kubernetes: update to v1.30.2

Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits:

    b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm
    3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same.
    95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby.
    50428ed169f gitRepo volume: directory must be max 1 level deep
    dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables
    c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly
    a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod
    81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests
    49a2366ddb6 Initialize terminating field in the Job controller unit tests
    46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled
    85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2
    39683505b63 Release commit for Kubernetes v1.30.2
    47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base
    cd73ad187cc update driver installer
    654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable
    1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap"
    0df7267723b kubeadm: use the actual configured kubelet healthz address:port
    398ab938efc kubectl create cronjobs: Manually set OwnerReferences
    42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node.
    f73bb17efbf base on allNodes when calculating nextStartNodeIndex
    a26f2c59e3e Fix printPod panic with spurious container statuses
    85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1
    6911225c3f7 Release commit for Kubernetes v1.30.1
    3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions.
    b762a187f4a cherry pick #124618 to 1.30
    1c8b0f697c5 fix requests tracker concurrency
    2956e294c44 fix conflict race in statefulset rest update
    7d9b913d106 fix stateful set pod recreation and event spam
    a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests
    f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables
    d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year
    ad1353499eb Clean up PersistentVolumeLabel admission plugin
    42742942f5d scheduler: preallocation for NodeToStatusMap
    d17cd6ef75c tag service.spec.TrafficDistribution field as alpha
    d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled
    37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553)
    1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight
    e1594967bbb Idempotent transformers in scheduler & kcm
    dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade
    7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently
    6bb6b07b185 e2e node: fix -v support
    4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name
    933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation
    502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0
    7c48c2bd72b Release commit for Kubernetes v1.30.0
    69e332560d0 CHANGELOG: Update directory for v1.27.13 release
    128d6cc1462 Add envFrom to serviceaccount admission plugin
    fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
    d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2
    7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release
    22140b6a070 Release commit for Kubernetes v1.30.0-rc.2
    be4b7176dc1 Fix Abs path validation on Windows (#124084)
    d19bff9a022 Update publishing-bot rules to Go 1.21.9
    1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
    99fac38d286 Update x/net for CVE-2023-45288
    f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1
    6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release
    77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1
    f338ab5f959 svm test: wait after updating CRD to avoid flakes
    363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration
    0add741012c fix test flake caused by not waiting for CRD schema update
    02139c91028 Deflake authz config reload test
    fc428df4914 update setcap/debian-base to bookworm-v1.0.2
    06e69e4b099 releng: update publishing bot rules for 1.30
    d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release
    6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0
    c893c484328 Use the right feature gate when updating uncertain volumes
    6f5240b19c6 e2e_node: fix podresources test
    9ce994af9fc e2e_node: remove `Dbus` test case
    247392271f1 Fix admission error
    84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles"
    a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod"
    225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout
    4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure
    f2d4848e49c add stefan as apimachinery tech lead
    0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage.
    a7f23e46da4 Fix OOMKiller test warnings
    fc555839d73 Allow installing newer containerd/runc on COS
    10b6319e64b fix slow dra unit test
    2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint
    656cb1028ea CHANGELOG: Update directory for v1.29.3 release
    e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup
    fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release
    bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release
    26881132bd0 kubelet: assign Node as an owner for the ResourceSlice
    80db011202e remove VolumeAttachment endpoints
    55302de991e Promote VolumeAttachment e2e test to Conformance
    4048598620d Change the API operation e2e test to conformance test.
    045d91d882c Add e2e tests for GA API
    a0add8d2c75 dra api: NodeResourceModel -> ResourceModel
    c78812868f5 CHANGELOG: Update directory for v1.26.15 release
    0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0
    c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
    f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
    8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers
    1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers
    4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported
    6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812)
    5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package.
    926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
    c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release
    4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh
    2c2d424b012 make type checking tests non-conformance.
    19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits
    7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services"
    3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
    a527cab9fce Fix non-recursive list when consistent list from cache is enabled
    727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled
    dc2974c6461 retry policy creation for CRD type checking E2E test
    9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests
    4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test
    21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil
    fc2134c84cc dra kubelet: fix error log
    51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload
    ea14ccdf13f e2e_node: mount_rro: fix error string comparison
    5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts)
    3ce6c104e21 Support fetching NPD from github releases in standalone mode
    56da06b6dd9 Fix the dirname command in macOS does not have a -z option
    62ac88b9ea5 Add metrics for authentication config reload
    b4935d910dc Add dynamic reload support for authentication configuration
    13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call
    d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts
    c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts
    6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts`
    dd0882a83e0 kubelet: expose `node.status.runtimeClasses`
    8db07446f19 api: validate RecursiveReadOnlyMounts
    8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate
    ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts
    d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts
    0b1a507b002 pkg/features: add RecursiveReadOnlyMounts
    76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts
    27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler
    f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers
    9161302e7fd feat: implements svm controller
    121607e8096 Require email_verified to be used when email is set as username via CEL
    79fe37537c3 Adjust the validation to the current state
    1163c7ed9c6 Adjust the API comments to the current state
    ee64b30d05c Check taints as well for control-plane
    acf6b500eef Follow up fix to the job status update test
    91a7708cdce feat: implements Storage Version Migration API in-tree
    04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated
    6a361e1f364 dra api: enable new CEL features by faking their version
    7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters
    251b3859b0b dra scheduler: consider in-flight allocation for resource calculation
    2c6246c9066 dra e2e: move ResourceSlice test
    0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice
    42ee56f0931 dra api: implement semver attribute value type
    234dc1f63d7 dra e2e: run more test scenarios with structured parameters
    d59676a5453 dra kubelet: publish NodeResourceSlices
    5e40afca060 dra testing: add tests for structured parameters
    3de376ecf69 dra controller: support structured parameters
    6f1ddfcd2e3 kubelet: support structured parameters for preparing resources
    4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters
    d4d5ade7f5b dra: add "named resources" structured parameter model
    096e9489050 dra scheduler: support structured parameters
    49ee96eed43 pod security test: add user namespaces feature
    1f9c271c8c6 PSA: update procmount tests to have hostUsers
    23706cb90c8 api validation: validate proc mount against user namespace
    e216742672a Job: Support for the JobSuccessPolicy (alpha)
    7bd78b06e93 Warn on deprecated AppArmor annotation use
    b1341c87957 Revert portion of the GPU testcase
    194009fac9d Add integration test for managedBy and cleanup of finalizers
    2867be47b31 followup to allow special characters
    a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice
    2e34e187c99 node authorizer: lock down access for NodeResourceSlice
    39bbcedbcae dra api: add structured parameters
    eb1470d60d5 scheduler: fix assume cache with no index
    48daa91857a Update publishing-bot rules to Go 1.21.8
    30857658e42 Adjust GPU test to work with latest nvidia daemonset
    ffafb2b9ca9 adds portforward streamtunnel unit tests
    758dc535107 Enabled conformance test for VAP which is GAed.
    df7f5fca27f Don't embed plural exceptions in tools
    39e1c9108c0 Support multiple JWT authenticators with structured authn config
    2d86cbf2616 Separate feature-gate for AppArmor fields
    22068e0cc7b Validate annotation & field match in PodTemplate
    06caf32ecd7 Validate localhost profile max length
    0eb5f52d06f Rename AppArmor annotation constants with Deprecated
    8373f3035ad fix aggregator path filtering to include /
    70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
    6f2842c08c2 Avoid clearing go version in go.work update script
    c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
    1395c801098 Update Job conformance test to do a legal update
    2e465cd6fa0 Remove _tmp from test/images/image-util.sh
    be7ee821b97 Make verify-vendor use verify::generated
    778644154f3 Remove _tmp from verify-openapi-docs-urls
    4d6f56d3985 Make vendor-licenses use verify::generated
    8a3a299c650 Remove _tmp from pin-dependency
    813787489b7 Make verify-openapi-spec use verify::generated
    e90782bec8e fail LimitedSwap with cgroupv1
    5d83282823d Auto updates
    de506ce7ac9 Promote ValidatingAdmissionPolicy to GA.
    6a4e19a4ec9 add no swap as the default option for swap
    27df75c577a dra api: fix status updates
    ec325b328db Match annotations against pod AppArmor field
    d25b1ded761 PodSecurity check for AppArmor fields
    24537a91317 Stop appending AppArmor status to node ready condition
    207a965b3ff Update AppArmor e2e tests
    bf3c8464bae Implement Kubelet AppArmor field handling
    289ec02e8b5 Implement version skew strategy
    b7f620c12b7 Generated code
    855bc740239 Adds OWNERS files to client-go streaming dirs
    94927afb50c AppArmor API changes
    6b03166beda update to inject only the list of excluded resources.
    7a57bcea6cd fix e2e test for kubectl interactive delete
    646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet
    e568a77a931 Support for the Job managedBy field (alpha) (#123273)
    5122fe07323 don't watch headless services on kubelet
    0595ec79423 implement field selector for clusterIP on services
    b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
    290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL
    bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta
    53d38a31611 node-controller require providerID to initialize a node
    3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const
    221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed
    01689d0906e add e2e tests for relaxed validation
    fa3c1014393 relax validation pod envfrom
    e56240b2e1b add validation method at the top level
    5b072a59a29 Fix flaky test on multi profiles waiting pod
    96a16a7bc9f add relaxed env var name function
    af2dadcb18a Add custom debug profiles on top of static profiles
    2bd7f4f8e06 storage e2e: update hostpath and mock images
    9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16
    4a5fe2decad Addd negative case for the fix in #123570
    ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field
    b04d1177efb extend deadlines to one minute
    3d56ff21fd3 adds comments to tunnelingResponseWriter
    33af937b4a5 re-write fallback dialer unit test
    e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error
    2443b3fa694 Fix headerInterceptingConn handling
    9e154628430 adds return context in RunPortForward()
    8b447d8c97e portforward: tunnel spdy through websockets
    79b344d85e3 Add authorization webhook duration/count/failopen metrics
    1cf4cec449c Test that separation of streams work by using progress notifies
    8345ad0bac4 jwt: fail on empty username via CEL expression
    606cae9b479 Add new metric servicesCountByTrafficDistribution
    05e1eff7933 Prevent conflicts between service account and jwt issuers
    57d1b68dc2d Remove deprecated sets.String
    c4163a9cb84 Add label with access mode to SELinux metrics
    31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior
    eb6abf04623 scheduler_perf: automatically delete created objects
    51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled
    51a3fa2e6ff Start reconciling on the new field
    9513f75089f Add trafficdist package for handling reconciliation of new field
    646fd200b85 Run 'make update'
    996d11d4e87 Add new field trafficDistribution to Service spec
    d72448a41c2 cleanup: if triggerValue has a value, fast break
    78fb0bae22f wire up discovery url in authenticator
    84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration
    c61b2a3975a Check length of instance name before truncating
    ebcb78df529 promote aggregated discovery conformance tests
    b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10
    968aefd1bf2 Ensure GCP instance names are a max of 63 characters
    c2ccb921ea0 e2e pod: fail fast on failed pod
    c134bfe9ebc agnhost/mounttest: add new line to output
    db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided
    22adf221a14 print nodename
    0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
    a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...`
    90e6546c689 Use go.work to auto-find internal modules
    eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons
    6174f199dfb kublet/userns: Add test switching feature gate off/on
    4bb508dd303 kubelet/userns: Add unit test
    0b69c2bc81d kubelet/userns: Use kubelet maxPods
    39c68156766 kubelet/userns: Remove alpha maxPods limitation
    4180284dc97 pkg/kubelet/userns: Remove outdated test
    4c81e5c9dc6 features: promote UserNamespacesSupport to beta
    87a057d4170 KEP-127: kubelet: honor kubelet user mappings
    3bada5d4515 test: Bump CUDA images
    30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta
    0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
    b48b4ebc697 address reviews
    1d4be7527f8 increases client-side websocket write deadline to 30 seconds
    948d9ca2217 Rely only on `source` cli parameter in conformance/walk
    0e9cdf76ad2 Fix discovery v2 conversion registration data race
    e2b96b25661 Add a header to go.work
    467d5d745c2 Get rid of unused API type NodeResources
    d2051503a3e e2e/service.go: remove same node nodeport test
    e76fce75666 add authz webhook matchcondition metrics
    9633e25579d feat: add csaupgrade option to upgrade subresource
    1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well.
    3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature
    f34782bb927 hack: re-enable protobindings which use k8s.io/api
    9a404b590b1 Filter aggregated apiservice gv
    b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta
    8854d360a5d printers: add status to jobs table
    462dd326c2e Use v2 types with agg discovery
    301e804c3f2 Promote AggregatedDiscovery to GA
    0593746f609 Remove test for disabling aggregated discovery
    dde48918dda promote match conditions e2e tests to conformance
    74417b517a0 Tag all feature gates required by a test
    99313bea88c kubeadm: remove constants for mirror pod timeout
    ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration
    ce8bd8584e0 Configure cpumanager policy options in local-up-cluster
    ba525460e05 change result size to numAllNodes
    45783a630cc increase parallelism on node controller ccm
    dce0d8a3d3f increase parallelism on service controller
    20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111)
    6b08919473a Revert "[cloud-provider] require providerID to initialize node"
    1d653e6185a test: use cancelation from ktesting
    d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests
    00e09374b6f Make update-codegen avoid sub-workspaces
    21715e6bbd1 Fix up go.mod files after reviews
    78f82b972f8 Sort publishing/rules.yaml
    ac5664086ba Use path instead of filepath for pkg-paths
    70d803c1ff3 Make `make` fail better with bad inputs
    81ba0f3b44b Make golang::setup-env turn on workspaces
    2e2ae029c33 Fix instrumentation tests
    706c88863f5 Use go 1.22 for KMS mock
    812d5fff401 Remove old gengo detritus
    16c26b22cb0 Run latest openapi generation
    d6cf98f8ac6 Remove errant +required with no validation code
    1a4450f6ffd Get rid of code-generator/cmd/openapi-gen
    067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd
    7776496309c EOL code-generator/generate-groups scripts
    9cf189f4e02 Fix lint found by golangci-lint
    14321ef959b Move doc-generation funcs into only caller
    8288c06b2b4 Make hack scripts use `go install` and assume PATH
    ea3696dbcf3 Remove legacy references to './output'
    242b4e27c05 No need to check nil iterating gengo Inputs
    7a084b33528 Renamed gengo SourcePath -> Dir
    96b91f364ac Renamed gengo Builder -> Parser
    cb86010d206 Gengo utils moved
    236ce54aa8a The gengo "args" package is gone
    b40e4d7e705 Get rid of gengo CustomArgs
    86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator
    cb7f0593aea Move gengo/examples/deepcopy -> code_generator
    01a18659347 Fix lint in code-generator/cmd/...
    b68340e5b6a Get rid of gengo InputDirs flag
    299b0453070 codegen: Remove most uses of InputDirs
    e78dc862885 Move import-boss to k/k, retool to not use gengo
    08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing
    5b2d4384c70 codegen: Make import-boss do it's own flags
    1fed36b9842 codegen: Minor: fix wrong comments
    6420e646621 Move go-header-file flag to each tool
    3a77592b2cb Remove gengo verify-only - unused and untested
    d0dd72b01e0 Move OutputFileBase flag to each tool
    26a1a13b805 Rename output-package -> output-pkg
    6a375b8f4cd Move the OutputBase flag to each tool
    875566f997a Type-assert gengo CustomArgs blindly
    0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator
    2ac119bea94 Rename gengo Target.SourcePath() -> Dir()
    fcd6c19c246 Rename gengo generator.Package -> Target
    d2c74019109 Drop `generator.Packages` type
    b2832697d50 Rename DefaultPackage to SimplePackage
    bd31265d23e Make update-vendor log the go env
    4627a15ac00 Get rid of vendor baggage in go-to-proto
    43206312659 codegen: Don't need to pass --logtostderr
    2c0da11c0a0 Make verify-shellcheck take optional args
    19b37f046f1 Rename update-generated-* dockerized
    94b709c0e22 codegen: Use single-dash for '-v'
    dd4e456875c codegen:proto: Use revised API to gengo parser
    4b55936ab0c Remove defunct trim-path-prefix
    2348e949082 Conversion: Better logging
    6dbc754ed68 Retool typecheck to be simpler
    4d37426a3ab Update Makefile comments
    965341390f8 Remove KUBE_GO_PACKAGE
    5a96a56c80c Fix make test-integration for workspaces
    4b20f81c194 Fix verify-conformance-yaml for workspaces
    d61f2996140 Call verify_go_version at the END of setup_env
    e84adf611f4 Remove references to "GO111MODULE"
    2a1147a4341 Call setup_env from verify-vendor
    d2a4a1958fc Tidy update-vendor-licenses for workspaces
    d772f7719dc Remove defunct references to "vendor"
    7f5982e7084 code-generator: Remove now unused helper function
    10c32b3e2f4 Get rid of most references to GOPATH
    3c2940f2ae2 Kill off PRJ_SRC_PATH
    651297220ef Fix pin-dependency for workspaces
    1c3e701e0c9 Fix verify-spelling for workspaces
    032dd890a57 Fix verify-external-dependencies-version for workspaces
    bff2e92edd1 Fix update-netparse-cve for workspaces
    fad5bb1cdd4 Fix lint-dependencies for workspaces
    b2b9de88eba Fix update-import-aliases for workspaces
    530c4352fb4 Rename new::setup_env back to setup_env
    bece9bc3f4d Remove old::setup_env
    f9ca58efe9e Remove run-in-gopath.sh
    b32e2072569 Fix last run-in-gopath user: typecheck
    91efe7e5712 Fix import-boss wrt gengo/v2
    c8b61bb98b4 Fix register-gen wrt gengo/v2
    f772410082b Make code-gen subprojects work on gengo/v2
    251b22a7f89 Make update-codegen protobuf work on gengo/v2
    b0a70dec4ab Fix go-to-protobuf wrt gengo/v2
    7506048d3f2 Make update-codegen client work on gengo/v2
    b961b39efa7 Fix client-gen wrt gengo/v2
    130a9f8426e Make update-codegen applyconfig work on gengo/v2
    5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2
    9c62235266d Make update-codegen informer work on gengo/v2
    0aa98ee8e38 Fix informer-gen wrt gengo/v2
    46665fa76a9 Make update-codegen lister work on gengo/v2
    b82527b6fb5 Fix lister-gen wrt gengo/v2
    1965f56f59d Make update-codegen openapi work on gengo/v2
    5475797f433 Make update-codegen conversion work on gengo/v2
    ed35118664b Fix conversion-gen wrt gengo/v2
    1e96f4e50a7 Make update-codegen prerelease work on gengo/v2
    fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2
    b5b8c9d8698 Make update-codegen swagger work on gengo/v2
    8420278c7fe Make update-codegen defaulter work on gengo/v2
    1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2
    d5e8e9c29cf Change update-codegen.sh to use new setup_env
    db590ecd896 Fix scripts to avoid testdata
    514dd0e1f6d Convert all gengo references to gengo/v2
    6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2
    b3dd7241741 Remove dep on set-gen: gone in gengo/v2
    487cd027118 Change verify-generated to new setup_env
    c79e5abec42 Change test-e2e-node to use new setup_env
    7a7dff1eeb4 Change verify-imports to use new setup_env
    3be358ecc15 Make verify-conformance-requirements use new setup_env
    08622aa6858 Make verify-no-vendor-cycles use new setup_env
    854037d5b52 Change update-generated-api-compatibility-data test to new setup_env
    25b97dae82d Change ipamperf test to new setup_env
    238b33de3be Change test/instrumentation/update-* to new setup_env
    cbc887a1d6b Change verify-govulncheck to new setup_env
    024f4e9c09f Change verify-generated-docs to new setup_env
    35aa5b3c698 Change verify-fieldname-docs to new setup_env
    0d30f918fae Change verify-description to new setup_env
    bad67dc973c Fix golangci-lint for workspaces
    3163fc4f69a Change update-golangci-lint-config to new setup_env
    714f8a0855f Change verify-yamlfmt to new setup_env
    3dc447708b8 Change verify-gofmt to new setup_env
    d785f13c059 Change verify-licenses to new setup_env
    974276e4a08 Change update-openapi-spec to new setup_env
    2ee339b0236 Simplify verify-cli-conventions; use new setup_env
    2924b90d75a Change verify-api-groups.sh to s/vendor/staging/
    b725fd20c2a Fix update/verify-mocks.sh
    58ab5eea89f Remove some references to GOPATH
    5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables
    e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters
    e9b30a0d29b fix UT failure TestPrintIPAddressList
    c05e541793b Bump cAdvisor to v0.49.0
    6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called
    a51a5b46223 kep-3716 GA, remove feature gate
    26484df2108 Make websocket heartbeat test timing less flaky
    fc86811cbe8 Avoid logging binary junk for frame write failure
    e2575228890 add transient types to admission test.
    b57d7d6ad79 add min valid jwt payload to API docs for structured authn config
    8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0"
    e38531e9a23 Add `image_id` to CRI `ContainerStatus` message
    e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time
    d6851ec7356 scheduler_perf: fail when input YAML is invalid
    f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN
    aaf6fc07d82 Make build scripts use Go import paths
    f3c8e92def7 Clean up test.sh and get rid of GOPATH
    8cb8535d9cd Excise KUBE_GOPATH from coverage build
    0af31064421 Dedup binaries when building
    9256031a871 Workspaces: excise vendor from golang.sh
    df42d56947f Remove vendor from ldflags
    81d932906aa Make golang::binaries_from_targets smarter
    8b579b23473 Change the build_binaries path to use modules
    65b841c077e Generate go.work files
    e54f2296ed3 Require Go 1.22.0 in go.mod
    e2b529fda73 Fix a test that doesn't build on Windows
    ffa183a7a41 generated files
    01db4ae9e74 Graduate PodSchedulingReadiness to stable
    466019b1b27 kubeadm: implementation of API types
    3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text
    d303cec1183 Update test
    55e9d509e61 Promote KEP-2681 to GA in 1.30
    a3dfba8f506 Create e2e test for VolumeAttachment endpoints
    b115df227ab update tests due to change of NewPluginInitializer.
    64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources.
    5b1fffa3e40 add resource filter to admission initializer.
    a0dc949ce32 Improve error handling for json path results
    61d6026d23a Fix field paths
    45742d1d9af Add integration tests
    31f7efab20f Add cost stability tests for chained and nested CEL comprehensions
    7ef3eea8a73 Generate code
    291703482d5 Add selectableFields to CRDs
    d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
    fa44b9ca150 Fix panic in getNpdPodStat
    f46df21cad3 update comments on API
    5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode"
    2a22b6f6b8d Add information about SELinux test tags
    ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO
    52558a03104 Add e2e tests for SELinuxMount
    92bdc7b3873 Ensure that initial events are sorted for WatchList
    58a826a59a7 graduate MinDomainsInPodTopologySpread to stable
    20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
    e663285ccf4 Add `image_id` to CRI `Container` message
    3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release
    b394aac4ce3 Use the websocket protocol header, verify selected protocol
    03812ddb169 streamtranslator counter metric by status code
    e89dddd4af6 jwt: strictly support compact serialization only
    dc4c92f5a56 add support for map
    4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests.
    374e4b56861 Address review nit, use longer variable identifiers.
    3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
    cb39dfc9deb Promote ImageMaximumGCAge to beta
    f832692d980 uid is also supported in field ref for downward api
    ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked
    d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc
    f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
    0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled
    658b45cd035 kublet/userns: Test new functionality with feature gate disabled
    1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
    b2a92406efd KEP-127: check for runtime handler userns support
    024146f7058 KEP-127: the kubelet stores runtime helpers
    ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades.
    c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError
    a147693deb2 remote command turn on feature gates
    0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test
    dd1e617ba0b Scheduler first fit  (#123384)
    ca41a9222d5 Fix makefile variable expansion for test-integration target
    aefaf66d2b4 remove unused service keys from aggregated discovery
    0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers
    fd5019a5468 ktesting: ut flake fix for CI
    a24f2c11923 Validate restartable init container state transition
    c99996efab1 bump metrics server to v0.7.0
    0ab006b8a1e node-controller reconcile node labels on each update
    03bd3e25b16 [cloud-provider] require providerID to initialize node
    099f26296b2 integration test for cloud provider
    ef83ec27536 don't use leader elect on ccm integration tests
    08f8be99039 fix goroutine leak on legacy-cloud-provider gce
    3636971c39c add aojea as reviewer
    b4b4784c6c4 enable ip aliases on clusters by default
    3908a46b222 bump cloud controller manager to v29.0.0
    b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value
    dc7114fa911 fix default IPMode set in UT
    9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil
    0f083966a7a set actual podToMake values
    840ef149071 ktesting: doc updates and fixes
    fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml
    e6d6d8e14c2 feat: print etcd ready status
    07e0a80216c graduate HPAContainerMetrics to stable
    df92ad9bcbf Run autoscaler as non root in kube-up
    d7735f32d0b Skip autoscaling tests when we hit rate limits
    1ecd4053de7 ktesting: skip timing check in unit test
    8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test"
    18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin
    bbef156ef5d update 129
    b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e
    e2ff63103df fix for persistent Horizontal pod autoscaling failures
    148757903ae release v1.29.2 for sampleapiserver
    247233f7b40 bugfix: modifying argument causes wrong fieldpath
    e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests
    75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting
    e1ac3e1de76 Fix kubectl proxy e2e test
    52dd6030551 initial e2e for aggregated discovery
    13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager
    4760e0cc44f refactor: use shared CollectParams from VAP
    64cd09f7208 refactor: use match from generic pkg in vap
    96c418a7b73 add generic policy dispatcher
    9f9858b6caa Hit APIServer cache when testing healthiness
    2e920365766 Rename "new" reconstruction just to reconstruction
    e9193b4f336 e2e: remove dead code for providers
    d816ab7657b Promote LoadBalancerIPMode to Beta
    4cb4228522a ktesting: improve unit test coverage
    4ffa628ead5 ktesting: add missing methods to error context
    dc6abc3ff8f ktesting: add Underlier type alias
    fe10bfb044f ktesting: fix ExpectNoError
    2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate
    513c2a3690f Mark NewVolumeManagerReconstruction GA
    78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21
    cc515bd8f13 Job: Fix test case names for the validations
    0c4df640920 fix api
    aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu
    f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device
    9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425)
    11ed3032c09 test: infer gvk of objects
    acf1d850c61 refactor: handle paramKind directly
    83751630081 Add test to validate non empty pod log dir
    81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests
    ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server
    dd890b899fa Make PodResources API include restartable init containers
    16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation
    f6682370b1a fix flaky ut in TestCause contexthelper_test
    98437cb4be6 fix json output when fetch kubeadm config from server
    ce6bacb5acd fix persistent volume docs link
    6726e656190 Aggregated Discovery, mark stale before initial health check
    5fb002147bd Remove unused Resolver interface in pkg/proxy/util
    43ba0bd53b7 kubeadm certs check-expiration support json/yaml output
    4172d364865 Codegen: use plain find instead of git ls-files
    527d2ea9d0f Codegen: use plain grep instead of git grep
    9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g
    d7028a8ed50 Add SELinuxMount feature gate
    ba8fcb5ef6c kubelet: don't disable gc if max age is specified
    8dddf6d3140 e2e_node: add test for max age after kubelet start
    a8ea9363648 image gc: don't start until max age has passed since kubelet started
    6cd78bc5fc5 node e2e: add image max gc test
    be7856e3402 e2e_node: factor out waitForKubeletToStart
    da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta
    5a8579a3e40 kubelet/userns: Remove tests that fail as root
    cb3180950ef dra e2e: fix stack unwinding in helper function
    c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation
    fe8e896df87 Improve the doc comment for the Job status.active field
    3c9c141d980 exchange the order of comparators
    7b108d8ee19 Add testcase covering unknown plugin config
    611f8ba8153 bump nfs-provisioner-to-v4.0.8
    c74ec3df094 graduate PodLifecycleSleepAction to beta
    e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test
    65faa9c6800 Consider initContainer images in pod scheduling
    b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource
    fa6429a31c9 Use new 1.4 NFS image
    ec394ec53db Fix NFS related CI failures
    c29450eb009 kubeadm: apply retries to all API calls in idempotency.go
    0f49a1e36e0 fix panic in CRI stats of windows
    dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed
    01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api
    ae0a813be10 Fix tests after rebase
    c8b4d8ebedb kubelet: add reason field to image gc metric
    d3a0e296def Update x/crypto to 0.19.
    f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE
    5fcbc9d2fca Fix permission denied error
    ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters
    19d9405a1c3 Update comments and error messages
    d9e2487d0c3 Add PodLogsPath to kubelet config
    3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata
    7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate
    d5d3eddb95b Add allowed/denied metrics for authorizers
    59bf8b02e63 Refactoring to encourage use of switch case
    7b2698a5e5c Add handler to run watch serving in separate goroutine
    c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II
    7faa8bbac3b Add e2e test for kubectl interactive delete
    6d5133f3ecd add functions to policy accessors for getting match information and params
    def05a20e22 flake: avoid flake by ensuring params appear in the initial list
    57fc5d24013 Add decode and roundtrip tests for CBOR marshaling.
    871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
    71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop.
    f84d643c204 Use the Defer for pod replacement policy
    066421f108c Add CBOR Serializer implementation.
    ab8cdae3b1f Reset metrics in the Job integration test before testing
    ec7e051bc00 Always test PDB's during service upgrade test
    115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time
    b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0
    0feb1d5173c Add integration test for multiple audience in structured authn
    bd27c99262e move OWNERS from validating to all new parent policy folder
    5dc92ada068 Implement authz config file reloading
    3a98e60a719 Move authz construction to reloader
    2b00035b5fc Split construction of authorizer / ruleResolver
    1fddc948ed8 Split node/rbac/abac construction
    49124293c3c Store constructed node/rbac/abac authorizers
    75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct
    41435d045db Guard empty status.acceptedNames
    18c563546a7 support multiple audiences with jwt authenticator
    3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release
    b202d053fa7 CHANGELOG: Update directory for v1.26.14 release
    cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release
    14045bf340e CHANGELOG: Update directory for v1.28.7 release
    aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0.
    5f4cb8b09a4 Move kube-apiserver authz validation functions
    b5e0068325d Support all key algs with structured authn config
    630ff96f9d6 Revert "Scheduler first fit"
    e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
    5d861b6f12e promote agnhost to v2.47
    aa772d77fbc e2e pod: dump pod in unexpected phase
    008b075b462 DRA: fix data race in resourceclaim.Lookup
    9c726b015c5 agnhost: v2.47
    2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release
    b8a59346fe6 test/oidc: extract key type to allow testing different algs
    b7e70f0e000 update-vendor after package rename
    3094395fa76 bugfix: avoid NPE possibility by making composition environment global
    18fbc48b015 refactor: implement VAP off of policy plugin fw
    a6366573d5c refactor: create generic policy plugin type similar to webhook
    2fa02552ebf remove comment
    48b1576980d use table test pattern and replace hardcoded values
    19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration
    6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
    39606af8c3d golangci-lint: optionally skip it during "make verify"
    7ee89440c39 agnhost: v2.46
    07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
    8876b68a604 golangci-lint: add hints for error wrapping
    8e2c1b559ac update images to have the full semver in the tag
    1b1b902f81d codegen: don't nuke files if only verifying
    e53ac426335 e2e labels: add placeholder docs for existing items
    445443bd8a5 e2e labels: ensure that the lists remain sorted
    a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts
    77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric
    4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util"
    0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args
    7dd624d3443 ci: bump kind to latest for kms jobs
    5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment
    d697f43d738 refactor: move matching logic into parent policy folder
    8b14116509a refactor: move vap into parent `policy` folder
    8b26b6eec1b refactor: move celmetrics close to its usage in vap
    5ba3883be02 Adding unit test for makeWinContainerStats
    5c825d8a226 core/v1: remove comment about non-existing constants
    a8abed80153 Update publishing-bot rules to Go 1.21.7
    da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects
    c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer
    63aa2615834 ktesting: add TContext
    75210d0840e Clean up dead code in node controller
    593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline
    d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests
    73cc31847fc fix
    eec508e488f use patch number
    ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22
    ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate
    36904475db4 kubeadm: increase ut coverage for app/util
    d42d9a9b079 features: promote NodeLogQuery to beta
    3e777540fda add test case for error inside variables.
    13c848f562c self nominate kevin hannon as a sig-node reviewer
    3a813049d3a add aojea as feature-approvers on OWNER_ALIASES
    6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642)
    e821e0de15e remove error wrapping from builder
    de6989041a7 added OWNERS to test/e2e/feature/feature.go
    0f5cf6c1cd9 Add image pull duration metric with bucketed image size
    c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment
    1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations
    42672ee2ea1 Make comment about reject action more accurate
    c7e48f1ebf5 kube-proxy: flush nftables base chains on startup
    7a56b6e3f7a Add validation.IsValidCIDR
    658e3308f34 etcd: Update to version 3.5.12
    fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig
    105ec3d48fb fix linter failures
    852c03a49b9 check key is set before deleting from map
    4d8c3530f57 fix regular bound service account token test
    ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1
    eceaed8c075 Put validation utility packages used by API validation under API review
    1ae7553744a Revert "print error message regardless verbosity level"
    e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation
    1085c0b15a4 Bump sample-device-plugin image version
    9e37ccedc7f apiserver: refactor handleError in endpoints/filters
    6a98704229a Bump to latest version
    63e91ed0232 remove deprecated framework.ExpectNotEqual
    dfc20d19c8a fix integration tests now JTI feature is enabled by default
    cae710d9e96 kublet/userns: Test error messages on init failures
    1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
    5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428)
    4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate
    eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA
    deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency
    7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint
    becb25c01f9 Bump version for the sample-device-plugin image
    f97dec28407 Add comments about wildcard clusterEvent
    31c86e38ac6 Update in-tree azureDisk and azureFile tests
    0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep
    d81023db30c When matching clusterEvent, we should consider the "*" additionally
    3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758)
    960d7fbf094 add admission tests
    a0770386abe fix copy paste
    b0c9a18673b add TestPIDPressure
    195a7747180 eviction_manager: add unit test for PID pressure
    774d666d1ce kubeadm: better checks if the node is CP during "upgrade node"
    f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch"
    9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet
    dc832c6e59e add support of variables for Type Checking.
    b636984004c test: remove unnecessary skip healthz check from test
    71bf5630343 Job: Stop unnecessary sting casts in validations
    21ba0d59d3a refactor type checking to use CompositedCompiler.
    7cab0ad2d2b apiserver: warning should not panic when request times out
    c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes
    a56d483df06 kubelet/userns: Use t.TempDir()
    0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages
    fdc20de5004 kubelet/userns: Wrap error message
    065066d1aba kubeadm: support digests in DeployedDNSAddon()
    1db6e434f3a build etcd image v3.5.12
    227c1915db3 enhancement(scheduler): share waitingPods among profiles
    8bf03e83d3e Stop claiming --node-labels is alpha
    2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4
    2dd81563a96 Update to runc 1.1.12
    60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release
    d190fa3e7de Fix race condition between external-resizer and kubelet
    593654eaa3b Fix cleanup of file subpaths
    97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure
    9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours
    67926c3777c Update in-tree vSphere tests
    01dbb85974d fix: correct incorrect comment & function name about SchedulingGated
    717a0002b75 [gce_runner] use metadata file when values have special characters
    b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds
    77f03c17449 Don't export single-use types
    01155f59c35 Merge pkg/util/config into pkg/kubelet/config
    049261aca1b Delete unused config utilities
    e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes
    77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction.
    0283498ab40 fix gofmt error
    0c7281624ea change style of enums
    f589b911f85 node_controller: improve taint eviction queue add worker time args
    71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed
    c222db1429e fixes kubectl explain to shows enum for field types if they were defined
    2216361c59e fixes kubectl explain to shows enum for field types if they were defined
    d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter
    7f2d78656ca Updating FG based tests
    8bc63027d9f remove extra space in log
    2c829cf29b6 chore: Refactor network load balancer creation in e2e tests
    6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller
    da05076868a Reorganize a bit of winkernel proxier setup
    33bd5fb3c44 Remove unused param to winkernel proxier
    4716bf8bd45 Fix issues found by linter
    ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2
    c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1
    76ea1420516 Use gcloud for gce_runner
    a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total
    1baf7d45866 Corrected some spelling and grammatical errors
    a7cf7fe55a2 Bump shellcheck to 0.9.0
    20ec766adfb bugfix: disable ratcheting for typemeta fields
    7353f52bc8c test: add CRDValidationRatcheting e2e tests
    768c169dd82 feature: promote CRDValidationRatcheting to beta
    5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field
    85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows
    d60a25b2db5 Add DeletionHandlingObjectToName
    a15f4376697 KEP 3458 - promote to stable
    ceabc4aba84 DRA: always returns Unschedulable in PostFilter
    6cf42037512 dra scheduler: reformat code
    a809a6353b6 scheduler: publish PodSchedulingContext during PreBind
    5d1509126fc dra: patch ReservedFor during PreBind
    6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go
    5ab9f3d15f0 kubeadm: fix the err check bug in certlist test
    ebba2d4472d Move some code in the proxiers
    536364266c1 Sort messy kube-proxy imports
    c2c4f4616d4 cleanup structured authn/authz error logic
    c89dcf52b12 convert the expectedValues to be cel.Val.
    d6991638029 extra case for affirmative has(map) test.
    139c6daf302 Missed a spot! testing verify-licenses.sh
    7801173f6ed get the error claim in dra
    6e5e1d03177 Remove useless org mutate code
    09a1abda998 Update vendoring to take new CBOR library dependency.
    ef27338bef9 Add skeleton CBOR package and introduce library dependency.
    89db64e0534 collect generated files and logs
    39afee443f1 enable testing import check for kubeadm binary
    ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists
    4d6c0ba518d kubectl debug: add sysadmin profile
    bcf512693a0 kep-3836: promote to beta in 1.30
    8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only
    9b96ab46eee Fix license verification script
    1ad143177c3 Added metric resource name to HPA table (#122804)
    af35b7ff2e0 Update Changelog with Release Notes 1.30 Team
    b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695)
    e490439262f drop deprecated pointer package
    83de1586e08 boilerplate_test:fix pylint warnings
    4473dfebbf9 fix boilerplate test
    9dc1da1e5bf boilerplate_test: fix bad indentation
    65d67101e72 Drop vsphere cloud provider
    d0c323fb8fb fix convertField and its comments.
    df9620c9f6f add support for equality check.
    9bbdbc510eb mutation library for CEL.
    eafa9bd24b2 Add validation tests
    7972f0309ce Fix service account token projected volume validation
    35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted
    1d59d6b6c65 Use validation.IsValidIP in a few more places
    519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency
    f999b24fad9 Expand IsValidIP unit tests
    8fc691be940 Drop validation.IsValidSocketAddr
    09abfa46be8 Update knftables, with new sigs.k8s.io module name
    367bbd01d76 update testcase on podreadytostartcontainercondition
    8371e4cf931 quick break when met
    740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig
    db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config
    e92a4debcbd Fix lint warning about unchecked error
    d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows
    8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform"
    b88fefad1f8 Add note about directory structure
    62eb7cb4f93 make update: add update-golangci-lint-config
    31de75f62cb KEP 3836 - promote to beta
    0ef42133a18 Reduce verbose logs in MetaAllocator
    b8df7e76845 unittests: Fixes unit tests for Windows (part 10)
    b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix
    b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling
    25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints
    4b40299133e pkg/proxy/nftables: handle traffic to cluster ip
    01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects
    80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching
    d23483dd7c2 pkg/proxy/config: rename import aliases
    212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error
    43539c855f5 e2e framework: unify logging, support skipping helpers
    dd0cee48955 e2e node runner: remove dependency on e2e/framework
    3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure
    a05db0dd22a Add retry around create
    ed289f875e3 Remove some dead options in KubeSchedulerConfiguration
    1645667297b compatibility fixture
    6d65c063caa describer: improve job and pod template output
    1a38fb3c354 init.sh fix
    a2be736c027 vendor update
    0bc023bc28c Add aggregated discovery v2 types
    6ae264464ca Make local-up-cluster non-verbose by default
    41e706600ae client-go/reflector: make UseWatchList a pointer
    0ba903fd574 kubeadm: enable parallel pulls of images
    510df7eab17 kubeadm: add validation of ImagePullPolicy in the API
    754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions
    a4afaeda372 print error message regardless verbosity level
    de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky]
    e3ee4e35851 e2e: replace klog.Fatal with assertion
    427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update
    2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry
    5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
    1192f313b8b Fix local-up-cluster on darwin
    e2222f1e304 dependencies: klog v2.120.1
    8a89a1f5a5c mark density tests as flaky
    18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0
    26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry
    365cbe1b41f remove formatted newline
    fd5353eb721 check for error message and type
    8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options
    3a6060745cc Remove unneeded permissions of node-controller role
    83ff8a2f49f Negative index regression test for json-patch (#122625)
    f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release
    14294ce870f CHANGELOG: Update directory for v1.28.6 release
    4a9906fd340 CHANGELOG: Update directory for v1.27.10 release
    4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release
    f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter
    ee354366f58 sig-instrumentation: add rexagod to other groups
    6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager
    8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation
    2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta
    3aa366a3eb1 e2e: remove dead code
    041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on
    5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner
    98054dd9d3a Clean unused code in kubelet server.
    d21fc96db35 Fix type assertion error in init and join commands for kubeadm
    8a32f346a09 kube/features: improve unit testing known/registered features
    995135973d6 Inject feature gate instance into client-go for kube components.
    54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go
    ec89154276f Handles clean up errors
    80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order
    66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes
    c65d9e4d59f Replaces path.Operation with filepath.Operation
    fcb51554a19 Plumb the conntrack.Interface up to the proxiers
    cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests
    db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries
    51063cb5c41 Clean up conntrack unit tests
    46c4249e3ec Remove code to be removed in 1.30
    5cfd75a84ea Ignore vendor folder on client code generation
    f29d6970c96 doc(scheduler_perf): enrich the documentation
    7773b0f53fd client-go/features: introduce WatchListClient feature gate
    9263a66aec7 kubelet: make log more clearer for not create a mirror pod
    d652596e429 Remove redundant string conversions in print statements
    0d366dd99ae codegen: Use long flag names for clarity
    0f849d3b55b update-codegen: rename "base"->"file" for clarity
    f2b550180c6 codegen: don't use xargs w/ maybe-empty input
    582312d9650 Sync json-patch ver to the same as everyone else
    7162b930bec code-gen: Use the passed FlagSet, not hardcoded
    8b8f0a70cd3 Make verify-fieldname-docs actually error
    0c3e49e64c0 Run test/instrumentation/update-*
    5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout()
    caf53114132 kubeadm: start using the Timeouts struct values
    374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate()
    9b5ad7e1191 Add processStartTime in metrics/slis
    8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it.
    d2b16b2a21c vac support ResourceDescriber
    9860e12d6ee expected and actual field position adjustment
    08645984b0a Revert "Save a list of images used by e2e.test"
    73565cde13d Use gomega.Consistently instead of sleeping
    dcdfd714501 Fix kubeadm init regression
    9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp
    46d0e1d5aaa Support overrides for registered feature defaults.
    d954b25b118 hack/tools: bump logcheck to v0.8.1
    6cd25f43a63 fix version typo of namespace indexer
    4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6
    04b772c6611 logs benchmark: really write through pipe
    7f1a30f8d59 logs benchmark: fix config handling
    3fb67901642 Update env version, Add cost for previous func, add tests, etc.
    5ca73197b3f Document the nftables kube-proxy packet flow
    ddbf3ab6629 local-up-cluster: use the newly built library always
    a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    3c86d21316c bump klog to  v2.120.0
    6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake.
    6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference
    56321a77799 Revert "Graduate Evented PLEG to Beta"
    57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file
    9c39f2b7760 Fix kubelet_server_journal --until parms.
    b0e929264fb e2e/network/conntrack: rename invalid conntrack state test
    6073d1cd3d5 Adds tests for bypassing scheduler processing
    9387a66c71f Clean up encryption config reading and hashing logic
    4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule
    04bbd3481f7 client-go/features: warn when ordering initialization issue
    d74c57d4f59 client-go/features: introduce feature gates
    71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling
    70e20b58dd8 Add missing string formatting directive
    8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies
    4df39d89e0b Correct the link to install Docker Desktop on Mac.
    ce263d88281 Address comments during Review
    1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs
    f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
    50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet
    9eac24c6563 kube-proxy: store ExternalIPs as net.IP
    d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP
    564b80b1e11 kube-proxy: don't use invalid cidrs in unit test
    41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test
    2e999fff026 Fix compiling e2e.test on macOS
    6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197)
    e46778a246a remove dead code
    87816ffb2c0 Support ignore scheduler extender error when binding
    f8abe71238f Add an post-upgrade condition to ensure the job is running
    67cf648ab77 Add a new neverTerminate job behavior just for upgrade
    b7012da2ad4 Remove providerless tag in controller_test.go
    377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support
    ca8c27c480f kube-proxy: do not delete previously stale but currently active chains
    073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet
    0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA
    683f7f43af0 e2e/endpointslice: add ready conditions
    d5664276bf5 refact IsLikelyNotMountPoint
    e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag
    fdf6503e601 Enable more storage tests to work independent of the providerless tag
    5704a588101 add test for the registered feature gates
    4b296699af8 Add fake GCE provider to make CI jobs happy
    549ef5da1bd split ingress tests into multiple files
    88bfefad0f5 import providers selectively based on the tag
    220a559f45e Add missing doc.go for some providers
    7a236bd7e06 Add providerless tags appropriately in test/
    c019b51be41 Remove unnecessary providerless tag in azure legacy provider
    5c196ddaef5 add patch integration test to disable nodeport for LB type service
    4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false
    edff1c3b2fd swap originalPod and modifiedPod to match the comments.
    801afbf888f refactor TestPriorityQueue_Update
    288c00c0c7b Allow framework plugins to be closed
    73bec0f6d95 api: remove SecurityContextDeny admission plugin
    d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere
    ea0fa414457 kubeadm: implement mutators for "config migrate"
    492c0619dc8 kubeadm: add a Timeouts struct to v1beta4
    2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags
    afefc6f4ebe Make EndpointSlice API e2e test faster
    af6e653f175 Use errors.Is() to handle err returned by LookPath()
    2431a964af3 Drop hack/verify-govet-levee
    9c6b42af46e promote contextual logging to beta, enabled by default
    d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings
    289bd72631b Add ut for pkg/registry/networking/servicecidr
    4aecb151b83 Fix kubectl drain error handling bug.
    99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage
    1d144f518e2 Fix SELinux e2e tests: add label to observed metrics
    246e69fb990 Use http/2 for localhost webhook
    55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default
    55e1646fa42 removed the deprecated azureFile in-tree storage plugin
    a3c4a609950 Save a list of images used by e2e.test
    10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors
    2e8e2989d15 Removing Windows image from e2e test image utils
    af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement
    5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0
    d3b8eba690f  Update konnectivity to 0.29.0
    be88a79b6ab Remove unused csi-hostpath-testing.yaml
    7503440ba85 bump runc to v1.1.11
    09abd6be5a8 address reviews
    a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig
    97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands
    c3775de7479 fix logic error
    5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle
    e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events
    bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found
    2203cb7dde8 fix: create tls secret cert to crt for --cert flag
    5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume.
    8f2aaf63d7b Fix incorrect error checking
    20fe2a3539e Add decoding time to the audit log
    e3686246ea9 Fix update-openapi-spec to not change caller CWD
    41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion'
    bd269e06baa feat: support annotation in nodewrapper
    feb833f1296 fix nil pointer dereference when EventedPLEG is enabled
    f73bba51c97 flowcontrol: set the serialization version to v1
    430fd83454d kubeadm: increase ut coverage for util/etcd
    3b67181c93b remove GA featuregate RemoveSelfLink
    719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts
    d849c625ec2 Remove kube-proxy proxy detection & increase timeout
    86873d33352 NodeProblemDetector tags
    d12416e2f31 remove duplicated check on validateTokenRequests for new object
    f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac
    acbbaddada4 Initialize default attach func regardless of the value of flag
    041efcd1d40 scheduler: update an old comment
    1c089afcf37 Fix a set type
    147114e6485 Update some change tracker doc comments
    a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData
    764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go
    a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker
    ede0dc1d079 Make newBaseServiceInfo a function rather than a method
    0779042a6f1 Remove a useless "_" assignment to appease the linter
    452fcc5fd6e Remove some dead code in service.go
    51f3b705c64 hack/tools: bump logtools to v0.8.0
    90e68e3a024 Update the help mesage of interactive flag in kubectl delete
    f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured
    cd3f7a31e81 Add unit tests for no score plugin scenario
    7abba242312 Fix existing unit test (add no op scoring plugin)
    e19be41f584 Don't evaluate extra nodes if there's no score plugin defined
    4ede571f8bc dra e2e: unify per-node resource specification
    bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true
    d317b01244a Fixed Inappropriate Logical Expression
    47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork
    4658f769456 CHANGELOG: Update directory for v1.26.12 release
    c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release
    38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release
    c8a2d5684d0 etcd: Update to version 3.5.11
    36cceff0a3c e2e: forbid usage of gomega.BeTrue/False
    a8da4202c0a .*: bump golang.org/x/tools to v0.16.1
    b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation
    32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function
    557118897de kubeadm: drop concurrency when waiting for kubelet /healthz
    4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30
    1f3e668e180 Use semantic comparation for API
    725b107f494 Correct typo from 'gingko' to 'ginkgo'
    626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults
    5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers
    c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2
    538248df0de More understandable error for scheduler configuration validation
    64da4345231 kubeadm: hide unwanted global klog flags
    b6eac505fb4 Add testcase setup scheduler
    2edb3349933 kubeadm: hide unwanted global klog flags
    c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code
    b69510b0690 Remove an unnecessary abstraction
    75695dae109 move encryption config types to standard API server config location
    868114a41de k8s.io/code-generator: include all metav1 applyconfigs
    b6e34187ca4 Update duplicate env var warning
    1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score
    85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts
    1ee81839036 add extra locations to check for release-tars
    09a80df1d13 podtopologyspread: scheduler queueing hints
    d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency
    b6c1f8ef08c Fix etcd repository path to prevent redirects.
    642574e9643 WatchEvents seems useless
    aee1d54a0dc Drop SubcontainerInfo
    c865ad532a4 fixing based on feedback in PR
    9d1829c33ac Make OpenAPIGetter tolerant of nil
    d621e09a528 remove unused GetRawContainerInfo
    15e0c416019 Fix CSI migration for vSphere volumes
    b3285fa8df4 Add tests for CIDR type
    31f9384646a Add tests for IP type
    e1f9aa450b7 Add costing estimations for IP and CIDR
    4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30
    2f585b45123 Add CIDR network CEL extension
    13b22b23a1a Add special IP validations to IP CEL type
    c6aa360d3ef Add IP address CEL extension
    85d08833bfa warnning on relaim policy when it is Recycle
    eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs
    fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30
    4d7c5d9257e nodeaffinity: scheduler queueing hints
    f676c99d6e4 Wire in field dropping for CRDs
    88cfff678bb Drop v1.27.0 API testdata
    8cf0c79fc85 Add v1.29.0 API testdata
    06679402e75 remove PruneWhitelist, use prune-allowlist instead
    c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished
    be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface
    16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled
    e2cf9692fc0 Remove unused code in kubelet - take 1
    ced99383d55 logcheck: remove redundant entry for pkg/scheduler
    b450224c129 golangci-lint: inline logcheck configuration
    49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2
    e706b6ba14b Use a separate function for checking if device was reconstructed
    87d817e62d8 handlers/watch: refactor watch serving to prepare offloading
    16f35785f9f Drop publishing-bot rules for the release-1.25 branch
    8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28
    1160521a4f6 Revert "Scheduler first fit"
    86ab185fa1e Migrate client-go/metadata to contextual logging  (#122225)
    01916625dab Remove unnecessary error catch in scheduling failure (#121981)
    7a82c03daa3 nominate self (carlory) as sig storage reviewer
    31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856)
    2e388dd7e91 keep existing PDB conditions when updating status
    16aad468b65 Replace test.name with test.namespace
    a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests
    8f5efce8e03 Update publishing-bot rules to Go 1.20.12
    9573eb54c71 etcd: Build image 3.5.11
    221897d7513 CHANGELOG: Update directory for v1.29.0 release
    1ae5594fb2a Update cni-plugins to v1.4.0
    b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1
    7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    9e1adced5db noderesourcefit: scheduler queueing hints
    324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch
    983f6a4a84b Update cri-tools to v1.29.0
    917027b42e4 fix incorrect function comment
    56dd5ab10ff Add tests for checking of uncertain device paths
    87c6b0d69fe Smallish update-vendor cleanup
    477176a4674 kubeadm: add supported etcd version for v1.30
    34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    1e54c050936 leaderelection: Instrument for when slowpath is exercised
    1d9f7fd516b leaderelection: optimistically update leader lock
    d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute
    7dfe3d866b7 Fix verify-licenses.sh
    6fee657d3ac Makefile: enable warn-undefined-variables
    2208cb94936 e2e: only select linux nodes for NodeLogQuery tests
    b9ff6b25f22 Simpler and less noisy make-clean
    39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan`
    7897709ed0f Add timezone column in cronjob get command
    1d11bc4aca6 e2e framework: provide more guidance to developers
    28f8e56d553 Fix prerelease codegen log string
    44898f79099 Address comment
    ed0facacfa4 Fix device uncertain errors on reboot
    48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh
    048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility.
    20b67a4d1ac kubeadm: increase ut coverage of util/config
    78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable
    210ed2ebbd8 add preScore for volumeBinding
    e92501b8fc6 optimize the comment
    56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions
    2fd4758359b change func WithTracing  parameter naming
    51495bb4c59 optimize the unit test
    ceb7ca93875 Fix etcd storage_events_received_total metric not being registered
    4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics
    2d952528cfa belated updates to feature-approvers for SIG Network leads changes
    69c40a33965 fix lints
    74a6a4581f0 fix by linters
    24c4d6f7c9c add unit test for kubelet trace
    eed6e29a5b8 client-go events: support context.Background() as context
    5310abe14ad make scheduler_perf usable from other repositories
    08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance
    a23b26913fc DRA helper: enhance context support
    d11511b1e81 kubelet: enhance context support
    0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name
    fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30
    eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30
    a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30
    965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30
    84c0ed2642f Add SidecarContainers feature beta version
    e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30
    b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally
    a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout
    d9070623085 Minor cleanup in watch handlers
    d8bd150784b support pod namespace indexer
    9efff41b8e0 making suggested changes
    55e60db88b1 Unify watch handler across http and websockets
    a82ee6d4168 fix error check
    8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable
    7cedc3d7417 Simplify creation/tracking of chains
    1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    38c67af789b Use tristate for provideclusterinfo to manage provided flag
    f035fea63ab remove unnecessary code
    3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured
    56dcde86270 Add unit tests for no score plugin scenario
    6d92b330e31 use ctx withoutcancel
    5e7c4c245b9 remove the deprecated in-tree vsphere volume's code
    a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30
    90fc108f6da fix kubelet trace broke in 1.28
    f7aca72155e unittests: Fixes unit tests for Windows (part 8)
    feb23ec581b Fix existing unit test (add no op scoring plugin)
    199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined
    2d943801ad3 Clean up unused type `HealthcheckType`.
    5e5f8b1dd29 move provideclusterinfo assignment into correct place
    c86189d1de8 clean up unused parameters for volume zone unit test
    eddf65849df Fix list_type_missing in k8s.io/apiserver
    18f3941c24b Fix list_type_missing in k8s.io/metrics
    58fb9f6e66b Fix list_type_missing in api/storage
    e96578fb4d0 Fix list_type_missing in api/rbac
    b2458e456a1 Fix list_type_missing in api/networking
    7fc3ef1fec0 Fix list_type_missing in api/imagepolicy
    cddfa437698 Fix list_type_missing in api/extensions
    cfe146615ac Fix list_type_missing in api/core
    fe902f7384a Fix list_type_missing in api/autoscaling
    ad397373970 Fix list_type_missing in api/authorization
    b24cffb1744 Fix list_type_missing in api/authentication
    a3ea994fa28 Fix list_type_missing in api/apps
    460df86f2a6 Fix list_type_missing in api/admissionregistration
    b8982be2684 Fix list_type_missing in sample-apiserver
    e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver
    dd80194d967 Re-run codegen with new kube-openapi
    1f55357d993 Re-vendor k8s.io/kube-openapi
    44060fb1f36 Fix "list_type_missing" API violations in meta/v1
    9f8f55a6ed2 Use DBG=1 for conformance verification
    37b7ae6b933 build: use -trimpath in non-DBG mode
    2315d3fed54 uncomment ktesting.AnyToString
    f86249c68e6 kubeadm: remove outdated notes during upgrade
    e38362501b7 dynamic-resource-allocation Update API comments
    e5b86c1034c Fix node update event will miss some potential changes
    a601ebd6b60 Changed the log message
    02b0dc98dd9 remove unnecessary fmt.Sprintf call
    57a5db8da3d remove feature-gate APISelfSubjectReview
    eb45a8f2f5b Added comments
    76be319571b Optimzed the code
    5c99f3a24e3 Logged the return value of ListPlugins
    3e1dbccf4d3 Don't sort under lock
    91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration
    468e2dac81d fix: requeue pods rejected by Extenders properly
    b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags
    c494e8b18e7 fix incorrect getDeviceNameFromMount comment
    03b8241fcef put storage related plugins under SIG-Storage reviewing
    4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister
    52ff7f8dc0c fix(framework): elaborate the document on PostFilter
    9cb2d1cf6de Removed Comments
    1dca49157a5 Utilized ListPlugins method
    59c75b001a4 cleanup: remove getStorageAccountName warning messages
    1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo
    7ba546cfeb7 drop alpha comment on ephemeral storage
    aba817ac1d6 return not-found errors properly from fake listeres
    f0aab8c984d encoding: avoid setting GVK unnecessarily
    1489a992060 Update mount_windows.go
    a3e27aa1ade ad controller: optimize populateActualStateOfWorld
    854347ac818 ad controller populator: check for inUse sync in test
    a85f5879849 Job: Use built-in min function instead of integer package
    140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging
    2076429e434 Enable pod container resources tests on Windows
    19da26005b3 kube-proxy: Fix etp:Local for externalIPs
    81d040d5381 remove import hack about k8s.io/utils/clock/testing
    565ac50bafb Drop testing dependency from shipped binaries
    12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code.
    5164db066cd Drop testing dependency from shipped binaries
    3df90134ca5 add script for restricting import of test only libraries
    1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard
    b8533f79769 kubelet: add metric for the first pod with network latency
    f9ceab37ca3 e2e: pass context into pod helper functions
    4de02f2dec9 kubelet:memorymanager: add metrics e2e tests
    ddd60de3f3a memorymanager:metrics: add metrics
    d6b8a660b08 Fix kubelet panic when allocate resource for pod.
    33aa56097a3 Set the initial length of set[T] in sets.KeySet
    4c06bd5bbb8 fix bad assumptions in gce network tests
    f040d9012cf verify-no-vendor-cycles: set up Go environment
    30dc2f0773c Added Imagefs inodes in default Eviction Hard
    60520b6d4a2 look for the cm after the lb is created
    ae3235aa01b Remove --use-real-proxier support from kubemark
    407b9d96104 remove duplicated check in operator_generator.go
    bd4707ac9a9 fix dns autoscaling test to run with coredns
    4a4940694f4 remove stale comments
    1c0044594dc cleanup todo after feature.BlockVolume gate was removed
    3fb16abfca4 make the decode function respect the timeout context
    fec63d5ea0e fix: use generic set in pkg/util/iptables
    ae24846c487 add comments for switch of syncUnboundClaim
    29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter
    166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0
    abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test
    ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens
    ed8d10f6605 Update sig-auth aliases
    d78a794be22 Remove unnecessary sort in kube-proxy ipvs
    1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests
    b91f07008cc add ut
    c26bb7eb85a update util/sets to use standard package cmp
    a00a610d15c move SidecarContainers featureGate checking to PreFilter
    6cca6e05246 bump kube-dns to v1.22.27
    e48aa093402 Make verify-typecheck.sh only check valid targets for a platform
    090b79f65d7 Update version.sh
    957e9a7f1a0 adc remove redundant check
    a96d21b4b0c Add logs for event handler
    84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook
    624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs
    6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller
    7b60e7e2a31 Added plugins enabled at each extension point
    d96a9858d39 client-go: allow adding indexes after informer starts
    58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller
    fade7463cd4 Add String() to framework status
    083818f9e29 fix wrong condition description in PVC
    e2227a24fbc switch to e2 machine types
    4fa3247a61e use context for lazy evaluation.
    6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file
    8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func
    32db5774a34 Fixed extra lines
    81bf3a59d1c Added mutex locks when accessing file object : addressed review comments
    63b3085f2a8 fix ad controller populators test
    21cf23b4faf Added extra info about default plugins in component config
    0e76e2c2bbf Added mutex locks when accessing file object : lint check fix
    9ed4c58a1f1 Added mutex locks when accessing file object
    e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual
    3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh
    4bba73a2bd9 Add comments to cpu accumulator and minor renames
    ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings
    95f2c859a39 snapshot controller version bump to latest
    48452fef8de kube_codegen: Add a --one-input-api flag
    87d158e4571 kube_codegen: genclient can look in any Go file
    a789a9d44bb kube_codegen: avoid dups in dirs with >1 file
    3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual
    e69a960792e skip deploying csi driver if it is already installed
    e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual
    f53ff68edd1 Generated files
    531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec
    d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils
    47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression
    81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute
    dbb6927ec22 Replace stat syscall with statx
    b20bc79a602 remove not register event code
    6e0ece85c49 cleanup the retrun style for cp execute function
    aa9b2b16968 use generic Set in api
    567fca7baa9 Use copy() instead of a for loop
    61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly.
    76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images
    56c241783e3 fix
    ab1f97bd6ed fix
    c7549fe340d fix(kubectl): delete pod declare no controllor note
    286628b0304 Fix error message for invalid resource reservation
    e40d00cf53a fix: 119921
    ad0b671b56d getPersistentVolume remove reduant deep copy
    12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls
    3579674df2d fix comment of rbac decision for NoOpinion
    c2049c7961b chore: loop optimization
    defe307ec22 chore: io/ioutil deprecated
    e6900f5ead7 Optimize the performance of the Clone method of preFilterState

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
This commit is contained in:
Bruce Ashfield 2024-07-15 18:24:32 +00:00
parent 1f0897e014
commit 244d5882c5
2 changed files with 16 additions and 16 deletions

View File

@ -14,32 +14,32 @@ Index: kubernetes/hack/lib/golang.sh
===================================================================
--- kubernetes.orig/hack/lib/golang.sh
+++ kubernetes/hack/lib/golang.sh
@@ -689,7 +689,7 @@
@@ -743,7 +743,7 @@ kube::golang::build_some_binaries() {
kube::golang::create_coverage_dummy_test "${package}"
kube::util::trap_add "kube::golang::delete_coverage_dummy_test \"${package}\"" EXIT
- go test -c -o "$(kube::golang::outfile_for_binary "${package}" "${platform}")" \
+ $GO test -c -o "$(kube::golang::outfile_for_binary "${package}" "${platform}")" \
-covermode count \
-coverpkg k8s.io/...,k8s.io/kubernetes/vendor/k8s.io/... \
-coverpkg k8s.io/... \
"${build_args[@]}" \
@@ -701,13 +701,13 @@
@@ -755,13 +755,13 @@ kube::golang::build_some_binaries() {
done
if [[ "${#uncovered[@]}" != 0 ]]; then
V=2 kube::log::info "Building ${uncovered[*]} without coverage..."
- GO111MODULE=on GOPROXY=off go install "${build_args[@]}" "${uncovered[@]}"
+ GO111MODULE=on GOPROXY=off $GO install "${build_args[@]}" "${uncovered[@]}"
- GOPROXY=off go install "${build_args[@]}" "${uncovered[@]}"
+ GOPROXY=off $GO install "${build_args[@]}" "${uncovered[@]}"
else
V=2 kube::log::info "Nothing to build without coverage."
fi
else
fi
else
V=2 kube::log::info "Coverage is disabled."
- GO111MODULE=on GOPROXY=off go install "${build_args[@]}" "$@"
+ GO111MODULE=on GOPROXY=off $GO install "${build_args[@]}" "$@"
fi
- GOPROXY=off go install "${build_args[@]}" "$@"
+ GOPROXY=off $GO install "${build_args[@]}" "$@"
fi
}
@@ -769,7 +769,7 @@
@@ -821,7 +821,7 @@ kube::golang::build_binaries_for_platfor
testpkg=$(dirname "${test}")
mkdir -p "$(dirname "${outfile}")"
@ -47,4 +47,4 @@ Index: kubernetes/hack/lib/golang.sh
+ $GO test -c \
${goflags:+"${goflags[@]}"} \
-gcflags="${gogcflags}" \
-asmflags="${goasmflags}" \
-ldflags="${goldflags}" \

View File

@ -5,16 +5,16 @@ applications across multiple hosts, providing basic mechanisms for deployment, \
maintenance, and scaling of applications. \
"
PV = "v1.29.1+git${SRCREV_kubernetes}"
PV = "v1.30.2+git${SRCREV_kubernetes}"
CVE_VERSION = "1.29.1"
SRCREV_kubernetes = "a02da633101bd7919153dd56412b09221c0139bf"
SRCREV_kubernetes = "7e92bb98e3005b357974decc0b95235f74016082"
SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
PE = "1"
BBCLASSEXTEND = "devupstream:target"
LIC_FILES_CHKSUM:class-devupstream = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
DEFAULT_PREFERENCE:class-devupstream = "-1"
SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.29;name=kubernetes;protocol=https \
SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.30;name=kubernetes;protocol=https \
git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=git/release;protocol=https \
"
SRCREV_kubernetes:class-devupstream = "e3b5e621f07f0fee298f641ebded61b8f393fe27"
@ -23,7 +23,7 @@ PV:class-devupstream = "v1.28.2+git${SRCREV_kubernetes}"
SRCREV_FORMAT ?= "kubernetes_release"
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.29;name=kubernetes;protocol=https;destsuffix=git/src/github.com/kubernetes/kubernetes \
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.30;name=kubernetes;protocol=https;destsuffix=git/src/github.com/kubernetes/kubernetes \
git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=git/release;protocol=https"
SRC_URI:append = " \