kubernetes: update to v1.34.1

Bumping kubernetes to version v1.34.1-54-g03a5f06c269, which comprises the following commits:

    30fd2664059 Do not validate etcd version for aggregated server conformance test
    f3b637f6c3a Bump etcd to v3.6.5
    6ebab3f180f Include relevant dimensions in pod controller indexing
    8cd6b631ceb update setcap and debian-base to bookworm-v1.0.6
    2674d8a049a Bump images, dependencies and versions to go 1.24.9 and distroless iptables
    bddc18b0948 Add integration test for invalid SAN certificate handling
    f40e4ce5529 Remove invalid SAN certificate construction
    ed6bf3e5db3 kubeadm preflight checks: fix host URL construction
    5be5dc9d54a With new changes we will also have a VolumeModifying condition
    ea75d2aa00a gce: Fix etcd manifest
    61c0fb13a70 Disable SchedulerAsyncAPICalls feature gate due to a known regression
    40899107c1d upgrade to cos 121
    2bfc98b313c Update pod resize test to accept new cpu.weight conversion.
    3ffc54a9e96 kubeadm: rework the FetchInitConfigurationFromCluster node flags
    e9f5e892f74 kubeadm: use JoinHostPort in WaitControlPlaneClient
    663664c6171 kubeadm: ensure waiting for apiserver uses a local client
    3f170932be0 Revert "Merge pull request #133213 from sanposhiho/second-trial-conor"
    09ddc5ebbf2 Bump images, dependencies and versions to go 1.24.7 and distroless iptables
    b245b551f74 Split preemption integration tests to mitigate the timeout
    560cc36db21 fix incorrect warning whenever headless service is created/updated
    07ac83c146b fix: use iifname for input interface name matches
    35b87e4c188 Wait for quota to report used before creating pvc
    856ac4923d7 release-1.34: pin system-validators to v1.10.2
    7d43ddbbfb6 Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set.
    4a40ddf1e6b gofmt and review feedback
    4ae3b64b736 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels
    16e3f7c1793 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.1
    93248f9ae09 Release commit for Kubernetes v1.34.1
    988bdd12587 Do not remove PVC ClaimRef to fix flaky VAC test
    b97399727e0 DRA kubelet: avoid deadlock when gRPC connection to driver goes idle
    76ab5f06640 kubelet/metrics: fix multiple Register call
    04fd1ada6f4 kubelet/metrics: misc optimization
    7bd2900b1e6 fix: Only warn for unrecognized formats on type=string
    f779cf63819 Disable estimating resource size for resources with watch cache disabled
    96739661c7c Disable collecting stats for resources not setting prefix to prevent error logs
    2631a5f21ea Fix linter
    94c0e478827 Fix completion of resource names
    08515c751b0 Fix missing control plane health check timeout
    a75938d9e5f Fix DaemonSet misscheduled status not updating on node taint changes
    3ebbe57311f Add a note about Conflicts return value
    98dca817c91 Fix SELinux label comparison
    3e75f388199 Add missing cases to SELinuxMount tests
    d1337421461 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0
    f28b4c9efbc Release commit for Kubernetes v1.34.0
    f2170bc6c3d kube-proxy: log but don't exit if ipv4 or ipv6 is not available
    f47e9696d72 CHANGELOG: Update directory for v1.34.0-rc.2 release
    78405b2c893 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0-rc.2
    ed3ccdbe323 Release commit for Kubernetes v1.34.0-rc.2
    db01f940320 Remove patch/update from ServiceCIDR API conformance test
    d49e3d67cb3 Fix storage counting all objects instead just objects for resource
    747a295caca fix flake in dra test 'TestPlugin'
    4ebe560c74f DRA allocator: fix data race around `claimsToAllocate`
    41013e7bf0a e2e_dra: use latest release if stable doesn't exist
    e49f6116f9e clarify that staging repos are automatically published
    ada2ed84877 add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only
    8919ac43c81 special case that kubectl staging repo is currently used to track issues, and only pull requests should be redirected back to the main repo.
    011d5001975 link to what a staging repository is
    7c43e6d2fdb docs: clarify that this is a staging repository and not for direct contributions
    f8bad82c212 update go version for publishing bot rules
    bf6c86b562d DRA: wait for stats to converge in "creates slices" e2e test
    020b7052ca8 Bump dependencies, images and versions used to Go 1.24.6 and distroless iptables
    c8ab780edbd dra plugin: assume claim after api call in bindClaim
    81affffa1b8 CHANGELOG: Update directory for v1.31.12 release
    8311c1d3d70 CHANGELOG: Update directory for v1.33.4 release
    edfa9a5bd28 added WithFlaky() to the device plugin test case: supports extended resources together with ResourceClaim
    48a4967718e CHANGELOG: Update directory for v1.32.8 release
    064b5916172 improve CRD handling in VolumePopulator test
    944b0a49235 do not allow the node to update it's owner reference
    0bd039e89af Update CHANGELOG/CHANGELOG-1.34.md for v1.34.0-rc.1
    4d6b49b3fd4 CHANGELOG: Update directory for v1.34.0-rc.1 release
    a956ef48629 Release commit for Kubernetes v1.34.0-rc.1
    e073a91256e Add release-1.34 configuration
    cbd6fb867ba Remove DeprecatedVersion for apiserver_storage_objects, adjust help text
    89b5034d562 Make podcertificaterequestcleaner role feature-gated
    2629fe25faa Use Delete() instead of DeleteLabelValues() for etcd metrics
    13ced7b7ddc CHANGELOG: Update directory for v1.34.0-rc.0 release
    40e8ad9517f Release commit for Kubernetes v1.34.0-rc.0
    b7969189866 reduced numPods to 5 from 10 to fix flaky test (supports reusing resources) due to timeout.
    2a026f6d659 1/ added retries to AssumeClaimAfterAPICall for the object which is not present in the cache (dynamicresources.go) 2/ modified the assume cache verification to not error out as long as the expected claim is in the cache, no matter its latest and api object are different or not. (dynamicresources_test.go). 3/ fixed nil panic as seen from https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/133321/pull-kubernetes-integration/1952472629470302208
    01470d973b2 Fix memory limit decrease test on cri-o
    aca402f25b3 e2e: node: skip breaking tests
    0fbc8cd44ce Remove integration-test labels from long running scheduler_perf workloads
    e83e5815e5e always pull pause image for eviction tests
    418e96bf1af Update prerelease lifecycle to v1.34
    65fda6dd34e fixed exended resource scheduling performance test, added more nodes for scheduling the init pods
    9eda4789c02 Fix potential race in PodStatusPatchCall implementation
    dbfeb9c351a Fix potential race in closing API dispatcher
    c7db6362fe6 Move NominatedNodeName preemption-related integration tests to a new package
    46b858aa130 fix: return false to apply the patch
    07c71097d33 Split DRA scheduler_perf tests into multiple packages
    988c9b03fd1 Demote KEP-5278 feature gates ClearingNominatedNodeNameAfterBinding and NominatedNodeNameForExpectation to Alpha
    0a12f00e9d3 fix nil panic in hasBindingConditions, it cannot assume claim has allocations
    7f052afaef5 KEP 5075: implement scheduler
    3e3b2447ffe Promote PodLevelResources to Beta (#132999)
    59bba927178 KEP-5075: generated codes from make update
    5ad969588d5 KEP-5075: API updates
    29d1951eb76 fixes scheduler nil panic due to empty init container request&limit
    23d6f73e720 extended resource backed by DRA: test
    34a64db2c73 extended resource backed by DRA: implementation
    a3a767b37ec WIP: fix e2e tests
    4ca47255a8b node: disable resource managers when pod-level resources are enabled
    3068b60b830 extended resource backed by DRA: codegen
    1f2fd18ac86 extended resource backed by DRA: API types.go
    7fbf63a23fc HPA support for pod-level resource specifications (#132430)
    6e9b60e3fd8 Add / update kubelet and DRA API owners
    60fa65db883 Clear pod.Status.NominatedNodeName when pod is bound
    15b1a7fd317 Revert "CPU and Memory manager event when using pod level resources"
    aea0a3cca29 Run all relevant test cases with the feature gate enabled and disabled
    856e7d2383c scheduler: Stop clearing NominatedNodeName on all cases
    6653ef652b3 KEP-5007 DRA Device Binding Conditions: Add dra integration test
    9e82c133010 KEP-5007 DRA Device Binding Conditions: Implement DRA logic
    e8c3af1f5cc KEP-5007 DRA Device Binding Conditions: Implement scheduler logic
    ac81b829e4a KEP-5007 DRA Device Binding Conditions: Run make update
    987ad395167 KEP-5007 DRA Device Binding Conditions: API Related code Update
    34c3b093835 KEP-5007 DRA Device Binding Conditions: API Update
    ac9fad60301 feat: trigger PreFilterPreBind in the binding cycle
    48eef9ce9af test: fix TestStructuredAuthenticationConfigReload flake by handling expected network errors
    4874d41665b Pod Certs: Fix kubelet volume host arg order
    f9bb14fcf06 Fix apiserver service proxying e2e test flakiness
    8ace0fb89fb remove failing test that depends on expired credential, remove credential, add TODOs
    f07dcd443d7 fix flake on TestStreamTranslator_WebSocketServerErrors
    7ba22700bfd websocket streamtranslator increament metrics before writing status
    0aea6a1e45d TestStreamTranslator_BlockRedirects use subtests
    4b698656bec Returning early if podResources is nil to avoid nil pointer dereferencing
    766d011bba2 E2E tests for no hints nor aligment of CPU and Memory managers
    5672750e6a3 Unit tests for no hints nor aligment of CPU and Memory
    7804b51f420 CPU and Memory manager event when using pod level resources
    fd206a0efb3 Add comments for restart rules not used for unknown container status and probes
    4b479da4b5b Remove the feature from e2e test
    6997fbd1edc Fix incorrect validation on the kubelet
    48f8458c41f validation: Fix user-namespaces test case name
    50a7a8af4d2 validation: Align usage of hostUsers in error messages
    5f7e611f736 validation: Return error if hostUsers=false && volumeDevices
    f3466f8adc1 fix: flake integration test
    ed74d4cd52f Revert "Revert "fix: handle corner cases in the async preemption""
    e8dc272c533 Update etcd to 3.6.4
    0f7cd149596 Fix prerelease-lifecycle for volumeattributesclass
    9c8dacb0374 ContainerRestartRules feature gate should work with probes
    48fd30113c6 [PodLevelResources] Add missing label to Downward API test
    57ceb56c6fa Bump etcd sdk to v3.6.4
    b562335cb36 Build etcd v3.6.4 image
    17d733e2433 KEP-5229: Send API calls through dispatcher and cache
    40a90df3b36 DRA E2E: remove stress test
    b956484c25a KEP-5229: Add metrics for async API dispatcher
    006d7620a8c Revert "fix: handle corner cases in the async preemption"
    727a6e6db50 Reject pod when attachment limit is exceeded (#132933)
    a652896307c Allow white-spaced CABundle during webhook client creation and validation (#132514)
    f1737db166b Update DRA Pod spec comments
    b7de71f9ce7 feat(kubelet): Add ResourceHealthStatus for DRA pods
    d4a83b9a522 fix(golangci-lint): skip config verification when -c none is used
    252513a1b99 Add WithFeature and WithSerial, also check if cgroup v2 is used in test
    1bc995c195e Generated files
    f925e555483 E2E tests for container hugepage resources immutability
    9f5b09eb7bb Unit test pod level hugepage Default and Validation logic
    845e94d3707 Validation logic and Defaulting update for pod level hugepages
    c15a54f8c0c draadminaccess: move metrics test from e2e to integration
    d176808d3a9 Rename hack/*-yamlfmt to -owners-fmt
    7adcd21148f Replace cmd/yamlfmt with k-sigs/yaml/yamlfmt
    79833578f66 KEP-3695: add kubeletPodResources feature gate to Beta
    2cb955d8cca Add KYAML support to kubectl
    8182a27f3b0 Re-vendor sigs.k8s.io/yaml @ v1.6.0
    94bf8fc8a9d Promoted API `VolumeAttributesClass` and `VolumeAttributesClassList` to `storage.k8s.io/v1`.
    8e3f93c8796 Unit test propagate pod level hugepages to containers
    52b457421a9 Pod level hugepage cgroup when unset in container
    add7132a6db E2E tests for pod level resources Kubelet Preemption
    976a617d059 E2E tests for pod level resources eviction manager
    13b122b6ffe Unit tests for pod level resources eviction manager
    9a3ca05f6bc Use pod level resources for eviction manager
    b34f8782e2f Add e2e tests
    9086e52feeb Implement restart rules in kubelet
    af595a44aef Add container restart rules to API
    5dc2030c027 4033: GA KubeletCgroupDriverFromCRI feature gate
    27e16751538 Make PSA host enforcement honor emulation version
    32053b1d2f3 chore: replace ptr caster with unified ptr.To
    83a0d0c660a kubelet: add metric for version CRI implementation will lose support
    ffe306d6795 client-go, kubectl: Replace deprecated ErrWaitTimeout with recommended method (#132718)
    cb33accc8fc JSON & YAML output for kubectl api-resources (#132604)
    8a2db4da426 fix: adjust the log level in the preemption
    4c9bf4719b8 fix: handle cornor cases in the async preepmtion
    bf98e45afb3 Migrate pkg/kubelet/volumemanager to contextual logging
    aecd37e6fb4 Moving Scheduler interfaces to staging: Move PodInfo and NodeInfo interfaces (together with related types) to staging repo, leaving internal implementation in kubernetes/kubernetes/pkg/scheduler
    c954e13255a Revert "DRAAdminAccess: add upgrade downgrade test"
    12d67506661 client-go/metadata/fake: sets opts.Watch to true
    b37fd0cab28 [KEP-4816] DRAPrioritizedList to Beta
    6767d54bba6 Bump DRA API version to "v1" in "deviceattribute" package in "k8s.io/dynamic-resource-allocation" module
    449763fb115 e2e: podresources: disable memory manager integration
    b768c1d1d5b DRA API: bump storage version to v1beta2
    24de875cebc DRA: graduate DynamicResourceAllocation feature to GA
    d8df1dc1b89 DRA RBAC: fix kube-scheduler bootstrap policy
    21d929f5992 integration: use --runtime-config-emulation-forward-compatible
    5c4f81743c2 DRA: use v1 API
    cff91579e80 DRA API: v1 registration + tests
    4e592f6c145 DRA API: s/v1beta2/v1/ and generated files
    1f2f433f76d DRA API: verbatim copy v1beta2 -> v1
    837b7395d29 kubelet: DRA: Close gRPC connection when removing DRA plugin
    c7d6c096833 List available endpoints for kube-apiserver (#132581)
    5f4a1aa58c3 chore: ptrTo util removal with ptr.To
    a82187cf11a [PodLevelResources] Update Downward API defaulting for resource limits
    4c87e60d0db Tests using .host field in probes must be at priviledged level
    f94fcac8680 Add new fixture testData for 1.34 PSA
    fc0474d7718 Copy test fixtures to 1.34 from 1.32
    9540a963964 Copy test fixtures to 1.33 from 1.32
    4a3ebf886c4 update the minimal version to fix unit/fixture tests
    333b19b4416 Add PSA for blocking .host field on pod probes and lifecycle
    c7bf3b81f6a Add flake debugging for admission test
    a806e069e26 Remove WinDSR feature gate unit test
    765d84e9bff Test only EndpointSlices, not Endpoints, in dual-stack e2e tests
    2cb48f77f0f schedule pod availability checks at the correct time in ReplicaSets
    61cc6cf8072 draadminaccess test make it serial
    33b45c8383e Update "should proxy through a service and a pod" to look at EndpointSlices
    d70e7e223cf Port aggregated apiserver discovery to EndpointSlices
    41dc2d3b024 Add utilities for getting EndpointSlices for a Service
    f7109ed281a [KEP-3751] Allow PVC VACName to update to nil or empty when status.currentVAC is nil
    c35e4ad2b24 add codes for drop disabled pod fields
    8d65e1e98ee Add e2e tests.
    f31aeca4256 Add code for overriding hostnames
    88b76214343 Add validation for the HostnameOverride field.
    c889ee17a2f Convert kubelet plugin manager from gogo to protoc
    abb1b26d508 DRA: Add experimental allocator variant
    17cc5e9ecd8 e2e: node: podresources: exercise with dynamicresources enabled
    ee8ef383bec Update kubectl kustomize to kyaml/v0.20.1, cmd/config/v0.20.1, api/v0.20.1, kustomize/v5.7.1
    af6c97bd14f add Feature Gate.
    8b3814c4ab8 Add the HostnameOverride field to the Pod API
    c2a06e7912c DRA: skip flaky test case on Windows
    f6061605fb5 DRA E2E: run multi-node control plane tests also with two nodes
    f0e29208985 DRA E2E: simplify "control plane" test names
    603751ee80d DRA E2E: remove redundant test
    21ed19798ea kubelet: DRA: Handle grpc.ErrServerStopped in plugin tests
    61bd5789be4 Updated to not directly change the global variable `claim`
    4f0a5771abd test: add e2e case for mutating named port
    db9b9b5a429 Build etcd v3.6.3 image
    179551a7cb3 feat: Implement warnings for unrecognized formats in CRDs
    437a2ad693f feat: Add func to export the supportedVersionedFormats
    d943239c57b added debug_redact to cri api secrets
    88af8b6060a Add PodLevelResources to the Windows OS limitations in the API doc
    c2b26617bec Check OS for PodLevelResources in kubelet
    e2c308aff93 Check OS for PodLevelResources in API server
    f6aee636906 add validation logic for APIVersion fields of HPA
    6f3b6b91f08 KEP-3721: Support for env files (#132626)
    0b60c121947 KEP-4222: Adopt text and JSON transcoding support for CBOR.
    917659269af Bump to github.com/fxamacker/cbor/v2 v2.9.0.
    216f7485bd9 DRAAdminAccess: add upgrade downgrade test
    303a7056ffc e2e: node: podresources: enable multi-container tests
    38a9a8a59dc e2e: node: podresources: add tests for missing pod
    19b00ecc941 update CCM image to v33.1.1
    b070b0a5c5f chore: residual boolptr and intptr removal
    407bcf88645 kubelet: add metrics for userns pods
    e5ccc31e704 chore: replace float64Ptr with ptr.To helper in validation and integration tests
    545b36ba295 fix uncore e2e check
    b97decb7d91 client-go/dynamic/fake: sets opts.Watch true
    f626e847e72 Migrate pkg/kubelet/winstats to contextual logging
    ce2d979390e Run Unschedulable scheduler_perf test case with SchedulerAsyncAPICalls feature gate enabled
    0da0897c18d Bump external snapshotter for vgs tests
    78bf3410c88 DRA E2E: revisit conformance classification of tests
    911df655d3b chore: migrate kubelet lifecycle to contextual logging.
    872f0682d58 Use "k8s.io/api/resource/v1beta2" instead of "k8s.io/dynamic-resource-allocation/api" for resource API imports.
    31d2de59dd9 Split the symlink target error cases into for each condition
    a4fb1562f4a introduce resolvePCIeRoot instead of resolveSysDevicesPath
    f3d4b216f3a assign return value to a variable instead of using it directly
    7f27c88d0fb Update staging/src/k8s.io/dynamic-resource-allocation/deviceattribute/pci_linux.go
    ee26a5837c4 Update staging/src/k8s.io/dynamic-resource-allocation/deviceattribute/pci_linux.go
    8b558a1bc3e fix(validation-gen): correct typos in comments and documentation
    63a958ff344 chore(validation-gen): remove TODO regarding ratcheting behavior for slices and maps
    c659b418265 e2e test for mirror pod with pod generation
    a5b9c7a7981 bump resource claim controller concurrent syncs to 50
    6d4000f844e Pod Certificates: make update
    4624cb9bb92 Pod Certificates: Basic implementation
    facbb66142e Temporarily revert restart-on-node-IP-change behavior of proxy NodeManager
    e2d37f3cd7e kube-proxy: merge OnNodeAdd and OnNodeUpdate into OnNodeChange
    0dc51b16f9e kube-proxy: merge NodeEligibleHandler with NodeManager
    d4892fef768 kube-proxy: merge NodePodCIDRHandler with NodeManager
    373fb487f60 kube-proxy: add NodeManager to manage life-cycle based on NodeIPs
    d21ca8674ce kube-proxy: add NodeTopologyConfig for tracking topology labels
    8acda3631f7 Belatedly add tests of proxy NodeConfig and ServiceCIDRConfig
    edf4654d76d generate proto
    18918e20085 add CSR declarative_validation_test.go tests
    69a8a169d59 add WithOrigin and MarkedByDeclarative, update hand-written to error at list instead of list item field, add additional tests for approved+denied case
    6a2d5a1e644 feat: add CSR status.conditions approved+denied declarative validation tags and associated declarative validation tags to v1 and v1beta1 types.go
    248ad21610b graduate prefer-align-cpus-by-uncorecache to beta
    6e77bff18b8 pod sandbox image is not being used by kubelet any longer
    43706d6b7a8 add warnings when creating headless service with specified load balancer ip,external ips and/or session affinity
    53aa4332b56 fix integration tests
    8996e81fc87 fix unit tests
    dd4dd3d8ea4 feat: Enabledeclarative validation in CertificateSigningRequest subresources updates
    ccc82775f45 expand test coverage for uncore alignment
    cb29414b44f Extend E2E test coverage for PSI metrics under pressure
    4ed231da063 kubelet/imagePullManager: add benchmarks for image pull record accessors
    5486e6f44e2 DRAAdminAccess: move to beta
    5d4010d2d24 Mark KubeletServiceAccountTokenForCredentialProviders feature gate as beta
    4fc9546e0e2 KEP-5229: Implement API dispatcher
    549f7c4fc98 image pull manager: add in-memory LRU intents/pulled records caching
    ea326373ef3 e2e: node: cpumanager cgroup v1 compatibility
    b8d74e75c7b Add test case to prove MaxElements correctly set on IntOrString
    7e5aafcb164 ci: remove unnecessary test harness
    457df1cf981 ci cleanup: make sure to remove test KUBECONFIGs
    3026020b44a Convert `k8s.io/kubelet/pkg/apis/deviceplugin` from gogo to protoc
    4f9f6c05363 scheduler_perf: hide "metric ... not found" errors
    b8758ac31b7 node: mm-mgr: migrate to contextual logging
    2e756e7412c fix data race in OIDC integration tests by serializing test server starts
    03acd266a31 chore: residual uint64ptr removal with ptr.To
    b84271a7795 DRAAdminAccess: add e2e
    ab839c93ff8 feat(kubelet): migrate kuberuntime to contextual logging
    30e5cdd6412 kubelet: don't fetch image credentials if the image is present and if we don't need to check if the pod is allowed to pull it
    cbba3281a3a integration: fix etcd output handling
    d0fc938a07f DRA client: fix conversion of watch channel
    f77ce8951e6 DRA: debug output for list/watch client
    9d7d3a61722 Bump sample-device-plugin base image to alpine:3.22
    7ddb0426266 feat(cmd/kubelet): support structured and contextual logging
    fb4e2522240 test: add batch pod deletion for kubelet e2e tests
    4b8dd9612ff cleanup: remove example plugins
    067bd16b154 Add unit tests to check if right feature gate is checked based on resize request.
    f71080c930e Create separate feature gates for static CPU Manager and static Memory Manager support
    07ef7842be2 Change memory manager static policy to a public const
    ae5247afc18 address feedback
    65951744564 unit test for HandlePodReconcile retrying pending resizes
    0d24c3b57f0 add sourcesReady parameter to fakeKubelet constructor
    6e86af48ccb fix check if requests have shrunk
    6a40bcb4268 Retry pending resizes if a status update leads to aggregate requests shrinking
    22d724969c9 kubelet: record container_resize_requests metric for all resize updates
    13a6d2121c1 check a couple extra failure scenarios
    8957109b76b only record resizes in progress and pending after all pods are added
    d51375dccf2 record 'kubelet_pod_deferred_resize_accepted_total' metric
    b8fc1b6750f record 'kubelet_pod_infeasible_resizes_total' metric
    d845e1fd6b8 record 'kubelet_pod_pending_resizes' metric
    23005281f74 record 'kubelet_pod_in_progress_resizes' metric
    0595ddaafa6 record 'kubelet_container_requested_resizes_total' metric
    468aa5e30c4 record 'kubelet_pod_resize_duration_milliseconds' metric
    12966276334 define and register ippr metrics
    3964fbeab14 kubelet: integrate sa creds in image pull manager
    f1728bd584a Add ServiceAccount coordinates to ImagePullCredentials v1alpha1
    b9dd2fdec03 credentialprovider: track service account cred source in ext provider keyring
    9a4c0f9b2f1 scheduler_perf: Add memory tracking to performance tests
    8a42f4ccce5 Add support for CEL list library.
    5d31866313a dedupe fetching allocatable and available resources in node test
    79dc0b8a414 Add jitter to priodically executed process in storage to avoid too concurrent executions
    a48420e3ceb promote PodObservedGenerationTracking to beta
    336b5aff452 Check for valid UID range when runasnonroot is true
    e9492239b24 Promote windows graceful shutdown to Beta
    00bf3b37a74 Graduate PodLifecycleSleepActionAllowZero to GA
    99059895f4f Account for caching and maximum object size when estimating LIST request
    2256f5747dd Add resize completed event after Inprogress conditionCleared is cleared
    d42a1d58d0e DRAAdminAccess: add metrics
    f5d12ed39a1 fix: Compare versions instead of pointer comparison
    8dc20a0f62d Fix IntOrString cost estimation when schema has a MaxLength constraint
    a2e9e9f6677 fix pass ctx into a revised HandleError function
    729cd583ad9 scheduler integration: fail test instead of existing
    bfa33b18a08 fix(kube-proxy) avoid add zero-masked loadBalancerSourceRanges to ipset
    d6e85b504d0 Add kubelet_credential_provider_config_info metric
    14a5ef56a34 fix pipeline failure
    21e2fcea9ec Add automatic_reload_last_config_info metric for auth configs
    5f829195e6b Only warn when AppArmor annotation doesn't match pod field
    f2c48ffec9e Add generic config info custom collector
    11921f75857 [KEP-5100] WinOverlay feature gate to GA
    e417232f92b Warn when using AppArmor annotations with a pod field
    4fdf09fdc1b Stop syncing AppArmor fields to annotations
    3ecb3d230f3 Remove unused appArmor*InUse functions
    75ae2d727a0 Add an E2E test for memory limit decrease usage check
    2a9388c3036 Move memory limit decrease e2e test to success cases
    c7a78185c25 Remove the restriction on memory limit decrease
    d9c91127d06 Check memory usage before decreasing limits
    465f7281419 use gomega.BeComparableTo instead of Equal for resource quantity check in resize test
    cedcbfb94c3 Update cel-go to v0.26.0
    24065780ed7 Add e2eendpointslice.WaitForEndpointPorts, use in some tests.
    f456a70bdea use CreateBatch and MakeResizePatch
    5cea72d5649 DRA integration: add test case for FilterTimeout
    241ac018e25 DRA integration: remove unnecessary anonymous import
    bc338e7505c DRA scheduler: implement filter timeout and cancellation
    430c79b53fc chore(validation-gen): hold uniqueness check of listmap
    1745094c405 Update VolumeAttributesClass API Description
    2cb30c77949 Refactor target check
    86bc1bf0a45 more complex e2e test for deferred resizes
    66de1960a5d Increase maxSeats for List requests
    025c606e398 DRA scheduler: add plugin configuration
    ee38a001311 DRA scheduler: add DRASchedulerFilterTimeout feature gate
    837ef29f5a2 scheduler: enhance and document Filter cancellation
    7910b43cd39 scheduler_perf: document benchstat usage
    b9ce92d50eb edit versioned_feature_list.yaml
    070621bf776 Remove unit tests that rely on feature gate enablement check
    3f847d97c32 GA the NodeSwap feature gate
    1a7630c0979 Remove deprecated LegacySidecarContainers feature gate
    300c7b815a2 set the timeout to Get method
    2b13b87e609 chore: replacing timer ptr with ptr.To
    532d48fe6ad Convert `k8s.io/kubelet/pkg/apis/podresources` from gogo to protoc
    cf68f75fc33 Deprecate apiserver_storage_objects and replace it with apiserver_resource_objects metric using labels consistent with other metrics
    db342010f46 kube-controller-manager: enable WatchListClient
    cef9f9edb6e kubeadm: fix a bug where it should generate default etcd command based on etcd version when the etcd image tag supports semver
    ace2a224926 drop rules for release-1.30 as it is EOL
    6737c31d0f7 update publishing bot go rules for release-1.31/1.32
    a1a85ddb161 SSA: test optional map keys
    4d34975a466 sigs.k8s.io/structured-merge-diff/v6 v6.3.0
    3357e8fc057 SSA: add integration tests
    a2a3839a8ee DRA scheduler: add pohly as approver
    4bc2ad6eea7 migrate pkg/kubelet/preemption to contextual logging
    b96e3cac741 migrate pkg/kubelet/pod to contextual logging
    0cb31bc4073 migrate pkg/kubelet/nodeshutdown to contextual logging
    75ccd69babe migrate pkg/kubelet/kubeletconfig to contextual logging
    1d0fd592881 kubectl: add port names to describe pod output
    7dad9e2af6f migrate pkg/kubelet/apis to contextual logging
    f141907ddd8 DRA kubelet: add v1 gRPC
    1b5a08cbfb5 cleanup: fetch individual PodResourceInfo from allocated resource state
    6e7e6b37c7e Fix the cost issue to match the bug fix for target being nil in CEL side.
    ad220eb6c32 chore: remove residual int64ptr usage with ptr.To
    a9644686381 Add PodCPUAndMemoryStats to stats.Provider interface
    8f4a624a593 Fix pipeline errors
    e8536c01910 add item + union and item + zeroroneof output tests
    be72d963b88 add validate/zeroorone_test.go and add +k8s:zeroOrOneOfMember output tests
    10b20852e3c feat(validation-gen): add +k8s:zeroOrOneOfMember tag validator and associated validate method
    81f18759e6e add validate/union_test.go and add +k8s:unionMember and +k8s:unionDiscriminator output tests
    5bc9b691141 feat(validation-gen): add +k8s:unionMember and +k8s:unionDiscriminator tag validators and associated validate methods
    bfb42fc31c9 refactor item.go with buildMatchConditions, make itemTagValidator a LateTagValidator
    5d1c5ebd8cb add ParentPath to context, remove Parent from context and plumb changes in validators
    c50da38aa18 allow field validators to generate variables
    e7aeb4ff5c1 Promote MutableCSINodeAllocatableCount to Beta
    9bcaa8c86b1 Fix conversion-gen caching incorrect memory equality comparisons
    b35ad4e9b01 Add e2eendpointslice.WaitForEndpointPods, use in various test
    dbecdd18763 Use e2eendpointslice.WaitForEndpointCount in more network tests
    b7998a397b5 Add e2eendpointslice.WaitForEndpointCount, use it in some network tests
    dd3691b1698 refactor allocator, removed claimsToAllocate from NewAllocator(), instead, passed it through Allocate()
    8e6651520e6 Convert `k8s.io/kms/apis` from gogo to protoc
    2f605f49fcf CHANGELOG: Update directory for v1.34.0-beta.0 release
    9cf00ec6d17 kube-apiserver: promote WatchList feature to beta
    e4320fe25cf e2e_node: DRA: test handling fatal serving failures
    ea05ad8887b e2e_node: DRA: add errorOnCloseListener
    fc21d3f37dc e2e: DRA: enable test plugin to cancel main context on error
    1981c985b17 e2e: DRA: support test and public options
    d44b737447f DRA: handle grpc.Server.Serve failures
    169965350cc e2e_node: Refactor DRA tests to use variadic options
    52fab5969cc Add NominatedNodeNameForExpectation feature flag
    fd23fa3d423 Graduate ListFromCacheSnapshot to Beta
    665599417ab Add e2eendpointslice.WaitForEndpointSlices, use it in a few places
    b5931f53dd7 Auto update openapi spec
    a100dfdfaa5 Using alpha as the stored version for one release.
    6e932445326 Add validation of volumeClaimTemplates in StatefulSet
    ae4a43de6dd Refactor: isolate flag registration to kube-apiserver to eliminate global state
    5b4c1872a0f chore: residual intptr removal with ptr.To
    e9aab4648fd CHANGELOG: Update directory for v1.31.11 release
    dc0ca0be3f8 CHANGELOG: Update directory for v1.33.3 release
    d6caa36dcc7 CHANGELOG: Update directory for v1.32.7 release
    d460611e77c Add more checks
    b69fd9d42c4 Add egress selector support to JWT authenticator
    e9c1ca724f0 Add conversion-gen memory equality test
    62521d83508 fix observedGeneration in pod resize conditions
    38637260281 add unit-test for ensuring authn latency annotation
    760eb7d5dea fix: record authentication latency before audit filter wraps up
    26c8ee7b858 DRA: Improve allocator with better backtracking
    d383c8e0243 Update history of checkpoint support in Kubelet
    20914ef4e90 Prevent running two HPA cachers for different API versions
    bc5088cbf35 Revert "Kube proxy node manager"
    f8c7131b46b Drop experimental- prefix from etcd flags
    d8747d716e4 Use object size estimation for non-recursive list
    05e1c4b4893 e2e: node: fix podresources API feature label
    6e1875fac94 local-up-cluster.sh: don't require to be invoked in the root
    356be5ae30f DRA E2E: move upgrade/downgrade test into test/e2e_dra
    c8ca9249acd DRA integration: add upgrade/downgrade testing with local-up-cluster.sh
    60e9316c0cc DRA E2E: refactor helper code
    2e3228e2ca9 DRA E2E: support deploying driver on localhost
    e5f57d2cfab ktesting: add WithoutCancel
    e01603b2e33 ktesting: document side effect of SetDefaultVerbosity during init
    0b1bed1a1e0 ktesting: WithCancel does not cancel on test completion anymore
    f381d737247 DRA E2E: retry exec of hostpathplugin
    c2080e7e45d DRA E2E: support using ktesting
    906505281fc ktesting: add step Begin/End
    b7c2d6aba50 ktesting: skip logging error when capturing it
    4977163860b DRA E2E: reduce port proxy verbosity
    5721c927e6a DRA E2E: increase verbosity of resource claim controller
    1a284472f17 E2E framework: retry also on EOF errors
    6a7b9589f61 E2E framework: support setting REST config
    bd30b0adef6 remove general avaliable feature-gate DevicePluginCDIDevices
    9c0e65b085d test/apimachinery/watchlist: server supports sending resources in Table format
    2dfc4e25a9a endpoints/handlers/respone: include metadata when IncludeNone and watchlist requested
    e1a0cf6244f handle stoppedCh and listenerStoppedCh returned by cc.SecureServing.Serve
    6cd00cdcba0 Auto gen
    a3ecea296c1 manual change
    4f3334b7cee Promote feature gate
    0d8fd61e64c address review comments
    32afbd9ea5d Inconsistency resets cache snapshots and prevents collection of new ones until cache is marked consistent again
    4f77a461863 Generated files
    a04e7cf5eb8 KEP-4601: Graduate selector authorization to stable
    6f4be0d8c93 DRA allocator: skip unsupported test cases
    740e568468e address review comments
    61542e7a987 Cleanup: Remove field name from invalid field detail message
    14f3c26842d Remove redundant metric field.
    ad03cb87336 chore: residual strPtr utility removal with ptr.To
    af249fb2e97 DRA E2E: test mixture of extended resources + ResourceClaim
    9a7dddf5a71 fix test
    09ec6f74483 chore
    85adda5e68f Use object size to estimate list cost assigning 1 sear per 100KB
    f20be4c094c add test which checks release method calls Get
    7d9eb2b3d0d test/apimachinery/watchlist: update tests that receive resources in Table format
    da7c55e0d2f reflector: detects unsupported meta.Table gvks for watchlist
    ebc1ccc491c Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
    8d1cbc83d8c endpoints/handlers/get: remove watchListEndpointRestrictions
    14d1bbf36f4 chore: maxPtr utility removal with ptr.To
    6462ad918e7 codegen tool: resolves GOBIN via `go env`
    1073b3b9055 Add unit tests for AddPod()
    fcb595a2df7 service-ip-alloc: delay ip processing on service recreate
    8de14b526e9 service-ip-alloc: make repair loop consumer clock interface
    e3836172845 Fix TestProgressNotify for etcd v3.6.2
    e0f9914ef72 chore: replace int32Ptr usage with ptr.To
    cf4912eb4e5 chore(validation-gen): reorder imports
    419e70b7637 run update-codegen
    4c8f489b817 add +k8s:neq tests
    fc1c832c495 feat: add +k8s:neq tag which enforces field is neq to a specified comparable value
    fb971325c39 feat(validation-gen): add new test cases for item validation
    5cc2721f6c6 feat(validation-gen): add k8s:item
    af05aa61d9c feat: Add validation ratcheting for subfields tag
    daef13ecc36 chore: improve error rendering and add unit tests for ErrorMatcher
    f40ee6f996d feat(validation-gen): add new test cases for validation of slices and maps
    b059bb55143 feat(validation-gen): enhance validation functions for slices and maps
    0b1fa64a920 refactor(validation-gen): streamline type validation logic
    7ad89e19971 feat(validation-gen): add FieldValidator
    ba45e37b24b chore: removed boolPtrFn helpers with ptr package implementation
    5971802fdda chore: intPtr removal with ptr.To
    a091fa607ea Add apiserver_resource_size_estimate_bytes metric
    e6cf7dbf063 Enable running cache inconsistency detection by default
    a06b3d356c8 Bump dependencies, images and versions used to Go 1.24.5 and distroless iptables
    cba38b62932 DRA allocator: fix linter hint
    5eab2b7a6e4 Remove unuse runtimeCache parameter from stats.Provider
    46e2c22fd76 kube-proxy: merge OnNodeAdd and OnNodeUpdate into OnNodeChange
    fa9e466945c kube-proxy: merge NodeEligibleHandler with NodeManager
    c6735d9b3bc kube-proxy: merge NodePodCIDRHandler with NodeManager
    45c355ca58b Move unschedulablePods struct to a separate file
    bfeaae3310f Compact watch cache based on last observed etcd compaction
    c43104cbea8 kube-proxy: add NodeManager to manage life-cycle based on NodeIPs
    af7abde0e55 kube-proxy: add NodeTopologyConfig for tracking topology labels
    98c4514eae2 add e2e_node tests for uncore alignment
    70191dd21ca fix uncore cache alignment for odd integer cpus
    65e0cff3c5a add Replicaset -> ReplicationController conversion test
    9df4c35a60a Disable SchedulerAsyncPreemption feature correctly in integration tests
    3636d5bd3a5 Added NodeSelectors field to DriverDefinition
    4f0d3eaa36b enhance exec probe logging with pod and container context
    ffe90820710 DRA allocator: select tests based on supported features
    b1a35c640eb Build etcd image v3.6.2
    7e37711d6ee kubelet: Add service account UID to token cache key for proper invalidation
    45dfb46448a Add TokenRequestServiceAccountUIDValidation feature gate with UID validation
    237fbde8b1e clean up e2e test and sorting code
    4d2566eb5a1 credentialprovider: wire in service account mode cache type
    03db2278d52 kubelet: Add CacheType field to ServiceAccountTokenAttributes with validation
    ff4746af139 increase verbosity of kubelet preemption log
    f2de8897e77 Add metrics for mutation
    bfa7f38c6af fix TestPodResourceAllocationReset for windows
    e8b914c4b83 address comments
    6052c569db3 prioritize resize requests by priorityClass and qos class
    c126870ebc9 Bump RecoverVolumeExpansionFailure to GA
    7b906f204a6 DRA allocator: fork the code
    5caf7bca15b DRA allocator: refactor code
    03e32bd260f Expose compaction revision from compactor
    5e3ea8e279c Add test for compactor
    bbab5941103 local-up-cluster: stop running Docker
    f57662856f9 local-up-cluster: store logs in artifacts directory
    81b6e1d3a34 local-up-cluster: start containerd before Docker
    27a77370dde local-up-cluster: simplify installing packages
    ddda1dca33c local-up-cluster.sh: add dry-run mode
    0950b9ee508 DRA allocator: export DeviceClassLister
    bc5aa94d8d1 local-up-cluster.sh: allow configuring all ports
    a4b1d26b14b local-up-cluster.sh: dump config on KUBE_VERBOSE >= 2
    5665bafaa86 CHANGELOG: Update directory for v1.34.0-alpha.3 release
    381b3f376bd clear just the errors rather than the entire in-progress condition when a new resize is allocated
    b89ab301f5c feedback round 2
    67aaa956da3 Update docs on shutdown and draining
    7a6f6fdf721 Delete unnecessary mutex
    271233a62ae Prevent the failure of releasing the lock by updating the resource version in case of a resource conflict
    d9de590a26b test: increase test coverage for pkg/kubelet/types
    2dd07e92428 DRA E2E: ResourceSlice Controller test flake
    26f54e5c0e3 chore: replace int64ptr with ptr.To
    f2b24b98494 Increase verbosity of frequently printed loglines in binder plugin
    621482d68b6 update pause version to 3.10.1
    ce456c87f1c add SuccessCriteriaMet status for kubectl get job
    bb6bd520126 Add feature gate enable test for KubeletPodResourcesGet
    c925243779a address feedback
    c6fef9752c2 fix: improve the pod level request validation (#132551)
    89344dc2391 feat(validation-gen): add k8s:enum validator
    345641f106b feat(validation-gen): add Enum validator function
    adb71d041d6 Forcefully expire lease in integration test to fix flake
    637bf55cbc2 bump golang.org/x/vuln/cmd/govulncheck to v1.1.4
    e0cc07af866 Promote PSI metrics feature to beta
    b46a124db31 skip pending resize evaluation if sources aren't ready
    35bf1522b0e update allocation manager unit tests to cover push and retry of pending resizes
    e6d165b879b move resize allocation out of the sync loop
    87fe2491a11 add some additional helpers to kubelet status manager
    cb2baef9122 move handlePodResourcesResize unit tests into allocation_manager_test
    1a62ade7428 cleanup conntrack entries test for UDP service
    8f92a81787e node: e2e: podresources: add more e2e tests
    380ed8d9b3a e2e: node: memory manager: build everywhere, run only on linux
    bc56d0e45a2 podresources: list: use active pods in list
    30a3bfdbcba chore: remove residual uint64ptr usage with ptr package
    006b2a3b52c e2e: node: cpumanager: fix cpu quota non-regression tests
    54f86a22e88 chore: removing redundant type conversion
    25d9d8d9ba7 refactor: use getLocalNode() to avoid code duplication
    bc9e8e1a910 add a context argument to prePodCreationModificationFunc()
    83584d13c49 fix: TestPatchResourceTimeout flaky test
    994e106dc0d ci: update sample-apiserver version to v0.33.2
    3379d5ac4b6 make sure all streams are created before starting demux websocket
    1cec0acebf2 Short circuit CategorizeEndpoints when there are no endpoints
    c53b41e98c2 Add testing compaction in storage List tests
    1ac60e35e96 e2e test: Add a container_swap_limit_bytes metric
    bdd662f7c6b unit test: Add a container_swap_limit_bytes metric
    341957a367c Add a container_swap_limit_bytes metric
    c530b022576 chore: depr. pointer pkg replacement for pkg/security and plugin/pkg
    dfe6a5c9c13 Clean up `unversioned_feature_list.yaml` file
    e909e0cf738 chore: replacement of toPtr helper functions with  ptr packge
    841886df76f Convert externaljwt from gogo to protoc
    1b730abf8dc cleanup: use HandleErrorWithXXX instead of logger.Error where errors are intentionally ignored
    075abb07a91 ci: redis removal for e2e test dependency simplicity
    830a088d1bc chore: remove strPtr usage with ptr.To instead
    838f3afc521 storage/etcd3: add back missing errcheck
    604cc2b51f4 hack/update-openapi-spec.sh
    5adc3bf08a6 hack/update-codegen.sh
    ae7d637b893 Delete unused ResizeContainerPatch function
    f1b35cae913 Use MakeResizePatch instead of hand-written patch strings in resize E2Es
    00c1c1a58e8 Generate an E2E resize patch from original & desired ResizableContainerInfo
    cfd65c5f74d chore: replacement of helper functions to ptr packge
    ff7c781e251 Loop over all IP address from each node
    d9de37d9316 chore: typo invaILd occurrence replacement
    1ae1964e88e chore: depr. pointer pkg replacement for pkg/apis
    31156514102 chore: remove uint64Ptr using ptr.To instead
    38080c082e1 kubeadm: use named ports in static pod manifests
    baf71997f53 chore: depr. pointer pkg replacement for pkg/controller
    8abcdf0885a chore: depr. pointer pkg replacement for pkg/controller
    f966647b4de chore: depr. pointer pkg replacement for pkg/apis
    6cef8492e71 chore: depr. pointer pkg replacement for cli-runtime
    bc72fb81c35 chore: depr. pointer pkg replacement for test/e2e
    d193ffe57ff Use sets.Set instead of a local impl
    277c665e8bc use early return
    81be9065d12 improve the log message to clarify what users should do
    e74bbd5db48 chore: depr. pointer pkg replacement for test/e2e
    2f7148782b2 chore: depr. pointer pkg replacement for test/e2e and utils
    1802c556524 chore: depr. pointer pkg replacement for test integration
    b22ffdb48f2 golangci-lint: exclude naming convention check for swagger docs
    0e8424fcf00 chore: depr. pointer pkg replacement for the e2e_node
    bb24afe586c chore: depr. pointer pkg replacement for component-base
    bd8d5f9798c chore: depr. pointer pkg replacement for controller-manager
    fe61e825e04 chore: second depr. pointer pkg replacement for apiserver
    4a61b817013 chore: first depr. pointer pkg replacement for apiserver
    4625908a640 remove unused file
    995a7872c55 chore: remove utilpointer usage in pkg/api/pod
    ebae4193371 feat: add PreBindPreFlight and implement in in-tree plugins
    c5b0c9fdc01 chore: depr. pointer pkg replacement for psa policy
    88d885e4073 chore: depr. pointer pkg replacement for psa admissiontest
    dc947510da6 chore: depr. pointer pkg replacement for psa tests
    35e118a4794 chore: depr. pointer pkg replacement for apiext. apiservers validations
    4a205cc7fd3 chore: depr. pointer pkg replacement for apiext. pkg/cntroller
    107c58eeea3 chore: depr. pointer pkg replacement for apiextensions in general
    b8ec161d7f1 chore: depr. pointer pkg replacement for apiext. integration
    ca1d7fff7f1 chore: remove utilpointer usage in pkg/apis/autoscaling
    0ad351281bc Cleanup duplicate function to get port number from named port
    1ac5f661ed8 Don't log irrelevant zone hints message on no endpoints
    27812e44bce chore: depr. pointer pkg replacement for apiext. pkg/registry
    b72ab8a4e14 chore: depr. pointer pkg replacement for the cloud-provider
    b464bbeb8f7 Remove gogo-protobuf from CRI
    ce7b3694f7c chore: remove utilpointer usage in package test/integration/service/loadbancer_test.go
    9016f9cb1bf chore: remove utilpointer usage in conversion package
    90bbce56b95 PriorityMemoryEvictionOrdering: allocate more memory when swap is provisioned
    25498cd34d7 Eviction tests: small refactor
    43b22a24395 Apply fix to namespace deletion test (#132691)
    0766a3c6b14 chore: depr. pointer pkg replacement for the kube-aggregator apiregistration
    6c3146e3557 chore: depr. pointer pkg replacement for the csr
    9345552274d chore: depr. pointer pkg replacement for the reflactor
    ebea328f173 Fix volume limit e2e test cleanup
    38bf213271e podtopologylabels: update topology.k8s.io->topology.kubernetes.io
    2e966244ed8 DRA resourceslice controller: fix recreation after quick delete
    fa313170001 Remove unused PodIndexLabel feature reference
    8c6c7df736d remove apiserver_storage_objects metrics after crd deleted
    a7e8a505c25 Improve ignore-not-found behavior (#132542)
    1c1f00a5f47 fix: add RV check on GC delete calls
    84f6d742c5b Make dynamic and metadata clients plumb DeleteOptions
    ad0b2bf4f57 DRA E2E: serialize costly test
    33cd2e1ba08 Fix AuthInfo godoc for Token / TokenFile precedence (#132659)
    c6f87f6e64a Fix offline expansion tests for case where no node expansion tests is required
    b44b0fbf129 Update github.com/emicklei/go-restful/v3 to v3.12.2
    58e620cc440 Bump go.yaml.in/yaml/v3 to v3.0.4
    00f8cbae6b8 Bump sigs.k8s.io/json to latest - no code changes
    22138ef552b Add DNS e2e test of NameIsDNSLabel validated Service names
    97c1974e9c2 Add integration test for RelaxedServiceNameValidation.
    19e7e38af29 Add unit test for Ingress service ref relaxed validation
    37a90b7c244 Add unit test for Service relaxed validation
    b430159c86a Allow Ingress service refs to be validated with apimachineryvalidation.NameIsDNSLabel
    487eb8a9e47 Allow Service names to be validated with apimachineryvalidation.NameIsDNSLabel
    9043afae6d9 kubectl: Cache Verifier.HasSupport calls
    179c4398f35 use defaultImage per OS
    998776d80bb remove breaking test
    a17b0d7f66d gofmt
    1514568ddfe rename sortedfeatures -> sorted
    9e1a21816d2 update README
    5cebe66b646 update log line
    dcbed2fbdce Graduate PodLifecycleSleepAction to GA
    977c6707333 Add unit tests for minReady new behaviour
    4b99dc5f1e0 document hostnetwork <> port implications
    952d2727a66 Add OrderedNamespaceDeletion to conformance.
    12330a6c426 Drop BoundedFrequencyRunner from pkg/util/async
    5d4a85f9f6c Enable versioned validation fuzz testing for certificates v1/v1alpha1/v1beta1 group
    0fd4a0acc10 CSR: Add declarative validation test suite
    5db2056682f CSR: Enable declarative validation
    eecba765de0 Enable validation-gen on certificates/v1,v1alpha1&v1beta1
    ec6471f63ef Remove gnostic-models gopkg.in/yaml.v3 unwanted dependency
    d04ee27c98b Update vendor
    b41d375b888 pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59
    6d5e0bf2a21 review remarks
    95b1151d2ab use format specifier
    459188ce25c Port BoundedFrequencyRunner from flowcontrol.RateLimiter to clock.Clock
    eae17c21b02 Change how BoundedFrequencyRunner retries work
    c16ee887efc Remove burst syncs from BoundedFrequencyRunner
    0298e04ea0f Updates to BoundedFrequencyRunner
    6da9d363f36 Copy BoundedFrequencyRunner to kube-proxy
    799aa8b2a8c Graduate streaming list encoding feature gates
    5bae9fa8939 Graduate ConsistentListFromCache to GA
    d4e49b2eed7 Ensure Loadbalancer internal port is set to container port from endpointslice if the targetPort is not specified in service info creation.
    6a25bdaac8f kubeadm: fix missing log of health check
    764a8bc8b61 chore: remove utilpointer usage in package pkg/apis/admissionregistration
    a55318fe149 fix: versioned validation test avoid incorrect conversion
    4c09aa9073f review: feedback
    776382daa58 review: assert
    43f6bd45f59 review: assert
    fa87098ae30 fix: kubelet CRI portforward concurrent map write on error
    a0ea2569a76 chore: remove utilpointer usage in package staging/src/k8s.io/apiserver/pkg/registry/rest/delete
    7236f3fc2c2 graduate APIServerTracing featuregate to GA
    75fc2b1cf6d promote TracingConfiguration to v1
    a8068e27b1d scheduler_perf: Fix version emulation for empty featureGates map
    5a20c38da61 remove usage of KubeletTracing featuregate from kubelet
    7faf797a946 promote KubeletTracing featuregate to GA
    d28791fa625 Remove unused sysfsPath's methods
    6e5c99dd059 Review remarks
    ee8c265d350 Move Code and Status from pkg/scheduler/framework to k8s.io/kube-scheduler/framework
    08dd9c47b36 improve the log message to clarify the cause of the failure
    a6e2cd4e8d3 scheduler_perf: add logs to report the failure of measuring SchedulingThroughput
    7e816ca9b1e Commented out for unused sysfspath methods
    2bc45ca4666 Make test only helpers private (sysfspath methods, touchFile, createSymlink)
    94973ba3fc9 Fix typo: s/smock/mock/g
    ac86e67b7d2 Commonize filtering of Pods by Owner with all orphans in namespace
    ca314b9f561 Fix validation for Job with suspend=true,completions=0 to set Complete condition
    1134220e011 Add RelaxedServiceNameValidation feature gate
    f644e35d193 kubeadm: cleanup after WaitForAllControlPlaneComponents GA
    cfe8604504a kubeadm: graduate WaitForAllControlPlaneComponents to GA
    f437aa4aa67 scheduler_perf: Set version emulation only when QueueingHints is disabled
    b2f27c0649f fix: Truncate too long Deployment name in RS name (#132560)
    d67e7937e63 Remove recovery related featuregates
    fa6f27c8f7a Add extra validations for newer resizing related fields
    00dd610c93e DRA E2E: run some tests without feature label
    f93b4408a77 Drop test that checks openAPI resource name since we currently don't guarantee name stability in the API
    3eefb05a2c3 Fix gRPC listener error message in kubeletplugin and some minor renaming
    e54e01e0abb Enhance help text for the 'top' command
    7d5ab756277 Re-generate applyconfigurations
    9af684ae098 Applyconfig-gen: Only the root type is an applyconfiguration
    d50e1a684cd Ensure all the files have the updated sorting
    f2d8b7ec2cc Add linter to report on unsorted feature gates
    efcb03759dc E2E framework: sort tests in JUnit report
    dfd34a5b189 fix pod template spec validation missing in sts
    a57f15e0816 DRA kubelet: remove v1alpha4
    005cef332da DRA kubelet: API clarification
    f1845218e2d fixup! DRA: fix deleting orphaned ResourceClaim on startup
    585ed0a5cb3 [client-go #1415] Use transformer from provided store within internal stores in reflector to limit memory usage bursts
    8632257c934 Cleanup: Remove redundant detail messages in field.Required
    e82d4f8e559 review: feedback
    5cca0379274 resolve linter check
    ce86fca8cd5 Add warnings for use of Alpha features with Emulated Version Warn for both api and feature flag use of alpha features with emulated versions. This is an unsupported use case and users may run into issues.
    00d37505033 Move ClusterEvent type to staging repo, leaving some functions (that contain logic internal to scheduler) in kubernetes/kubernetes (#132190)
    74af3ac8ad1 Revert "pop respects the context"
    2dcce93336e Revert "modify tests"
    31667cc7412 Avoid killing kops etcd-manager
    6d6a749c62e DRA kubelet: add dra_resource_claims_in_use gauge vector
    75432a14108 component-base metrics: allow usage of Prometheus types in tests
    1639b090839 Add benchmark for SizeBasedListCostEstimate feature
    c75d425ae2e CHANGELOG: Update directory for v1.34.0-alpha.2 release
    292679a28ae Handle consistent LIST in watch cache to avoid incorrect semantics while setting ResourceVersion on options
    c6c15bbe441 bug: Remove duplicate DaemonSet update validations
    39dda2b88dd tests: runtime units
    8bd8c14312e tests: add more units
    f9a5aec318b Added unit tests
    5390f75360d Added podutil.HasAPIObjectReference to deny admission for static pods referencing API objects
    8b2eb9090e9 chore: Remove vet target and associated script from Makefile and hack directory
    7d85134caee improve unit test coverage for pod observedGeneration
    1a59c250eab feat: make CLE timers configurable
    ef117edf356 DRA: fix deleting orphaned ResourceClaim on startup
    c5b4b133ce3 switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well)
    e2c6b7fdf97 Override getKeys when cacher is enabled
    7cb24179993 Run background cleanup goroutine
    ec78b8305ad Estimate average size of objects in etcd and plug it into request cost estimator
    190c8c7abc5 Use per-policy marker names for VAP integration tests.
    6795d5366f1 feature(kubectl): support mem-percent,cpu-value,cpu-average-value,mem-value,mem-average-value flag to kubectl autoscale
    9de075def7d replacing deprecated pointer pkg with newer package version
    b8b3984874e client-go/reflector: stop exposing UseWatchList (#132453)
    0028ea8e993 Improve containers lifecycle test output parsing
    7e0d71fc14b apiserver/storage/cacher/listwatcher: error when the WatchList FG is disabled
    ec6ea2213ed test: code coverage increase for kubelet_client
    cb4014fb75f cleanup: Migrate more usages of deprecated function ExtractCommentTags
    b50d5081766 bugfix(hpa): introduce buildQuantity helper for consistent resource quantity creation
    cbba973b6c9  Fixing go-vet finding  "call of reflect.DeepEqual copies lock value" by just asserting on the basic fields that should be reset when ClearState() is called
    35ecb00f1c5 fix: Add wait for cache sync for customresourcediscovery tests
    d6d186ece06 Activly poll for namespace termination instead of sleeping
    e1daa69de8c Add printer column validation tests
    369e6a25a28 Introduce k8s-short-name and k8s-long-name to the OpenAPI formats supported by CRDs
    6f1295ae9d2 fix: prevent SSA from creating CR while CRD terminating
    3b0fd328106 e2e: serial: cpumanager: continue on failure
    f76e1381d08 e2e: node: fix quota disablement testcases
    dc323756cea Bump to latest kube-openapi
    d180fe28ad5 Add json-patch v4 compatibility test
    2ca4ffe6532 Add evanphx/json-patch/v5 to unwanted dependencies
    5a7e04b6cc7  feat: optimize ListAll and ListAllByNamespace to return directly when nothing to select
    ae13d101958 KEP-5229: Add SchedulerAsyncAPICalls feature gate
    dce69afadea apiserver/cacher: properly wire listwatch options to the listwatcher
    0276769c2c8 kubectl: avoid logging during init
    6040344a65c kubelet: DRA: fix TestRegistrationHandler
    cc7893a42c6 kubelet: DRA: fix unit test failure
    cf544da6f7a e2e_node: DRA: add tests for different socket setups
    7f6389e7709 e2e_node: DRA: pass socket path as a parameter
    3ae99f25471 kubelet: DRA: fix test failure on Windows
    c90c2e0d402 kubelet: DRA: fix linter warnings
    165bb1da58e DRA kubelet: use TimedWorkersQueue
    4ee7374b24e DRA kubelet: add connection monitoring
    f927cd01088 DRA kubelet: simplify plugin creation and connection handling
    cfeab03ade4 remove kvh.exec
    75862f3f461 show namespace on delete (#126619)
    56d97283afb fix: Improve error messaging on updating a deleted object
    fd8bf1c8211 e2e: retry getting status on restart policy tests
    c5f061e0df0 Fix pod and container level swap metrics for CRI
    e1d74f1d335 Update etcd image revision to 3.6.1-1
    7e3945808d3 nftables: remove filter-output-post-dnat chain
    91f2256b34e update filter chains and priority
    72305f82f9a Move UnsafeCorruptObjectDeletion outside of etcd3.New function
    59dd2bd60dd ci: update test image base: nginx, nginx-new
    af89044a78c conntrack: clean stale entries on endpoint port change
    861e7b8fae2 fix unit test flake for authn config on windows
    2fd93c08988 fix: data race for patchResource func
    ccdef28acd3 fixing large resourceversion and limit for storages
    fe84377458b e2e/watchlist: new test for checking metadata informer
    d6ba9e1b9f7 replacing depr. pointer pkg with new ptr pkg on src/apimachinery
    db32c4cf7ca fixing syntax issue for etcd builds
    8454093f09e DRA: add e2e test with initContainer using external claim
    138e363e413 cleanup shellcheck for temporary HOME directory
    66c611125c7 Add namespace-aware orphan pod indexing
    5e54df3e72e Fix [Failing test] [sig-node] [Feature:GPUDevicePlugin] [Serial]-related tests
    280cecb8fb0 fixing location to ensure the cp commands dont fail
    d2945a21fda bumping revision
    fa1832484d1 handling the etcd 3.6+ build directory location change
    e68d6013449 Don't panic in case of an unknown API error code
    4ca91a03052 WIP: Fix tests
    2b2c9adef38 Nicer value rendering in API errors
    cfff359b419 fix for gimme when $HOME is not writable
    6a654e5be0c Deprecate StreamingConnectionIdleTimeout field, that is not being used for a long time
    b8cd05881c5 Address PR comments
    6f97f5bbf87 Use Mock CSI Driver for MutableCSINodeAllocatableCount storage e2e test (#132373)
    176095ac30e [KEP-5100] WinDSR feature gate to GA
    64c44e1fa63 Test that generated applyconfigs are a runtime.ApplyConfig
    a5d42f56939 Re-Generate applyconfigs
    d5527b51930 Update applyconfiguration-gen so acs implement runtime.applyconfiguration
    3fe4ea550e8 Add an interface that all applyconfigs implement
    b0b52f4fb29 CHANGELOG: Update directory for v1.30.14 release
    2bc98f123d7 CHANGELOG: Update directory for v1.31.10 release
    20e9f160c97 CHANGELOG: Update directory for v1.32.6 release
    9e126a37720 CHANGELOG: Update directory for v1.33.2 release
    df32f10e069 apimachinery/pkg/util/errors: deprecated MessageCountMap
    de2f22ee8ee e2e/watchlist: intro verifyStoreFor
    017c9b94daa e2e/watchlist: rename toSecretPointerSlice
    caa64afd017 merge constants.go into attribute.go
    73d65f830a1 Put _linux suffix for linux specific go files
    88b34ea1f1d Move bdfRegexp from global constant to local variable
    fc854a9a861 Introduce DeviceAttribute{Name, Value} and change return type of 'GetPCIeRootAttributeByPCIBusID' with it
    8ed8217e9ab Moved device attribute constants from api to deviceattribute package
    f7461a12dcb Revert "Add StandardDeviceAttributes and StandardPCIDeviceAttributes helper functions"
    6b9ac7c5160 cluster/gce: rm KUBE_LIST_FROM_CACHE_INCONSISTENCY_DETECTOR
    512563e7b08 pkg/proxy/conntrack: refactor
    91b4816c230 Optimize job controller performance: reduce work duration time & minimize cache locking
    18dd1daaeb9 Add Windows Server 2025 (ltsc2025) to BASEIMAGEs (#132235)
    44b4682a320 Use jq docker image for pause windows build
    3827d3bc4f1 Drop usage of forked copies of goyaml.v2 and goyaml.v3
    2869b6f42c4 Add StandardDeviceAttributes and StandardPCIDeviceAttributes helper functions
    a8ab9eb5fea Simplify the implementation: just provide GetPCIeRootAttributeByPCIBusID
    d390902b99a Verify scheduler resource metrics account for Pod Level Resources
    32fcaf14067 client-go/util/consistencydetector: move IsDataConsistencyDetectionForWatchListEnabled
    72654620a2f removing WaitIntervalString from iptables
    bad49390493 client-go/util/consistencydetector: remove CheckListFromCacheDataConsistencyIfRequested
    15ca38b521d apimachinery/meta/types.go: remove InitialEventsListBlueprintAnnotationKey const
    690790257fd Add test verifying KUBECTL_KUBERC can be turned on and off
    45449a78d5e Removing setting KUBECTL_KUBERC env var, now that it's on by default
    3f32edeace1 chore: Remove the dependency of the volume manager on the container runtime.
    3dc1810bb7e fix:  failed unit test.
    b8a2127d277 Add random interval to nodeStatusReport interval every time after an actual node status change update or restart
    fbf4b47d150 chore:  clean up probemanager for shutdownnamager.
    3fa23d06af6 Adjusting AdminAccess Type for API v1beta1
    2a5e4d55824 add script for verifying dead code elimination
    891e7fec6e1 add seperate health check/probe for multi etcd override servers - grouping health checks for exclusion purposes & add exclude integration test
    28573e373fd Add error prefixes for authn config load or validation failures
    4cb6d3d7761 Validate requests sent to etcd in TestList "test List with limit" scenario
    03afe6471bd Add a replacement for cmp.Diff using json+go-difflib
    32ec4e68cc8 adding omitempty tag and opt tag
    e654deba630 CHANGELOG: Update directory for v1.34.0-alpha.1 release
    f4a45862556 fix APIServerTracing test data race
    2004ee50f5d Fix -Consistent paginated lists serve from cache
    bccc9fe470f KEP-3939: Job Pod Replacement Policy; promote to GA
    fc198b92c0d apiserver/handlers/watch: stop encoding initialEventsListBlueprint (#132326)
    854499f986b clean: use correct pod template
    fae2fdd052c DRA: wrap e2e finalizer update in retry
    7a95f3e4787 Fix NetworkPolicy podSelector comments
    233a0aeedbf DRA E2E: label tests which need a certain minimum kubelet, II
    2cd5dbbdaab modify tests
    59f0ab97c25 Add boilerplate header to go files
    1c33d987625 pop respects the context
    f67d30b3529 handle context in process loop
    384240b4d95 Use "Invalid" errors rather than "TypeInvalid"
    bdfa8839bec calculateStatus should use the same now time point for each pod
    ce44bcdf52b conformance servicecidr read status endpoint
    c2988884f34 fix kubeadm e2e tests
    cb26d065d39 Validate PCI Address (domain is 16 bits, bus is 8 bits, device is 5 bits, function is 3 bits)
    752a043692f fix lint: apply De Morgan's laws to simplify conditionals
    76ef6a388f8 fix kubeadm e2e tests
    79601d13569 Fix CRI fake_runtime RemovePodSandbox
    666f38f4189 DRA: Introduce a helper function producing standardized device attributes for DRA drivers
    7a3af908c64 add securitycontext OWNERS to be SIG Node as the package is mostly used and contributed by SIG Node
    7f1dde2a0fe test/apimachinery/watchlist: properly wire modified config to informer for fallback case
    40c718864b7 chore(apiserver): avoid using html template which disables dce
    6a37976848b client-go/rest: rm watchlist
    4372c59ebf0 update go version for publishing bot rules
    e09b042d34b Bump etcd to v3.6.1
    901441c66eb Promote SeparateTaintEvictionController to stable
    85bc3cb0960 Remove GetExec method from VolumeHost
    9251b2a7a58 Expand webhook test to check rejection metrics
    f8b4ea50e8d ./hack/update-internal-modules.sh
    71b2f32d70f DRA E2E: label tests which need a certain minimum kubelet
    3908550c0dc Update to latest github.com/modern-go/reflect2
    d8bfafe07af test/apimachinery/watchlist: prove typed client's List method not streaming
    601065a7c6b bug: Fix misleading response codes in admission control metrics
    5882df8beb3 promote env test to conformance
    69a5bda836e Bump base image used in nonewprivs to alpine:3.22
    04110fce1bc Correct error message to print `ResetConfigurationKind`
    3443c1115ae make update
    798c6ebab85 client-gen/code-generator: remove watchList
    db2555628c1 Fix: HPA suppresses FailedRescale event on successful conflict retry
    2f943293ed8 client-go/gentype: remove watchlist
    f0dde38234f Remove pluginName param from GetMounter and GetExec
    fb611f4c93e kubectl delete: Update interactive delete to break on new line
    d46e13b9c5f change the command of the terminated container
    226c0d10959 Bump ipc-utils base image to alpine:3.22
    e75ccce83fc feat: optimize label selector match performance
    ac467d3aea4 add ratcheting testcase for validateFalse tag
    9384285c604 add ratcheting testcase for minimum tag
    1574001a1cd run update-codegen.sh
    f574115f14f feat: add default ratcheting support
    e9eabb2007d feat(validation-gen): Refactor type handling and introduce utility functions
    03c6e15f845 bump to alpine 3.22 and bump apparmor-loader to 1.6
    b86b4632b3f disable selinux relabeling when mounting sourcedir to shellcheck
    dc3836c49ed Remove deprecated encryption config controller metrics
    5a2844a766b Update to etcd v3.6.1 in vendor/
    a9108e8f532 Adding `grpcnotrace` tag for production (non-debug) builds
    11abb0042d2 Fix outdated links in VolumeSource godocs
    4b2fe2a544d pkg/kubeapiserver: use utils/ptr package instead of utils/pointer
    69eddde89b4 using finalizer
    57d55fbb106 test: Add test case for createNodeOp
    1d69a2fbc3a ./hack/update-vendor.sh
    edadfee47d3 test/apimachinery/watchlist: prove dynamic client's List method not streaming
    348ff7497c3 Build etcd image v3.6.1
    3038f3530d1 client-go/dynamic: rm watchlist
    86c709cd817 skip nfacct test in IPv6 clusters
    e5f36796e34 Bump dependencies, images and versions used to Go 1.24.4 and distroless iptables
    07151bb0f4c chore: Add validation error for unsupported map of slices in validation-gen
    89f5453e314 Allow system:monitoring role to access kubelet metrics endpoints
    2810f6e65f5 add bentheelder to cmd/preferredimports *reviewers*
    00a6d2c99c0 add bentheelder to conformance related test *reviewers*
    1dd055774cd backfill some sig-testing-reviewers (tech leads aojea and pohly)
    ad68a4b4cdd emeritus spiffxp
    512f000d0f3 Update tests for StructuredAuthenticationConfiguration feature gate GA
    efebfe9e3a5 Set StructuredAuthenticationConfiguration feature gate to GA in v1.34
    769d71b3045 Remove unused Expect methods in testscheme
    105dd3b0ab0 Add ExpectMatches to ValidationTester
    28e973c0447 Better formatting of matcher errors
    b39741b5062 e2e: node: serial: fix cgroup path with crio
    26b188aaa8f KEP-4633: Graduate to Stable.
    fd5d7a18ed1 reduce logspam when calculating sandbox resources
    0baeccd32f0 KEP-740: promote ExternalJWTSigner feature to beta
    ef2c18a5a0e Add more test cases
    eb3c9a3184a Promote feature OrderedNamespaceDeletion to GA.
    f8b70124350 Revert "improve display format"
    449320a54a2 update github.com/spf13/cobra v1.9.1
    260a720a851 Rate-limit the LoadBalancer rolling update test
    0a86ca40615 Add healthChecker to the kubeDeps
    dacafec88c2 KEP-3015: PreferSameTrafficDistribution to Beta
    b2ab0ba1938 Drop unused testing manifest
    96b39187c5f Add context to Count()
    9d1bc51cbb7 adjust durations for sleepAction
    c85ac59df41 Build k8s using latest commit of golang
    4a7e68a3555 fix: Fix the issue where kubelet's slow startup causes it to be mistakenly killed by the watchdog.
    b02fba7e0e6 Fix incorrect logging of insufficientResources in preemption
    fc7ba63ee8b support parsing of iperf 2.2.0 output
    1755a9e5455 fix: iperf version in comments
    0ca9c380add update all api files
    32aa52adf66 tolerate newer golang/oauth2 version
    3cfa73bc17b add -q flag for git worktree
    97ec8618d3e Fix kubelet iptables startup, clarify semantics of utiliptables calls.
    6a4751da7fa Graduate RelaxedEnvironmentVariableValidation  Feature gate to GA
    f4ab6c2befe cleanup: Migrate deprecated function ExtractCommentTags
    0d468f58c07 kuberuntime_manager: don't log entire container spec.
    858b88bceef kube-proxy: log ipt errors during platformCheckSupported
    1f46b3fdbff Clean backoff record earlier
    7b1f4990677 DRA kubelet: rename Store + Plugin -> DRAPluginManager + DRAPlugin
    fad670c27b9 DRA kubelet: move RegistrationHandler into Store
    494a129d02a DRA kubelet: clarify plugin vs, driver name
    0d5578b8395 test/apimachinery/watchlist: prove metadata client's List method not streaming
    5b0f0d2efa2 update pr template issue links section
    a38ad3a2c67 client-go/metadata: rm watchlist
    beb86a8391b KEP-3329: drop PodDisruptionConditions feature gate
    b5a8f5d0a50 KEP-3715: drop ElasticIndexedJob feature gate
    10de6780cf6 DRA API: remove obsolete types from v1alpha3
    0896693693d fix TestNodeAffinityPriority: calculate the priorities correctly even if PreScore is not called
    087554448ca Make nodeports scheduling plugin sidecar initContainer aware
    1876c544511 Remove unsupported map of slice validation for non-byte elements in validation-gen
    50139381006 Change option to a slice
    990cb7547ca Use slice.Contains()
    28e99ef2ee6 Add type information to tag Docs() and use it to typecheck tags
    31aa3c20297 Switch to using named args in output_tests
    7892fd95f24 Use codetags in validation-gen
    249801b7ccc Fix windows-pause-image-base:<tag>@<digest> invalid reference format
    2c4c3037b6a Fix field path for embedded fields in root types
    d1bddfd779f Forbid github.com/pkg/errors in k/k
    efaaece0fbc go.mod: drop pkg/errors as a direct dep
    cbbfabe7fec Support embedded fields properly
    d1a858ca9f6 kubeadm: fix one missed pkg/errors location
    036f4bfe282 hack: fix KUBE_RACE in benchmark-dockerized.sh
    5be254650f8 kubeadm: start using util/errors
    f522d7cb858 kubeadm: add a local implementation of wrapped errors
    2bf3d8b7336 KEP-3335: drop StatefulSetStartOrdinal feature gate
    1d1d0c154c2 promote agnhost to v2.56
    258961cb350 pkg/appis/apps: use utils/ptr package instead of utils/pointer
    7b664a11352 pkg/volume: drop pointer wrapper functions.
    253a08d7e39 pkg/util: drop pointer wrapper functions.
    ac5cb23000f Bump gengo/v2 to latest
    d6ec03a1302 Preempt based based on allocated resources rather than desired
    7d47165e3ec Replace queue.FIFOs with k8s.io/utils/buffer.Ring
    705e89b046f Only set pod allocation if admission succeeds
    f8b893489c1 Update pkg/kubelet/kubelet_test.go
    147073102b7 fix: prevent data race in metric LabelValueAllowList initialization
    8cdbbf5cdae Update k8s.io/utils for new generic ring buffer
    daae472fe1b e2e_node: verify restart looping container correctly
    109ae1bacad feat: Allow leases to have custom labels set when a new holder has the lease
    8d3fb9ee0a5 [KEP-2400] kubectl top: add a --show-swap option (#129458)
    4c7840ec5d2 podResizeMutex cleanup
    c7fdf6abde1 Handler will return the server port number instead of address
    6a495241ef3 KEP-3331: Add test to simulate revocation via user validation rule using unique identifier (jti)
    466fb815287 test/e2e/apimachinery/namespace.go: make OrderedNamespaceDeletion test serial
    7e7aa6d810d e2e: node: cpumanager: require cgroup v2
    68efb079aab kuberc: add tests for DefaultGetPreferences
    ad3a13e014f Graduate NodeLocalCRISocket to beta
    b9d9dea03f4 Update npd from v0.8.20 to v0.8.21
    47dead1c403 unexport allocationManager IsPodResizeInProgress
    de1d6fbf242 fix: ResolverTypeProvider data race
    9b8d7ce4987 pr review feedback
    a512de6e094 Clarified the token scope and future plans for the next security scan to refer to it
    032a9eaede4 DRA kubelet: code cleanup
    a6e22689946 Ensure github.com/pkg/errors is used only in kubeadm
    7ccb9657f7c sched: Apply EnablePlugins to CoreResourceEnqueueTestCases
    6cb14884b61 test-integration: allow enabling race detection
    545fbc99c2b test: drop dependency on github.com/pkg/errors
    899f76159f1 add unit test for IsDNS1123SubdomainWithUnderscore function
    0a7d9f9bfd9 KEP-4427: Promote Relaxed DNS search string validation to GA
    2aa7ef3d273 Address comments
    dbdd6a3b435 FieldManagedObjectTracker: Fix to work with unstructured
    b7d16fea7fd disable terminatingReplicas reconciliation in ReplicationController
    ee33c1a9fc9 e2e: fix userns test
    be049397dfd Fix IsDNS1123SubdomainWithUnderscore to return correct error message
    4f91a69f2b0 DRA integration: move and extend device status test
    0a96613754b proxy: remove iptables wait interval flag
    a5aabf9f7e0 DRA kubelet: validation pass before changing claim info cache
    5420dcec553 Promote two more EndpointSlice tests to conformance
    b9496d1a9d7 Update client-go template with backticks
    d70fcf731bd Update client-go PR template
    d75af825fbe Extract interface CycleState and move is to staging repo. CycleState implementation remains in k/k/pkg/scheduler/framework
    be6807e6a57 Allow specifying a directory for image credential providers json/yaml configuration
    aac00c1f0ed add orphanedPods parameter to getRSPods
    d13dcbbf95c kube-dns bump to v1.26.4
    96b5ae792bc Add code for not expanding volume if it has NodeExpansionNotRequired annotation
    2b0b3435078 DRA: Improve implementation of counter management in allocator
    1cd71cbb14e ManagedFieldsObjectTracker: Reload scheme
    4654496c395 Add code to not expand certain types of volumes
    741d0e2b81a Gradute ResilientWatchCacheInitialization to GA
    c8f1a653014 agnhost: added server address for conntrack cleanup entries
    5058e385b09 DRAAdminAccess: update label key
    ee2d3b6a2c2 DRA: Exclude individual devices when PartitionableDevices feature is disabled
    ab6fdf46d89 Move the autoscaling e2e tests to be ran in parallel (#131091)
    4e3634bbbfb Update security contacts for sig-cli owned repos
    b0847b47697 Add unit tests for fsGroupChangePolicy accessors
    74167f9041b Fix typo in the `--anonymous-auth` flag name
    6410329a07e update go version for publishing bot rules
    60b5338d460 Promote automatic_reloads of authn config metrics to BETA
    f694c58c6cc feat: graduate QueueingHint to GA
    1310fc027a5 kubelet: drop dependency on github.com/pkg/errors
    346fe182bea DRA E2E: fail test when ResourceSlice publishing fails
    dc2f33f9d8a Update Perl to 5.40
    7c0f968ab25 Drop usages of deprecated otelgrpc methods
    157903b09b6 Skip backoff when PodMaxBackoffDuration is set to zero
    54b2fad0330 kubectl: drop dependency on github.com/pkg/errors
    b461d80f3d9 etcd: update etcd image to v3.6.0
    df2857e7777 Revert shorthand for kubectl explain --output
    1d17ca9b7e9 generate code
    8ae7171041b Simplify subresource matching
    9715c90b31c Clarify errors and improve tests
    4cac349f86b Clarify group version lookup in validateDeclaratively
    c2eef42cf4d Add output_tests
    6284a0f50bb Tag types with +k8s:isSubresource and +k8s:supportsSubresource for scale
    7dc8660d036 Update testing to fully track subresources
    6ca6b7bb6ab Add +k8s:isSubresource and +k8s:supportsSubresource tags
    105391403fa Enable scale subresource in generated validations
    a3eddf7d854 Add declarative validation testing for replicationcontroller/scale
    356f395f0de Enable declarative validation for replicationcontroller/scale
    030b4ab9cc9 Add declarative validation testing to Scale.spec.replicas
    48e1079cf03 Add subresource mapping support to ValidateDeclaratively and introduce configs
    8c5c5fb7618 Add origin and use apivalidation.ValidateNonnegativeField for Scale.spec.replicas validation.
    d0f6fe30bf1 Add k8s:minimum validation to Scale.spec.replicas
    ffb4e003f70 Enable validation-gen for scale group-versions
    e63019a8701 DRA integration: refactor code to support other tests
    1ffda045cbf update to latest ishidawataru/sctp dependency
    50f152440be DRA integration: start scheduler on demand
    488c94735ce Bump dependencies, images and versions used to Go 1.24.3 and distroless iptables
    699dce0a579 DRA kubelet: fix gRPC timeout flake
    7215de79b3c DRA kubeletplugin: some doc updates
    24c0e91d295 DRA resource slice controller: disable resync
    01820ff7c27 chore(scheduler): add filter integration tests for missing part plugins: NodeAffinity plugin
    151d9d79f4a Remove package protected field updatePodOther from ActionType. Make ActionType.None public
    76f95271a5d kuberc: make update and update-vendor
    b8e6de08e1b kuberc: add API violation exceptions
    c29accaf581 kuberc: introduce fuzzing for kuberc types
    b0370c483af Promote kuberc to beta
    1f355e5b441 kuberc: pick the first known version when decoding + tests
    0341b27c5d0 kuberc: align internal and v1alpha1 go-types with v1beta1
    39195f9a463 kuberc: add v1beta1 types
    35870c480d6 client-go remotecommand: avoid "unexpected error" log when there is no error
    7287dcd2fb3 vendor: update system-validators to v1.10.1
    b35c5c0a301 e2e: Fix shadowed error in reboot test and clean up containers after reboot test (#131699)
    f79012a0db3 renamed SIG Node google groups
    50fe29e524b Add accessors for fsgroup change policy
    17946fe7994 Add Stress Tests for VolumeAttributesClass
    32c45ecf10c Bump github.com/vishvananda/netlink to v1.3.1
    aea2743e4e9 vendor: update system-validators to v1.10.0
    96e4cc65fbc update baseimage
    c5f368522d5 kubeadm: fix dryrun-latest e2e by updating cluster-info fixture
    d7b6049099e e2e: node: always declare testcase CPU requirements
    b571840d00f bug: Remove duplicate ReplicaSet update validation
    67345417c03 Update tests to use v1 for AuthenticationConfiguration
    aea874e5e47 Duplicate v1beta1 AuthenticationConfiguration to v1
    c509e22d11d Add a list of modules that should be pinned at current versions
    c4421fc13e7 address more feedback and some cleaning
    637d234aae3 feat: Add support for ECDSA-P384 encryption algorithm
    b98b86bd6ab DRA: Add scheduler perf test for partitionable devices (#131771)
    4cc2bded914 DRA: Add an allocator test that uses an attribute selector
    60c36432f2a DRA integration: set up nodes for scheduling
    1c3beb47a5c Fix goroutine leak in unit tests
    f6fafba424a fix flacky test:  ResourceQuota should verify ResourceQuota with terminating scopes through scope selectors
    8cf5e8db78d Deprecate kubeconfig's preference field in favor of kuberc
    1ce8503e91e add UT for volumepathhandler
    a8ed33bc646 feat: add metrics for compatibility version
    c4a59afe9dc Fix incorrect URL in build/dependencies.yaml file
    5bb3f862a06 DRA: Clean up allocator tests
    5834476681c fix lint and unit test failures
    676978641e1 address feedback
    88e1909e518 move pod admission and resize logic into the allocation manager
    35307319740 Kubectl: check version skew (#127365)
    3878f7e7489 E2E ResourceQuota: ensure consistent ResourceQuote during scope selector test
    4a353d07e4f E2E ResourceQuota: fix pod creation flake
    4b10ba9eef8 E2E ResourceQuota: dump last ResourceQuota
    f712b01ddb5 Unify references to group resource in metrics
    d3afe8a87eb hack/local-up-cluster.sh: remove kubelet --cloud-config
    772d0106651 client-go workqueue: clarify parallel reenqueuing
    d043beb223b HealthChecker has a List method
    9b3830fba23 Bump google.golang.org/grpc v1.72.1
    be5d8c767b2 Update cmd/kubeadm/app/cmd/upgrade/apply.go
    c0885e018ae Fix --config option from suggested kubeadm command
    8f49fb5ce7e future-proof csi test mocks
    adc4916dfe4 feat: introduce pInfo.UnschedulableCount to make the backoff calculation more appropriate
    968e19d1b6f docs: avoid broken link
    a271d3e5339 cleanup: remove error comment of AddIndexers func
    5def7fadf3e Drop dependency on x/exp package in mount_linux_test.go
    b9e2a160832 e2e_node: dra: test plugin registration retry
    aef61622aed e2e: dra: implement ResetGRPCCalls
    e8be3e575b9 e2e: dra: simulate GetInfo failure
    2f50d0a510d Add kube-api-linter plugin to golangci-lint
    0e5eab042c3 test: Use sub-tests in watch tests
    5da12b5aee9 Add tests that validate the return value of resize operation
    c369e3cd493 etcd: build etcd image v3.6.0
    65a27eb97d6 restrict the use of scheme internally to client-go
    671d1a07a58 Bump the busybox image
    88b23605404 ResourceQuota E2E: more informative failure message
    ba77d27560a DRA E2E: reduce risk of flake in ResourceSlice stress test
    6b0ebedccc1 Set non-experimental WatchProgressNotifyInterval config field
    079d4e52c24 Fix kubeadm etcd client interface
    cf0bbf1171e bump etcd client to 3.6
    7bccb1acb5e Update pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go
    139fab0ebdc kubelet: don't import testing dependency in non-test code
    90b256537c2 Add suggestChangeEmulationVersion if setting locked feature.
    5314fcece31 Promote automatic_reloads of authz config metrics to BETA
    1b9bb3393f5 test: Fix CURL download of Windows busybox test image
    b0ab168a71e CHANGELOG: Update directory for v1.30.13 release
    ec7e732cbcc e2e: dra: move gomega matchers to dedicated package
    fcfd87812f1 CHANGELOG: Update directory for v1.31.9 release
    2b7f8e1682c CHANGELOG: Update directory for v1.32.5 release
    1ab54ffa642 CHANGELOG: Update directory for v1.33.1 release
    bba9c49e101 e2e: DRA: test 2 claims with the same name
    8d8fd92966b DRA: test mismatched claim UIDs
    96da66054db DRA: genTestClaimInfo: add claimUID parameter
    69e16d2f544 DRA: kubelet: check for duplicate claim names
    b9fec8bf4ff fix scheme import
    cf8acf5cb73 package bootstrap matches dir
    e9fcdabcf50 feat: kubectl debug: add label for debugger pod
    b13cf0a65ae tests: userns: Add framework.WithFeatureGate()
    9549c111551 fix e2e network test flake because of network programming latency
    ef0547741db verify scripts: preserve exit code
    0114d33c346 datapol: compare types directly
    a1a4bc8fec8 fix: add BackoffExpiration to DeepCopy
    2fe65bbf48b fix(kubelet): update lease duration when config changes
    094466539e0 Add rotation and clean up for logging
    125600e7458 Remove unused GetHostname method
    ee94ba913ad Run codegen
    4eb9fb21b69 applyconfig-gen: handle non-pointer embedded members
    c374ab81185 Add a breaking example for applyconfig-gen
    70e05132645 Separate getList and watch errors to prevent TestGetCacheBypass flakes
    5121115711e Add sig/scheduling label to scheduler integration tests and staging repo OWNERS
    1ed6cf21966 Add e2e tests for kuberc
    0ad8e65d90e e2e pod readiness gate network flake
    fe1b1fff7c6 Remove unused GetHostIP method
    504b681ae14 Adding Joel Speed
    47f85960638 DRA: prevent admin access claims from getting duplicate devices
    c5e4cab9b1e e2e: add corresponding featuregate label to node features
    c4d6fcb1974 Remove misleading comment from NodeTaint TimeAdded field
    d0b6ea36b60 update got to 1.23.8 for the active release branches
    3043257b838 remove release-1.29 as it is deprecated
    9fd545bcc46 [sig-scheduling] SchedulerPreemption [Serial] validates various priority Pods preempt expectedly with the async preemption: replace finalizers with preStop hook and TerminationGracePeriodSeconds
    74e9b27e56e Port "Service endpoints latency should not be very high" to EndpointSlices
    e5f7fc25e71 TestNodeAffinityScoring: wait all nodes
    e42aba6c0ce Optimize RS Controller Performance: Reduce Work Duration Time & Minimize Cache Locking
    28602c66fcf Update pkg/scheduler/framework/plugins/defaultpreemption/default_preemption_test.go
    52e7aa37daa gofmt
    a507e64fe4b Have separate tests for custom selection vs ordering, add comments around system pod eligibility
    283c5e6b61f Have IsEligiblePod be supplemental to priority check, update tests
    3ed73e058ae Clean up the affinity explanation, fix for new lint rule
    d4bc527a7b8 Update comments: affinity info, default behavior, priority->importance
    95ebc2c10e9 Apply suggestions from code review
    7f57c6e52dc Update factory to use generics, keep single New function
    137da6a4882 Remove line about equal priority, fix typo
    b8ac1714370 Apply suggestions from code review
    224e6a3a355 Rename EligiblePod* to IsEligiblePod*
    4bf6841495e Update the customizations to operate on individual pods, for more flexibility later
    c34f8db5594 Remove unnecessary context and typecheck, switch to cmp.Diff
    c6f2d3879b8 Fix gofmt in default_preemption_test.go
    78b059c064e rename OrderedPods -> OrderPods
    2616202ac9e Implement tests with example customizations, add direct constructor
    760daaf1100 feature(scheduler): Custom pod selection/ordering in DefaultPreemption
    721947a5703 Update staging/src/k8s.io/apiserver/pkg/audit/request_log_test.go
    153233c677d review from tallclair
    e418ee3a92c Avoid encoding in LogResponseObject when we are not going to use it
    26c198dc202 Some fixes
    0b915a538fd Cleanup after rebase
    a6586aa610a Addressed comments
    e262cccf23b Cleanup after rebase
    86104043588 Add e2e tests for Partitionable Devices
    ece35e58828 Update DRA e2e test framework to allow publishing advanced ResourceSlices
    a437a269f18 Fix comments on ginkgo label functions
    85734ac6b38 DRA E2E: don't run prioritized list tests twice
    808a5cfd469 e2e tests: remove all cloud provider calls in storage/volume_provisioning.go
    51407868295 feat: improve the backoff calculation to o(1)
    cfe7d042435 Account consumed newlines properly in YAML decoder
    d5a56739cee use framework.ExpectNoError instead
    699ec0a538a Remove wrong comment
    f718096b744 NoExecute taint should be added when a Node's ready condition becomes Unknown
    3911b677bd4 test: wait for nodes to be in scheduler's cache
    ea6b4ea7e9d kubeadm: bump supported etcd version
    9d963298a3b test: Close response body in watch tests
    d1fb42a4000 fix: fixes a possible panic in `NewYAMLToJSONDecoder`
    960a4939f25 Eliminate AuditContext`s SetEventLevel
    c39705281c9 Self nominate adrianmoisey as sig-network reviewer
    b09d034a570 DRA E2E: revise test labeling
    13bd0b4ee82 e2e: node: rewrite the sidecar related tests
    f4265638be9 e2e: node: factor out reservedCPUs
    a8c8b0987dd e2e: node: dissolve skipIfNotEnoughAllocatableCPUs
    32d4724ab8c e2e: node: add comment about reserved CPU
    daf2fc71002 e2e: node: rewrite multi-pod tests
    ccc662c228e e2e: node: initial multi-container tests
    2419d9ccc5f e2e: node: rewrite: multi-cpus single-container pods
    e4726719a75 e2e: node: rewrite more compatibility tests
    74fda8c700a e2e: node: rewrite compatibility tests
    dd3f9b60741 e2e: node: rewrite CFS quota tests
    b9ce058ab67 e2e: node: rewrite strict-cpu-reservation tests
    3eb2e65fc30 e2e: node: rewrite cpumanager tests
    94dd0b8402a Move test cases from mounted_volume_resize into testsuites/volume_expand.go
    4aa3c968a78 Build etcd image v3.6.0-rc.5
    641834d030e Fix broken recursion
    eb4641d6512 Add container Resources to the backoff key
    080d6f9ead7 test: pass the test context to http requests
    3f188e5d86b refactor: Use http method constants in apimachinery
    75afa1e0acf Fix API server crash on concurrent map iteration and write
    f93e4645c18 refactor: Stop using ioutil in apiserver
    9e3a1b0a908 Add comment describing the feature gate with a link to KEP
    e3f3da5e795 Swap KUBECTL_COMMAND_HEADERS to use the proper feature gate mechanism
    d1b5f268b48 Drop KUBECTL_ENABLE_CMD_SHADOW featgure gat entirely
    a6abd717eae DRA: Fix failure to allocate large number of devices
    6cca37b36fe Add integration test for log verbosity
    69682b75e50 Manually read verbosity before kubectl command construction
    ee4c6b90ce9 add HirazawaUi to kubeadm approvers list
    77b1236a523 fix: Kubernetes versions in unit tests
    f40892f4813 client-go: call out WithContext inconsistency
    871cabeedb0 deflake e2e tests: StatefulSet Non-retain StatefulSetPersistentVolumeClaimPolicy should delete PVCs after adopting pod (WhenScaled)
    8b81a3d883e Rename GetStableKey to GetBackoffKey
    861682235cf DRA: Fix incorrect behavior for AllocationMode: All in ResourceClaim when used in subrequests
    a3097010faa Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity (#129874)
    ce02da8daba generate code
    4821604f83a Reorganize scheme type converter into apimachinery utils
    e81887276c6 refactor: Add request method constants
    af1d60f30bc Add hpa reviewers
    0acc7bd4dcc HPA: Fix int overflow in GetExternalPerPodMetricReplicas
    b9cb3cb3339 update klog flags
    57218ac969d Revert "kube-proxy: log errors during proxy boot"
    9def40c9e7b DRA E2E: fix "must manage ResourceSlices"
    c71e29ff12b DRA E2E: fix flaky "sequential update with pods replacing each other"
    d28c8cd4887 fix: not removing the plugin from the unsched plugins after PreEnqueue
    47d296d62d7 feat: introduce pInfo.GatingPlugin to filter out events more generally
    441dd305150 userns: Wrap more errors
    43f61e80de3 userns: Improve error returned if userns is not supported
    c5efc843dac Fix rudimentaryErrorBackoff to only be created once
    97e64e80c3e Fix typo in comment
    68f0204e3e1 Better logs and debugging
    8a571f7fb80 Rename discover() to discoverType()
    eb3c061cafb Reorder and merge blocks handling named types
    67bab26ea13 hasValidations should return cached values first
    bb10f55fd1e Fix lint warnings
    22fa3c747b1 add retries to exec command in cgroup verification
    8652b6ab283 Update sig-network-approvers/reviewers
    b1bb9a5885a Kubelet: Randomize ClusterRole name in e2e
    863168e4749 e2e: stabilize Windows memory pressure eviction test
    4ed3768dc95 userns: Use len to handle empty non-nil slices
    97a2cb39ce2 Make sig-scheduling-api-approvers actual approvers
    6d927c3c250 Comment out sig-scheduling-api-reviewers, since it's currently empty.
    038bb1a9a5c Remove alculquicondor who is stepping down from sig-scheduling-api-reviewers
    55b5827d8f0 integration: etcd data
    aa9f156d7aa integration test for compatibility version
    3be3051fb77 Adding test case for the webhook behavior change
    cf82fd7e9ce Treat error decoding a mutating webhook patch as error calling the webhook
    9bcec340f88 modify unit test for compatibility version
    15ab88f88bf remove networking v1alpha1 and make update
    54b014be1cd use networkingv1 as default storage for servicecidr and ipaddresses
    b2fe862ae3d graduate disableAllocatorDualWrite and lock MultiCIDRServiceAllocator
    d2fa246b069 Update codegen
    d78b295a845 Reenable guard to only validat root and scale subresources until ratcheting merges.
    94d043b149b Drop KUBECTL_DEBUG_CUSTOM_PROFILE feature gate entirely
    d52f05dad3a remove hwdef from hack reviewer
    2e6ec2414c8 Remove unused function
    2e8b409a5ff Rewrite Subresources godoc.
    164fefa9483 Update codegen
    2119555e02b Add subresource to operation, do not special case subresources in validation-gen
    2073ba2372b pkg/storage/cacher/cacher_whitebox_test: deflake TestWatchNotHangingOnStartupFailure when ResilientWatchCacheInitialization is on
    2b3f2aa705c propogate error
    10c5bdd6a1a Apply feedback
    36685c6f1ce Add information about expected status
    6c89041043c fix(scheduler): node pre-check logic to consider NoExecute taint effect
    e36a168a630 test/e2e/node/kubelet_authz.go: fix SAR to include service account groups
    aeb43eb22f6 Migrate ExtractCommentTags to ExtractFunctionStyleCommentTags
    1ec7231f633 DRA node: reject static pods which reference ResourceClaims
    2ea4b1aba60 golangci-lint: don't warn about conversion and defaulting functions
    15d9a93d7c8 golangci-lint: redirecting stderr raced with termination of script
    3b5cfeaf204 DRA: use v1beta2
    b262d56165f DRA: client-go wrapper with latest API as types
    8e9abfaf217 DRA: v1beta1 <-> v1beta2 conversion
    d7a64d68b56 DRA resourceslices: clarify code
    a171795e313 DRA resourceslices: better error reporting
    6392b54e12a DRA resourceslices: avoid update loop when partitionable devices feature is off
    5af026120a1 test: bump agnhost image to 2.54
    e5ffec242a3 Bump CNI to 1.7.1
    47fddb08f75 Expand has() tests for omitempty and omitzero
    c2c003a71fc update k8s.io/utils to bring fakeClock.Waiters()
    b3bf5ed0ee1 verify-shellcheck.sh: normalize KUBE_ROOT using pwd -P
    a1a6208863e use the minimal shellcheck image instead
    e0983dbee87 remove unused shell imports in verify-shellcheck
    7b50c8a510f jwt: support CEL expressions with escaped names
    784c589a77a Check for newer resizing related fields after expansion is successful
    6bb6c993429 Drop null creationTimestamp from test fixtures
    41805aff915 Update runtime convertor to honor IsZero()
    bc605171713 bump cbor to add omitzero support
    06b0784062f bump structured-merge-diff to add omitzero support
    fdf0bb41a44 Omit null metadata.creationTimestamp
    79891eac8bb agnhost: bump version to 2.54
    09912f35219 Make ToUnstructured match stdlib omitempty and anonymous behavior
    49f765e2b3c Remove redundant Required validation for IngressRules
    c78556fb4b9 agnhost pause: report signal, support termination message
    a6549edd1a7 kubeadm: use named ports for coredns probes
    0faeb5a0d09 golangci-lint: move into hack/tools/golangci-lint
    5d9a2f30f28 golangci-lint: finish migration to v2
    9bada79de10 DRA node test: fix useless gomega.Consistently
    4adb58565cb chore: bump golangci-lint to v2
    f6d0498017f Continue alias creation when __completion is used to enable completion
    dceae3b3889 DRA e2e: avoid terminationGracePeriodSeconds
    56e533f4a08 servicecidr: only patch status if necessary
    7fedcc34e49 refactor default service cidr sync status logic
    edda4b02d61 fixup! Introduce special handling for updates involving a single resource slice.
    6d8b41fac66 Introduce special handling for updates involving a single resource slice.
    2e98d87c561 api: Fix typo in word "immediately"
    5441f5fdef7 jwt: add unit tests for using CEL with deeply nested claims
    43ce37ed481 Address feedback
    7e1cec680e5 e2e: Deduplicate cgroup verification
    cc4c14d4cb2 Disable size check for xfs/ext3/ext4 filesystems before expansion
    48054afd6ac Relax external signer path validation to allow relative paths
    5712881cac1 Disable disk size checking when calling NeedsResize function
    e500f94519c add missing space in string concatenation (kubeapiserver)
    c5a2c69b943 add missing space in string concatenation (kubeadm)
    43a0da5880e add missing space in string concatenation (kube-proxy)
    66b8a8427cf Fix CEL equality bug for structs will nil field not marked as omitempty
    1b9386aac37 Add comment explaining the metric sampling logic for plugin execution metrics
    0a4ab936763 fix incorrect comments
    4d5d48da706 Remove unused volume limit constants
    3a5dda78afd e2e network: blue green deployments
    ea644182714 Appease linters
    43d6ea12e3f jwt: refactor CEL eval to drop unstructured and map[string]any
    064074c07ac Add lazy reflective CEL object wrapper
    903d6d4f030 Don't reinitialize test framework during each test case
    a56378d9fcb Update UserNamespaceSupport feature gate name
    3cadb6ff808 DRA test: update examples
    c6f652d5fe0 Refactor pod failure policy defaults
    68b1a950f9b kube-proxy should check global IPv6 enablement
    2080bafa154 Add sunnylovestiramisu as Reviewer
    d6b45bc98d9 [FG:InPlacePodVerticalScaling] clean code resize test
    dddfeb4a0e4 Handle unsupported node expansion for RWX volumes
    62ddcfba575 kube-proxy: conditionally skip e2e
    8bb7b056378 dependencies: github.com/client9/misspell -> github.com/golangci/misspell
    ad40bc88568 kubectl describe service: Add Traffic Distribution
    28e7acf0f93 improve display format
    f30c23a7831 kubectl: sort configmaps alphabetically to avoid random order
    db960d10078 Fix openid discovery docs with external jwt signer.
    1869f6f23a9 Fix typo in service account config test.
    c7a870135a3 nftables: cleanup service chain checks
    494b2b563f8 use testing.TempDir and delete helper function
    efcceee903b reduce assignment
    f42ee7a2d67 use slices package to reduce the codes
    9cb3dfb5d3c kube-proxy: log errors during proxy boot
    2d337f5151b Retool validator utils realType and unaliasType
    835bb2ecc5c Change v8n context.Type and Parent on typedefs
    6ea1db51a75 Disallow pointers as listmap keys
    fc7f0173577 Handle typedef fields in optional validations
    9d519c7c46e Fix immutable validation for structs with pointers
    0b190b81748 Add test cases for immutable to verify pointers
    855918f75c2 Add tests for optionalness of typedef fields
    7a24c4ce5d9 chore: update github.com/google/cel-go dependency to v0.25.0
    addaf680aed remove v1.31.0 api testdata
    86a43f4b539 Add v1.33.0 API testdata
    89156452aeb fix nil pointer panic on windows node
    00908ce2d13 Wait for resource quota status to be populated
    d5bf33e7d71 update-codegen.sh: automatically install protoc
    8a2f367ec3e automatically install goimports when running update-codegen
    1473aeaac4d add goimports to tools module
    540ea5949f3 skip kubectl proxy env tests when the host is localhost/loopback and would not be proxied
    1214dc223c7 kubelet: Use node addresses from informer
    c0b2f341a72 clean up cloud provider code because cloud provider only supports empty or external and cloud is nil
    187b43d5ada enable dep-approvers for staging go.mod/go.sum
    f50ad91ed76 Create a single TypeDiscoverer for all inputs
    08794974b79 track gopkg.in/yaml.v3 as an unwanted depdendency
    aee4945252f alculquicondor stepping down from sig-scheduling approvers
    58e5dfd45c4 attempt to re-introduce dep-approvers for go.mod/go.sum
    74e84dbf5a3 Add more test cases to TestDescribeSecret test (#131422)
    6eff9db0f10 chore: Add VeryShortWatchError typed error
    92359cdc69d update godoc for and rename observedGeneration helpers
    932cff5dd41 add more error details to the failing cgroup check
    c3bb59d078a Fix etcd3 watcher flake
    0d3d2733f60 Update go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful to v0.44.0
    a2281f97bb0 bump fsnotify v1.9.0
    44d7132afbf Update hnslib version in Windows KubeProxy.
    7c53a5aaa4d Remove feature label NodeOutOfServiceVolumeDetach
    f74424bd7c1 etcd: better logging
    24257f2d316 Remove deprecated scheduler cache metrics
    269d3ae5147 Fix comment for default gRPC log level in DRA plugin
    2ea68920776 Always check for Immutable selector in Deployment Replicaset Daemonset (#131017)
    947a9f26fa3 Move pod resize e2e utilities out of e2e/framework
    609e4a9ba04 Unhandled panic crash on rollout_history printer.PrintObj (#130503)
    fa8e37f7805 Allow disabling caching for webhook authorizers when using `apiserver.config.k8s.io/v1{alpha1,beta1}.AuthorizationConfiguration` (#129237)
    1db2d6a0184 Mark NodeExpansion finsihed without featuregate check
    70ebe90b139 Also change final status by removing featuregate check
    849924b6ba5 Increase delay in kuberuntime termination order test to prevent time rounding flake.
    0e40ed642bc Check for newer fields when deciding expansion recovery feature status
    4fa090bd812 Remove alculquicondor from test framework OWNERS
    6a17858ff9b CHANGELOG: Update directory for v1.33.0 release
    90de4b58943 Remove warning about resizing failed for unknown reason
    41809284025 Update cri-tools to v1.33.0
    f63702de0f9 scheduler: return UnschedulableAndUnresolvable when node capacity is insufficient
    d10eb869276 fix: Fix non-constant format string in framework.Logf call
    b9a6a257b7d add TODO for unifying .go-version
    5c84ee07eee test/images: read .go-version instead of duplicating
    722581f5f68 Expand etcd data test to n-3
    c21f26895c2 Fix VAP test for v1.34
    bfcee664500 Bump DefaultKubeBinaryVersion to 1.34
    27815acee14 remove outdate comment
    64b4c96e20f fix: use correct apiextensions v1 API instead of apiregistration v1
    a53ea3357c2 Updates prober_total_total to BETA and updates the list of stable metrics
    f844abfc6f9 Fix typo in ResourceEncodingConfig comment
    ff108e72a52 DRA device taints: fix rare unit test flake
    97dd6dc2846 Add warning message for attach
    8672956f730 etcd: use Unix Domain socket for testserver
    33f16a55ba2 etcd: fix 5 second delay during shutdown
    ff2e6dddc8b DRA device taints: work around fake.ClientSet informer race
    638abf03396 DRA device taints: more logging in test
    40f2085d68a DRA device taint: clean up test initialization
    091d09b4479 deflake e2e tests: CustomResourcePublishOpenAPI works for multiple CRDs of same group and version but different kinds
    db1e107150d Job: Fix API comments for SuccessCriteriaMet
    ac3274521be scheduler: remove duplicate nominatedNodeName clearing in preemption
    373866eee99 Build etcd v3.6.0-rc.4 image
    7fcc1bcf1d1 chore: move watch handler tests to handlers pkg
    3fcb26f0179 reduce etcd install log noise
    3e609ecf6e9 fix: Watcher deadlock from Stop not being called
    c704025a0eb Fix error handling and csi json file removal interaction
    1654aa619c2 deflake intergation test: TestEndpointHandlers
    3d53bfec09f Typo fix: watchActcion
    4e3026fdb81 pr fix
    7d6f86594fc kubectl: sort secrets alphabetically to avoid random order
    8f1326251c2 Improve Job API comment for the backoffLimit
    9d5f78a990a Update OWNERS_ALIASES add aojea to sig-network-api-reviews
    e8dbfc0b6ff add miss Shutdown call for selinux_warning controller
    405b9e80221 Check expected emitted events with assert.Equal
    5ebeb8defac don't only run events in nested lists consecutively
    614b1e90170 Run all permutations of events in ResourceSliceTracker tests
    29b499e2ba4 simplify applyEventPair
    45b0ddff12c make input events a slice
    3883e050fc1 Use shared test fixtures for ResourceSlice Tracker test cases
    7f21df6ab14 resolved review comments
    5928fc0e600 Add ContainerIter utility for ranging over pod containers
    3b2cd123479 fix(kubelet): acquire imageRecordsLock when removing image
    6d6abaab7d1 Simplify etcd3 watcher
    b82fd6c2888 add e2e test for healthz/
    8bc7e6c10e0 add etcd server overrides to etcd probe factory for healthz and readyz
    b141ac6a235 adjust container_spec_memory_limit_bytes e2e to range: ppc64le is 44*1024 less
    2aa39a0c77c Update the busybox test image to 1.37.0
    f9c1876b45d Make proxy CleanupLeftovers methods quieter
    b61ca041b45 Add some missing cleanup to "kube-proxy --cleanup"
    c1ff9cf4e81 chore: Upgrade the mockery version to v2.53.3.
    ffe235d2dd3 replace context.TODO with context.Background in tests
    4bd0c024e9d add goleak to kubelet vendor via hack/update-vendor.sh
    161b44d04ed add missing header in httpstream_test.go; whitespace in imports
    79150d1ecf1 add unit tests to verify the fix
    42d3716d727 fixed the formatting
    268033a5116 Fixed go routine leak in kubelet tests
    30f1bcadea4 Add a unit test for iptables.CleanupLeftovers, improve ipvs test
    94530dad7b7 Move iptables/ipvs/ipset interface creation into CleanupLeftovers
    975e653af44 RWX tests should create RWX volumes
    5ad90c3b63a merge RunBenchmarkPerfScheduling and runBenchmarkPerfScheduling
    780c0d67251 add license description in options.go
    4f33b74a35c Use Go 1.24 os.Root instead of filepath-securejoin
    5677f7ab0b1 Make Request#RequestURI honor configured context root
    b206264ffba Shorten long directory names with e2e pod logs
    2800c16c8b9 Remove FlowSchemas handling non-leases-backed leader election
    16f4a5c4eac cleanup unneed code
    88fbccd6982 Fix the allocatedResourceStatuses Field name mismatch in PVC status validation
    302a8505833 Update coredns version to v1.12.1
    d4fd41285b8 update the log message to reflect success and failed jobs
    cc42846187b Fix for HNS local endpoint was being deleted instead of the remote endpoint.
    551f3c7824d merge the integration tests into a single one
    de98a71ff57 Update PodSecurityLevel used during Service CIDRs tests
    58ff3129add update kubelet_authz.go to new test framework
    c7d0ed5c488 add integration test for job failure event delay and remove the unit test
    6747bf7a9cb Clean up leaked goroutines in cache unit tests
    04d0715e663 scheduler-perf: add option to enable api-server initialization
    16af0d79d87 update sig-autoscaling maintainers
    653f48d8867 Certificate store: ensure data is written to disk
    5a14fdbf7f3 e2e: Keep original error when exec in container fails
    9c228e81d24 Increase kubectl cp command timeout to 30 seconds
    310b395a04f [cloud-provider] respect the "exclude-from-external-load-balancers=false" label
    ae08504ca62 Remove unneeded return values
    2c94112a026 Disable thresholds for PreemptionBasic and PreemptionPVs tests
    f7d8853213d Add dom4ha to SIG-Scheduling approvers
    8e65a62b3fd Deduplicate MilliCPUToQuota function & constants
    3067bbfe159 hack/ginkgo-e2e.sh: fix misplaced brackets
    5e4600e46ba e2e service ip preservation test
    f7e82d8059d clarify mutual exclusivity of service account annotation keys in godoc
    4fa96391457 kubectl http proxy e2e: do not append os.Environ() redundantly
    f7f4aa02baf kubectl e2e: debug appended environment variables
    5aa61f84797 Test tooling: fix agnhost pause command
    65b8fba34bb Mask Linux thermal interrupt info in /proc and /sys.
    0ff1e3778f1 Remove general available feature-gate PodDisruptionConditions
    fe14689f221 bump k8s.io/utils
    1c3dc397ae1 make update
    8af1629f7ae remove inaccurate hostNetwork doc comment
    bad6c7e4cc5 Set LANGUAGE env variable in TestDiffProgram for consistent locale behavior
    c005b85d4df Reduce locking duration on cache to fetch data from Cache
    252d584cb73 Implement validation-gen lint for CI
    1a694bfd328 Make validation-gen lint errors easier to read
    8dc6806d26d Expose NodeInfo to PreFilter plugins and Framework
    5413d0edfa4 chore: correct the comment on UnschedulablePlugins
    8db5f061838 adding commits of the original PR
    1b8bbcac44c Add integration test
    1402a54917e Removed unused function UncompressLog.
    88a3c000e5b Implement CSI e2e test for MutableCSINodeAllocatableCount
    d868eeb0889 Migrate pkg/kubelet/status to contextual logging
    7f263b057dd Tag api change instead of apimachinery on generated openapi. changes
    4120ed1df05 chore: `make update` for doc changes
    356e148045e fix: comment on preferred PodAntiAffinity
    a2624f9c64b make update
    21f7026c25c clean up CSIDriverRegistry
    a68501da72b Add check to see if promote worked within the retry loop
    53499d97eec prefer error over bool, prefer Should(gomega.Succeed())
    d54ff7441e1 test: don't panic during an Eventually retry loop
    cab6045a40f hack: remove verify-e2e-suites.sh
    73afab1856c handle review comments
    51fdd55e87e use sync map for the cache
    3a5f8b4b99c Update OWNERS_ALIASES for sig scalability
    547c005cb7f handle job complete update delayed event
    410ada00220 Made the unsupportedError msg more readable
    780fac5a37d chore(kubelet): migrate network to contextual logging
    125b8d2809d Removed kubelet test duplicate line.
    c1efa2e1618 delete test/e2e/common/storage/volumes.go
    42943796244 e2e storage test: intree driver adds the support for nfs v3
    6df869347bc remove outdate comment about pv controller
    32999059054 Based on the issue #8304 add mfahlandt as ne Co Chair for Contributor Experience
    9a60ea01f9f fix getPodMatches should call /runningpods endpoint
    5da366e3efa Update pkg/quota/v1/evaluator/core/resource_claims.go
    ce7d3ea00cc fix wrong api version in toExternalResourceClaimOrError
    0f0f9d01c0d remove out-of-date comments about version
    c2b455f55c6 remove unnecessary functions
    44d31af29bf Add example in etcd override flag help text
    3dc611e6666 fix container lifecycle e2e tests
    4a4fb0a11ce Fix LC_CTYPE for kubemark start scripts
    ea644981df4 Update pkg/controller/certificates/cleaner/cleaner.go
    1e1e2dee909 Update pkg/controller/certificates/cleaner/cleaner.go
    006ebbc33a8 Fix comment typos
    4bf5f1a6b31 kubelet: add coverage for identical kubelet config and drop-in config content
    eae133919f0 fix: killPodOptions support JSON serialization
    55ba8f063b1 kube-scheduler: Fix a misleading error message in the VolumeRestrictions plugin
    a52863827ba [kubectl] drain daemonSetFilter with other APIVersion
    9f50740b7bc Simplify span handling
    c64b6f80eb7 Trace across start handler invocations, nesting spans
    6fd8954fe86 kube-controller-manager: also support context for record.NewBroadcaster
    bea35b1f565 remove non-lease resource locks in tests.
    ff74405bd39 kubelet: remove --register-schedulable flag
    05be83b3848 tracing: set audit-id on incoming requests
    eda71f9e958 cleaner.go should use time.Until instead of t.Sub(time.Now())
    1354bb9e2ea Update log verbosity for node health and taint checks

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
This commit is contained in:
Bruce Ashfield 2025-10-18 20:30:40 -04:00
parent 03eb707025
commit f281a3e744

View File

@ -5,9 +5,9 @@ applications across multiple hosts, providing basic mechanisms for deployment, \
maintenance, and scaling of applications. \
"
PV = "v1.33.2+git"
PV = "v1.34.1+git"
CVE_VERSION = "1.33.2"
SRCREV_kubernetes = "f208b6c73d17f7c2535393117ab93cd18b673e47"
SRCREV_kubernetes = "03a5f06c2695805059278c9d6b47edc3bdcf51b1"
SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
PE = "1"
@ -23,7 +23,7 @@ PV:class-devupstream = "v1.28.2+git${SRCREV_kubernetes}"
SRCREV_FORMAT ?= "kubernetes_release"
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.33;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.34;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/release;protocol=https"
SRC_URI:append = " \