic Set in scheduler
    7c5219438df Remove an old compatibility check/warning
    5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
    1b602ffd9a4 Bump Konnectivity to 0.28.0
    06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
    0910fe4b983 Extend iptables packet tracer to check the protocol
    a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
    0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
    4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
    d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
    43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
    a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
    534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
    0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
    9345da51ac4 fix comment mistake, run "make update"
    45a776d5ff4 update rules to switch from deprecated dir field
    9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
    5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
    b489beb365f Remove an old compatibility check/warning
    eb109e39480 e2e: bootstrap vsphere tests earlier
    d3d1827c054 Use local isCgroup2UnifiedMode consistently
    8a31bb6786c workqueue unit tests to assert collapsing behaviors
    dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
    b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
    d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
    0786fcc941b kubeadm: Remove the support of configurable component configs
    3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
    0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
    ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
    e00551fe5d4 Allow storage migration of CTB without attest authorization
    c816601d834 reintroduce resourcequota.NewMonitor
    7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
    f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
    a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
    41584bde233 fix code style
    de244b2678f Promote StorageClass e2e test to Conformance
    b23575d0fcf remove storageclass endpoints
    a62eb45ae2b Rename job reasons to JobReasons as part of api review
    301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
    5341890c96f add missing labels to kube-dns deployment
    9e060590e6f skip kube-dns tests if kube-dns is missing
    2a827767458 change rolling update logic to exclude sunsetting nodes
    04668c00432 cache/reflector: check the value of the initial-events-end annotation
    83c37acb21f e2e framework: adapt unit test to Go 1.22
    5c28fd28478 vsphere: adapt to govmomi bump
    4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
    26a395ecc28 Trigger CI
    12c0c08e658 fix data race in test
    9533cfe2eed fix: add unit test
    bad0593a686 fix kubelet image gc
    91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
    272b23cc7ad kubelet: fix log when using --reserved-cpus
    42356bfbb3e move common logic of highestSupportedVersion to util package
    fc6b19a4ba6 .: bump govmomi to v0.30.6
    afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
    3a96baf3fa8 storage/testing/utils: add helper functions
    c8b9d64d81f scheduler test: unify util to fake pod.
    b953708fa93 Update 1.29 Release Notes team
    a919079ff31 Check --show-events in kubectl describe pvc (#120380)
    1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
    108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
    52c582ca77c Bootstrap API Types for Structured Authorization Configuration
    bbb905c794c remove gce healthcheck interval e2e lb test
    b59d4afd14e fix typo exeucting => executing
    62275e3cc8c fix typo dervied => derived
    79a7833ade0 fix typo Mininum => Minimum
    6e3ebdc68e7 fix typo Conext => Context
    409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
    b4e5b868a8e Don't reuse memory of a restartable init container
    10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
    6c59e8be5e2 hack/update-vendor.sh
    dad1b2a4306 Fixup kube-openapi/pkg/cached changes
    e1ffbacb7ae go.mod
    7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
    39af594f312 storage/testing: a simple refactor
    40618b765cc add loging and bump timers to avoid races
    3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
    79d0dde4a83 replace hardcode string with exists variable
    9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
    62267518b83 Fix systemd unit string matchs
    c6e9fba79b8 move reasons to api package for job controller
    e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
    0288367db80 test-e2e: Retrigger the RBD image post merge job
    28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
    2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
    2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
    7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
    309876b5d78 CHANGELOG: Update directory for v1.28.2 release
    710dceded51 Look for pods in ownerReferences of PVC (#120427)
    80c8074e3be service controller: limit logging node names to 50.
    349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
    21e26486ac3 sync Service API status rest storage
    239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
    7fc11f47ff4 Mark a volume as uncertain-attached after detach error
    99903071469 kube-scheduler: drop deprecated pointer package
    9e34aa306cd Update hack/verify-govulncheck.sh
    5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
    af151eeba2c specifically check that the pod was successful
    7710128636a kms: remove livez check
    15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
    4f20a72ea00 variable name should not conflit with import package, replace the variable name
    084deb7a7cf clarify the description of the metric apiserver_storage_objects
    9da533ced6f API Chunking conformance metadata
    3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
    4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
    819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
    6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
    868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
    6b4ab616a2c Increase range of job_sync_duration_seconds
    d765e40a988 pass GOTOOLCHAIN to build containers
    7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
    43b434f66a8 sig-node: add rphillips to reviewers
    d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
    4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
    09d64ed7d4f promote sli metrics to stable
    0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
    0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
    e6435e98eda promote component SLIs to GA; remove feature gates for component slis
    e2c1c0d34a6 kubeadm: drop deprecated pointer package
    357d7804b8f kube-proxy: drop deprecated pointer package
    678b958567e use universal decoder and add a check on default dns Policy of static pod for test
    1fb4eee94e0 Use container log instead of termination log
    190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
    fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
    6f9140e421c DRA scheduler: stop allocating before deallocation
    2dd7db306a6 Update modules.txt
    61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
    d3eb082568c Create a node startup latency tracker
    2d86c333f57 add test case for generating etcd manifests
    912041ce41b kubeadm: fix diff order and add test for new default value manifest
    41b62c4dd71 Promote PV/PVC e2e test to Conformance
    0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
    f4467457776 Improve logging on kube-proxy exit
    df5c1bb1ea1 added documentation about the format of certificateKey
    43ccf6c4e8f kmsv2: add apiserver identity to metrics
    c1a0aa08e31 Add cni plugin auto Arch and OS selection
    b443a841e30 kubeadm: add log for static pod manifest diff
    f135eed37b9 update codegen
    d7264d0af03 Make StatefulSet restart pods with phase Succeeded
    4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
    7e4b5d0d49a Final Fix
    f499b4f8918 Bump distroless-iptables to v0.3.2
    18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
    93e3b07e11c [cluster/gce] Add KCM specific args
    48f453d6498 cloud-provider: Log additional options
    aa89e6dc978 Use ptr.To to retrieve intstr addresses
    9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
    5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
    3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
    a0a8765027a fix: update thirdpartyresources refs
    5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
    43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
    a69f56e1375 fix: check if initsystem service exists
    7dea3d6c3bf New mock test framework for windows kubeproxy.
    975da2fb239 fix typo in client-go package
    3a1a67e33d7 add aojea as controplane reviewer
    cc77b97c5e9 add aojea as client-go approver
    7a13b11af0e update e2e import restrictions
    6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
    08006c842fd apiserver: rename request body size metric
    8451c80b601 pin gengo
    93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
    98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
    dbd3eb54191 remove logcheck.yaml
    f365cae9ee6 Fix typo in api.proto
    2d1877c97b6 fix breaking pv creation when the validation webhook exists
    f33265cf5d0 HandleRetry has already called in the GetObject
    fc51a27c036 fix typecast missing
    2ea47038b90 podresources: e2e: force eager connection
    6cd446a2064 Add cloud library to unwanted deps
    9f76d8d45a0 Track vendor status of unwanted deps
    87d49a51bed fix(queue_test): make sure the first bind failure via counter
    94afd6e3a4d skip the reason check for OOM tests if it will fail
    f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
    d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
    b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
    c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
    36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
    9c1df5ff0af move back to bullseye
    67858e1ff06 Bump images, dependencies and versions to go 1.21.0
    0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
    c682d2b8c59 scheduler: add ResourceClass events
    2ad4304e8f2 Add Windows support for IPPVS
    15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    43fc6b5bdb0 Added suggests changes
    355ae44a3ca Revert "bump npd to v0.8.14"
    e7ee3ae3d94 Create e2e test for StorageClass endpoints
    418af0f4dcb register API types only once for encryption config
    2144852f7c9 Commits merged
    657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
    b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
    c131c92b9f3 scheduler: unit test case for concurrent event with other pod
    a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
    0024c7e1668 Changed the generator codes for kubernetes metrics table
    cd943dd95e3 scheduler: fix tracking of concurrent events
    933bcc123b4 only drop invalid cstate packets if non liberal
    7c75b018d57 cmd/kube-apiserver: add .import-restrictions
    43783aeb18c drop release-1.24 rules from publishing-bot
    e190e179b3c Document `cluster/gce/gci/mounter` as static binary
    059e8353b76 check labels/annotations in the beginning
    6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
    a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
    e8564d6c5bc KEP-3895: Promote interactive delete to beta
    14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
    ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
    b35357b6c08 cleanup: omit comparison with bool constants
    622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
    7c33b78418c  remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
    9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
    fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
    e6dfdb240fd Output the error message for better analylsis
    ff3cb43c300 remove labeld-deployment.yaml
    cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
    c74d045c4b7 scheduler_perf: show name of one pending pod in error message
    3c2cfd9a4fd resource claim controller: separate generated suffix from base
    2c5a11a55bf Match on cri-o socket suffix only
    214772c1104 dependencies: update opencontainers/selinux to v1.11.0
    95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
    3f8f14397e1 Set external credential provider to true by default in kube-up.sh
    410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
    45b9b0df41f Add namespace to apiserver tracing
    c83eb6dcaaa Add subresource to apiserver tracing
    bcb59a03ebb Add name to apiserver tracing
    646053d73db Add api-version to apiserver tracing
    8c34208a62f Add group to apiserver tracing
    6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
    ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
    2e5f17166b9 pkg/proxy: fix stale detection logic
    95121fe846f kmsv2: add legacy data integration test
    42e8cfa28ac fix failing metadata test
    cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
    8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
    0fb1f59a881 Improve service unit test failure report
    39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
    36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
    3e252857c1c Add unwanted cloud deps to track
    875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
    6058540f3d0 storage: document ProgressNotify from storage.ListOptions
    f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
    936d67f6888 Update distroless-iptables image version to v0.3.1
    bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
    a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
    bfc3c2110fc e2e-node: fix TopologyManager test jobs.
    3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
    f1051f34a79 Remove deprecated framework
    062c57ae92f dra controller helper: make allocation error message more readable
    f96e23e477d dra controller helper: merge log entries for informer events
    78f3b76390b scheduler_perf: use different log names for different DRA drivers
    d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
    fcff9969095 adjust error message a bit
    889c8e919bd New repo who dis? distribution/reference
    741f1461571 Revert to json-patch 4.12.0
    b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
    8f6a79b29fa use external cloud provider by default with gce
    903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
    a46bab69308 Fix a job quota related deadlock (#119776)
    696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    63177db32c2 Add an e2e test for the pod sandbox changed scenario
    e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
    3c5a58c5f89 Refactor checkErr func
    f22d8540723 unwanted-dependendencies: updating references, and `jq`
    0323fe42e23 adding more callbacks in kubedrain helper
    e01bd641447 Avoid creating local variables that don't change
    10553a19668 Flatten switch case
    1f4f2a5d601 Refactor common WithRange case
    ede524e1a6a fix a pidpressure test flake
    3bc6ee6fef7 unwanted-dependencies: sort this list
    eb5695b0c5c unwanted-dependencies: adding archived repos
    15c02f2a034 add integration tests
    9e1ff1e5120 add loading config and wire feature flag
    57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
    160589a0edb Refactor transformers for watch to implement Encoder interface
    04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
    46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
    bf41b0462cc Fix OpenAPI aggregation cleanup
    16a7b536022 Fix typos in comments
    2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
    be4692864bb Remove duplicated returnRV variable
    2e174a029f5 Add timeout to listContainerStats context
    2825519da2c apf: remove v1alpha1 API
    a926f594da9 Bump runc to v1.1.9
    7b44d73f73f bump npd to v0.8.14
    879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
    53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
    8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
    209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
    41adc93ca3a remove GAed FG DownwardAPIHugePages
    e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
    7e7b67f2ccd remove GAed FG GRPCContainerProbe
    af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
    5dbec5c715b local debugging should utilize the same defaults as prod
    d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
    8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
    f5d6c65186d paginate initial list inside the storage watcher
    8d9517318a4 Extend npd e2e timeout to fix npd e2e error
    618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
    b2c0d80c37f Test watch converter encoder
    03126c54658 add comment
    651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
    709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
    3fcc045bce9 Minor cleanup tranformers interface
    172a41192c6 Cleanup setting non-nil Items field
    5269e769902 scheduler: properly skip DRA events
    1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
    580f83ab4a5 Avoid duplicated dots in pod condition
    855b445d28d Remove deprecated selectorSpread
    c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
    87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
    0ea6522807d apiextensions-apiserver: generate applyconfigurations
    dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
    9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
    94d03ccc83b Squashed commit of the following:
    030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
    cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
    3d583398fe2 Avoid to build the error msg for twice
    484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
    f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
    05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
    eb0afbc7d01 kubeadm: update swap warning for v1.28 change
    fa37bebcd4b Add comment about why AttachFunc be overridable
    d680bc540b5 fix(test): fix error handling condition in test
    01df59a73b9 pkg/proxy: remove equal method from endpoint interface
    6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
    e9be1d7438b Test now has coverage!
    628bbb9ef8a kubeadm: add supported etcd version for v1.29
    dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
    78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
    e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
    1bf90f9484c add StructuredAuthenticationConfiguration feature flag
    1bad3cbbf59 wiring existing oidc flags with internal API struct
    f909eb630ca add AuthenticationConfiguration v1alpha1 api
    ff56d3b6914 Refactor WatchServer to prepare for using encoders
    a4ce32769ff fix pod delete log in deployment controller
    0bc0256093b Update job_controller_test.go
    ff10df107a4 remove fake deployment
    13a8ad12b82 apiserver: fix data race in etcd metrics
    dec1c361255 add kubectl rollout e2e test
    22f4b1c56ad Static check fix
    70e2deb32f9 Fixing lint problem
    6ded53ce4dc Added back test changes
    5fb049ff473 Added create job & cleanup
    ff1659cb798 Added syncjob
    f87cc43cdb0 Review Changes
    d08fc3a4d01 Another one creeped in
    ef6a0eb6d85 Final Lint Fix
    aa9f38c36d8 More Lint Fixes
    601679446ae Lint fixes
    cf32ae9453b Initial Commit
    297f04b74ae Added function to remove finalizers as backup
    1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
    5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
    c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
    47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
    ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
    02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
    13b52a18483 fix crd finalizer validation
    ab018481342 Make sure skip score plugins alwarys returned
    6805632abb8 CHANGELOG: Update directory for v1.26.8 release
    f847565c081 Move mount warnings to info logs for normal expected paths
    63df8a5821a CHANGELOG: Update directory for v1.25.13 release
    52e85074042 CHANGELOG: Update directory for v1.24.17 release
    980fa6a2b9e Add CEL library lifecycle linter
    3fb14cf4e7a Bump cel string lib to v2, add tests
    640a2ec3327 Update k8s code to handle cel-go changes
    1a850a00630 Bump cel-go to v0.17.6
    24877f96fbb Incorporating feedback on 119341
    2bede058f92 Use environment varaibles for parameters in Powershell
    c761c165627 Use env varaibles for passing path
    1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
    9ee94b0204a Remove duplicate codes in framework RemovePod
    f752ca2dc84 Make API chunking conformance test deterministic
    28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
    79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
    ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
    6a16c076e76 hack: move common "verify generated" shell code into function
    9c83c380e0c Add wait for cache sync
    b1223e0d1ac check for overflow
    87cf890632c Fix CEL cost handling of zero length replacement strings
    b0e249f657a Handle edge cases in seat demand stats
    037640af8c8 Apply suggestions from code review
    bd06c26d580 fix: concurrent map writes in e2e test
    826f3a130ae promote to conformance Service multiprotocol tests
    98d772ca3c4 Support multiarch/platfrom in find-release-tars
    c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
    93832de6246 stop using deprecated framework.ExpectNotEqual
    145dbb6accf stop using deprecated framework.ExpectNotEqual
    d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
    0039f24d74d apf: refactor promise to use a context
    3e9a4c15a85 Restrict what imports get into code within test/e2e_node
    c1eb18c00ca generated files
    039859b9b72 e2e network test for udp services with hostNetwork clients
    2472291790e api: introduce separate VolumeResourceRequirements struct
    a5600b69251 storage/etcd: simplify passing the transformer
    6161752ecbe storage/etcd: remove newWatcher function
    3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
    a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
    b8512cfe247 expect the new resource_scape_error metric
    905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
    5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
    f93bd699aaf Trim managedFields in pod informer
    2f576969eee reducae function calling to once
    093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
    700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
    75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
    c112a34642d add unit test for kube-proxy service cache with ipMode
    7f805dc9354 fix test name
    30ff937aaf9 add a fake load balancer class to fix e2e test failure
    3cbecf218df kmsv2: add metric for DEK cache filled
    d86e72202c4 kmsv2 test feature enablement unit test
    bd6f5487463 mark the OOM killer as serial to reduce flakes
    afe9045e466 Add v1.28.0 API testdata
    a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
    8163d244ede Update ccm flag help to describe disabling webhook serving
    8291b847d58 Allow disabling both webhook ports in cloud-provider
    f407b31d42a kubeadm: Fix typo where API group is not correct
    72af21e1a13 kubeadm: Cleanup the unused input parameters
    1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
    e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
    fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
    48260b4a77b kubernetes mutual (2-way) x509 comment
    ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
    6c2cfac0a97 Revert testgrid url changes from CHANGELOG
    577197559ae remove the legacy test dependency
    af26ebd0fa3 translate beta label to ga in volume_zone
    4712025ea84 Graduate kubelet resource metrics to GA
    6ef90979720 Update the URL of testgrid
    af9bf7b41e0 Prefer non-alpha storage versions when available
    09fa21ab879 Store validating admission policies and bindings as v1beta1
    a422d11c772 prep for go1.21: use -e in go list
    ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
    cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
    5567f288e74 api: change list type for node lists in PodSchedulingContext
    79333684600 Update CNI plugins to v1.3.0
    f07a3a3f263 calculate sidecar container resource in pod autoscaler
    427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    5bbc4f76055 Pass Pinned field to kubecontainer.Image
    a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
    b75c5d33e5c bump the busybox test version to resolve test failures
    bd36be02188 Make gomaxprocs install optional, limit to tests
    9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
    f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
    5752cbd8c76 chore: add pod UID in event log
    7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
    f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
    a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
    bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
    8314122382c e2e framework util subtle bug checking endpoints
    9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    1e961af858b scheduler_perf: test case for DRA with multiple claims
    0331e98957f scheduler_perf: fix installing DRA test driver multiple times
    092897f061f drop v1.26.0 API testdata
    4950521ad88 kubeadm: increase ut for certs/certlist
    224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
    3edae95e5ae Add unit tests for subdomain match in keyring
    8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
    a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
    a161fa8017b pull Host from kubeconfig when needed
    03415ebc1da Integration tests for IP mode field
    86b1f095ca7 Proxy changes for IP mode field
    47fec59a31a parse node selector in prefilter
    4fb0ce28377 Fix broken link to testgrid
    34a89f039b8 Update cri-tools to v1.28.0
    29a6705dabc Generated code for IP mode field
    3ac2899d2b5 Add IP mode field
    cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
    b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    947c9376f6a change struct methods receiver to pointer
    e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
    717c149a734 fix mirror pod nfs test failure due to differing NFS versions
    279a663f948 Update README.md
    6f27733af8d Job: Replace deprecated workqueue library with supported one
    dd7b7073c38 e2e: add test for verification of timestamp for new PVs
    8e661498702 e2e: remove extra spaces
    b9cf6991e63 Use tracing semconv types instead of own defines
    765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    1863a808b20 fix: add code comments
    9646ae5a9ef Fix: null jsonpath serialization
    8ab6bee676a Make seccomp status checks in e2e tests more robust
    509ffe2938f Fix receiver names in legacyProvider
    80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
    f73c253accf fix typos for pod replacement policy
    5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
    62b063b74b5 wsstream: use a single approach to detect connection upgrade
    74053e21519 Create e2e test for PV/PVC endpoints
    49e00e8bdee Move adding GroupVersion log until after an update is confirmed
    77b3bb0f69b fix race on etcd client constructor for healthchecks
    a6329ac4536 Fix to honor PDB with an empty selector `{}`
    0e238409290 dra test: enhance performance of test driver controller
    40b604e3741 Update pkg/apis/core/helper/qos/qos.go
    f355b22f5f7 implement Stringer for podActions
    e4d16f34c15 Add test coverage of result size of string operations
    10fe3da87db Delete PSP API types and generated clients
    69a5a528967 Bump cel-go to v0.16.1
    6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
    4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
    5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
    ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
    a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
    37730c07dd6 apiserver/httplog: pretty up impersonation output
    3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
    d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
    0944c00778a Fix some typo in kubelet component source code
    3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
    ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
    24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
    074d5b53299 Rewrite the tests to be table driven
    391c1a3eccd dra: cleanup manager unit tests
    a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
    85c385d4101 Update the container images used in cloudbuild to their latest version
    c4f4e3bc43b pkg/proxy: unit test refactoring
    4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
    b6ae858e01f Drop AvailableResources from controller context
    d5d90b7b228 add support for ExponentialBucketsRange
    90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
    a215b29d7cf remove makefile:generated_files in v1.29.
    f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
    c23cee1be3c fix OOM killer
    4b6abf10c6e Handle errors when preparing lease for update
    ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
    a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
    14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
    109cf6820d2 Update base image and add utilities to kubectl image
    2a767c9916a update the busybox test image to 1.36.1
    133696725ae implement secret empty string value integration test
    7f53f7649e1 Use intstr.Parse instead of reimplementing it
    1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
    63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
    18c46b2487a add validation for static pods to have a name
    66aa2af0979 CEL lazy map: add test for boolean short-circuiting
    307b0630aa6 cri-api: add CRI implementation maintainers as approvers
    c4739313b7f Track manually created secret-based tokens
    df89045b53c dependencies: update github.com/ishidawataru/sctp
    2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait().  This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
    213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
    57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
    fb9646fd60d apiserver: add flow control metric current_inqueue_seats
    4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
    fdea6ad17d7 kubectl debug: Remove legacy server support
    baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
    41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
    3964f71fe02 e2e:podresources: verify count for terminal pods
    6d244728b9e adjust order and fix typo for kube upgrade
    479b2d03a43 kubectl: fix describe node output when sidecars are present
    4e2e059c7b2 Graduate RemainingItemCount to GA
    6acfa3cb4ac Graduate APIListChunking to GA
    e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
    9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
    2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
    60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
    7ffd3063cef dynamic resource allocation: reuse gRPC connection
    dbaa9fe6b46 added podgc orphaned pod unit tests
    173b5a75b96 Trim managedFields in controller-manager
    c86f562f29b Run hack/update-codegen.sh informers subprojects
    9c4651bd047 Add 'WithTransform' SharedInformerOption
    d1946392528 Cleanup kubectl legacy server fallback
    106a931c299 fix intergration test
    d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
    a35608cc614 Update debian-base for test images and others
    43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
    a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
    2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
    f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
    709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
    b8336f399bf KEP-2305: add metric to track unbounded label values
    1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
    654e98e0a2e add endpointslice repo to staging README
    b7cbebcd034 Added oomkill test for init container and fix typos
    d8c145d20da fixes the issue in the documentation of kubectl events
    12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
    c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
    733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
    3bae26ae58b Check dbus error on container runtime start/stop
    70f979c8da3 Alert message improved according to standards
    a6554b9d5d1 Make kubelet label types public
    f2fa6d5f6b3 Document PVLabeler as deprecated
    7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
    fc36d2fee83 chore: improve error message for unstructured helper method
    b60a3a58df2 api-machinery: stop using deprecated io/ioutil
    0da37d8c544 chore: omit comparison to bool constant
    17e6c5cb9f0 Error Typofix
    9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
    01c2c4f35f3 Error test cases added
    a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
    f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
    c1cced24aa9 WIP: don't exclude .git from rsync
    396c8a67832 test: TestPodDeletionEvent
    975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
    ba49ccdbc9b Gracefully handle empty config error when local flag is used
    96ab232f5f7 Remove reasons from PodConditionType
    1d9eed9f950 chore: slice replace loop
    9378e580cf4 chore: loop optimization
    fc1b8a823d4 cli: stop using deprecated io/ioutil
    b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
    01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
    07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
    208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
    72f89b63757 kubelet: fix comment typo
    12f8eeaf9b1 fixed typo in get-kube.sh
    3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
    8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
    887654160f9 Improve the performance of schedulinggates
    0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
    847df6d9153 kubelet: output log even file is rotated
    05f04f866eb Keep PLEG interruptions in a separate interface
    b109a585398 Improve the performance of isPodStatusCacheTerminal
    84c14c65c6b Remove unnecessary type conversion
    55d471601b1 [ut] increase covrage for kubelet/prober/results
    e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
    18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
    08a69d63413 Improve performance of method PodRequests
    337f4e524aa Do not error log CRI stats for not cached partitions
    f2aeb3b0d91 Improve lock performance
    fb6fd36384e Add endpoint to skip topology aware log when missing zone hint

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
This commit is contained in:
Bruce Ashfield 2024-01-19 21:22:54 +00:00
parent a5fee65b68
commit 17eeea68a5

View File

@ -5,16 +5,16 @@ applications across multiple hosts, providing basic mechanisms for deployment, \
maintenance, and scaling of applications. \
"
PV = "v1.28.2+git${SRCREV_kubernetes}"
CVE_VERSION = "1.28.2"
SRCREV_kubernetes = "e3b5e621f07f0fee298f641ebded61b8f393fe27"
PV = "v1.29.1+git${SRCREV_kubernetes}"
CVE_VERSION = "1.29.1"
SRCREV_kubernetes = "a02da633101bd7919153dd56412b09221c0139bf"
SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
PE = "1"
BBCLASSEXTEND = "devupstream:target"
LIC_FILES_CHKSUM:class-devupstream = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
DEFAULT_PREFERENCE:class-devupstream = "-1"
SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.28;name=kubernetes;protocol=https \
SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.29;name=kubernetes;protocol=https \
git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=git/release;protocol=https \
"
SRCREV_kubernetes:class-devupstream = "e3b5e621f07f0fee298f641ebded61b8f393fe27"
@ -23,7 +23,7 @@ PV:class-devupstream = "v1.28.2+git${SRCREV_kubernetes}"
SRCREV_FORMAT ?= "kubernetes_release"
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.28;name=kubernetes;protocol=https;destsuffix=git/src/github.com/kubernetes/kubernetes \
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.29;name=kubernetes;protocol=https;destsuffix=git/src/github.com/kubernetes/kubernetes \
git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=git/release;protocol=https"
SRC_URI:append = " \