Commit Graph

75 Commits

Author SHA1 Message Date
Bruce Ashfield
3ec3b06050 Revert "k8s: WIP [needs newer go]: not for merge: update to -tip"
This reverts commit e27c332dc3fc55c6892c5dcd4c31264c4033b40b.
2025-01-17 19:17:09 +00:00
Bruce Ashfield
d5633843dd k8s: WIP [needs newer go]: not for merge: update to -tip
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
244d5882c5 kubernetes: update to v1.30.2
Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits:

    b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm
    3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same.
    95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby.
    50428ed169f gitRepo volume: directory must be max 1 level deep
    dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables
    c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly
    a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod
    81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests
    49a2366ddb6 Initialize terminating field in the Job controller unit tests
    46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled
    85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2
    39683505b63 Release commit for Kubernetes v1.30.2
    47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base
    cd73ad187cc update driver installer
    654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable
    1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap"
    0df7267723b kubeadm: use the actual configured kubelet healthz address:port
    398ab938efc kubectl create cronjobs: Manually set OwnerReferences
    42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node.
    f73bb17efbf base on allNodes when calculating nextStartNodeIndex
    a26f2c59e3e Fix printPod panic with spurious container statuses
    85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1
    6911225c3f7 Release commit for Kubernetes v1.30.1
    3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions.
    b762a187f4a cherry pick #124618 to 1.30
    1c8b0f697c5 fix requests tracker concurrency
    2956e294c44 fix conflict race in statefulset rest update
    7d9b913d106 fix stateful set pod recreation and event spam
    a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests
    f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables
    d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year
    ad1353499eb Clean up PersistentVolumeLabel admission plugin
    42742942f5d scheduler: preallocation for NodeToStatusMap
    d17cd6ef75c tag service.spec.TrafficDistribution field as alpha
    d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled
    37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553)
    1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight
    e1594967bbb Idempotent transformers in scheduler & kcm
    dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade
    7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently
    6bb6b07b185 e2e node: fix -v support
    4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name
    933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation
    502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0
    7c48c2bd72b Release commit for Kubernetes v1.30.0
    69e332560d0 CHANGELOG: Update directory for v1.27.13 release
    128d6cc1462 Add envFrom to serviceaccount admission plugin
    fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
    d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2
    7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release
    22140b6a070 Release commit for Kubernetes v1.30.0-rc.2
    be4b7176dc1 Fix Abs path validation on Windows (#124084)
    d19bff9a022 Update publishing-bot rules to Go 1.21.9
    1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
    99fac38d286 Update x/net for CVE-2023-45288
    f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1
    6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release
    77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1
    f338ab5f959 svm test: wait after updating CRD to avoid flakes
    363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration
    0add741012c fix test flake caused by not waiting for CRD schema update
    02139c91028 Deflake authz config reload test
    fc428df4914 update setcap/debian-base to bookworm-v1.0.2
    06e69e4b099 releng: update publishing bot rules for 1.30
    d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release
    6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0
    c893c484328 Use the right feature gate when updating uncertain volumes
    6f5240b19c6 e2e_node: fix podresources test
    9ce994af9fc e2e_node: remove `Dbus` test case
    247392271f1 Fix admission error
    84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles"
    a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod"
    225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout
    4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure
    f2d4848e49c add stefan as apimachinery tech lead
    0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage.
    a7f23e46da4 Fix OOMKiller test warnings
    fc555839d73 Allow installing newer containerd/runc on COS
    10b6319e64b fix slow dra unit test
    2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint
    656cb1028ea CHANGELOG: Update directory for v1.29.3 release
    e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup
    fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release
    bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release
    26881132bd0 kubelet: assign Node as an owner for the ResourceSlice
    80db011202e remove VolumeAttachment endpoints
    55302de991e Promote VolumeAttachment e2e test to Conformance
    4048598620d Change the API operation e2e test to conformance test.
    045d91d882c Add e2e tests for GA API
    a0add8d2c75 dra api: NodeResourceModel -> ResourceModel
    c78812868f5 CHANGELOG: Update directory for v1.26.15 release
    0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0
    c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
    f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
    8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers
    1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers
    4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported
    6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812)
    5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package.
    926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
    c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release
    4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh
    2c2d424b012 make type checking tests non-conformance.
    19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits
    7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services"
    3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
    a527cab9fce Fix non-recursive list when consistent list from cache is enabled
    727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled
    dc2974c6461 retry policy creation for CRD type checking E2E test
    9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests
    4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test
    21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil
    fc2134c84cc dra kubelet: fix error log
    51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload
    ea14ccdf13f e2e_node: mount_rro: fix error string comparison
    5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts)
    3ce6c104e21 Support fetching NPD from github releases in standalone mode
    56da06b6dd9 Fix the dirname command in macOS does not have a -z option
    62ac88b9ea5 Add metrics for authentication config reload
    b4935d910dc Add dynamic reload support for authentication configuration
    13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call
    d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts
    c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts
    6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts`
    dd0882a83e0 kubelet: expose `node.status.runtimeClasses`
    8db07446f19 api: validate RecursiveReadOnlyMounts
    8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate
    ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts
    d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts
    0b1a507b002 pkg/features: add RecursiveReadOnlyMounts
    76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts
    27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler
    f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers
    9161302e7fd feat: implements svm controller
    121607e8096 Require email_verified to be used when email is set as username via CEL
    79fe37537c3 Adjust the validation to the current state
    1163c7ed9c6 Adjust the API comments to the current state
    ee64b30d05c Check taints as well for control-plane
    acf6b500eef Follow up fix to the job status update test
    91a7708cdce feat: implements Storage Version Migration API in-tree
    04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated
    6a361e1f364 dra api: enable new CEL features by faking their version
    7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters
    251b3859b0b dra scheduler: consider in-flight allocation for resource calculation
    2c6246c9066 dra e2e: move ResourceSlice test
    0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice
    42ee56f0931 dra api: implement semver attribute value type
    234dc1f63d7 dra e2e: run more test scenarios with structured parameters
    d59676a5453 dra kubelet: publish NodeResourceSlices
    5e40afca060 dra testing: add tests for structured parameters
    3de376ecf69 dra controller: support structured parameters
    6f1ddfcd2e3 kubelet: support structured parameters for preparing resources
    4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters
    d4d5ade7f5b dra: add "named resources" structured parameter model
    096e9489050 dra scheduler: support structured parameters
    49ee96eed43 pod security test: add user namespaces feature
    1f9c271c8c6 PSA: update procmount tests to have hostUsers
    23706cb90c8 api validation: validate proc mount against user namespace
    e216742672a Job: Support for the JobSuccessPolicy (alpha)
    7bd78b06e93 Warn on deprecated AppArmor annotation use
    b1341c87957 Revert portion of the GPU testcase
    194009fac9d Add integration test for managedBy and cleanup of finalizers
    2867be47b31 followup to allow special characters
    a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice
    2e34e187c99 node authorizer: lock down access for NodeResourceSlice
    39bbcedbcae dra api: add structured parameters
    eb1470d60d5 scheduler: fix assume cache with no index
    48daa91857a Update publishing-bot rules to Go 1.21.8
    30857658e42 Adjust GPU test to work with latest nvidia daemonset
    ffafb2b9ca9 adds portforward streamtunnel unit tests
    758dc535107 Enabled conformance test for VAP which is GAed.
    df7f5fca27f Don't embed plural exceptions in tools
    39e1c9108c0 Support multiple JWT authenticators with structured authn config
    2d86cbf2616 Separate feature-gate for AppArmor fields
    22068e0cc7b Validate annotation & field match in PodTemplate
    06caf32ecd7 Validate localhost profile max length
    0eb5f52d06f Rename AppArmor annotation constants with Deprecated
    8373f3035ad fix aggregator path filtering to include /
    70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
    6f2842c08c2 Avoid clearing go version in go.work update script
    c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
    1395c801098 Update Job conformance test to do a legal update
    2e465cd6fa0 Remove _tmp from test/images/image-util.sh
    be7ee821b97 Make verify-vendor use verify::generated
    778644154f3 Remove _tmp from verify-openapi-docs-urls
    4d6f56d3985 Make vendor-licenses use verify::generated
    8a3a299c650 Remove _tmp from pin-dependency
    813787489b7 Make verify-openapi-spec use verify::generated
    e90782bec8e fail LimitedSwap with cgroupv1
    5d83282823d Auto updates
    de506ce7ac9 Promote ValidatingAdmissionPolicy to GA.
    6a4e19a4ec9 add no swap as the default option for swap
    27df75c577a dra api: fix status updates
    ec325b328db Match annotations against pod AppArmor field
    d25b1ded761 PodSecurity check for AppArmor fields
    24537a91317 Stop appending AppArmor status to node ready condition
    207a965b3ff Update AppArmor e2e tests
    bf3c8464bae Implement Kubelet AppArmor field handling
    289ec02e8b5 Implement version skew strategy
    b7f620c12b7 Generated code
    855bc740239 Adds OWNERS files to client-go streaming dirs
    94927afb50c AppArmor API changes
    6b03166beda update to inject only the list of excluded resources.
    7a57bcea6cd fix e2e test for kubectl interactive delete
    646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet
    e568a77a931 Support for the Job managedBy field (alpha) (#123273)
    5122fe07323 don't watch headless services on kubelet
    0595ec79423 implement field selector for clusterIP on services
    b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
    290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL
    bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta
    53d38a31611 node-controller require providerID to initialize a node
    3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const
    221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed
    01689d0906e add e2e tests for relaxed validation
    fa3c1014393 relax validation pod envfrom
    e56240b2e1b add validation method at the top level
    5b072a59a29 Fix flaky test on multi profiles waiting pod
    96a16a7bc9f add relaxed env var name function
    af2dadcb18a Add custom debug profiles on top of static profiles
    2bd7f4f8e06 storage e2e: update hostpath and mock images
    9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16
    4a5fe2decad Addd negative case for the fix in #123570
    ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field
    b04d1177efb extend deadlines to one minute
    3d56ff21fd3 adds comments to tunnelingResponseWriter
    33af937b4a5 re-write fallback dialer unit test
    e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error
    2443b3fa694 Fix headerInterceptingConn handling
    9e154628430 adds return context in RunPortForward()
    8b447d8c97e portforward: tunnel spdy through websockets
    79b344d85e3 Add authorization webhook duration/count/failopen metrics
    1cf4cec449c Test that separation of streams work by using progress notifies
    8345ad0bac4 jwt: fail on empty username via CEL expression
    606cae9b479 Add new metric servicesCountByTrafficDistribution
    05e1eff7933 Prevent conflicts between service account and jwt issuers
    57d1b68dc2d Remove deprecated sets.String
    c4163a9cb84 Add label with access mode to SELinux metrics
    31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior
    eb6abf04623 scheduler_perf: automatically delete created objects
    51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled
    51a3fa2e6ff Start reconciling on the new field
    9513f75089f Add trafficdist package for handling reconciliation of new field
    646fd200b85 Run 'make update'
    996d11d4e87 Add new field trafficDistribution to Service spec
    d72448a41c2 cleanup: if triggerValue has a value, fast break
    78fb0bae22f wire up discovery url in authenticator
    84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration
    c61b2a3975a Check length of instance name before truncating
    ebcb78df529 promote aggregated discovery conformance tests
    b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10
    968aefd1bf2 Ensure GCP instance names are a max of 63 characters
    c2ccb921ea0 e2e pod: fail fast on failed pod
    c134bfe9ebc agnhost/mounttest: add new line to output
    db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided
    22adf221a14 print nodename
    0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
    a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...`
    90e6546c689 Use go.work to auto-find internal modules
    eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons
    6174f199dfb kublet/userns: Add test switching feature gate off/on
    4bb508dd303 kubelet/userns: Add unit test
    0b69c2bc81d kubelet/userns: Use kubelet maxPods
    39c68156766 kubelet/userns: Remove alpha maxPods limitation
    4180284dc97 pkg/kubelet/userns: Remove outdated test
    4c81e5c9dc6 features: promote UserNamespacesSupport to beta
    87a057d4170 KEP-127: kubelet: honor kubelet user mappings
    3bada5d4515 test: Bump CUDA images
    30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta
    0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
    b48b4ebc697 address reviews
    1d4be7527f8 increases client-side websocket write deadline to 30 seconds
    948d9ca2217 Rely only on `source` cli parameter in conformance/walk
    0e9cdf76ad2 Fix discovery v2 conversion registration data race
    e2b96b25661 Add a header to go.work
    467d5d745c2 Get rid of unused API type NodeResources
    d2051503a3e e2e/service.go: remove same node nodeport test
    e76fce75666 add authz webhook matchcondition metrics
    9633e25579d feat: add csaupgrade option to upgrade subresource
    1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well.
    3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature
    f34782bb927 hack: re-enable protobindings which use k8s.io/api
    9a404b590b1 Filter aggregated apiservice gv
    b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta
    8854d360a5d printers: add status to jobs table
    462dd326c2e Use v2 types with agg discovery
    301e804c3f2 Promote AggregatedDiscovery to GA
    0593746f609 Remove test for disabling aggregated discovery
    dde48918dda promote match conditions e2e tests to conformance
    74417b517a0 Tag all feature gates required by a test
    99313bea88c kubeadm: remove constants for mirror pod timeout
    ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration
    ce8bd8584e0 Configure cpumanager policy options in local-up-cluster
    ba525460e05 change result size to numAllNodes
    45783a630cc increase parallelism on node controller ccm
    dce0d8a3d3f increase parallelism on service controller
    20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111)
    6b08919473a Revert "[cloud-provider] require providerID to initialize node"
    1d653e6185a test: use cancelation from ktesting
    d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests
    00e09374b6f Make update-codegen avoid sub-workspaces
    21715e6bbd1 Fix up go.mod files after reviews
    78f82b972f8 Sort publishing/rules.yaml
    ac5664086ba Use path instead of filepath for pkg-paths
    70d803c1ff3 Make `make` fail better with bad inputs
    81ba0f3b44b Make golang::setup-env turn on workspaces
    2e2ae029c33 Fix instrumentation tests
    706c88863f5 Use go 1.22 for KMS mock
    812d5fff401 Remove old gengo detritus
    16c26b22cb0 Run latest openapi generation
    d6cf98f8ac6 Remove errant +required with no validation code
    1a4450f6ffd Get rid of code-generator/cmd/openapi-gen
    067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd
    7776496309c EOL code-generator/generate-groups scripts
    9cf189f4e02 Fix lint found by golangci-lint
    14321ef959b Move doc-generation funcs into only caller
    8288c06b2b4 Make hack scripts use `go install` and assume PATH
    ea3696dbcf3 Remove legacy references to './output'
    242b4e27c05 No need to check nil iterating gengo Inputs
    7a084b33528 Renamed gengo SourcePath -> Dir
    96b91f364ac Renamed gengo Builder -> Parser
    cb86010d206 Gengo utils moved
    236ce54aa8a The gengo "args" package is gone
    b40e4d7e705 Get rid of gengo CustomArgs
    86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator
    cb7f0593aea Move gengo/examples/deepcopy -> code_generator
    01a18659347 Fix lint in code-generator/cmd/...
    b68340e5b6a Get rid of gengo InputDirs flag
    299b0453070 codegen: Remove most uses of InputDirs
    e78dc862885 Move import-boss to k/k, retool to not use gengo
    08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing
    5b2d4384c70 codegen: Make import-boss do it's own flags
    1fed36b9842 codegen: Minor: fix wrong comments
    6420e646621 Move go-header-file flag to each tool
    3a77592b2cb Remove gengo verify-only - unused and untested
    d0dd72b01e0 Move OutputFileBase flag to each tool
    26a1a13b805 Rename output-package -> output-pkg
    6a375b8f4cd Move the OutputBase flag to each tool
    875566f997a Type-assert gengo CustomArgs blindly
    0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator
    2ac119bea94 Rename gengo Target.SourcePath() -> Dir()
    fcd6c19c246 Rename gengo generator.Package -> Target
    d2c74019109 Drop `generator.Packages` type
    b2832697d50 Rename DefaultPackage to SimplePackage
    bd31265d23e Make update-vendor log the go env
    4627a15ac00 Get rid of vendor baggage in go-to-proto
    43206312659 codegen: Don't need to pass --logtostderr
    2c0da11c0a0 Make verify-shellcheck take optional args
    19b37f046f1 Rename update-generated-* dockerized
    94b709c0e22 codegen: Use single-dash for '-v'
    dd4e456875c codegen:proto: Use revised API to gengo parser
    4b55936ab0c Remove defunct trim-path-prefix
    2348e949082 Conversion: Better logging
    6dbc754ed68 Retool typecheck to be simpler
    4d37426a3ab Update Makefile comments
    965341390f8 Remove KUBE_GO_PACKAGE
    5a96a56c80c Fix make test-integration for workspaces
    4b20f81c194 Fix verify-conformance-yaml for workspaces
    d61f2996140 Call verify_go_version at the END of setup_env
    e84adf611f4 Remove references to "GO111MODULE"
    2a1147a4341 Call setup_env from verify-vendor
    d2a4a1958fc Tidy update-vendor-licenses for workspaces
    d772f7719dc Remove defunct references to "vendor"
    7f5982e7084 code-generator: Remove now unused helper function
    10c32b3e2f4 Get rid of most references to GOPATH
    3c2940f2ae2 Kill off PRJ_SRC_PATH
    651297220ef Fix pin-dependency for workspaces
    1c3e701e0c9 Fix verify-spelling for workspaces
    032dd890a57 Fix verify-external-dependencies-version for workspaces
    bff2e92edd1 Fix update-netparse-cve for workspaces
    fad5bb1cdd4 Fix lint-dependencies for workspaces
    b2b9de88eba Fix update-import-aliases for workspaces
    530c4352fb4 Rename new::setup_env back to setup_env
    bece9bc3f4d Remove old::setup_env
    f9ca58efe9e Remove run-in-gopath.sh
    b32e2072569 Fix last run-in-gopath user: typecheck
    91efe7e5712 Fix import-boss wrt gengo/v2
    c8b61bb98b4 Fix register-gen wrt gengo/v2
    f772410082b Make code-gen subprojects work on gengo/v2
    251b22a7f89 Make update-codegen protobuf work on gengo/v2
    b0a70dec4ab Fix go-to-protobuf wrt gengo/v2
    7506048d3f2 Make update-codegen client work on gengo/v2
    b961b39efa7 Fix client-gen wrt gengo/v2
    130a9f8426e Make update-codegen applyconfig work on gengo/v2
    5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2
    9c62235266d Make update-codegen informer work on gengo/v2
    0aa98ee8e38 Fix informer-gen wrt gengo/v2
    46665fa76a9 Make update-codegen lister work on gengo/v2
    b82527b6fb5 Fix lister-gen wrt gengo/v2
    1965f56f59d Make update-codegen openapi work on gengo/v2
    5475797f433 Make update-codegen conversion work on gengo/v2
    ed35118664b Fix conversion-gen wrt gengo/v2
    1e96f4e50a7 Make update-codegen prerelease work on gengo/v2
    fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2
    b5b8c9d8698 Make update-codegen swagger work on gengo/v2
    8420278c7fe Make update-codegen defaulter work on gengo/v2
    1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2
    d5e8e9c29cf Change update-codegen.sh to use new setup_env
    db590ecd896 Fix scripts to avoid testdata
    514dd0e1f6d Convert all gengo references to gengo/v2
    6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2
    b3dd7241741 Remove dep on set-gen: gone in gengo/v2
    487cd027118 Change verify-generated to new setup_env
    c79e5abec42 Change test-e2e-node to use new setup_env
    7a7dff1eeb4 Change verify-imports to use new setup_env
    3be358ecc15 Make verify-conformance-requirements use new setup_env
    08622aa6858 Make verify-no-vendor-cycles use new setup_env
    854037d5b52 Change update-generated-api-compatibility-data test to new setup_env
    25b97dae82d Change ipamperf test to new setup_env
    238b33de3be Change test/instrumentation/update-* to new setup_env
    cbc887a1d6b Change verify-govulncheck to new setup_env
    024f4e9c09f Change verify-generated-docs to new setup_env
    35aa5b3c698 Change verify-fieldname-docs to new setup_env
    0d30f918fae Change verify-description to new setup_env
    bad67dc973c Fix golangci-lint for workspaces
    3163fc4f69a Change update-golangci-lint-config to new setup_env
    714f8a0855f Change verify-yamlfmt to new setup_env
    3dc447708b8 Change verify-gofmt to new setup_env
    d785f13c059 Change verify-licenses to new setup_env
    974276e4a08 Change update-openapi-spec to new setup_env
    2ee339b0236 Simplify verify-cli-conventions; use new setup_env
    2924b90d75a Change verify-api-groups.sh to s/vendor/staging/
    b725fd20c2a Fix update/verify-mocks.sh
    58ab5eea89f Remove some references to GOPATH
    5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables
    e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters
    e9b30a0d29b fix UT failure TestPrintIPAddressList
    c05e541793b Bump cAdvisor to v0.49.0
    6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called
    a51a5b46223 kep-3716 GA, remove feature gate
    26484df2108 Make websocket heartbeat test timing less flaky
    fc86811cbe8 Avoid logging binary junk for frame write failure
    e2575228890 add transient types to admission test.
    b57d7d6ad79 add min valid jwt payload to API docs for structured authn config
    8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0"
    e38531e9a23 Add `image_id` to CRI `ContainerStatus` message
    e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time
    d6851ec7356 scheduler_perf: fail when input YAML is invalid
    f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN
    aaf6fc07d82 Make build scripts use Go import paths
    f3c8e92def7 Clean up test.sh and get rid of GOPATH
    8cb8535d9cd Excise KUBE_GOPATH from coverage build
    0af31064421 Dedup binaries when building
    9256031a871 Workspaces: excise vendor from golang.sh
    df42d56947f Remove vendor from ldflags
    81d932906aa Make golang::binaries_from_targets smarter
    8b579b23473 Change the build_binaries path to use modules
    65b841c077e Generate go.work files
    e54f2296ed3 Require Go 1.22.0 in go.mod
    e2b529fda73 Fix a test that doesn't build on Windows
    ffa183a7a41 generated files
    01db4ae9e74 Graduate PodSchedulingReadiness to stable
    466019b1b27 kubeadm: implementation of API types
    3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text
    d303cec1183 Update test
    55e9d509e61 Promote KEP-2681 to GA in 1.30
    a3dfba8f506 Create e2e test for VolumeAttachment endpoints
    b115df227ab update tests due to change of NewPluginInitializer.
    64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources.
    5b1fffa3e40 add resource filter to admission initializer.
    a0dc949ce32 Improve error handling for json path results
    61d6026d23a Fix field paths
    45742d1d9af Add integration tests
    31f7efab20f Add cost stability tests for chained and nested CEL comprehensions
    7ef3eea8a73 Generate code
    291703482d5 Add selectableFields to CRDs
    d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
    fa44b9ca150 Fix panic in getNpdPodStat
    f46df21cad3 update comments on API
    5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode"
    2a22b6f6b8d Add information about SELinux test tags
    ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO
    52558a03104 Add e2e tests for SELinuxMount
    92bdc7b3873 Ensure that initial events are sorted for WatchList
    58a826a59a7 graduate MinDomainsInPodTopologySpread to stable
    20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
    e663285ccf4 Add `image_id` to CRI `Container` message
    3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release
    b394aac4ce3 Use the websocket protocol header, verify selected protocol
    03812ddb169 streamtranslator counter metric by status code
    e89dddd4af6 jwt: strictly support compact serialization only
    dc4c92f5a56 add support for map
    4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests.
    374e4b56861 Address review nit, use longer variable identifiers.
    3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
    cb39dfc9deb Promote ImageMaximumGCAge to beta
    f832692d980 uid is also supported in field ref for downward api
    ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked
    d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc
    f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
    0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled
    658b45cd035 kublet/userns: Test new functionality with feature gate disabled
    1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
    b2a92406efd KEP-127: check for runtime handler userns support
    024146f7058 KEP-127: the kubelet stores runtime helpers
    ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades.
    c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError
    a147693deb2 remote command turn on feature gates
    0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test
    dd1e617ba0b Scheduler first fit  (#123384)
    ca41a9222d5 Fix makefile variable expansion for test-integration target
    aefaf66d2b4 remove unused service keys from aggregated discovery
    0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers
    fd5019a5468 ktesting: ut flake fix for CI
    a24f2c11923 Validate restartable init container state transition
    c99996efab1 bump metrics server to v0.7.0
    0ab006b8a1e node-controller reconcile node labels on each update
    03bd3e25b16 [cloud-provider] require providerID to initialize node
    099f26296b2 integration test for cloud provider
    ef83ec27536 don't use leader elect on ccm integration tests
    08f8be99039 fix goroutine leak on legacy-cloud-provider gce
    3636971c39c add aojea as reviewer
    b4b4784c6c4 enable ip aliases on clusters by default
    3908a46b222 bump cloud controller manager to v29.0.0
    b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value
    dc7114fa911 fix default IPMode set in UT
    9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil
    0f083966a7a set actual podToMake values
    840ef149071 ktesting: doc updates and fixes
    fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml
    e6d6d8e14c2 feat: print etcd ready status
    07e0a80216c graduate HPAContainerMetrics to stable
    df92ad9bcbf Run autoscaler as non root in kube-up
    d7735f32d0b Skip autoscaling tests when we hit rate limits
    1ecd4053de7 ktesting: skip timing check in unit test
    8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test"
    18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin
    bbef156ef5d update 129
    b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e
    e2ff63103df fix for persistent Horizontal pod autoscaling failures
    148757903ae release v1.29.2 for sampleapiserver
    247233f7b40 bugfix: modifying argument causes wrong fieldpath
    e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests
    75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting
    e1ac3e1de76 Fix kubectl proxy e2e test
    52dd6030551 initial e2e for aggregated discovery
    13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager
    4760e0cc44f refactor: use shared CollectParams from VAP
    64cd09f7208 refactor: use match from generic pkg in vap
    96c418a7b73 add generic policy dispatcher
    9f9858b6caa Hit APIServer cache when testing healthiness
    2e920365766 Rename "new" reconstruction just to reconstruction
    e9193b4f336 e2e: remove dead code for providers
    d816ab7657b Promote LoadBalancerIPMode to Beta
    4cb4228522a ktesting: improve unit test coverage
    4ffa628ead5 ktesting: add missing methods to error context
    dc6abc3ff8f ktesting: add Underlier type alias
    fe10bfb044f ktesting: fix ExpectNoError
    2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate
    513c2a3690f Mark NewVolumeManagerReconstruction GA
    78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21
    cc515bd8f13 Job: Fix test case names for the validations
    0c4df640920 fix api
    aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu
    f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device
    9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425)
    11ed3032c09 test: infer gvk of objects
    acf1d850c61 refactor: handle paramKind directly
    83751630081 Add test to validate non empty pod log dir
    81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests
    ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server
    dd890b899fa Make PodResources API include restartable init containers
    16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation
    f6682370b1a fix flaky ut in TestCause contexthelper_test
    98437cb4be6 fix json output when fetch kubeadm config from server
    ce6bacb5acd fix persistent volume docs link
    6726e656190 Aggregated Discovery, mark stale before initial health check
    5fb002147bd Remove unused Resolver interface in pkg/proxy/util
    43ba0bd53b7 kubeadm certs check-expiration support json/yaml output
    4172d364865 Codegen: use plain find instead of git ls-files
    527d2ea9d0f Codegen: use plain grep instead of git grep
    9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g
    d7028a8ed50 Add SELinuxMount feature gate
    ba8fcb5ef6c kubelet: don't disable gc if max age is specified
    8dddf6d3140 e2e_node: add test for max age after kubelet start
    a8ea9363648 image gc: don't start until max age has passed since kubelet started
    6cd78bc5fc5 node e2e: add image max gc test
    be7856e3402 e2e_node: factor out waitForKubeletToStart
    da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta
    5a8579a3e40 kubelet/userns: Remove tests that fail as root
    cb3180950ef dra e2e: fix stack unwinding in helper function
    c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation
    fe8e896df87 Improve the doc comment for the Job status.active field
    3c9c141d980 exchange the order of comparators
    7b108d8ee19 Add testcase covering unknown plugin config
    611f8ba8153 bump nfs-provisioner-to-v4.0.8
    c74ec3df094 graduate PodLifecycleSleepAction to beta
    e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test
    65faa9c6800 Consider initContainer images in pod scheduling
    b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource
    fa6429a31c9 Use new 1.4 NFS image
    ec394ec53db Fix NFS related CI failures
    c29450eb009 kubeadm: apply retries to all API calls in idempotency.go
    0f49a1e36e0 fix panic in CRI stats of windows
    dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed
    01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api
    ae0a813be10 Fix tests after rebase
    c8b4d8ebedb kubelet: add reason field to image gc metric
    d3a0e296def Update x/crypto to 0.19.
    f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE
    5fcbc9d2fca Fix permission denied error
    ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters
    19d9405a1c3 Update comments and error messages
    d9e2487d0c3 Add PodLogsPath to kubelet config
    3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata
    7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate
    d5d3eddb95b Add allowed/denied metrics for authorizers
    59bf8b02e63 Refactoring to encourage use of switch case
    7b2698a5e5c Add handler to run watch serving in separate goroutine
    c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II
    7faa8bbac3b Add e2e test for kubectl interactive delete
    6d5133f3ecd add functions to policy accessors for getting match information and params
    def05a20e22 flake: avoid flake by ensuring params appear in the initial list
    57fc5d24013 Add decode and roundtrip tests for CBOR marshaling.
    871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
    71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop.
    f84d643c204 Use the Defer for pod replacement policy
    066421f108c Add CBOR Serializer implementation.
    ab8cdae3b1f Reset metrics in the Job integration test before testing
    ec7e051bc00 Always test PDB's during service upgrade test
    115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time
    b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0
    0feb1d5173c Add integration test for multiple audience in structured authn
    bd27c99262e move OWNERS from validating to all new parent policy folder
    5dc92ada068 Implement authz config file reloading
    3a98e60a719 Move authz construction to reloader
    2b00035b5fc Split construction of authorizer / ruleResolver
    1fddc948ed8 Split node/rbac/abac construction
    49124293c3c Store constructed node/rbac/abac authorizers
    75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct
    41435d045db Guard empty status.acceptedNames
    18c563546a7 support multiple audiences with jwt authenticator
    3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release
    b202d053fa7 CHANGELOG: Update directory for v1.26.14 release
    cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release
    14045bf340e CHANGELOG: Update directory for v1.28.7 release
    aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0.
    5f4cb8b09a4 Move kube-apiserver authz validation functions
    b5e0068325d Support all key algs with structured authn config
    630ff96f9d6 Revert "Scheduler first fit"
    e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
    5d861b6f12e promote agnhost to v2.47
    aa772d77fbc e2e pod: dump pod in unexpected phase
    008b075b462 DRA: fix data race in resourceclaim.Lookup
    9c726b015c5 agnhost: v2.47
    2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release
    b8a59346fe6 test/oidc: extract key type to allow testing different algs
    b7e70f0e000 update-vendor after package rename
    3094395fa76 bugfix: avoid NPE possibility by making composition environment global
    18fbc48b015 refactor: implement VAP off of policy plugin fw
    a6366573d5c refactor: create generic policy plugin type similar to webhook
    2fa02552ebf remove comment
    48b1576980d use table test pattern and replace hardcoded values
    19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration
    6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
    39606af8c3d golangci-lint: optionally skip it during "make verify"
    7ee89440c39 agnhost: v2.46
    07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
    8876b68a604 golangci-lint: add hints for error wrapping
    8e2c1b559ac update images to have the full semver in the tag
    1b1b902f81d codegen: don't nuke files if only verifying
    e53ac426335 e2e labels: add placeholder docs for existing items
    445443bd8a5 e2e labels: ensure that the lists remain sorted
    a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts
    77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric
    4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util"
    0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args
    7dd624d3443 ci: bump kind to latest for kms jobs
    5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment
    d697f43d738 refactor: move matching logic into parent policy folder
    8b14116509a refactor: move vap into parent `policy` folder
    8b26b6eec1b refactor: move celmetrics close to its usage in vap
    5ba3883be02 Adding unit test for makeWinContainerStats
    5c825d8a226 core/v1: remove comment about non-existing constants
    a8abed80153 Update publishing-bot rules to Go 1.21.7
    da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects
    c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer
    63aa2615834 ktesting: add TContext
    75210d0840e Clean up dead code in node controller
    593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline
    d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests
    73cc31847fc fix
    eec508e488f use patch number
    ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22
    ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate
    36904475db4 kubeadm: increase ut coverage for app/util
    d42d9a9b079 features: promote NodeLogQuery to beta
    3e777540fda add test case for error inside variables.
    13c848f562c self nominate kevin hannon as a sig-node reviewer
    3a813049d3a add aojea as feature-approvers on OWNER_ALIASES
    6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642)
    e821e0de15e remove error wrapping from builder
    de6989041a7 added OWNERS to test/e2e/feature/feature.go
    0f5cf6c1cd9 Add image pull duration metric with bucketed image size
    c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment
    1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations
    42672ee2ea1 Make comment about reject action more accurate
    c7e48f1ebf5 kube-proxy: flush nftables base chains on startup
    7a56b6e3f7a Add validation.IsValidCIDR
    658e3308f34 etcd: Update to version 3.5.12
    fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig
    105ec3d48fb fix linter failures
    852c03a49b9 check key is set before deleting from map
    4d8c3530f57 fix regular bound service account token test
    ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1
    eceaed8c075 Put validation utility packages used by API validation under API review
    1ae7553744a Revert "print error message regardless verbosity level"
    e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation
    1085c0b15a4 Bump sample-device-plugin image version
    9e37ccedc7f apiserver: refactor handleError in endpoints/filters
    6a98704229a Bump to latest version
    63e91ed0232 remove deprecated framework.ExpectNotEqual
    dfc20d19c8a fix integration tests now JTI feature is enabled by default
    cae710d9e96 kublet/userns: Test error messages on init failures
    1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
    5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428)
    4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate
    eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA
    deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency
    7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint
    becb25c01f9 Bump version for the sample-device-plugin image
    f97dec28407 Add comments about wildcard clusterEvent
    31c86e38ac6 Update in-tree azureDisk and azureFile tests
    0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep
    d81023db30c When matching clusterEvent, we should consider the "*" additionally
    3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758)
    960d7fbf094 add admission tests
    a0770386abe fix copy paste
    b0c9a18673b add TestPIDPressure
    195a7747180 eviction_manager: add unit test for PID pressure
    774d666d1ce kubeadm: better checks if the node is CP during "upgrade node"
    f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch"
    9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet
    dc832c6e59e add support of variables for Type Checking.
    b636984004c test: remove unnecessary skip healthz check from test
    71bf5630343 Job: Stop unnecessary sting casts in validations
    21ba0d59d3a refactor type checking to use CompositedCompiler.
    7cab0ad2d2b apiserver: warning should not panic when request times out
    c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes
    a56d483df06 kubelet/userns: Use t.TempDir()
    0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages
    fdc20de5004 kubelet/userns: Wrap error message
    065066d1aba kubeadm: support digests in DeployedDNSAddon()
    1db6e434f3a build etcd image v3.5.12
    227c1915db3 enhancement(scheduler): share waitingPods among profiles
    8bf03e83d3e Stop claiming --node-labels is alpha
    2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4
    2dd81563a96 Update to runc 1.1.12
    60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release
    d190fa3e7de Fix race condition between external-resizer and kubelet
    593654eaa3b Fix cleanup of file subpaths
    97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure
    9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours
    67926c3777c Update in-tree vSphere tests
    01dbb85974d fix: correct incorrect comment & function name about SchedulingGated
    717a0002b75 [gce_runner] use metadata file when values have special characters
    b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds
    77f03c17449 Don't export single-use types
    01155f59c35 Merge pkg/util/config into pkg/kubelet/config
    049261aca1b Delete unused config utilities
    e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes
    77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction.
    0283498ab40 fix gofmt error
    0c7281624ea change style of enums
    f589b911f85 node_controller: improve taint eviction queue add worker time args
    71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed
    c222db1429e fixes kubectl explain to shows enum for field types if they were defined
    2216361c59e fixes kubectl explain to shows enum for field types if they were defined
    d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter
    7f2d78656ca Updating FG based tests
    8bc63027d9f remove extra space in log
    2c829cf29b6 chore: Refactor network load balancer creation in e2e tests
    6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller
    da05076868a Reorganize a bit of winkernel proxier setup
    33bd5fb3c44 Remove unused param to winkernel proxier
    4716bf8bd45 Fix issues found by linter
    ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2
    c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1
    76ea1420516 Use gcloud for gce_runner
    a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total
    1baf7d45866 Corrected some spelling and grammatical errors
    a7cf7fe55a2 Bump shellcheck to 0.9.0
    20ec766adfb bugfix: disable ratcheting for typemeta fields
    7353f52bc8c test: add CRDValidationRatcheting e2e tests
    768c169dd82 feature: promote CRDValidationRatcheting to beta
    5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field
    85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows
    d60a25b2db5 Add DeletionHandlingObjectToName
    a15f4376697 KEP 3458 - promote to stable
    ceabc4aba84 DRA: always returns Unschedulable in PostFilter
    6cf42037512 dra scheduler: reformat code
    a809a6353b6 scheduler: publish PodSchedulingContext during PreBind
    5d1509126fc dra: patch ReservedFor during PreBind
    6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go
    5ab9f3d15f0 kubeadm: fix the err check bug in certlist test
    ebba2d4472d Move some code in the proxiers
    536364266c1 Sort messy kube-proxy imports
    c2c4f4616d4 cleanup structured authn/authz error logic
    c89dcf52b12 convert the expectedValues to be cel.Val.
    d6991638029 extra case for affirmative has(map) test.
    139c6daf302 Missed a spot! testing verify-licenses.sh
    7801173f6ed get the error claim in dra
    6e5e1d03177 Remove useless org mutate code
    09a1abda998 Update vendoring to take new CBOR library dependency.
    ef27338bef9 Add skeleton CBOR package and introduce library dependency.
    89db64e0534 collect generated files and logs
    39afee443f1 enable testing import check for kubeadm binary
    ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists
    4d6c0ba518d kubectl debug: add sysadmin profile
    bcf512693a0 kep-3836: promote to beta in 1.30
    8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only
    9b96ab46eee Fix license verification script
    1ad143177c3 Added metric resource name to HPA table (#122804)
    af35b7ff2e0 Update Changelog with Release Notes 1.30 Team
    b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695)
    e490439262f drop deprecated pointer package
    83de1586e08 boilerplate_test:fix pylint warnings
    4473dfebbf9 fix boilerplate test
    9dc1da1e5bf boilerplate_test: fix bad indentation
    65d67101e72 Drop vsphere cloud provider
    d0c323fb8fb fix convertField and its comments.
    df9620c9f6f add support for equality check.
    9bbdbc510eb mutation library for CEL.
    eafa9bd24b2 Add validation tests
    7972f0309ce Fix service account token projected volume validation
    35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted
    1d59d6b6c65 Use validation.IsValidIP in a few more places
    519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency
    f999b24fad9 Expand IsValidIP unit tests
    8fc691be940 Drop validation.IsValidSocketAddr
    09abfa46be8 Update knftables, with new sigs.k8s.io module name
    367bbd01d76 update testcase on podreadytostartcontainercondition
    8371e4cf931 quick break when met
    740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig
    db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config
    e92a4debcbd Fix lint warning about unchecked error
    d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows
    8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform"
    b88fefad1f8 Add note about directory structure
    62eb7cb4f93 make update: add update-golangci-lint-config
    31de75f62cb KEP 3836 - promote to beta
    0ef42133a18 Reduce verbose logs in MetaAllocator
    b8df7e76845 unittests: Fixes unit tests for Windows (part 10)
    b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix
    b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling
    25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints
    4b40299133e pkg/proxy/nftables: handle traffic to cluster ip
    01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects
    80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching
    d23483dd7c2 pkg/proxy/config: rename import aliases
    212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error
    43539c855f5 e2e framework: unify logging, support skipping helpers
    dd0cee48955 e2e node runner: remove dependency on e2e/framework
    3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure
    a05db0dd22a Add retry around create
    ed289f875e3 Remove some dead options in KubeSchedulerConfiguration
    1645667297b compatibility fixture
    6d65c063caa describer: improve job and pod template output
    1a38fb3c354 init.sh fix
    a2be736c027 vendor update
    0bc023bc28c Add aggregated discovery v2 types
    6ae264464ca Make local-up-cluster non-verbose by default
    41e706600ae client-go/reflector: make UseWatchList a pointer
    0ba903fd574 kubeadm: enable parallel pulls of images
    510df7eab17 kubeadm: add validation of ImagePullPolicy in the API
    754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions
    a4afaeda372 print error message regardless verbosity level
    de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky]
    e3ee4e35851 e2e: replace klog.Fatal with assertion
    427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update
    2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry
    5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
    1192f313b8b Fix local-up-cluster on darwin
    e2222f1e304 dependencies: klog v2.120.1
    8a89a1f5a5c mark density tests as flaky
    18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0
    26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry
    365cbe1b41f remove formatted newline
    fd5353eb721 check for error message and type
    8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options
    3a6060745cc Remove unneeded permissions of node-controller role
    83ff8a2f49f Negative index regression test for json-patch (#122625)
    f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release
    14294ce870f CHANGELOG: Update directory for v1.28.6 release
    4a9906fd340 CHANGELOG: Update directory for v1.27.10 release
    4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release
    f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter
    ee354366f58 sig-instrumentation: add rexagod to other groups
    6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager
    8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation
    2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta
    3aa366a3eb1 e2e: remove dead code
    041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on
    5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner
    98054dd9d3a Clean unused code in kubelet server.
    d21fc96db35 Fix type assertion error in init and join commands for kubeadm
    8a32f346a09 kube/features: improve unit testing known/registered features
    995135973d6 Inject feature gate instance into client-go for kube components.
    54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go
    ec89154276f Handles clean up errors
    80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order
    66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes
    c65d9e4d59f Replaces path.Operation with filepath.Operation
    fcb51554a19 Plumb the conntrack.Interface up to the proxiers
    cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests
    db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries
    51063cb5c41 Clean up conntrack unit tests
    46c4249e3ec Remove code to be removed in 1.30
    5cfd75a84ea Ignore vendor folder on client code generation
    f29d6970c96 doc(scheduler_perf): enrich the documentation
    7773b0f53fd client-go/features: introduce WatchListClient feature gate
    9263a66aec7 kubelet: make log more clearer for not create a mirror pod
    d652596e429 Remove redundant string conversions in print statements
    0d366dd99ae codegen: Use long flag names for clarity
    0f849d3b55b update-codegen: rename "base"->"file" for clarity
    f2b550180c6 codegen: don't use xargs w/ maybe-empty input
    582312d9650 Sync json-patch ver to the same as everyone else
    7162b930bec code-gen: Use the passed FlagSet, not hardcoded
    8b8f0a70cd3 Make verify-fieldname-docs actually error
    0c3e49e64c0 Run test/instrumentation/update-*
    5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout()
    caf53114132 kubeadm: start using the Timeouts struct values
    374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate()
    9b5ad7e1191 Add processStartTime in metrics/slis
    8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it.
    d2b16b2a21c vac support ResourceDescriber
    9860e12d6ee expected and actual field position adjustment
    08645984b0a Revert "Save a list of images used by e2e.test"
    73565cde13d Use gomega.Consistently instead of sleeping
    dcdfd714501 Fix kubeadm init regression
    9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp
    46d0e1d5aaa Support overrides for registered feature defaults.
    d954b25b118 hack/tools: bump logcheck to v0.8.1
    6cd25f43a63 fix version typo of namespace indexer
    4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6
    04b772c6611 logs benchmark: really write through pipe
    7f1a30f8d59 logs benchmark: fix config handling
    3fb67901642 Update env version, Add cost for previous func, add tests, etc.
    5ca73197b3f Document the nftables kube-proxy packet flow
    ddbf3ab6629 local-up-cluster: use the newly built library always
    a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    3c86d21316c bump klog to  v2.120.0
    6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake.
    6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference
    56321a77799 Revert "Graduate Evented PLEG to Beta"
    57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file
    9c39f2b7760 Fix kubelet_server_journal --until parms.
    b0e929264fb e2e/network/conntrack: rename invalid conntrack state test
    6073d1cd3d5 Adds tests for bypassing scheduler processing
    9387a66c71f Clean up encryption config reading and hashing logic
    4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule
    04bbd3481f7 client-go/features: warn when ordering initialization issue
    d74c57d4f59 client-go/features: introduce feature gates
    71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling
    70e20b58dd8 Add missing string formatting directive
    8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies
    4df39d89e0b Correct the link to install Docker Desktop on Mac.
    ce263d88281 Address comments during Review
    1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs
    f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
    50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet
    9eac24c6563 kube-proxy: store ExternalIPs as net.IP
    d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP
    564b80b1e11 kube-proxy: don't use invalid cidrs in unit test
    41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test
    2e999fff026 Fix compiling e2e.test on macOS
    6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197)
    e46778a246a remove dead code
    87816ffb2c0 Support ignore scheduler extender error when binding
    f8abe71238f Add an post-upgrade condition to ensure the job is running
    67cf648ab77 Add a new neverTerminate job behavior just for upgrade
    b7012da2ad4 Remove providerless tag in controller_test.go
    377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support
    ca8c27c480f kube-proxy: do not delete previously stale but currently active chains
    073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet
    0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA
    683f7f43af0 e2e/endpointslice: add ready conditions
    d5664276bf5 refact IsLikelyNotMountPoint
    e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag
    fdf6503e601 Enable more storage tests to work independent of the providerless tag
    5704a588101 add test for the registered feature gates
    4b296699af8 Add fake GCE provider to make CI jobs happy
    549ef5da1bd split ingress tests into multiple files
    88bfefad0f5 import providers selectively based on the tag
    220a559f45e Add missing doc.go for some providers
    7a236bd7e06 Add providerless tags appropriately in test/
    c019b51be41 Remove unnecessary providerless tag in azure legacy provider
    5c196ddaef5 add patch integration test to disable nodeport for LB type service
    4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false
    edff1c3b2fd swap originalPod and modifiedPod to match the comments.
    801afbf888f refactor TestPriorityQueue_Update
    288c00c0c7b Allow framework plugins to be closed
    73bec0f6d95 api: remove SecurityContextDeny admission plugin
    d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere
    ea0fa414457 kubeadm: implement mutators for "config migrate"
    492c0619dc8 kubeadm: add a Timeouts struct to v1beta4
    2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags
    afefc6f4ebe Make EndpointSlice API e2e test faster
    af6e653f175 Use errors.Is() to handle err returned by LookPath()
    2431a964af3 Drop hack/verify-govet-levee
    9c6b42af46e promote contextual logging to beta, enabled by default
    d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings
    289bd72631b Add ut for pkg/registry/networking/servicecidr
    4aecb151b83 Fix kubectl drain error handling bug.
    99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage
    1d144f518e2 Fix SELinux e2e tests: add label to observed metrics
    246e69fb990 Use http/2 for localhost webhook
    55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default
    55e1646fa42 removed the deprecated azureFile in-tree storage plugin
    a3c4a609950 Save a list of images used by e2e.test
    10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors
    2e8e2989d15 Removing Windows image from e2e test image utils
    af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement
    5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0
    d3b8eba690f  Update konnectivity to 0.29.0
    be88a79b6ab Remove unused csi-hostpath-testing.yaml
    7503440ba85 bump runc to v1.1.11
    09abd6be5a8 address reviews
    a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig
    97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands
    c3775de7479 fix logic error
    5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle
    e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events
    bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found
    2203cb7dde8 fix: create tls secret cert to crt for --cert flag
    5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume.
    8f2aaf63d7b Fix incorrect error checking
    20fe2a3539e Add decoding time to the audit log
    e3686246ea9 Fix update-openapi-spec to not change caller CWD
    41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion'
    bd269e06baa feat: support annotation in nodewrapper
    feb833f1296 fix nil pointer dereference when EventedPLEG is enabled
    f73bba51c97 flowcontrol: set the serialization version to v1
    430fd83454d kubeadm: increase ut coverage for util/etcd
    3b67181c93b remove GA featuregate RemoveSelfLink
    719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts
    d849c625ec2 Remove kube-proxy proxy detection & increase timeout
    86873d33352 NodeProblemDetector tags
    d12416e2f31 remove duplicated check on validateTokenRequests for new object
    f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac
    acbbaddada4 Initialize default attach func regardless of the value of flag
    041efcd1d40 scheduler: update an old comment
    1c089afcf37 Fix a set type
    147114e6485 Update some change tracker doc comments
    a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData
    764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go
    a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker
    ede0dc1d079 Make newBaseServiceInfo a function rather than a method
    0779042a6f1 Remove a useless "_" assignment to appease the linter
    452fcc5fd6e Remove some dead code in service.go
    51f3b705c64 hack/tools: bump logtools to v0.8.0
    90e68e3a024 Update the help mesage of interactive flag in kubectl delete
    f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured
    cd3f7a31e81 Add unit tests for no score plugin scenario
    7abba242312 Fix existing unit test (add no op scoring plugin)
    e19be41f584 Don't evaluate extra nodes if there's no score plugin defined
    4ede571f8bc dra e2e: unify per-node resource specification
    bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true
    d317b01244a Fixed Inappropriate Logical Expression
    47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork
    4658f769456 CHANGELOG: Update directory for v1.26.12 release
    c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release
    38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release
    c8a2d5684d0 etcd: Update to version 3.5.11
    36cceff0a3c e2e: forbid usage of gomega.BeTrue/False
    a8da4202c0a .*: bump golang.org/x/tools to v0.16.1
    b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation
    32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function
    557118897de kubeadm: drop concurrency when waiting for kubelet /healthz
    4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30
    1f3e668e180 Use semantic comparation for API
    725b107f494 Correct typo from 'gingko' to 'ginkgo'
    626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults
    5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers
    c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2
    538248df0de More understandable error for scheduler configuration validation
    64da4345231 kubeadm: hide unwanted global klog flags
    b6eac505fb4 Add testcase setup scheduler
    2edb3349933 kubeadm: hide unwanted global klog flags
    c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code
    b69510b0690 Remove an unnecessary abstraction
    75695dae109 move encryption config types to standard API server config location
    868114a41de k8s.io/code-generator: include all metav1 applyconfigs
    b6e34187ca4 Update duplicate env var warning
    1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score
    85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts
    1ee81839036 add extra locations to check for release-tars
    09a80df1d13 podtopologyspread: scheduler queueing hints
    d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency
    b6c1f8ef08c Fix etcd repository path to prevent redirects.
    642574e9643 WatchEvents seems useless
    aee1d54a0dc Drop SubcontainerInfo
    c865ad532a4 fixing based on feedback in PR
    9d1829c33ac Make OpenAPIGetter tolerant of nil
    d621e09a528 remove unused GetRawContainerInfo
    15e0c416019 Fix CSI migration for vSphere volumes
    b3285fa8df4 Add tests for CIDR type
    31f9384646a Add tests for IP type
    e1f9aa450b7 Add costing estimations for IP and CIDR
    4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30
    2f585b45123 Add CIDR network CEL extension
    13b22b23a1a Add special IP validations to IP CEL type
    c6aa360d3ef Add IP address CEL extension
    85d08833bfa warnning on relaim policy when it is Recycle
    eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs
    fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30
    4d7c5d9257e nodeaffinity: scheduler queueing hints
    f676c99d6e4 Wire in field dropping for CRDs
    88cfff678bb Drop v1.27.0 API testdata
    8cf0c79fc85 Add v1.29.0 API testdata
    06679402e75 remove PruneWhitelist, use prune-allowlist instead
    c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished
    be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface
    16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled
    e2cf9692fc0 Remove unused code in kubelet - take 1
    ced99383d55 logcheck: remove redundant entry for pkg/scheduler
    b450224c129 golangci-lint: inline logcheck configuration
    49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2
    e706b6ba14b Use a separate function for checking if device was reconstructed
    87d817e62d8 handlers/watch: refactor watch serving to prepare offloading
    16f35785f9f Drop publishing-bot rules for the release-1.25 branch
    8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28
    1160521a4f6 Revert "Scheduler first fit"
    86ab185fa1e Migrate client-go/metadata to contextual logging  (#122225)
    01916625dab Remove unnecessary error catch in scheduling failure (#121981)
    7a82c03daa3 nominate self (carlory) as sig storage reviewer
    31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856)
    2e388dd7e91 keep existing PDB conditions when updating status
    16aad468b65 Replace test.name with test.namespace
    a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests
    8f5efce8e03 Update publishing-bot rules to Go 1.20.12
    9573eb54c71 etcd: Build image 3.5.11
    221897d7513 CHANGELOG: Update directory for v1.29.0 release
    1ae5594fb2a Update cni-plugins to v1.4.0
    b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1
    7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    9e1adced5db noderesourcefit: scheduler queueing hints
    324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch
    983f6a4a84b Update cri-tools to v1.29.0
    917027b42e4 fix incorrect function comment
    56dd5ab10ff Add tests for checking of uncertain device paths
    87c6b0d69fe Smallish update-vendor cleanup
    477176a4674 kubeadm: add supported etcd version for v1.30
    34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    1e54c050936 leaderelection: Instrument for when slowpath is exercised
    1d9f7fd516b leaderelection: optimistically update leader lock
    d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute
    7dfe3d866b7 Fix verify-licenses.sh
    6fee657d3ac Makefile: enable warn-undefined-variables
    2208cb94936 e2e: only select linux nodes for NodeLogQuery tests
    b9ff6b25f22 Simpler and less noisy make-clean
    39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan`
    7897709ed0f Add timezone column in cronjob get command
    1d11bc4aca6 e2e framework: provide more guidance to developers
    28f8e56d553 Fix prerelease codegen log string
    44898f79099 Address comment
    ed0facacfa4 Fix device uncertain errors on reboot
    48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh
    048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility.
    20b67a4d1ac kubeadm: increase ut coverage of util/config
    78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable
    210ed2ebbd8 add preScore for volumeBinding
    e92501b8fc6 optimize the comment
    56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions
    2fd4758359b change func WithTracing  parameter naming
    51495bb4c59 optimize the unit test
    ceb7ca93875 Fix etcd storage_events_received_total metric not being registered
    4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics
    2d952528cfa belated updates to feature-approvers for SIG Network leads changes
    69c40a33965 fix lints
    74a6a4581f0 fix by linters
    24c4d6f7c9c add unit test for kubelet trace
    eed6e29a5b8 client-go events: support context.Background() as context
    5310abe14ad make scheduler_perf usable from other repositories
    08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance
    a23b26913fc DRA helper: enhance context support
    d11511b1e81 kubelet: enhance context support
    0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name
    fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30
    eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30
    a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30
    965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30
    84c0ed2642f Add SidecarContainers feature beta version
    e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30
    b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally
    a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout
    d9070623085 Minor cleanup in watch handlers
    d8bd150784b support pod namespace indexer
    9efff41b8e0 making suggested changes
    55e60db88b1 Unify watch handler across http and websockets
    a82ee6d4168 fix error check
    8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable
    7cedc3d7417 Simplify creation/tracking of chains
    1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    38c67af789b Use tristate for provideclusterinfo to manage provided flag
    f035fea63ab remove unnecessary code
    3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured
    56dcde86270 Add unit tests for no score plugin scenario
    6d92b330e31 use ctx withoutcancel
    5e7c4c245b9 remove the deprecated in-tree vsphere volume's code
    a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30
    90fc108f6da fix kubelet trace broke in 1.28
    f7aca72155e unittests: Fixes unit tests for Windows (part 8)
    feb23ec581b Fix existing unit test (add no op scoring plugin)
    199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined
    2d943801ad3 Clean up unused type `HealthcheckType`.
    5e5f8b1dd29 move provideclusterinfo assignment into correct place
    c86189d1de8 clean up unused parameters for volume zone unit test
    eddf65849df Fix list_type_missing in k8s.io/apiserver
    18f3941c24b Fix list_type_missing in k8s.io/metrics
    58fb9f6e66b Fix list_type_missing in api/storage
    e96578fb4d0 Fix list_type_missing in api/rbac
    b2458e456a1 Fix list_type_missing in api/networking
    7fc3ef1fec0 Fix list_type_missing in api/imagepolicy
    cddfa437698 Fix list_type_missing in api/extensions
    cfe146615ac Fix list_type_missing in api/core
    fe902f7384a Fix list_type_missing in api/autoscaling
    ad397373970 Fix list_type_missing in api/authorization
    b24cffb1744 Fix list_type_missing in api/authentication
    a3ea994fa28 Fix list_type_missing in api/apps
    460df86f2a6 Fix list_type_missing in api/admissionregistration
    b8982be2684 Fix list_type_missing in sample-apiserver
    e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver
    dd80194d967 Re-run codegen with new kube-openapi
    1f55357d993 Re-vendor k8s.io/kube-openapi
    44060fb1f36 Fix "list_type_missing" API violations in meta/v1
    9f8f55a6ed2 Use DBG=1 for conformance verification
    37b7ae6b933 build: use -trimpath in non-DBG mode
    2315d3fed54 uncomment ktesting.AnyToString
    f86249c68e6 kubeadm: remove outdated notes during upgrade
    e38362501b7 dynamic-resource-allocation Update API comments
    e5b86c1034c Fix node update event will miss some potential changes
    a601ebd6b60 Changed the log message
    02b0dc98dd9 remove unnecessary fmt.Sprintf call
    57a5db8da3d remove feature-gate APISelfSubjectReview
    eb45a8f2f5b Added comments
    76be319571b Optimzed the code
    5c99f3a24e3 Logged the return value of ListPlugins
    3e1dbccf4d3 Don't sort under lock
    91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration
    468e2dac81d fix: requeue pods rejected by Extenders properly
    b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags
    c494e8b18e7 fix incorrect getDeviceNameFromMount comment
    03b8241fcef put storage related plugins under SIG-Storage reviewing
    4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister
    52ff7f8dc0c fix(framework): elaborate the document on PostFilter
    9cb2d1cf6de Removed Comments
    1dca49157a5 Utilized ListPlugins method
    59c75b001a4 cleanup: remove getStorageAccountName warning messages
    1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo
    7ba546cfeb7 drop alpha comment on ephemeral storage
    aba817ac1d6 return not-found errors properly from fake listeres
    f0aab8c984d encoding: avoid setting GVK unnecessarily
    1489a992060 Update mount_windows.go
    a3e27aa1ade ad controller: optimize populateActualStateOfWorld
    854347ac818 ad controller populator: check for inUse sync in test
    a85f5879849 Job: Use built-in min function instead of integer package
    140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging
    2076429e434 Enable pod container resources tests on Windows
    19da26005b3 kube-proxy: Fix etp:Local for externalIPs
    81d040d5381 remove import hack about k8s.io/utils/clock/testing
    565ac50bafb Drop testing dependency from shipped binaries
    12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code.
    5164db066cd Drop testing dependency from shipped binaries
    3df90134ca5 add script for restricting import of test only libraries
    1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard
    b8533f79769 kubelet: add metric for the first pod with network latency
    f9ceab37ca3 e2e: pass context into pod helper functions
    4de02f2dec9 kubelet:memorymanager: add metrics e2e tests
    ddd60de3f3a memorymanager:metrics: add metrics
    d6b8a660b08 Fix kubelet panic when allocate resource for pod.
    33aa56097a3 Set the initial length of set[T] in sets.KeySet
    4c06bd5bbb8 fix bad assumptions in gce network tests
    f040d9012cf verify-no-vendor-cycles: set up Go environment
    30dc2f0773c Added Imagefs inodes in default Eviction Hard
    60520b6d4a2 look for the cm after the lb is created
    ae3235aa01b Remove --use-real-proxier support from kubemark
    407b9d96104 remove duplicated check in operator_generator.go
    bd4707ac9a9 fix dns autoscaling test to run with coredns
    4a4940694f4 remove stale comments
    1c0044594dc cleanup todo after feature.BlockVolume gate was removed
    3fb16abfca4 make the decode function respect the timeout context
    fec63d5ea0e fix: use generic set in pkg/util/iptables
    ae24846c487 add comments for switch of syncUnboundClaim
    29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter
    166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0
    abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test
    ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens
    ed8d10f6605 Update sig-auth aliases
    d78a794be22 Remove unnecessary sort in kube-proxy ipvs
    1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests
    b91f07008cc add ut
    c26bb7eb85a update util/sets to use standard package cmp
    a00a610d15c move SidecarContainers featureGate checking to PreFilter
    6cca6e05246 bump kube-dns to v1.22.27
    e48aa093402 Make verify-typecheck.sh only check valid targets for a platform
    090b79f65d7 Update version.sh
    957e9a7f1a0 adc remove redundant check
    a96d21b4b0c Add logs for event handler
    84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook
    624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs
    6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller
    7b60e7e2a31 Added plugins enabled at each extension point
    d96a9858d39 client-go: allow adding indexes after informer starts
    58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller
    fade7463cd4 Add String() to framework status
    083818f9e29 fix wrong condition description in PVC
    e2227a24fbc switch to e2 machine types
    4fa3247a61e use context for lazy evaluation.
    6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file
    8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func
    32db5774a34 Fixed extra lines
    81bf3a59d1c Added mutex locks when accessing file object : addressed review comments
    63b3085f2a8 fix ad controller populators test
    21cf23b4faf Added extra info about default plugins in component config
    0e76e2c2bbf Added mutex locks when accessing file object : lint check fix
    9ed4c58a1f1 Added mutex locks when accessing file object
    e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual
    3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh
    4bba73a2bd9 Add comments to cpu accumulator and minor renames
    ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings
    95f2c859a39 snapshot controller version bump to latest
    48452fef8de kube_codegen: Add a --one-input-api flag
    87d158e4571 kube_codegen: genclient can look in any Go file
    a789a9d44bb kube_codegen: avoid dups in dirs with >1 file
    3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual
    e69a960792e skip deploying csi driver if it is already installed
    e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual
    f53ff68edd1 Generated files
    531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec
    d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils
    47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression
    81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute
    dbb6927ec22 Replace stat syscall with statx
    b20bc79a602 remove not register event code
    6e0ece85c49 cleanup the retrun style for cp execute function
    aa9b2b16968 use generic Set in api
    567fca7baa9 Use copy() instead of a for loop
    61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly.
    76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images
    56c241783e3 fix
    ab1f97bd6ed fix
    c7549fe340d fix(kubectl): delete pod declare no controllor note
    286628b0304 Fix error message for invalid resource reservation
    e40d00cf53a fix: 119921
    ad0b671b56d getPersistentVolume remove reduant deep copy
    12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls
    3579674df2d fix comment of rbac decision for NoOpinion
    c2049c7961b chore: loop optimization
    defe307ec22 chore: io/ioutil deprecated
    e6900f5ead7 Optimize the performance of the Clone method of preFilterState

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-15 19:10:35 +00:00
Bruce Ashfield
2aa6da625d kubernetes: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

The remaining WORDIR references are to a secondary git repository
with artifacts and should be safe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Changqing Li
e9bb0a338f kubernetes: Pass -trimpath to build
Fix following QA WARNING:
WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths]
WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR
WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths]

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-02 18:22:42 +00:00
Changqing Li
b50d4899fa kubernetes: skip textrel QA warning
-buildmode=pie need cgo is enabled, but for kubernetes, some build
targets are static, and cgo is disable in build script directly, refer
[1]. If we add -buildmode=pie by default, will cause these static target
build failed with error "-buildmode=pie requires external (cgo) linking,
but cgo is not enabled".

This warning is acceptable, so just skip it.

[1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-02 17:59:55 +00:00
Bruce Ashfield
417cfa77c5 kubernetes: fix build with go 1.21+
go1.21+ checks the GOTOOLCHAIN variable and will attempt
to validate/fetch the toolchain version requested.

That doesn't work in our environment, so we export the
variable as "local" to indicate that the build should trust
(and use) the local toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
e11497bda2 kubernetes: allow go 1.20 building
Although k8s checks for, and demands, golang 1.21.x, runtime
tests show that golang 1.20.x is properly building and providing
enough for core functionality.

In an effort to see what else may be lurking, we patch out the
check to allow builds with our 1.20.x toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
17eeea68a5 kubernetes: update to 1.29.1
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:

    a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
    bc401b91f27 Release commit for Kubernetes v1.29.1
    5350f0829f5 Revert "Graduate Evented PLEG to Beta"
    5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    0da29848c53 Make OpenAPIGetter tolerant of nil
    865f214fe53 use context for lazy evaluation.
    cde050c4d0b Initialize default attach func regardless of the value of flag
    b055126537b .*: bump golang.org/x/tools to v0.16.1
    05937cba41d add ut
    00045c3c9d6 fix
    b10ad75ab1d fix
    4b8554018c1 fix: 119921
    a5f64b743e4 Address comment
    ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
    37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    40d8e405b8e Use a separate function for checking if device was reconstructed
    d30fda3c68c Add tests for checking of uncertain device paths
    910fa603a25 Fix device uncertain errors on reboot
    62d0bd7260f Fix CSI migration for vSphere volumes
    ce513803ca9 Wire in field dropping for CRDs
    9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
    ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
    3f7a50f3868 Release commit for Kubernetes v1.29.0
    3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
    0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
    a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
    e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
    0ca3089bee6 Bump distroless-iptables to v0.4.2
    1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
    4e5321c92e0 add beta comment for pod replacement policy
    233949e05df Add an integration test to verify root path cleanup
    c769c2db6ed Revert conformance test addition of root paths
    ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
    022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
    71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
    96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
    f730dc39f9d Fix verify target to not update env var if already set
    51daa8cbd5e api: run hack/update-api-spec.sh
    f042994cb03 releng: update publishing bot rules for 1.29
    bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
    ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
    af34f62170c code-generator: fix invalid replace of klog
    d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
    005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
    64f8c6939f8 Replace -E with --setenv for systemd-run parameter
    dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
    c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
    59c63185457 CHANGELOG: Update directory for v1.26.11 release
    bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
    3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
    34e620d18c0 Support score extension function in preemption.
    99f7df3e1c1 improve default_servicecidr_controller startup
    c99b5a208de Check error from gomega
    49e8c196c34 use framework gomega
    8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
    6aa3002ad24 add kubeup label instead of a feature label
    27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
    20853ef1200 Bump distroless-iptables to v0.4.2
    4b1b9a198a6 Fix issue with client rate limiter when polling
    7c5dfceff8a add false matchCondition benchmark
    f9ab24bf485 Refine test case
    617f2132fed e2e: avoid redundant labels in JUnit file
    172f680326a fix: smb file share unavailable issue when it's deleted
    2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
    bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
    2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
    11cdb8fd011 split compile and eval
    fe53db0dbdc authz: add benchmark for webhook authorizer
    475bfa4a633 set LimitedSwap
    819d1903a27 Add support for authorization-config to local-up-cluster
    b53134f129f Test anonymous and RBAC handling via config file
    264cd648246 Run RBAC hook correctly when running from authz config file
    1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
    76277f693d0 create a new KubeUp feature label for tests marked for removal
    9e5b8402bb9 update go.mod
    88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
    e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
    f3dad977040 self nominate aroradaman as sig- proxy-reviewer
    2645b22003d Self nominate Kevin Hannon for reviewer for job controller
    b12db6d9b55 fix test store delete collection function failed
    9d5b2a44762 Fix API comment for the Job ready field
    1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
    6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
    bb315d13392 bump runc to v1.1.10
    f77a4543d13 Unregister events in schedulingGates plugin
    70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
    42a70cdbd16 codegen
    bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
    eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
    5edb27aa382 ratcheting-cel: add optionalOldSelf field
    6b6be38896b test: Fix NodeLogQuery tests
    ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
    ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
    bd6431323a5 ClusterTrustBundle projection: e2e test
    96e610ac188 ClusterTrustBundle: Enforce max size during validation
    1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
    e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
    599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
    ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
    0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
    2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
    e5bba37f20a apiserver: promote flowcontrol tests to conformance
    9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
    60338c79d77 KCCM: fix slow node sync + service update
    a8673fa5b4a KCCM: add test validating slow node sync issue
    b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
    2259ac2444f pause: add --provenance=false during etcd multi-arch build
    50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
    5bf63036c7f Make EnablePodSchedulingReadiness public
    0112d91a056 Add multi-webhook integration test
    b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
    34b2c4e1ed0 framework: add SSH support for Azure
    44d89c8cf8c Include empty string attributes for CEL authz evaluation
    2e2f51a4417 Plumb failure policy from config to webhook construction
    0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
    a000af25ff3 Require match condition version only if matchConditions are specified
    baebc376ff8 missed a few summary upper limits for major page faults
    3c268b75244 etcd: Update to version 3.5.10
    4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
    ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
    2d9128116b6 Use golang library instead of mklink
    85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
    cda349cda49 Make service-cidrs-controller role feature-gated
    26923b91e8c implementation of split disk kep
    003e4886c6f Fix parameter passing error
    18adc309337 refactor: rename TransitionRule to UsesOldSelf
    b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
    338fe7ad55c e2e framework: validate test definitions
    f2cfbf44b1f e2e: use framework labels
    248100ce6df golangci-lint: tone down comment checking
    ecb32a3e29c increase bounded limits for major page faults
    ceaacc88f0d add --provenance=false during etcd multi-arch build
    833156b77e2 e2e: define environment
    4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
    878d037d3ba dependencies: klog v2.110.1
    bc1df9e7dab bump to newest etcd: v3.5.10
    38905462656 Update APIs and adjust tests
    77f4178c98a Promote CSINodeExpandSecret to GA
    252e1d2dfee Imagepull per runtime class alpha release changes
    0993bb78efe Redo service dispatch with maps
    9d71513ac1e Redo no-endpoint handling with maps
    4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
    edaa1d735b8 Redo --nodeport-addresses handling with a set
    ef1347b06db Port NAT rules to nftables (and backend is now functional)
    0c5c620b4f2 Port filter rules to nftables
    6cff4153057 Port service/endpoint chain creation/cleanup to nftables
    2735ad541e2 Port table setup/cleanup code to nftables
    bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
    93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
    abb1a458a95 Create an nftables.Interface in nftables proxier
    1a530457f90 Drop unit tests of iptables-specific unit test helpers
    958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
    3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
    96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
    6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
    ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
    5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
    1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
    e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
    39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
    cac26737cd4 apiserver: add conformance tests for flowcontrol API
    a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
    ce5a22d54c1 hack/update-codegen
    3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
    fee07ad6080 make update with the new API with arrays
    9917c727a1e test e2e: use new ServiceCIDR API
    5d90d07f2d2 test integration: use new ServiceCIDR API
    271900a0f05 integration etcd data: use new ServiceCIDR API
    3edcce52e3c service cidr controller manager: use new ServiceCIDR API
    016c3c9e363 repairip controller: use new ServiceCIDR API
    881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
    7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
    513fdb54229 describer: use new ServiceCIDR API
    5123a93b342 printers: use new ServiceCIDR API
    c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
    599597ca65a fix race on ServiceCIDR deletion
    e3a0df26a86 remove flag cidr max size validation if gate enable
    8182c4d9ec8 make update
    cb509b01f31 e2e for ServiceCIDRs
    46b13d48e20 etcd data
    ccbcadb0324 add integration test
    4ff80864e1c service cidr controller manager
    164276175fb plumb the new multicidr clusterip allocator
    65e69389463 make repair loop multi service cidr aware
    63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
    d3386e171a2 add iptree radix tree util
    3b450378e07 bootstrap controller for default ServiceCIDR
    55a35bebee9 API printers
    7e77e8b21d1 kubectl describe
    2feb1503e29 Add ServiceCIDR to the REST Registry
    391b25197b8 add apis to apiserver storage
    632081a9078 add ServiceCIDR APIs
    16363b6fb4a fix IPAddress.Name validation message
    df80775693f Include managed field comparison in test
    cc190e0ace1 add integration tests
    26e3a03d12d Implement CEL and wire it with OIDC authenticator
    e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
    7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
    8b9fc325e28 Update to new cadvisor v0.48.1
    e4776e0f85b avoid infinite recursion for type resolvers.
    fba2d2fadc1 Move invocation to not to cause ginkgo panic
    eb32969ab8f Lazy load OpenAPIV2
    f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
    e7216c66230 use OpenAPIV3 for kubectl diff
    4f3b0b15182 Use OpenAPI V3 for client side SMP
    6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
    168e016947c Benchmark job with backoff limit per index
    6ac7da1da87 encryptionconfig/controller: run unit tests faster
    c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
    c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
    98a2f22e740 Revert "Make the decode function respect the timeout context"
    c7fcef18756 apiserver: set APF featuregate to ga
    8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
    b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
    31c76e9abb2 authz: add cel expression to webhook matchconditions
    56ab6c59421 generated changes
    ae90a696772 volumeattributesclass and core api changes
    c4aab1036f6 Add sig OWNERS to registry packages
    1daf1b0705f test that controller descriptors should not be feature gated
    fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
    5b268e6daf5 apply: Add test for duplicates in associative lists
    9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
    dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
    b8cd792b368 rename the roundtrip annotation, forbid it in v1
    76463e21d4d KEP-4193: bound service account token improvements
    a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
    70c1f2143fc Bump cel-go to v0.17.7
    d3de47ceeed chore: updates api doc
    2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    080fe8346da Fix typos in interface comments
    e95b7c6d8b8 feat: updates encryption config file watch logic to polling
    6d59480a70f Try a single gcloud command for scp-ing all files
    bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    f78b367db63 Make the decode function respect the timeout context
    79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
    ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
    233bc2449d9 apiserver: fix apf enablement with runtime-config
    acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
    25447b95ad2 apiserver: add testdata for flowcontrol v1
    730d10a8fb9 apiserver: add generated files for flowcontrol api change
    9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
    430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
    90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
    17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
    25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
    5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
    03a9ad200d7 apiserver: remove copied generated files
    b24dd44904e apiserver: enable apf v1 API
    5cb03064d95 apiserver: update copy, rename v1beta3 to v1
    dc723080939 apiserver: copy apf v1beta3 to v1
    05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
    5a20ff16173 fix wrong controller name for ephemeralController
    afc6c03ba74 Pass through static overrides in addtion to cgo overrides
    feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
    3a308140cd5 Fix e2e
    2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
    070e7a38cb6 generic set
    36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
    9a8ccdebc5a use sysctl utils to do pod spec validation
    11de9543ee7 move sysctl namespace and some funcs to component helpers util
    4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
    6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    04b21126e58 Add cel new validator into Kubernetes.
    9ae77364e95 pkg/proxy: configure tcp-be-liberal
    a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
    c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
    4bb7dc224c5 metrics: publish metrics from ratcheting across a request
    e50cc47a068 Improve execution time for job e2e tests
    8c72be3b74e ratcheting: add benchmark
    7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
    c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
    3f8e6d6f77f etcd: Build image 3.5.10
    a73725d7999 Promote SidecarContainers feature to beta
    1591a0e132c add unit tests for NewControllerDescriptors
    44cac266673 move start controller pre- and post- checks/actions out of StartControllers
    b7689672802 move aliases into each registrable controller
    a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
    27a77e0ef3c Encapsulate KCM controllers with their metadata
    77dfd63d1db fix volume conformance e2e test break other test
    77e0adeb31d KEP-127: Update PSS based on feature gate
    b0491d71bd5 Support skipping pulling addons image.
    760abc2a821 bump gomega to 1.29.0
    5925dc07758 LegacyServiceAccountTokenCleanUp beta
    69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
    a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
    9f06eb4ca2a don't run these tests on aws
    e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
    af14f97cba7 sample device plugin: fix incorrect Errorf invocation
    fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
    b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
    fd132665a8a extend VAP status controller for extensions type checking.
    3f73cdcf2ad extend SchemaResolver for more types of schemas.
    38fecc8319d opportunistically attempt to refresh RESTMapper
    05cd3e66ef5 simplified e2e test for CRD typechecking.
    60a602f1701 gce: fix test for non-existing instance in cloud
    4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
    84faaf4427f Prevent sampledeviceplugin binary commit
    7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
    110ffa13b7d Delete binary file
    e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
    27f6fb2fa7e hack/tools: golangci-lint v1.55.1
    6302f011211 e2e node: fix broken assertion
    d0a5cd16da8 e2e upgrades: fix broken assertion
    fb872e86384 test: fix storage status update test
    53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
    071a67d8c29 export time function
    9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
    c6b42c8a72f Make e2e node image ID test more flexible
    517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
    837090135f8 kubeadm: make super-admin.conf changes to app/cmd
    30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
    d0328df04e0 add time tracking to CorrelatedObject
    1165609036c Add metric for e2e pod startup latency including image pull
    702d911e226 working-config-otel
    e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
    f71040f620e Remove the usage of feature gate
    0ac35fe44f4 Update security contacts for sig-cli
    8d3a25c7c98 [KMSv2] Add tracing
    c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
    f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
    e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
    2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
    27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
    2a8982b27b8 Remove problematic Dbus restart test
    39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
    3738111337e Add unit tests
    08b942028f9 DRA: call plugins for claims even if exist in cache
    69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
    98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
    e511edf11f7 Fix SELinux unit tests
    2f5903b4cf4 Move SELinux warning metric to be counted once per pod
    d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
    a92c1269e25 test: fixes hot reload flake
    71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
    83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
    8e0be64b8ff remove data race on the devicemanager client plugin
    aeceec72bbd add integration tests
    97e72d792cc Remove independent tests for metrics
    84cd6dbb0aa use the latest semver version for the badge
    b3525946d5e ratcheting: provide a shared correlated object
    dfeab6eca8c fetch a shared correlated object off the validation options if it exists
    0a19b5ab6e2 fix usage
    432e8937cfb add variadic options to ValidateUpdate
    9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
    055e926a924 e2e: Increases the memory limit for downward API tests
    88c0a8be1bd feat: add job_pods_creation_total metric
    b1ce529b2ac Remove unnecessary GetIndexer
    1224e0e881d Add PodHostIPs test
    f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
    12a972cc1e6 Promote KEP-2681 to beta in 1.29
    2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
    bd8ac8c7fac kube-scheduler: checked err for golangci-lint
    b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
    bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
    bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
    16b3acc27a1 cleanup UnknownCRISocket for unit tests
    71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
    20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
    b06675724d6 Add e2e test for backoffLimitPerIndex
    4b59d2b05c0 kube-proxy: Optionally do privileged configs only
    35f4d29d735 Fix unit test
    b052c7b7cdf Update npd version to 0.8.13 in configure.sh
    a6f5246565b integration test for empty & unstructured.
    168998e87bf StreamTranslator and FallbackExecutor for WebSockets
    c6b3a2f477c allow empty object to be CEL value.
    8ae0d390d77 add container filesystem to CRI api
    93951bc00d3 Add stability tests for CEL cost estimation.
    d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
    6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
    27afb7d75d2 e2e storage: use framework to tag tests
    8a42be978bf Add CDI support to the sample device plugin
    d9131d5b390 [KMSv2] Drop the apimachinery
    6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
    55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
    fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
    e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
    e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
    074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
    b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
    d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
    fb6b10997a7 cleanup: remove useless test
    3f4d3b67682 Cleanup paging parameters in etcd3 store
    2dbd4055834 Graduate ReadWriteOncePod to GA
    42945ea6dc8 update suspend test to match other test cases
    49c947ba15a metrics: add and use ImageGarbageCollectedTotal
    d8a5cd59c08 kubelet/images: add unit test for MaxAge
    914aa746c18 kubelet/images: add and use freeOldImages function
    76e623098c8 kubelet config validation: add validation for image max gc age
    d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
    9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
    34294cd67f2 locking feature-gate for ready pods job status
    b386120da23 Remove storageConfig.Paging parameter
    106f58686d5 Remove disablePaging param
    b0d04d933be Introduce the job_finished_indexes_total metric
    6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
    a913abe191b e2e test for checking ready of job status
    fb0ffb07a76 kubeadm coredns use drop ALL instead of all
    81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
    a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
    4f5bc7e8d76 fix based on reviews
    82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
    eb3a11ea142 registry/core: wire NotFound getter instead of nil
    cbe3d897629 Promote CRD validation rule to stable
    fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
    32fdb551920 Use Patch instead of SSA for Pod Disruption condition
    a7adde53be4 bump golang.org/grpc to v1.56.3
    a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
    441d2b40dfd Undeprecated kubelet cloud-provider flag
    4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
    cf836309dc2 Add validation for --storage-media-type option.
    8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
    1a41ed394d6 convert pointer to ptr for sig-apps integration tests
    27bb40a9d83 Remove GAed feature gates OpenAPIV3
    c5e25637c64 fix typo
    a25b87d84a3 e2e apimachinery: use feature gate
    ceba3be6b58 e2e: add more feature definitions
    9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
    00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
    cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
    6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
    8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
    259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
    3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
    aee73352853 add new test cases
    220d5c2e543 remove dead code in test
    79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
    8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
    0a6d9531f40 update generated code and openapi
    4d21a23be35 pin openapi
    31a1c00e49c cleanup: move unstructured check earlier in status update
    d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
    cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
    ced56a6adab Restrict supported media types for new apiservers.
    f5cb2ada944 k8s.io/kms: drop direct dependency on klog
    db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
    6c4f71b31ce Fix spelling
    02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
    9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
    b7477c31b03 update versioned types
    4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
    d7556769e7f Job: Replace deprecated wait functions with supported one
    1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
    989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
    d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
    2508f468a8f kubelet/userns: Add more unit tests
    0dd495e6dc2 Address review comments
    7ff866463af Refactor watch event serialization to allow caching
    0cda42af7ab Unregister group path from apiserver when the group no longer exists
    a50d83c669e Add basic authz config integration test
    22e5a806a73 Add --authorization-config flag to apiserver
    75f20ee64da update pretty param description
    e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
    7bcc98c46b9 sidecars: terminate sidecars after main containers
    c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
    201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
    7a1ac18bc84 Fix panic if there are more terminating pods than active pods
    fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
    007ef653ad0 add feature gates for authorization config
    2ccf7e8e49b fix: minor lint issues and redundant check
    056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
    bf32f87d00e skip CEL validations for enum violation.
    e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
    bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
    72e67e0ef0d kubeapiserver/options: fix cloud provider validation
    911700e64e3 Fix typos in markdown
    2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
    b500c3d6930 Correct the label selector used in TestSampleAPIServer
    c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
    7d077f9271e e2e: move AllNodesReady check to DeferCleanup
    ca6fda05ce5 Restart containers in right order after the podSandboxChanged
    75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
    e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
    9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
    d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
    f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
    211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
    c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
    6714e678d33 node: sample-dp: register by default and re-register on restarts
    465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
    d2b803246af Don't reuse the device allocated to the restartable init container
    a45a813d5e3 kubeadm: fix "eliptic" typo in API package
    fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
    1715fc0ca06 Fix issue in enabling evented pleg feature gate
    defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
    5d5958e3389 fix ImageLocality plugin score is inconsistent
    76059738a4f update standard protocols to match KEP3726
    4ae7150f05d remove pc pvc status endpoints
    757597fabfa track unmaintained repo - mailru/easyjson
    2e8f66afb39 Promote PV/PVC status e2e test to Conformance
    28f335a3397 kubelet/images: refactor image gc unit tests
    e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
    d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
    56023e00cbc cri-api: compress OWNERS files
    f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
    e3098225eaf bump kube-openapi
    b30c6bdff81 Fix v3 spec
    d1a6c0ae7df Update cri-api change in v1.29.0
    2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
    5d0f8530f6b fix Huge Pages failing test
    7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
    dd9c3358f5e Revert "podresources: e2e: force eager connection"
    27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
    5c0618b848d codegen
    011c65e17e2 configure npd to run as daemonset on cos
    39dcad8a19e Populate CRI filesystem info error
    bfda244e54e pkg/proxy: dual stack health checker
    73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
    f69e1fed82f Remove GAed feature gates TopologyManager
    957adfac498 fix invalid log calls
    8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
    fed4f16a7ad Remove GAed feature gates SeccompDefault
    33f2d487e2d Promote KEP-2681 to beta in 1.29
    18c3b6fce43 Register metrics for apiserver handlers
    56836608303 remove deprecated framework.ExpectNotEqual for node
    b548bbb8cf8 When reading pvc status allow bound to be a valid value
    11b0eed9e7f Work around bug in gcloud when downloading logs
    1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
    4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
    6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
    332779a3b29 add a simple e2e test
    3a96afdfefd implementation
    fa01dfdb0a4 validation
    0f46033dca2 fixed miscalled function
    9327f3a1734 api changes
    c2d473f0d43 remove ClusterCIDR
    32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
    c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
    fb1fc8b4a72 ratcheting: disable correlation by index
    d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
    0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
    60c90fc0854 cleanup: consistently support nil receiver and document
    abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
    ddcbae734af Add a 0 × 0 case
    fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
    26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
    e1fa1df3ae8 cleanup: consistent interface{} and any
    0495616230a cleanup: add godoc
    4de3e73b8ac Add test cases for mostPositive and mostNegative
    685ae024332 Add more unit tests
    79325b6178d Multiply by a scalar
    4381eb7237e quantity: Add multiplication methods
    1ae54296291 add potential fixes for flakiness in eviction tests
    db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
    b0c7956a869 Bump distroless-iptables to v0.4.1
    a34d2f3b134 fix limitrange flaky test
    10151a5e38f kubelet/sysctl: update log level
    cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
    4dedabf2a65 test: fix boilerplate
    80e378181ea add rundir folder to gitignore
    800a8eaba7f Prevent rapid reset http2 DOS on API server
    968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
    78ffa882be2 chore: updates api doc
    de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
    761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
    b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
    c94240e2e2e move kubelet constant for podreadytostart to staging
    1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
    de01788deaa Switch to newer cos-gpu-installer - v2.1.9
    adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
    7b1d87383ec add kubelet policy skew test for kubeadm
    5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
    0149c1f8b31 test: few more correlatedobject test cases
    ba9347230e6 test: add correlatedobject test cases
    15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
    c08a9321eed cleanup: add header and fix spelling
    27cb869e559 refactor: move correlatedObject to its own file
    b321e8bf0db refactor: make CachedDeepEqual independent of validation
    921c0d01800 cleanup: add defaulting for job manual selector (#120206)
    c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
    baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
    ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
    555c1b8091c bump kube-openapi
    83760ae56c8 update openapi with required requestBody
    5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
    a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
    7989400bef5 Fix concurrent write when filling PVC labels
    54714686bc6 Modify test PVC to detect concurrent map write bug
    d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
    2c1836bc245 remove deprecated framework.ExpectEqual
    990a46f9bde Update QueueingHInt's KEP
    b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
    0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
    babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
    4acaf9ebed7 Add service name tests
    438c0daab75 add rest of accessors to common.Schema
    0f989046d06 kube-apiserver: move cloud provider validation into options
    5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
    80269d5d349 fix missing http.target trace attribute
    dc334b953d9 dependencies: update otel-go dependencies
    e76aad1813b refactor: use common.Schema in CorrelatedObject
    83a1dbf885d refactor: export correlated fields
    e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
    fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
    2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
    471e3ab8281 refactor: factor out object correlation
    30cf9ed5677 refactor: directly implement ValueValidator
    4fb5f1a6119 refactor: remove unnecessary lambda (noop)
    19ecf93ec3d e2e: define features and node features
    f2d34426f86 e2e: enhance SIGDescribe
    39b6916cbcc e2e: add wrapper functions to annotate tests
    535ab743461 e2e framework: track and report internal bugs
    3afdcc03ea5 e2e framework: list specs and labels
    aa4d2fc5edf e2e storage: remove useless info message
    581af9ba6da kube-apiserver: use only one client in apiserver controllers
    215c4627ef9 Update SECURITY_CONTACTS
    e9957d79aae make update
    0eacff0baf9 compatibility (adapt testdata)
    b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
    f538be659c7 hack: fix update of golangci-lint verify scripts
    6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
    00ae26cda8f Create e2e test for PV/PVC status endpoints
    b190ea0c966 hack: update golangci-lint verify scripts
    302d350e88e set maxLength to longest enum.
    d4a5a085a84 Improve error message in cpu assignment logic
    79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
    52c58d970e5 fix data race in apf unit test
    a6b0a6c484d Bump distroless-iptables to v0.3.3
    f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
    e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
    0be5fdb5ced Add volume plugin label to SELinux metrics
    137ad9bf2b5 clean up deprecated funcs in e2e framework
    d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
    5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    122ff5a212a Move grpc rate limitter from podresource folder
    9cca527c4b3 Migrated  `pkg/scheduler/framework/plugins/examples/` to use contextual logging
    62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
    ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
    c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
    bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
    7cba35f6519 nodeports: scheduler queueing hints
    20db4ef3d64 kubeadm: fix wrong ut for util/etcd
    4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
    3c4512c6ccc hpa: always update status metrics when updating the replica count
    89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    3ee2f27e5bb kubelet: cloud-provider external addresses
    619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
    8b5f30ef096 Don't reuse CPU set of a restartable init container
    e8e22f645d0 kubeadm: Optimize the logic to override the arguments
    8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
    a888fef242f Use timeout function to detect transient errors
    1b489963c8d Add nil checks for hpa object target type values
    0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
    3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
    a213edae2a6 Add package-level godoc to pkg/kubelet/cm
    b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    b96a074bcdf convert pointer to ptr for job controller
    1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
    914210ee9a6 revert back to IsUnexpectedCloseError check
    e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
    c03579bfa40 typed variables support.
    4d157bb1427 add single boolean to composition e2e test.
    69a3e3d1089 Add --extra-peer in conversion in kube_codegen
    3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
    4b391501795 reflector: fallback to the previous mode on any error
    11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
    5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
    9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
    c65fe450d8a Generated files
    26f113be2fc reflector: close an established watcher when the StopCh was closed
    f17468ff060 Fixs a validation error in teh admission registration API
    6d759aac910 delete addon-manager test
    e7b2aeee930 Fix API docs for audit APIs
    38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
    243ba5fb6b6 remove an e2e test specific to kubeup clusters
    98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
    566fad5eda3 add metrics to the ipallocator repair loop
    4eff70dcf9f add metrics to the nodeport allocator repair loop
    6c9ddf300cf update generated
    9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
    44cb330aa00 Improve kube-proxy config / CLI documentation
    0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
    d2a3184c47c remove pkg/encrypt and pkg/value in kms
    e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
    2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
    74180aaf661 Fix scalability concerns in test runs
    5ebde41efb5 Refactoring variable declaration and value setting
    0e8a1f18163 e2e: remove redundant spaces in test names
    6200eb04aff use generic sets in scheduler
    e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
    d9002176649 fix missed branch - targets when building using arm64
    61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    7437ad2617a Add/update prechecks to verify-govulncheck.sh
    59ad81a6157 controller/clusterauthenticationtrust: complete event filter
    a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
    63950491764 controlplane: make option structs uniformly optional
    a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
    5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
    27a68aee3a4 k8s.io/client-go/tools: support context for event recording
    772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
    4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
    394bcaf1820 Only configure swap if available on node
    2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
    de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
    19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
    ff5f5bc1613 Merge several NodePort tests into TestNodePorts
    f38231d5687 Merge all the "reject when no endpoints" tests together
    2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
    ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
    2172ea60836 Fix typos: update Enpoint to Endpoint
    6297067ff1a apf: request ejected from queue should use reason 'time-out'
    11ef9514dad apf: remove RequestWaitLimit from queueset config
    da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
    f39213a7e44 apf: use context for queue wait
    52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
    9b32d2f67d4 Default clientset_pkg and clientset_name variables
    36146ad686a e2e dra: enhance test driver
    46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
    cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
    0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
    2ce4f85a465 update verify script to check deprecated fields
    e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
    70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
    e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
    4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
    ca562fd280a storage/etcd: the watcher supports the API streaming
    84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
    1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
    1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
    72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
    b71d7f9305c use generic Set in scheduler
    7c5219438df Remove an old compatibility check/warning
    5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
    1b602ffd9a4 Bump Konnectivity to 0.28.0
    06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
    0910fe4b983 Extend iptables packet tracer to check the protocol
    a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
    0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
    4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
    d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
    43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
    a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
    534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
    0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
    9345da51ac4 fix comment mistake, run "make update"
    45a776d5ff4 update rules to switch from deprecated dir field
    9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
    5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
    b489beb365f Remove an old compatibility check/warning
    eb109e39480 e2e: bootstrap vsphere tests earlier
    d3d1827c054 Use local isCgroup2UnifiedMode consistently
    8a31bb6786c workqueue unit tests to assert collapsing behaviors
    dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
    b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
    d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
    0786fcc941b kubeadm: Remove the support of configurable component configs
    3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
    0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
    ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
    e00551fe5d4 Allow storage migration of CTB without attest authorization
    c816601d834 reintroduce resourcequota.NewMonitor
    7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
    f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
    a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
    41584bde233 fix code style
    de244b2678f Promote StorageClass e2e test to Conformance
    b23575d0fcf remove storageclass endpoints
    a62eb45ae2b Rename job reasons to JobReasons as part of api review
    301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
    5341890c96f add missing labels to kube-dns deployment
    9e060590e6f skip kube-dns tests if kube-dns is missing
    2a827767458 change rolling update logic to exclude sunsetting nodes
    04668c00432 cache/reflector: check the value of the initial-events-end annotation
    83c37acb21f e2e framework: adapt unit test to Go 1.22
    5c28fd28478 vsphere: adapt to govmomi bump
    4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
    26a395ecc28 Trigger CI
    12c0c08e658 fix data race in test
    9533cfe2eed fix: add unit test
    bad0593a686 fix kubelet image gc
    91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
    272b23cc7ad kubelet: fix log when using --reserved-cpus
    42356bfbb3e move common logic of highestSupportedVersion to util package
    fc6b19a4ba6 .: bump govmomi to v0.30.6
    afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
    3a96baf3fa8 storage/testing/utils: add helper functions
    c8b9d64d81f scheduler test: unify util to fake pod.
    b953708fa93 Update 1.29 Release Notes team
    a919079ff31 Check --show-events in kubectl describe pvc (#120380)
    1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
    108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
    52c582ca77c Bootstrap API Types for Structured Authorization Configuration
    bbb905c794c remove gce healthcheck interval e2e lb test
    b59d4afd14e fix typo exeucting => executing
    62275e3cc8c fix typo dervied => derived
    79a7833ade0 fix typo Mininum => Minimum
    6e3ebdc68e7 fix typo Conext => Context
    409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
    b4e5b868a8e Don't reuse memory of a restartable init container
    10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
    6c59e8be5e2 hack/update-vendor.sh
    dad1b2a4306 Fixup kube-openapi/pkg/cached changes
    e1ffbacb7ae go.mod
    7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
    39af594f312 storage/testing: a simple refactor
    40618b765cc add loging and bump timers to avoid races
    3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
    79d0dde4a83 replace hardcode string with exists variable
    9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
    62267518b83 Fix systemd unit string matchs
    c6e9fba79b8 move reasons to api package for job controller
    e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
    0288367db80 test-e2e: Retrigger the RBD image post merge job
    28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
    2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
    2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
    7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
    309876b5d78 CHANGELOG: Update directory for v1.28.2 release
    710dceded51 Look for pods in ownerReferences of PVC (#120427)
    80c8074e3be service controller: limit logging node names to 50.
    349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
    21e26486ac3 sync Service API status rest storage
    239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
    7fc11f47ff4 Mark a volume as uncertain-attached after detach error
    99903071469 kube-scheduler: drop deprecated pointer package
    9e34aa306cd Update hack/verify-govulncheck.sh
    5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
    af151eeba2c specifically check that the pod was successful
    7710128636a kms: remove livez check
    15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
    4f20a72ea00 variable name should not conflit with import package, replace the variable name
    084deb7a7cf clarify the description of the metric apiserver_storage_objects
    9da533ced6f API Chunking conformance metadata
    3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
    4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
    819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
    6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
    868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
    6b4ab616a2c Increase range of job_sync_duration_seconds
    d765e40a988 pass GOTOOLCHAIN to build containers
    7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
    43b434f66a8 sig-node: add rphillips to reviewers
    d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
    4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
    09d64ed7d4f promote sli metrics to stable
    0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
    0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
    e6435e98eda promote component SLIs to GA; remove feature gates for component slis
    e2c1c0d34a6 kubeadm: drop deprecated pointer package
    357d7804b8f kube-proxy: drop deprecated pointer package
    678b958567e use universal decoder and add a check on default dns Policy of static pod for test
    1fb4eee94e0 Use container log instead of termination log
    190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
    fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
    6f9140e421c DRA scheduler: stop allocating before deallocation
    2dd7db306a6 Update modules.txt
    61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
    d3eb082568c Create a node startup latency tracker
    2d86c333f57 add test case for generating etcd manifests
    912041ce41b kubeadm: fix diff order and add test for new default value manifest
    41b62c4dd71 Promote PV/PVC e2e test to Conformance
    0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
    f4467457776 Improve logging on kube-proxy exit
    df5c1bb1ea1 added documentation about the format of certificateKey
    43ccf6c4e8f kmsv2: add apiserver identity to metrics
    c1a0aa08e31 Add cni plugin auto Arch and OS selection
    b443a841e30 kubeadm: add log for static pod manifest diff
    f135eed37b9 update codegen
    d7264d0af03 Make StatefulSet restart pods with phase Succeeded
    4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
    7e4b5d0d49a Final Fix
    f499b4f8918 Bump distroless-iptables to v0.3.2
    18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
    93e3b07e11c [cluster/gce] Add KCM specific args
    48f453d6498 cloud-provider: Log additional options
    aa89e6dc978 Use ptr.To to retrieve intstr addresses
    9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
    5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
    3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
    a0a8765027a fix: update thirdpartyresources refs
    5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
    43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
    a69f56e1375 fix: check if initsystem service exists
    7dea3d6c3bf New mock test framework for windows kubeproxy.
    975da2fb239 fix typo in client-go package
    3a1a67e33d7 add aojea as controplane reviewer
    cc77b97c5e9 add aojea as client-go approver
    7a13b11af0e update e2e import restrictions
    6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
    08006c842fd apiserver: rename request body size metric
    8451c80b601 pin gengo
    93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
    98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
    dbd3eb54191 remove logcheck.yaml
    f365cae9ee6 Fix typo in api.proto
    2d1877c97b6 fix breaking pv creation when the validation webhook exists
    f33265cf5d0 HandleRetry has already called in the GetObject
    fc51a27c036 fix typecast missing
    2ea47038b90 podresources: e2e: force eager connection
    6cd446a2064 Add cloud library to unwanted deps
    9f76d8d45a0 Track vendor status of unwanted deps
    87d49a51bed fix(queue_test): make sure the first bind failure via counter
    94afd6e3a4d skip the reason check for OOM tests if it will fail
    f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
    d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
    b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
    c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
    36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
    9c1df5ff0af move back to bullseye
    67858e1ff06 Bump images, dependencies and versions to go 1.21.0
    0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
    c682d2b8c59 scheduler: add ResourceClass events
    2ad4304e8f2 Add Windows support for IPPVS
    15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    43fc6b5bdb0 Added suggests changes
    355ae44a3ca Revert "bump npd to v0.8.14"
    e7ee3ae3d94 Create e2e test for StorageClass endpoints
    418af0f4dcb register API types only once for encryption config
    2144852f7c9 Commits merged
    657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
    b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
    c131c92b9f3 scheduler: unit test case for concurrent event with other pod
    a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
    0024c7e1668 Changed the generator codes for kubernetes metrics table
    cd943dd95e3 scheduler: fix tracking of concurrent events
    933bcc123b4 only drop invalid cstate packets if non liberal
    7c75b018d57 cmd/kube-apiserver: add .import-restrictions
    43783aeb18c drop release-1.24 rules from publishing-bot
    e190e179b3c Document `cluster/gce/gci/mounter` as static binary
    059e8353b76 check labels/annotations in the beginning
    6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
    a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
    e8564d6c5bc KEP-3895: Promote interactive delete to beta
    14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
    ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
    b35357b6c08 cleanup: omit comparison with bool constants
    622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
    7c33b78418c  remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
    9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
    fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
    e6dfdb240fd Output the error message for better analylsis
    ff3cb43c300 remove labeld-deployment.yaml
    cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
    c74d045c4b7 scheduler_perf: show name of one pending pod in error message
    3c2cfd9a4fd resource claim controller: separate generated suffix from base
    2c5a11a55bf Match on cri-o socket suffix only
    214772c1104 dependencies: update opencontainers/selinux to v1.11.0
    95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
    3f8f14397e1 Set external credential provider to true by default in kube-up.sh
    410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
    45b9b0df41f Add namespace to apiserver tracing
    c83eb6dcaaa Add subresource to apiserver tracing
    bcb59a03ebb Add name to apiserver tracing
    646053d73db Add api-version to apiserver tracing
    8c34208a62f Add group to apiserver tracing
    6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
    ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
    2e5f17166b9 pkg/proxy: fix stale detection logic
    95121fe846f kmsv2: add legacy data integration test
    42e8cfa28ac fix failing metadata test
    cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
    8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
    0fb1f59a881 Improve service unit test failure report
    39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
    36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
    3e252857c1c Add unwanted cloud deps to track
    875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
    6058540f3d0 storage: document ProgressNotify from storage.ListOptions
    f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
    936d67f6888 Update distroless-iptables image version to v0.3.1
    bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
    a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
    bfc3c2110fc e2e-node: fix TopologyManager test jobs.
    3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
    f1051f34a79 Remove deprecated framework
    062c57ae92f dra controller helper: make allocation error message more readable
    f96e23e477d dra controller helper: merge log entries for informer events
    78f3b76390b scheduler_perf: use different log names for different DRA drivers
    d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
    fcff9969095 adjust error message a bit
    889c8e919bd New repo who dis? distribution/reference
    741f1461571 Revert to json-patch 4.12.0
    b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
    8f6a79b29fa use external cloud provider by default with gce
    903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
    a46bab69308 Fix a job quota related deadlock (#119776)
    696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    63177db32c2 Add an e2e test for the pod sandbox changed scenario
    e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
    3c5a58c5f89 Refactor checkErr func
    f22d8540723 unwanted-dependendencies: updating references, and `jq`
    0323fe42e23 adding more callbacks in kubedrain helper
    e01bd641447 Avoid creating local variables that don't change
    10553a19668 Flatten switch case
    1f4f2a5d601 Refactor common WithRange case
    ede524e1a6a fix a pidpressure test flake
    3bc6ee6fef7 unwanted-dependencies: sort this list
    eb5695b0c5c unwanted-dependencies: adding archived repos
    15c02f2a034 add integration tests
    9e1ff1e5120 add loading config and wire feature flag
    57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
    160589a0edb Refactor transformers for watch to implement Encoder interface
    04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
    46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
    bf41b0462cc Fix OpenAPI aggregation cleanup
    16a7b536022 Fix typos in comments
    2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
    be4692864bb Remove duplicated returnRV variable
    2e174a029f5 Add timeout to listContainerStats context
    2825519da2c apf: remove v1alpha1 API
    a926f594da9 Bump runc to v1.1.9
    7b44d73f73f bump npd to v0.8.14
    879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
    53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
    8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
    209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
    41adc93ca3a remove GAed FG DownwardAPIHugePages
    e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
    7e7b67f2ccd remove GAed FG GRPCContainerProbe
    af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
    5dbec5c715b local debugging should utilize the same defaults as prod
    d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
    8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
    f5d6c65186d paginate initial list inside the storage watcher
    8d9517318a4 Extend npd e2e timeout to fix npd e2e error
    618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
    b2c0d80c37f Test watch converter encoder
    03126c54658 add comment
    651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
    709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
    3fcc045bce9 Minor cleanup tranformers interface
    172a41192c6 Cleanup setting non-nil Items field
    5269e769902 scheduler: properly skip DRA events
    1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
    580f83ab4a5 Avoid duplicated dots in pod condition
    855b445d28d Remove deprecated selectorSpread
    c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
    87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
    0ea6522807d apiextensions-apiserver: generate applyconfigurations
    dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
    9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
    94d03ccc83b Squashed commit of the following:
    030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
    cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
    3d583398fe2 Avoid to build the error msg for twice
    484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
    f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
    05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
    eb0afbc7d01 kubeadm: update swap warning for v1.28 change
    fa37bebcd4b Add comment about why AttachFunc be overridable
    d680bc540b5 fix(test): fix error handling condition in test
    01df59a73b9 pkg/proxy: remove equal method from endpoint interface
    6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
    e9be1d7438b Test now has coverage!
    628bbb9ef8a kubeadm: add supported etcd version for v1.29
    dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
    78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
    e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
    1bf90f9484c add StructuredAuthenticationConfiguration feature flag
    1bad3cbbf59 wiring existing oidc flags with internal API struct
    f909eb630ca add AuthenticationConfiguration v1alpha1 api
    ff56d3b6914 Refactor WatchServer to prepare for using encoders
    a4ce32769ff fix pod delete log in deployment controller
    0bc0256093b Update job_controller_test.go
    ff10df107a4 remove fake deployment
    13a8ad12b82 apiserver: fix data race in etcd metrics
    dec1c361255 add kubectl rollout e2e test
    22f4b1c56ad Static check fix
    70e2deb32f9 Fixing lint problem
    6ded53ce4dc Added back test changes
    5fb049ff473 Added create job & cleanup
    ff1659cb798 Added syncjob
    f87cc43cdb0 Review Changes
    d08fc3a4d01 Another one creeped in
    ef6a0eb6d85 Final Lint Fix
    aa9f38c36d8 More Lint Fixes
    601679446ae Lint fixes
    cf32ae9453b Initial Commit
    297f04b74ae Added function to remove finalizers as backup
    1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
    5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
    c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
    47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
    ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
    02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
    13b52a18483 fix crd finalizer validation
    ab018481342 Make sure skip score plugins alwarys returned
    6805632abb8 CHANGELOG: Update directory for v1.26.8 release
    f847565c081 Move mount warnings to info logs for normal expected paths
    63df8a5821a CHANGELOG: Update directory for v1.25.13 release
    52e85074042 CHANGELOG: Update directory for v1.24.17 release
    980fa6a2b9e Add CEL library lifecycle linter
    3fb14cf4e7a Bump cel string lib to v2, add tests
    640a2ec3327 Update k8s code to handle cel-go changes
    1a850a00630 Bump cel-go to v0.17.6
    24877f96fbb Incorporating feedback on 119341
    2bede058f92 Use environment varaibles for parameters in Powershell
    c761c165627 Use env varaibles for passing path
    1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
    9ee94b0204a Remove duplicate codes in framework RemovePod
    f752ca2dc84 Make API chunking conformance test deterministic
    28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
    79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
    ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
    6a16c076e76 hack: move common "verify generated" shell code into function
    9c83c380e0c Add wait for cache sync
    b1223e0d1ac check for overflow
    87cf890632c Fix CEL cost handling of zero length replacement strings
    b0e249f657a Handle edge cases in seat demand stats
    037640af8c8 Apply suggestions from code review
    bd06c26d580 fix: concurrent map writes in e2e test
    826f3a130ae promote to conformance Service multiprotocol tests
    98d772ca3c4 Support multiarch/platfrom in find-release-tars
    c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
    93832de6246 stop using deprecated framework.ExpectNotEqual
    145dbb6accf stop using deprecated framework.ExpectNotEqual
    d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
    0039f24d74d apf: refactor promise to use a context
    3e9a4c15a85 Restrict what imports get into code within test/e2e_node
    c1eb18c00ca generated files
    039859b9b72 e2e network test for udp services with hostNetwork clients
    2472291790e api: introduce separate VolumeResourceRequirements struct
    a5600b69251 storage/etcd: simplify passing the transformer
    6161752ecbe storage/etcd: remove newWatcher function
    3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
    a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
    b8512cfe247 expect the new resource_scape_error metric
    905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
    5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
    f93bd699aaf Trim managedFields in pod informer
    2f576969eee reducae function calling to once
    093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
    700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
    75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
    c112a34642d add unit test for kube-proxy service cache with ipMode
    7f805dc9354 fix test name
    30ff937aaf9 add a fake load balancer class to fix e2e test failure
    3cbecf218df kmsv2: add metric for DEK cache filled
    d86e72202c4 kmsv2 test feature enablement unit test
    bd6f5487463 mark the OOM killer as serial to reduce flakes
    afe9045e466 Add v1.28.0 API testdata
    a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
    8163d244ede Update ccm flag help to describe disabling webhook serving
    8291b847d58 Allow disabling both webhook ports in cloud-provider
    f407b31d42a kubeadm: Fix typo where API group is not correct
    72af21e1a13 kubeadm: Cleanup the unused input parameters
    1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
    e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
    fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
    48260b4a77b kubernetes mutual (2-way) x509 comment
    ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
    6c2cfac0a97 Revert testgrid url changes from CHANGELOG
    577197559ae remove the legacy test dependency
    af26ebd0fa3 translate beta label to ga in volume_zone
    4712025ea84 Graduate kubelet resource metrics to GA
    6ef90979720 Update the URL of testgrid
    af9bf7b41e0 Prefer non-alpha storage versions when available
    09fa21ab879 Store validating admission policies and bindings as v1beta1
    a422d11c772 prep for go1.21: use -e in go list
    ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
    cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
    5567f288e74 api: change list type for node lists in PodSchedulingContext
    79333684600 Update CNI plugins to v1.3.0
    f07a3a3f263 calculate sidecar container resource in pod autoscaler
    427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    5bbc4f76055 Pass Pinned field to kubecontainer.Image
    a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
    b75c5d33e5c bump the busybox test version to resolve test failures
    bd36be02188 Make gomaxprocs install optional, limit to tests
    9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
    f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
    5752cbd8c76 chore: add pod UID in event log
    7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
    f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
    a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
    bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
    8314122382c e2e framework util subtle bug checking endpoints
    9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    1e961af858b scheduler_perf: test case for DRA with multiple claims
    0331e98957f scheduler_perf: fix installing DRA test driver multiple times
    092897f061f drop v1.26.0 API testdata
    4950521ad88 kubeadm: increase ut for certs/certlist
    224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
    3edae95e5ae Add unit tests for subdomain match in keyring
    8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
    a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
    a161fa8017b pull Host from kubeconfig when needed
    03415ebc1da Integration tests for IP mode field
    86b1f095ca7 Proxy changes for IP mode field
    47fec59a31a parse node selector in prefilter
    4fb0ce28377 Fix broken link to testgrid
    34a89f039b8 Update cri-tools to v1.28.0
    29a6705dabc Generated code for IP mode field
    3ac2899d2b5 Add IP mode field
    cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
    b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    947c9376f6a change struct methods receiver to pointer
    e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
    717c149a734 fix mirror pod nfs test failure due to differing NFS versions
    279a663f948 Update README.md
    6f27733af8d Job: Replace deprecated workqueue library with supported one
    dd7b7073c38 e2e: add test for verification of timestamp for new PVs
    8e661498702 e2e: remove extra spaces
    b9cf6991e63 Use tracing semconv types instead of own defines
    765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    1863a808b20 fix: add code comments
    9646ae5a9ef Fix: null jsonpath serialization
    8ab6bee676a Make seccomp status checks in e2e tests more robust
    509ffe2938f Fix receiver names in legacyProvider
    80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
    f73c253accf fix typos for pod replacement policy
    5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
    62b063b74b5 wsstream: use a single approach to detect connection upgrade
    74053e21519 Create e2e test for PV/PVC endpoints
    49e00e8bdee Move adding GroupVersion log until after an update is confirmed
    77b3bb0f69b fix race on etcd client constructor for healthchecks
    a6329ac4536 Fix to honor PDB with an empty selector `{}`
    0e238409290 dra test: enhance performance of test driver controller
    40b604e3741 Update pkg/apis/core/helper/qos/qos.go
    f355b22f5f7 implement Stringer for podActions
    e4d16f34c15 Add test coverage of result size of string operations
    10fe3da87db Delete PSP API types and generated clients
    69a5a528967 Bump cel-go to v0.16.1
    6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
    4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
    5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
    ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
    a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
    37730c07dd6 apiserver/httplog: pretty up impersonation output
    3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
    d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
    0944c00778a Fix some typo in kubelet component source code
    3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
    ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
    24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
    074d5b53299 Rewrite the tests to be table driven
    391c1a3eccd dra: cleanup manager unit tests
    a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
    85c385d4101 Update the container images used in cloudbuild to their latest version
    c4f4e3bc43b pkg/proxy: unit test refactoring
    4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
    b6ae858e01f Drop AvailableResources from controller context
    d5d90b7b228 add support for ExponentialBucketsRange
    90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
    a215b29d7cf remove makefile:generated_files in v1.29.
    f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
    c23cee1be3c fix OOM killer
    4b6abf10c6e Handle errors when preparing lease for update
    ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
    a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
    14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
    109cf6820d2 Update base image and add utilities to kubectl image
    2a767c9916a update the busybox test image to 1.36.1
    133696725ae implement secret empty string value integration test
    7f53f7649e1 Use intstr.Parse instead of reimplementing it
    1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
    63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
    18c46b2487a add validation for static pods to have a name
    66aa2af0979 CEL lazy map: add test for boolean short-circuiting
    307b0630aa6 cri-api: add CRI implementation maintainers as approvers
    c4739313b7f Track manually created secret-based tokens
    df89045b53c dependencies: update github.com/ishidawataru/sctp
    2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait().  This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
    213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
    57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
    fb9646fd60d apiserver: add flow control metric current_inqueue_seats
    4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
    fdea6ad17d7 kubectl debug: Remove legacy server support
    baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
    41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
    3964f71fe02 e2e:podresources: verify count for terminal pods
    6d244728b9e adjust order and fix typo for kube upgrade
    479b2d03a43 kubectl: fix describe node output when sidecars are present
    4e2e059c7b2 Graduate RemainingItemCount to GA
    6acfa3cb4ac Graduate APIListChunking to GA
    e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
    9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
    2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
    60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
    7ffd3063cef dynamic resource allocation: reuse gRPC connection
    dbaa9fe6b46 added podgc orphaned pod unit tests
    173b5a75b96 Trim managedFields in controller-manager
    c86f562f29b Run hack/update-codegen.sh informers subprojects
    9c4651bd047 Add 'WithTransform' SharedInformerOption
    d1946392528 Cleanup kubectl legacy server fallback
    106a931c299 fix intergration test
    d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
    a35608cc614 Update debian-base for test images and others
    43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
    a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
    2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
    f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
    709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
    b8336f399bf KEP-2305: add metric to track unbounded label values
    1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
    654e98e0a2e add endpointslice repo to staging README
    b7cbebcd034 Added oomkill test for init container and fix typos
    d8c145d20da fixes the issue in the documentation of kubectl events
    12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
    c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
    733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
    3bae26ae58b Check dbus error on container runtime start/stop
    70f979c8da3 Alert message improved according to standards
    a6554b9d5d1 Make kubelet label types public
    f2fa6d5f6b3 Document PVLabeler as deprecated
    7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
    fc36d2fee83 chore: improve error message for unstructured helper method
    b60a3a58df2 api-machinery: stop using deprecated io/ioutil
    0da37d8c544 chore: omit comparison to bool constant
    17e6c5cb9f0 Error Typofix
    9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
    01c2c4f35f3 Error test cases added
    a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
    f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
    c1cced24aa9 WIP: don't exclude .git from rsync
    396c8a67832 test: TestPodDeletionEvent
    975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
    ba49ccdbc9b Gracefully handle empty config error when local flag is used
    96ab232f5f7 Remove reasons from PodConditionType
    1d9eed9f950 chore: slice replace loop
    9378e580cf4 chore: loop optimization
    fc1b8a823d4 cli: stop using deprecated io/ioutil
    b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
    01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
    07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
    208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
    72f89b63757 kubelet: fix comment typo
    12f8eeaf9b1 fixed typo in get-kube.sh
    3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
    8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
    887654160f9 Improve the performance of schedulinggates
    0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
    847df6d9153 kubelet: output log even file is rotated
    05f04f866eb Keep PLEG interruptions in a separate interface
    b109a585398 Improve the performance of isPodStatusCacheTerminal
    84c14c65c6b Remove unnecessary type conversion
    55d471601b1 [ut] increase covrage for kubelet/prober/results
    e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
    18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
    08a69d63413 Improve performance of method PodRequests
    337f4e524aa Do not error log CRI stats for not cached partitions
    f2aeb3b0d91 Improve lock performance
    fb6fd36384e Add endpoint to skip topology aware log when missing zone hint

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
58a5300e7a kubernetes: update to 1.28.2
Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits:

    b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10
    1cd2ac99542 .: bump golang.org/x/net to v0.17.0
    cecc0e93916 Mark a volume as uncertain-attached after detach error
    15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec
    985ef265511 Add nil checks for hpa object target type values
    88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9
    63fcac91c42 Only configure swap if available on node
    07a74666cb2 Use local isCgroup2UnifiedMode consistently
    57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    8ea9b219c69 reintroduce resourcequota.NewMonitor
    794d56966e8 change rolling update logic to exclude sunsetting nodes
    a08ec1215fe vsphere: adapt to govmomi bump
    ef63f36ff82 .: bump govmomi to v0.30.6
    aba7c443072 Increase range of job_sync_duration_seconds
    bcaa53c9c10 sync Service API status rest storage
    a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2
    89a4ea3e1e4 Release commit for Kubernetes v1.28.2
    0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    47507f9f022 fix race on etcd client constructor for healthchecks
    7d33fba21a8 e2e pods: fix WaitForPodsResponding retry
    2480fce67f5 kmsv2: reload metrics bug fix backport
    110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins
    0aebbad4731 fix(queue_test): make sure the first bind failure via counter
    798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8
    62321a9201c scheduler: unit test case for concurrent event with other pod
    e5b981ebcd7 scheduler: fix tracking of concurrent events
    16298b54483 fix verify errors
    38904e5f2d1 remove used vars
    ce017591468 sort stability list of metrics in the shell command
    b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    958c30349fa Add an e2e test for the pod sandbox changed scenario
    ac67de196ff fix: concurrent map writes in e2e test
    19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319)
    dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints
    8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator
    526e25b685a Fix OpenAPI aggregation cleanup
    0bca3b0e4de apiextensions-apiserver: generate applyconfigurations
    8c7c4f3fc4d Revert to json-patch 4.12.0
    a4fdac21a98 update build cross image to the correct release branch image
    fc184558921 Mark Job onPodConditions as optional in pod failure policy
    955843efcf3 Incorporating feedback on 119341
    4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1
    8dc49c4b984 Release commit for Kubernetes v1.28.1
    ad60b95eb63 Add wait for cache sync
    175bbaa8894 check for overflow
    f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings
    90715527543 Use env varaibles for passing path
    53902ce5ede Use environment varaibles for parameters in Powershell
    e8abf3c441c e2e framework util subtle bug checking endpoints
    a1fdd1152d9 Pass Pinned field to kubecontainer.Image
    27e6c94259f prep for go1.21: use -e in go list
    04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed
    8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    cce3f6ffa79 Make gomaxprocs install optional, limit to tests
    20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits
    58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal
    e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family
    96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0
    855e7c48de7 Release commit for Kubernetes v1.28.0
    b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    b4fac632cd1 Remove release-notes for the PR#118895
    5f7b27f4ade Remove release-notes for the PR#118895
    87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1
    c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release
    add7e14df11 Release commit for Kubernetes v1.28.0-rc.1
    c6efaf16c1e apiserver/etcd3: fix segv during metric collection
    6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags
    0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860"
    1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery
    55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit
    050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent
    9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7
    38a81ca04f3 Bump distroless-iptables to 0.2.7
    ae86051ec5a Bump protoc
    ab26637eae4 Add test coverage of result size of string operations
    8e72718249e Bump cel-go to v0.16.1
    72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7
    2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices
    2f30fae0e8b scheduler: fix data race after binding failure
    1b90dff5276 .*: bump golang.org/x/net to v0.13.0
    73107c1b755 Update OWNERS
    53c8872cc18 Update OWNERS
    2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF
    294c7df3285 Avoid pulling node-problem-detector through CDN
    b4ef4015a29 Avoid pulling mounter.tar through the CDN
    cfcbce31a39 apiextensions: fix validation error for status.storedVersions
    936819c21bc docs: update release note for KMSv1 deprecation
    6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates
    a65d2075072 calculate the correct machine-type
    182a4f858a3 API warn non-ExternalName services w/ externalName
    7bd0a857e30 API warn ExternalName services with externalIPs
    dd8a64d7e15 publishing-bot rules for release-1.28 branch
    a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release
    7d13c9b096b set map to nil if an empty string is passed
    eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404)
    ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319)
    a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs
    45710678b30 Release commit for Kubernetes v1.28.0-rc.0
    67769438e1d kmsv2 test feature enablement disablement and restart
    18a7025383c update documentation with descriptions
    7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544)
    3b9af471185 add admission policy integration test all resources
    22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field
    a164005cc09 Fix non-test code relying on test-code
    e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from
    5e2e8c80647 bump validatingadmissionpolicy alpha->beta
    1c99f9591b0 add node-env and instance-type flags to node-e2e tests
    d6479587445 update codegen
    ef8670c946d refactor: replace usage of v1alpha1 with v1beta1
    294f5c9a42f make update
    ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV
    a9c3444a47b test: add coverage for pv status update and create strategy
    bf49c727ba1 kmsv2: KDF based nonce extension
    aa65bab4269 implement pv last phase transition time
    c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers
    76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release
    1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume
    5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate
    a31fee98f09 rename function for dropping disabled fields
    dbea2791129 Fix the flaky TestJobApiBackoffReset test
    8f35fceae37 update vendor to use containerd cgroups
    c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled
    74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller
    cb6d7fbe66c update documented metrics
    f50e74206e1 Address comment
    c46ffc2b422 Refactor jsonpath parser and add tests.
    b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy
    88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage
    b5e9e0168cf feature: add multiple params capability to VAP controller
    3f63a2d17d4 refactor: make scope of ParamKind available to vap controller
    6323c106e9b refactor: use the provided sharedInformerFactory for params
    9a595209bd2 update-codegen
    c8dbf4712cf add namespaceParamRef to v1alpha1 and internal
    03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics.
    e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec
    2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance"
    3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release
    51bfe417b81 CHANGELOG: Update directory for v1.25.12 release
    c575a1e31aa CHANGELOG: Update directory for v1.26.7 release
    ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release
    ce929520376 add podReplacementPolicy and terminating field to job api
    35d0af9243c Include ignored pods when computing backoff delay for Job pod failures
    ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test
    81abfca4078 Add a haveKeys() helper function to match multiple keys
    1000ed64e09 Use debian-base instead of distroless for conformance image
    d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041)
    b1d685a05fe apiextensions: validate status updates with status schema
    06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet
    c1aef65640b Add integration test
    cd5f3d9f9d5 Add impl for uvip
    2c8288ac873 feat: improves metric and logging
    0449cef8fd5 Increase timeout for DRA kubelet plugin client
    a15c27661e6 Job controller implementation of backoff limit per index (#118009)
    b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows
    bfb2c6a22a2 update go.mod
    668497e7550 use ratcheting schema validator when feature is enabled
    e0f9db42ace add ratcheting schema validator using new openapi hooks
    6f238334ab4 add CRDValidationRatcheting feature gate
    635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible
    9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates
    a8a2fb317c8 Add tracking and reporting of executing requests
    1351845133b Update cri-api change in v1.28.0
    59b4951c649 Expose commit memory used in WindowsMemoryUsage struct
    0ec99fb0b24 Kubelet DRA: fix failing test cases
    f6431c61386 DRA: don't query claims from API server
    cf0b74774f6 Extend the API for the Job job-index-failure-count annotation
    d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods.
    0372e4b6620 add unit test for dra/manager.go.
    fcbfdc17106 Extend the Job API for BackoffLimitPerIndex
    3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions
    056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511)
    89ab733760a Improve docs on framework.CycleState
    4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps
    ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation
    735be024cf9 Make CRDs built and aggregated lazily for oasv2
    ea23e13463f Update OpenAPI Aggregator
    850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs
    e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware
    a4a607198a1 hack/update-openapi-spec.sh
    961c1503b5b Bump kube-openapi
    4cb5547f934 Adjust summary API e2e test
    e429793db1e Unit tests: node swap usage resource metric
    1d368420b28 Add a node swap usage resource metric (/metrics/resource)
    7d187f967ba Unit tests: CRI swap stats
    59e3e3897e3 Add SwapStats to summary API through CRI
    87ff9c45256 Add swap statistics to CRI-API
    053d7ac61f5 Unit tests: cadvisor swap stats
    c74ee8045de Add SwapStats to summary API through cadvisor
    a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats
    d029f0ef060 Add restartable init container lifecycle hook e2e tests
    f17e9117776 Add restartable init container probe e2e tests
    9d6c1030db0 Generate containers ready condition including restartable init containers
    3bf282652f0 Allow restartable init containers to have lifecycle
    7ef2d674e24 Allow restartable init containers to have livenessProbe
    2c8b37498e5 Allow restartable init containers to have readinessProbe
    8b20dbd0d16 Add validateStartupProbe
    c7e7eee554a feature(scheduling_queue): track events per Pods (#118438)
    91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery
    94c8ad289bb Enable admissionWebhookMatchCondition by default
    4321d8c60f3 Graduate NodeSwap to Beta1
    f1e7386fbc4 Deprecate now-unused kubelet iptables flags
    d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code
    77cbd86b0b1 Add metrics for cloud-provider node sync, update.
    d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled
    7698fe76397 Add StatefulSet pod index as pod label (#119232)
    2e217e8cea1 Reduce duplication between helpers for checking featuregate
    7edd72f7805 Update generated documentation
    137474e2839 Fix validation options for old pvc
    d765fa6b747 Update generated stuff after changing comments
    f01a1faa8cb Update comments about allocatedResourceStatus
    c072e5b3a7e Update test generated data for 1.26 branch
    db8998265e9 Update 1.27 generated data
    6a780f57ce5 Update generated data
    e0111871149 Update code to use new generic allocatedResourceStatus field
    d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats
    9189c3d5599 fix tests
    aa788219f46 fix metric names
    d32aa62d844 promote beta metrics
    65ce7222ced All sig node approvers should be able to merge changes to CRI API
    9cb2c103107 Adding node feature owners
    00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead
    48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes
    0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta
    bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux
    6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe
    d0952686f68 CRI: add cavieats about cgroup driver field
    d7797fbc616 kubelet: get cgroup driver config from CRI
    fd434003f3f kubelet: initialization of runtime service earlier in the startup
    37330a13924 Add KubeletCgroupDriverFromCRI feature gate
    d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc
    0f05a92ce68 cri-api: add rpc for querying runtime configuration
    660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6
    be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA
    ff62cca47b8 Bump distroless-iptables to 0.2.6
    229eb93a834 DRA: report NodePrepareResource errors
    b57c7e2fe4b Add CDI devices to device plugin API
    b1850497b4b Integration tests for IP mode field
    7eab0d7a0de Proxy changes for IP mode field
    7c6e399b228 Generated code for IP mode field
    e6863757f4f Add IP mode field
    e38ab6d3671 Add PodGC changes for PodReplacementPolicy
    169abcc0398 openapi: reference shared parameters
    6c0ea702d43 Conditionally serialize flushFrequency as int
    19f61caabee aggregate kube-proxy metrics
    bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent
    6b3ce3004db Add integration tests for match conditions feature gate enablement
    b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration
    171b19d9fe1 fix histogram vec compare using ignore fields
    9b6af80a631 upgrade prometheus common to v0.44.0
    8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration
    22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration
    13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267)
    df0d51d3b35 add some detailed message for dup container ports(steal from thockin)
    1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric
    90ab7580aae add list of served versions to storage version
    9564bdc39de Ensure final diff is used for setting expectations for Job pod creation
    8a4a29d5917 remove todo/spelling
    bef43788fc0 update histogram
    01b9f4b6eb8 matchCondition metrics
    5f37c102cb5 revert changes in staging
    d9bd413f991 Proactively bump golang.org/x/net to v0.12.0
    883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer
    34640772ed4 implement SchedulerQueueingHints feature gate
    619be9c1537 Add a swap e2e test
    4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc
    a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods
    e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2
    f37aec6c57f Add LIMITED_SWAP env var to enable limited swap
    0ed7bdb057e Update vendor
    69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6
    2a907e60043 kubeadm: fix fuzzing for ResetConfiguration
    2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types
    037847066ce replace strings.Index  with strings.Contains instead
    3e2a1a7b9ce Regenerate
    b2613dd381b Add e2e to check that hostIPs and Downward API works
    14b09c414ac Add DownwardAPI validation for status.hostIPs
    335d905ce95 Downward API support for status.hostIPs
    bf030fd68ab Add validate HostIPs
    267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions
    c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel
    7a81ef6406c Add fuzzer for PodStatus
    e6bdd224c17 Add HostIPs for kubelet
    dacb6890027 Add dropDisabledStatusFields
    e061143de7f Add HostIPs field and update PodIPs field
    c2c001a243a Add FeatureGate PodHostIPs
    ce90eb2cc2f Fix validation to use field.Forbidden instead of Required
    7305c967101 QueueSet and controller part of borrowing by exempt PLs
    2069835094d Tolerate only the two allowed field changes
    3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl
    f8e4e8abac8 apf: add validation to exempt for borrowing
    f78d6062eb8 Update generated code for APF borrowing by exempt
    a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares
    3d3240c8b43 apf: add API changes for borrowing by exempt pl
    b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642)
    49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks
    037091284e2 fix unit test bug
    423f4dfc798 Add quantity library to CEL (#118803)
    a1a5f49bb9c remove statefulset label added to wrong branch
    1ae60c0ed16 use job completion index annotation as label
    131216fa8f2 chore: hashes keyID
    049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377)
    d25075f3424 update generated list of stable metrics
    c291e6355c4 feat: implements metrics for encryption config hot reload
    be2e5417ea2 allow api-approvers to approve directories touched by generation
    80ab8f0542f dra: handle scheduled pods in kube-controller-manager
    cffbb1f1b29 dra controller: enhance testing
    5cec6d798c3 dra: revamp event handlers in kube-controller-manager
    0bb419b1498 promote the following APF metrics to beta:
    39207dada25 Add integration test for node authorizer claim references
    4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses
    c688478a28b Fix lifecycle generator to check the version correctly (#119268)
    ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims
    052b06bdad3 Remove test Pods sharing a single local PV
    22d8ae1ba6e Enable NewVolumeManagerReconstruction
    9914909f5aa Define tcpProtocol in one place in the unit tests rather than many
    967ef293786 Remove/clarify two FIXME comments in the proxier unit test
    14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate
    7e3b53042b1 Pass Job context down to firstPendingIndexes
    4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests
    4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable
    c5147c91b88 controlplane: kubernetes.default controller stop polling
    9f5b6db8be8 test: azure: check error for cloud detection.
    1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects
    71ef0dafa72 add flag 'logging-format' to kube-proxy
    c550c17f7f0 accept int or string flush frequency
    148acc8632c enable arm64 support for GCE node configuration
    75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit
    c52911e59ad docs: add comment describing `LoadConfigFromFile`
    5c18810f357 chore: update license date for configfile tests
    72aeb961322 test: add tests for `LoadConfigFromFile`
    b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now)
    8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config
    0599b3caa0f  change the QueueingHintFn to pass a logger
    39bb8f4bb1d Implement ConsistentListFromCache feature gate
    0695853a306 Improve naming and code comments
    08d40f53a7a dra: test with and without immediate ReservedFor
    98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily
    28b6c906966 Move DeleteFunc logging to level 2
    761016482da Properly setup mutatingWebhookConfigurationManager{}
    747dbd9b6b7 run `./hack/verify-gofmt.sh`
    1eb60939fe5 Add smart reload for `MutatingWebhooks`
    aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc`
    a01a8cb07e7 Fix webhook accessors caching pattern
    7d3d44af776 Add webhookAccessors smart reloads unit tests
    c6f36e8702a Fix deadlock issue
    99875b3fb73 Webhook Accessors Smart Recompilation
    7d064812bb4 kube-controller-manager: finish conversion to contextual logging
    d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API
    7a63997c8a1 Improve apiserver storage size metric to allow it's graduation
    610509fedd9 Update standard app protocols
    f1f2fa9da8a kube-apiserver/corerest: split apart generic code
    01c3a51a780 node: podresources: getallocatable: move to GA
    c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes
    1b8ddf6b79a podgc controller: convert to contextual logging
    f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint
    c635a7e7d83 node: devicemgr: topomgr: add logs
    d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up
    5cf50105a2b e2e: node: devices: improve the node reboot test
    b926aba2689 e2e: node: devicemanager: update tests
    3bcf4220ece kubelet: devices: skip allocation for running pods
    ab3a0b78ea3 Match both old and new kubectl version for a while in e2e
    c143a875edb dra e2e: fix "reallocation works" flake
    6f1a29520fe scheduler/dra: reduce pod scheduling latency
    e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As
    ef48efc736c scheduler dynamicresources: minor logging improvements
    363874e9b56 setcap: update to debian bookworm v1.0.0
    19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging
    b81f07ac9a6 Add enj to apiserver options approver
    6d6595d0f6e Add jpbetz as approver of apiserver integration tests
    43b509de420 staging: Add endpointslice to publishing data.
    7c873327b67 Convert controller name to reconciler variable.
    29fad383dab move endpointslice reconciler to staging endpointslice repo
    c0030a4d27e Add support for watchlist to APF
    9759fc3c230 Fix the converts an empty string to nil.
    22c66784e03 staging: add endpointslice repo
    a34e06e74c7 kube-apiserver/corerest: structure Config
    75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair
    f22aa42aa81 bump go.mod cadvisor to v0.47.3
    f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta
    3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530)
    23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery
    998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default
    fec25785ee6 dra: store generated ResourceClaims in cache
    ba810871ada dra e2e: check that not generating a ResourceClaim works
    0fc62d5ded0 dra: generated files
    444d23bd2f1 dra: generated name for ResourceClaim from template
    98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh
    cd14e97ea80 Add a builder for ContainerAllocateResponse objects
    db2a1edbdd6 Generate empty cdi annotations
    f0e3c32fe56 Move CDI annotation code to utils package
    354b6c409f5 Rename updateReconstructedFromAPIServer
    1903f5aa2ad Rename volumesNeedDevicePath
    7cd60df4aa1 Update volumesInUse after attachability is confirmed
    0a2272dc68d Add uncertain state of volume attach-ability
    bf48165232f Remarks to syncJobCtx
    990339d4c3e Introduce syncJobContext to limit the number of function parameters
    94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5
    f443c458afe move non-graceful node shutdown to GA
    645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging
    98c6e25c371 update name of pod index label
    09849b09cf4 migrated pkg/controller/endpointslice to contextual logging
    de076430957 Document address family of listening INET sockets
    08dd657a71c Implement metrics agreed on the KEP
    9b1c4c7b57f Implement KEP-3836
    cca66011067 Add reason to force detach metric
    e655931274f expended type checking.
    8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook
    47ef977ddd5 Direct reference to the packages
    7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable`
    0a987079128 Sidecar: Update printPod to show restartable init container information
    ea1eb7f8f79 implement sidecar resource calculation
    03c22176877 Sidecar: Add e2e tests
    b94fa250c27 Sidecar: Implement lifecycle of the restartable init container
    c187b381173 Sidecar: Generated code
    5d26bcd468b Sidecar: API changes
    10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions
    f7a1fb76f4f Only declare job as finished after removing all finalizers
    3f07fc3acc9 Remove long/golang version information making short the default
    3a5268502f3 Remove deprecated scheduler CLI flags
    68ed020b2a3 Split IptablesRulesTotal metric into two different metrics
    bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map
    c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin
    d7708e79d32 Use cmp diff
    278a8376e17 Fix: fiterror in permit plugin not handled perfectly
    14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release
    2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137)
    1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
    02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated
    ecf0cee91ce update comment on feature flag
    3a02ecb3418 check test case param instead of feature flag in unit test code
    b10cc642b56 DRA controller: batch resource claims for Allocate
    be0db3f93d7 clean up the implementation around QueueingHintFn
    5175752df74 Issue 4230: remove readiness check for cache exclusion
    132d477cb7a use stopCh to avoid goroutine leak in tests
    20a25cbfcfb Add user specified image to CRI `ContainerConfig`
    65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric
    1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter
    dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging
    6c0387d0047 Migrated pkg/controller/endpoint to contextual logging
    3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging
    921b7e6e8f7 remove equalReady and replace with k8 util function
    a647f9febbf default enabled pod index for test cases, add test case disabling it
    322da7c1aae fix gc metrics
    02efe09abe3 component-base/logs: improve handling of re-applying a configuration
    1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number
    c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider
    65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller
    9dcc57ede62 Stop using deprecated API
    5e1777be529 Update debian-base to bookworm
    a514f40131c dra resourceclaim controller: delete generated claims when pod is done
    e8a0c42212d dra resourceclaim controller: remove reservation for completed pods
    7f5a02fc7e4 dra resourceclaim controller: enhance logging
    d1ba893ad8e dra resourceclaim controller: refactor isPodDone
    e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors
    7690c6e8121 Simplify getDualStackLocalDetectorTuple
    cefd50a753e Improve the single-stack LocalDetector behavior
    bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run
    16e9cc42c1a e2e node: remove unused test/e2e_node/gcp
    932d0337b82 e2e: detect unexpected command line arguments
    68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic
    443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache
    dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor
    31943cc3f44 kubeadm: check the GV after the config migration
    b4f479d1f29 bump npd to v0.8.13
    a556feb7cbe run hack/update-vendor.sh to fix verify master
    4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation
    616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns
    b36fdd68b72 Test consistent List
    01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3
    18f2e9055fc Add OIDC integration tests
    c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component
    80b035a116a kubeadm: Support custom env in control plane component
    6b01ece5806 scheduler-perf: fix perfdash display problem
    29e5771aa4d scheduler-perf: shorten "Name" label in metrics
    e08bd3bc263 Simplify DeleteCollection
    7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611)
    c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod
    19cb6d036ae kube-apiserver/corerest: remove redundant interface
    ede17eace45 test-e2e: Retrigger the RBD image post merge job
    a966d186083 Double-check the proxy configuration vs the available IP families
    36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane
    1cfb932111e kubectl: Allow parallelizing diffing
    bcbc12cd79c Fix `should be able to create and delete a critical pod` test
    4517d3004ad bump kube-dns to v1.22.23
    985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added.
    f6a86bb2030 fix indent error
    c143710ecf1 upgrade npd image version to v0.8.13 for kubemark
    96694514a75 Remove csiDriver Conformance test
    bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname
    59592ba4639 Add OIDC test server
    1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier
    8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there
    ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family
    a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs
    0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go
    b01a4145b2c Install ecr-credential-provider during node e2e tests
    4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints
    a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race
    ea34d039256 integration testing: configure gRPC logging during init
    1c48b7ec144 Add servedVersions info in StorageVersion API
    d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics
    e0af0a5a455 add test case param for feature flag
    d68f5f0d921 fix tests
    44f1c4dd94d fix duplicate metrics issue
    84b3d9b7b7e remove legacy NetworkPolicy tests
    0eeca0987a6 fix tests
    04ea1d506b4 promote sli metrics to beta
    f96d83af668 Copy container logs for easier debugging
    dfc150ca182 e2e: node: podresources: cooldown the rate limit
    f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo
    52ef833b6c2 Bump cadvisor version in tests to v0.47.2
    8266c4d934d Generalize watch storage tests
    d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn
    1b47e6433b8 dra delayed allocation: deallocate when a pod is done
    dbdd861ea36 chore: address review feedback
    72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/
    f269acd12b2 Make QueueSet support exempt behavior; use it
    931456a1427 Simplify the node name for metrics - just use localhost
    3e5fafd57ab Drop docker.log and add cloud-init-output.log
    1c7e87cff27 client-go: add DNS resolver latency metrics (#115357)
    150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver
    4a5a242a68d dra e2e: using logging for background activity
    f1700e4b95b Cache authz decisions within validating policy admission.
    60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests
    24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API
    16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket
    90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API
    fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test
    d616cf72a3b Add unit tests for parallel StatefulSet create & delete
    c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric
    ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions
    732775ee7d1 Paginate within DeleteCollection call.
    0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout
    cecebe8ea2f scheduler_perf: add TestScheduling integration test
    dfd646e0a89 scheduler_perf: fix namespace deletion
    d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload
    2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown
    812556365b6 kubeadm: backdate generated CAs by 5 minutes
    44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert()
    cfa2fa6d774 put feature gate in alphabetical order
    860aab842db fix a reference to the wrong variable name
    a75b00ea39d Better URL for scraping metrics from kubelet
    685b0c5efa1 Bump to latest node-problem-detector version with arm64
    cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3
    9e3b5b65838 update openapi
    ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3
    bb8766daaf6 feature flags should be ordered alphabetically
    7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method
    a9afaa1eee9 add feature gate
    dfce076c6cf Update the template.pot file with latest message IDs.
    a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716)
    9c7166ff639 wait for eventhandlers to sync before run scheduler
    bde66bfb55c kubelet dra: restore skipping of unused resource claims
    874daa8b52c kubelet dra: fix checking of second pod which uses a claim
    6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test
    56c5c8f7eef Revert "Make CA valid 1 hour in the past"
    ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805)
    bdbf07525fa test: remove exception comments in discovery tests
    6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck
    1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives
    f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty()
    e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse()
    8b33e8bdd1b e2e: fix gomega.Expect calls without assertions
    0ef1f2f2d89 Set AWS specific credential provider when running there
    b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal
    af1c9e49c49 Update schedule logic to properly calculate missed schedules
    0033f658085 increase the log level for the GetTargetNodeName error message
    08198fe22b5 Extend Large Create Timeout to 60 min
    9354e78289f no-op: split transformer interface
    21760534157 add completion index as pod label
    8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver
    764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
    1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
    3df92362abd fix openapi/v3 non local apiservices aggregation
    4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API
    6e079545c48 cmd/kube-apiserver: move options completion into options package
    f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands
    0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme
    38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature
    f7239e40959 Better back off delays and connection timeout to talk to containerd
    e4f93d8a82d ipallocator bug if ips has leading zeros
    89a9e480f9b fix: update deployment e2e tests
    41d961758ee update cri-api change in v1.27
    22258a263f4 Fix stable metric finder for NewDesc with custom import name
    13842746227 Update metric documentation
    45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path
    07f38a3ec18 add test
    6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events
    531d38e323c features: rename UserNamespacesStatelessPodsSupport
    556d713a4ad apis: drop check for volumes with user namespaces
    8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed
    17013d39604 Review remarks to improve HandlePodCleanups in kubelet
    e3ee9b9adc1 Fix the deletion of rejected pods
    c91c578795c scheduler_perf: skip expensive cleanup during benchmarks
    92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer
    902c711fb49 Unset gated pod info timestamp in addToActiveQ
    56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190)
    1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check().
    406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions
    e4cf103c9b9 Test all cases for LIST request cache bypass
    7f532891c9c e2e tests: set all PSa labels instead of just enforcing
    a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store
    1bd3f072fa7 stop ignoring storage class selection errors
    e5cbc51d29d e2e framework: allow setting all PSa labels at once
    edb59e9bc75 kubeadm: move token defaulting and related constants to token package
    ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container"
    fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7
    420fbd11e44 ignore Histogram for prometheus client v1.16.0
    c98e72841b1 Add a connection backoff to talk to CRI impls
    409bc8ccc05 deps: Bump to cAdvisor v0.47.2
    f72c2c2b7d2 add process start to prometheus handler opts
    bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release
    ab75e48494c storage: stop using deprecated io/ioutil
    687ca0e0bb2 fix(script): handle wait_for_success failed condition
    eecac058718 kubeadm: add v1beta4 API boilerplate
    63e5b6bdb24 Parallel StatefulSet pod create & delete
    2fb472c83cd Refactor StatefulSet controller update logic
    784a309b917 Do not error in Job controller sync when there are pod failures
    f2e3157df0a Remove AdvancedAuditing feature gate.
    bbae445d172 fix metrics test with 1.16.0 prometheus client
    180c2332bf8 [UT] increase coverage ut for kubeadm/app/features
    564c236ce28 Do NOT prepull images for e2e-node jobs
    c84b5b0a99f Cleanup unnecessary renames of variable t
    c9b01dd9778 Fix race in logging expectations
    3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests
    85d9339ef8f add KCM names into CCM cmd allowed import-restrictions
    3b55f20bd34 update vendor
    4e6a3fb9c10 deduplicate cloud provider controller names
    e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help
    cd56748ec57 reference controllers correctly from CLI help
    9fd8f568fe0 introduce CCM controller aliases and unify controller names
    94792d85dea simplify TestValidateControllersOptions test
    97309511366 introduce KCM controller aliases and unify controller names
    ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions
    2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests
    e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol
    958c8fb6950 Make use of `k8s.io/utils/pointer.Duration`
    ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support
    8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays
    f44029705f9 exit 1 if status are not as expected(order)
    a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI
    74c5ff97f18 Lower the constants for the rate limiter in Job controller
    f54c15d4e80 Change the fieldpath in the deprecated plugin response
    471fd1ae8a1 deprecate RBD plugin from available in-tree drivers
    c51a422d787 Cleanup job controller handling of backoff
    fff5b35023b Adding review changs to update
    889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true
    5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0
    5bde9404a09 Remove unused error return value from internal function
    8636f9353a8 CHANGELOG: Update directory for v1.27.3 release
    763555814b5 CHANGELOG: Update directory for v1.26.6 release
    3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop
    ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release
    a29be0cfb00 update container runtime flags to use containerd instead of docker
    89adbc6e5b5 check for AWS environment before running sudo
    7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release
    a83edd35c4a DRA Node E2E: relabel test suite to fix CI
    c27f9fdeb79 Add warnings for big number of completions and parallelism
    a86380c7813 Update CLI help text for grammar and consistency
    96e7d5f1f25 Bump iscsi test server image
    e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI
    e213448db12 Updated kubectl explain help output
    7bc449d7e0c add contextual logging to job-controller
    cfbc5dc54f8 mount-utils: fix linter warnings in tests
    8ced101db53 mount-utils: stop using ioutil in tests
    699d118d85f mount-utils: stop using ioutil
    b690450e846 mount-utils: don't reread mountinfo on newer kernels
    8c79a911331 mount-utils: isMountPointMatch: simplify and speedup
    404e844468b mount-utils: add isMountPointMatch test and benchmark
    4bb02392793 mount-utils: IsMountPoint: fix
    167252fb5e0 mount-utils: format with gofumpt
    55b690ee018 kmsv2: no-op refactor priming logic into its own function
    15003c609d0 kmsv2: refine probing logic to avoid slow starts
    d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid
    8c06ca68d7d Details added in kubectl explain help
    4960207b317 DRA Node E2E: test NodePrepareResource timeout
    5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API
    673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs
    a60314c47ef Make etcd component status consistent with health probes
    e1735b98637 Make CA valid 1 hour in the past
    5e048041e40 remove helper function for unused storage feature in pkg/proxy/util
    e1aef2ac917 Bump publishing bot rules for Go 1.19 branches
    9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test.
    4e20a8f52bc kill all processes in a container in the event of OOM
    0222e6d4ae3 Update kind details for DRA e2e
    75cf25c0e7f iscsi: use dbus from the host
    f7a5817bc65 e2e storage: terminate worker quietly on test completion
    22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables
    325205efb72 Migrated pkg/controller/endpoint to contextual logging
    be14b026e33 fix the integration test
    a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance
    587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption
    672614b57e8 apf: refactor bootstrap ensure strategy
    910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated
    5e6ae25a33b Updates chairs, tech leads for sig cloud provider
    34368884783 move luxas as an emeritus approver of test/e2e/lifecycle
    e97d9803f2f add SataQiu as a test/e2e/lifecycle approver
    4977189c1b0 Fix ginkgo noColor deprecation warning
    e6bc945a61b Add startup probe in integration test
    ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release
    7ccc2317839 add test for authorizer type checking.
    54cae706786 Pass the mandatory parameters to support testing on ARM64
    fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc
    151509fb74d Remove unreachable warning on volume name dup
    d73923c8ebf fix 'pod' in kubelet prober metrics
    0ddaa7f7c9f Fix warnings on "duplicate" env vars
    4820cc852a0 Minor fix on variable
    a6f5abfb81e Updating names from webhookconversion to conversionwebhook
    0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it
    8f3109da791 Refactor wsstream library from apiserver to apimachinery
    6d4abd7e7b6 bump distroless-iptables to v0.2.5
    04fa4184ed3 add support for authorizer to type checking.
    e5a15c87e9d Ensure timeout test handlers don't complete before timing out.
    f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job
    2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods
    ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
    b1da721bdd7 Update vendor with hack/update-vendor.sh
    88b69cdd0e6 Fix flaky persistent volumes e2e test
    d9e12db547e Bump images, versions and deps to use Go 1.20.5
    ea6495e8284 Remove StartupProbe on debug with pod copy
    ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks
    6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate
    97a81a59f62 test: correct validation test error message
    42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28
    7f87ec9406a storage: Add MadhavJivrajani as reviewer
    7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart
    77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane
    7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane
    43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package
    9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server
    e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs
    f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane
    087fbc9304f Remove invalid merge key
    4962e6eacb9 Squash detectNodeIP and nodeIPTuple together
    b5db644422d Add merge map key validation to StorageVersions
    58162ffd63b DRA: add node tests
    b69b34bec64 Move a kube-proxy unit test to the correct file
    4bee9b2b352 structured logging in proxy/ipvs/ipset
    26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR
    4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints
    dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests
    8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done
    4d0e25151db Fix SELinux contexts used in e2e tests
    010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1
    743e5525edb fix eviction failing test for nil feature gates assignment
    6d66fbc6b67 storage: Move cacher tests to reside with the cacher code
    70978e4af61 cacher: Move common testing utils to a single file
    bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...))
    7a80d7c839c add warning for duplicate  containers[*].ports with the same port, protocol, hostPort, and hostIP
    923db7bd8e0 chore: use strings.Contains instead
    e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions
    4d85a1f00cb storage: Implement TestWatchFromZero for cacher
    2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests
    ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests
    b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml
    5d4bf0b6f90 Promote CSIDriver e2e test to Conformance
    3085b57869a Do not copy bytes for cached serializations
    c009667c6c6 deprecate CephFS plugin from available in-tree drivers.
    1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes())
    9eaa50cc829 Rename scheduler queue variables for consistency
    6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264)
    410b6023d6f scheduler: fix code style issues for pkg/scheduler
    71ab7dc791f Remarks
    70d3bb43e56 Adjust the algorithm for computing the pod finish time
    b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test
    db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository
    da4a8d831b9 kubectl: use bytes.Buffer.String
    8e4228a8c1f remove CSI-migration gate
    a5c4fbe9791 chore(fix): test jsonpath condition parsing errors
    9d3e55ec431 Support JSONPath condition without value
    f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds
    b4dfae25dee fix terminationGracePeriod blocked by preStop
    fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes())
    20866b3f85a dryrun: Don't reuse current object for conversion
    f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly
    45c9e066164 Fix errant debugging code in codegen
    a51be9786ba remove enabled by default beta resources that have been removed
    f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint
    a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result
    322968e9b38 Update unwanted dependencies per CI instructions
    2111e79f56a Update gnostic references
    1993a4cb379 vendor
    0b4efddae01 verify: nicer failure message rendering in Prow
    dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message
    d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin
    70ff750c755 chore: io/ioutil deprecated
    1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin"
    daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate
    a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs
    d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version
    6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging
    db2389ba9c8 kube-proxy: remove log warning about not using config file
    15aa00fc836 Remove unused `getSeccompProfilePath` helper function
    d0a64739e2c e2e dra: collect and check GRPC calls
    68901de8981 Enable optionals and add tests
    5c0b59891d6 Bump cel-go to v0.16.0
    5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests
    c539c739161 Changes to buckets and comments
    35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler
    64269620597 Changes to histogram buckets
    c48c4c679ad Fix ginkgo deprecation warning
    5a14573258b clean: use info instead of error to log queue closed message when scheduler exit
    f2a5e247ebf add pacoxu to kubeadm approvers list
    705c6ff315b Review comments, added metric namespace, moved utility functions, and etc
    a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release
    369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test
    2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs
    85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"
    f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util
    b3111170f8e remove Ephemeral Containers form list
    64c9070f8d0 add pod containers[*].port duplicate warning
    f9ae3e774d0 testutil: use contextual logging
    534f5edb53c Cleanup boilerpate.py
    d9e2583af16 test/e2e: replace deprecated ioutil
    4b4b3b71b78 clean up dead code
    4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node
    074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging
    0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated
    c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning
    4e6d929580a deprecate csi migration for ceph rdb
    11a40406a1f Promote Ephemeral containers e2e test to Conformance
    bf116e85943 Optimize reflect checks further, save item type information
    12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList
    efc601302ad Extract List reflect optimization
    b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks
    4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs
    0535e742241 feature(schedule_one): use heap to find the highest score node
    532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers
    8df1a5e6dcb Webhook conversion metrics
    a045fedd025 Update google.golang.org/genproto
    455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated
    d76043958fb Follow up from dynamic retryAfter
    510287d3444 Fix the git-repo test error caused by the correct use of loop variables
    926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta
    7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout
    4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments
    15678e4a67e Optimize usage message of commands which have subcommands.
    6a867eacd85 kubeadm: warning only for deprecated FG
    4dfc684b342 Set kube-proxy memory request to 50Mi
    5d18f471494 Improve clarity and guidance in provisioner waiting message
    7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data
    e31b2080f5a e2e framework retry on Service unavailable errors
    a50549cc906 e2e rc: if the pods are running but not ready the test will fail
    133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha
    a6003ae1e11 fix unknown field error in rs e2e
    27057def059 Signature fix for registeropenapi
    4373ae05f34 Update vendor
    72e4c9a82ac kubeadm: add the "config validate" subcommand
    f4891842194 Delete CRDs created during field validation tests.
    2ea6896f90c Add warning log callback in client-go loading rules (#117233)
    485d1631cd3 Remove Azure file in-tree storage plugin
    2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector
    e2ed8f8c3ca style: correct the sentence
    08139044040 Fix: Restricted profile comply with PSS (#117543)
    c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman
    05b3beb7f02 Create e2e test for CSIDriver endpoints
    d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder
    931cc96b8d4 remote windows condition when #116693 is merged
    0bff705acd8 Preserve code blocks in templates.Normalizer (#118029)
    7470a94f5a9 add some log for debuging
    6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code
    08ce5805769 Add ProxyServer.platformSetup
    e0b7f31ce6e use standard base image in dra dev
    149f4878a70 Simplify DeferCleanup.
    dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node
    1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter
    1b206399f6a fix using stale binaries in local-up-cluster
    ece68cf8337 Fix update-vendor.sh logging
    cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor
    96d48de9b97 add OWNERS for cmd/prune-junit-xml
    86a258b13a2 kmsv2: ignore cache key expiration on reads
    89439b570fc test/e2e: use agnhost latest version in the manifest
    b30720fc9f0 Add test for starting kubelet with a CSI volume mounted
    ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers.
    048938f1d85 hpa: cleanup `currentReplicas` code
    0f5535ea259 registry/core/service: remove incorrect comments
    2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename
    0789bbe9f7a Update k8s.po
    b6364dddfe6 update webhook test to go 1.21
    d8db9640fab kubeadm: remove function pointer comparison in phase test
    2658a2b627f Make connection lost retryable in webhook
    ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins
    e21cf9a54e9 Setup e2e_node to support testing on ARM64
    ec8d94f2057 Grab logs from all the containers when DNS related tests fail
    182cd425d3b graduate LegacyServiceAccountTokenTracking to GA
    337728b0255 Improve backoff policy in reflector.
    0fe27a06f99 Cleanup the Job controller handling of terminating pods
    c74790e266a remove redundunt type conversion, unused variable...etc
    07c94553608 fix apiserver InstallAPIGroups slices out of range
    aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency
    19ae2de19cb kubeadm: speedup init by 0s or 20s
    e4102d5e300 Test APIService safe handling at startup
    3be3997193a Fix waiting for CRD sync at server start
    71ec9df5b61 update image tags in manifests to reflect the version listed in the source
    a10ff53d8e6 Reword the event message to read better for a single secret
    b2eae2f92e9 Support podman for building release images
    6b4251c0fdf Remove statefulset from logcheck.conf
    3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet
    d9b941b7827 Remove undesired verbose fields from log
    bea71a3e4ee remove unused pv informer from expand_controller
    4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed
    a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release
    bab8002fb38 CHANGELOG: Update directory for v1.24.14 release
    80b9c853613 belated cleanup of some kube-proxy stuff for old versions
    e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release
    c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release
    526d45416fb update err status code check in transformation metrics
    5a75a03a774 Improve warning message
    b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket
    fc4fb004cf6 add reviewers and labels to yamlfmt
    93462377120 Update docker/containerd/runc versions and capture more logs
    885f3d7a7df Sort and limit to the describers the return (string, error)
    9e9a6cde4b8 test/integration/scheduler: fix data races
    b035c373db8 build latest sample-api-server for test/e2e
    bafae5c0764 rename err to lookupErr
    8b9cbe62025 fix false positive kubectl plugin unit tests
    b9950b5192d Drop zeitgeist from tools go.mod
    36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions
    d83c3ce7ca8 make rbd and iscsi test images in parity with the test code
    9de2846c72c remove glusterdynamic provisioner images reference from tests
    763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment
    261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
    666be79d670 legacy names of volume plugins have been gone a LONG time
    8b4840aa374 clean up unsupport etcd version
    e0ebac6c9ca drop redundant NArg check when looping Args
    82c40e3697e drop redundant NArg check when looping Args
    829bcea7634 remove vestigial BUILD file
    0616d15712b Fix perf-test by increasing the error margin
    46ed70ecac5 Bump runc to v1.1.7
    51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect*
    1daf74d25c4 Initialize data if nil
    b81cfb9cb8c Update vendor
    15c5713015e managedfields: Remove gvk from SkipNonApplied
    b52e57c589a managedfields: Improve/strengthen version checking for Apply
    559d12fcce0 managedfields: Create NewFakeFieldManager
    45853e20ae5 openapi: Create client -> TypeConverter function
    45603efecb7 Create e2e test for PodEphemeralcontainers endpoints
    ebaf49dbd70 Export DefaultServerUrlFor utility function
    5519b89a28e Validate lock identity
    e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version
    c99cf53a108 e2e: deflake hpa e2e custom metrics tests
    247ea7fc780 use upstream etcd github path instead of redirecting one
    6616e1f2385 update etcd version in install.sh to 3.5.9
    0e456dcf866 Clarify localhost nodeport comments/errors
    a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP
    2ca215fd994 Add NodePortAddresses.MatchAll()
    d6e488b998e Changing annotate PrintFlags from annotate to annotated
    d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/*
    8c6c1e53194 plugin_evaluation_total metric support preScore/score
    3680a5230c3 Bump docker/distribution to 2.8.2
    3ac74973610 Chore: cleanup in interpodaffinity
    073b4cf66ad test/e2e/dra: fix kind cluster creation
    3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1
    19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class
    517c5b75c5d Update unwanted deps
    d6d1dbdd82a Update kube-openapi, drop mapstructure
    a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election
    7c554ea1d91 Regenerate discovery fixtures
    2ab6fd3590b Capture discovery API output in test fixtures
    3867569ae27 codegen
    0819d342040 using parsers in applyDefaultImageTag
    7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash
    f0f92853ad8 Add api-machinery TL owners permissions for jpbetz
    e4dd6f68dc8 remove CSIStorageCapacity featuregate
    9ac657bb94e Make NodePortAddresses explicitly IP-family-specific
    f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy
    1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported
    d85b91f343b scheduler-perf: measure workload runtime and relabel workloads
    aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors
    83fb5a50bc9 dependencies: bump k8s.io/utils
    daebf1c735d Simplify plugin resolution check function
    f562375c8a6 add changelog for kube-addon-manager v9.1.7
    be4c4a51ea2 Update pending_eligible_endpoints.yaml
    d34d4755ae2 Promote APIResources e2e test to Conformance
    6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter
    a0133b7cc47 proxy/ipvs: added daman1807 as reviewer
    dcefc42b35a update vendor dependencies for the change
    ae749238786 etcd depdencies are updated to v3.5.9
    13cef6a7549 cleanup unused variables for v1beta2 component config
    815578295ae Revert "support short name for flowschema and prioritylevelconfiguration"
    72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations"
    45836971f27 cli: replace intstr.FromInt with intstr.FromInt32
    8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket
    ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages
    ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner
    196e2f041b1 Update the cgroups v2 toleration in local-up-cluster
    7248b9263f0 Fix comments on InformerFor
    6ac1bae2815 test: Improve debug output of init container tests
    1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod
    166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept
    8bd94dfa762 kubelet: Organize and document kubelet pod-related members
    bb568844b67 kubelet: Separate the MirrorClient from the PodManager
    80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod
    e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods
    f8086f2dac1 kubelet: Convert IsMirrorOf to a function
    02960a8253e kubelet: Remove unused mirrorPodFunc in eviction
    1168b118750 Stabilize local-up-cluster in our CI
    3dc4eea8896 proxy/service_health: release read lock early
    655f2f74010 replace build to build.sh
    cc1251123ba use wait to avoid blocking the SIGTERM handler
    808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier
    4b50c4bb016 Update --image-gc-low-threshold option's description
    3da79e2850d OpenAPI V3 invalid document checks
    cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6
    feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual
    7681135f1b1 etcd: Build image 3.5.9-0
    7a4787ade10 openconsensus update to v0.24.0
    82d1e356de4 deps: go-gcfg update to the v1.2.3
    f03b5cdc083 update containerd/ttrpc to v1.2.2
    dd49af86b7b [UT] add ut for pkg/client/conditions
    f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager
    eb1483fe64d user --prune-allowlist in kube-addons.sh
    20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod
    2e2afc7fd27 Job: Use generic Set in validation
    1ffe3f467e8 lavalamp is taking a long break
    1ea17254bf0 hack/tools: bump logcheck to v0.5.0
    3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log
    8c82855467b When expecting pods count only active ones
    de882f5193b Job: Replace deprecated pointer utils with supported ones
    8f11f5bb2b5 DRA: use containerd 1.7 in kind image
    123845da886 Log a warning if a ImagePullSecrets does not exist
    3f3e1d507d0 add new metrics for the internal client-go transport generator
    e7c679c362c cidrset, multicidrset: directly use getIndexForIP method
    fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging
    b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging
    bfb4f8b7071 etcd version monitor build go version update to 1.19.9
    0ae902fca4c update golang version of etcd build to 1.19.9
    3b634de6ffc test/e2e/dra: update README
    5fdeaa8e42c update for feedback
    6f23c774085 QueryParamVerifier falls back on invalid v3 document
    d5f4b9634c6 DRA: fix image build on Mac
    569695b0226 e2e/network: setting --max-time for curl
    5fd5768ef32 kubeadm: Make etcd member removal idempotent
    164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log
    a5575425b03 add no resources found message to rollout-status command (#117884)
    c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions
    11f1d241654 unit tests: Fixes kubelet util unit tests for Windows
    3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error
    4634073d0b9 Use getter function for plugin subcommand resolution
    2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil
    e3d5feb76c4 fix HPA plain metric calculate
    6607834207a Use the same report files as before
    9150e6b55a1 s/of referencedFrom/from referenceFrom/
    4bbf611773d Retool validation for pod HostNetwork ports
    ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults
    ef796dca9bb Simpler openapi gen - subprojects do themselves
    93b2845bec7 Codegen: subprojects openapi
    4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh
    c3971002c9d MinimizeIPTablesRestore to GA
    8f229057484 [refactor] refactoring flags and options in Expose cmd
    82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd
    5289a7b029f fix fd leaks and failed file removing for test directory
    b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission
    982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver
    73aeed8766c fix fd leaks and failed file removing for pkg client-go
    f49cc5eb113 add remove_file in client-go util directory
    c8737346db4 Export GOMAXPROCS environment variable
    e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791)
    308ab380d7c Add unit testcases of refMap.
    23ac0fdaa52 APF: Dynamically compute retry-after based on history
    99ebc8d9f82 Tweak annotating kubemark nodes on startup
    aab02d52f4d Fix make etcd image failed
    91570a36614 promote ServiceNodePortStaticSubrange to beta
    e79daae6823 Chore: clearify need update test cases
    fb4d0150b96 Convert apiextensions-apiserver to new codegen
    29913a89735 Convert code-generator/examples to new codegen
    643bf1b0362 Convert kube-aggregator to new codegen
    1e0b7aab756 Convert metrics to new codegen
    e368f1b25bf Convert sample-controller to new codegen
    d0e5adb58bc Add a new way for subprojects to do codegen
    05b3449346e kubeadm: Add etcd client unit tests
    fc1b2287798 kubeadm: Use internal etcd client through an interface
    e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
    235c261196e Job: Fix a misspelling
    b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
    f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible
    bbf5c03dd80 Add NodeLogQuery e2e tests
    ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag
    16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter
    d3237b72587 unittests: Fixes unit tests for Windows (part 7)
    ccb4ca89549 record podUID in refMap in watchBasedManager
    e4340f0d9bd Job: Use generic Set in controller
    22d0aa1d04a remove DevicePlugins featuregate
    27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name
    2ebc0cc0257 remove unwantedReferences
    57969c1b52c Fix etcd3 config changed
    4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable
    e560df770e3 respect local GOPROXY setting in build/common.sh
    c56839c0a1e etcd: Update version to 3.5.8
    64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r
    936265e8707 Add podUID in AddReference and DeleteReference
    cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy
    a862a5f2d24 Use the right executable ss/netstat in log message
    ae08fe1e199 ProbeTerminationGracePeriod promote to GA
    2cb215e1091 Add all describers to the exported DefaultObjectDescriber
    5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check
    3e57a0bd138 Add go.work and go.work.sum to .gitignore
    008576da073 Improve and simplify maintenance of APF bootstrap objects
    194ac957ad3 make resize of hollow objects more verbose in start-kubemark
    c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta
    4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2
    1c45bacfb0e mount-utils: fix flaky test 'TestFormat'
    6a5cf99aad1 pkg/proxy: human-readable messages
    c2c8b8d1783 pkg/proxy: using generic sets
    359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc
    edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
    e807a6aec57 Disable NewVolumeManagerReconstruction feature gate
    0c9f55588c5 Simplify creation of default KubeProxyConfiguration
    ec2cc36404e e2e: disable jig.ExternalIPs
    b849ff57b85 e2e reasonable grace termination period timeout
    791573ddb60 promote ProxyTerminatingEndpoints to GA
    b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage
    5aca41af50f [local-up-cluster] Use the kubectl we built
    8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level
    034528a9f04 scheduler perf: add DynamicResourceAllocation test cases
    1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9
    19f7cb23c8c e2e agnhost functionality to RST TCP connections
    63b69dd50ce Add support for CRI `ErrSignatureValidationFailed`
    859359ad6ae Fix strict linting
    a7035f54595 Pass Context to StartTestServer
    2d866ec2fc8 Teardown only scheduler in integration tests
    8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
    cede96336a8 Depend on k8s.io/utils cpuset
    9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749
    10a869fc752 Remove duplicated config fields from ProxyServer
    1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    a3848714f55 dependencies: update gh/Azure/go-autorest to latest version
    17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go
    c53cc4fe0db Update distroless-iptables to v0.2.4
    c4575c34382 Fix up detect-local-mode validation
    3734fe7ab1d Remove some useless error checks
    19885264f3d [go] Bump images, dependencies and versions to go 1.20.4
    d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified
    d22b9310e6e Allow override of prerelease/buildID portions of version at runtime
    36b760a9317 upgrade etcd deps to v3.5.8
    7c5573d326d Fix cmd, integration, and conformance tests
    69eccd41b89 endpointslice: reduce visibility of vars/funcs
    933b665c18c Upgrades spf13/cobra to 1.7.0
    3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section.
    9d19c207d22 fix: fixes flake in TestKMSv2Healthz
    561548e86c4 unit tests: Fixes kuberuntime unittests for Windows
    5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers
    a40810a2d9d Add comment about removing the feature gate
    e51e5962d5a Use early return pattern to avoid nested conditions
    e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod
    7be3f8e43f7 Remove old metric scheduler_goroutines
    e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind
    d96f83f02f9 windows-tests: Update connectivity check util function
    e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
    d257d5dfdc4 Trigger re-sync on any change to providerID
    40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA
    d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669)
    5fff8cae749 dependencies: klog v2.100.1
    d55b67b3490 Clean up brace whitespace in **/validation_test.go
    2ad2c15c9ca Update copyright year to 2023
    b464d084278 Remove custom fake svc lister in favor of regular indexer
    b899ae48477 remove genericfeatures.DryRun in 1.28
    c6bdde8051c Create e2e test for APIResources endpoints
    ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate
    077cc20f8af fixup patcher test to include field manager
    ad5cda4d219 remove checks for fieldmanager from handlers
    4721ec7519c include apiextensions types in apiextensions generated openapi
    08e756342c2 fix scale not being given gvk in CRD openapi schemas
    ffb9c076d77 add OpenAPIV3 config to tests and server options
    c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter
    94909af68ae supply deduced typeconverter to apiserver tests
    302daa889c5 Throw error if OpenAPIV3 config is not provided
    1b766839677 filter out directives before taking patch value as-is
    6de6cd0a658 add integration test for nested $patch in SMP
    e00a9c3a0b1 add subtests
    ffeec1f4d44 Update compatibility data test
    ec997d5433a Generated files for NetworkPolicyStatus removal
    bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus
    0fcf42f3211 Move test double queue to test file and unexport
    208af2d1d83 Localize SpyWorkQueue to cloud-provider for now
    a15013ec8b1 Document RetryError properly
    73bc9861d25 Improve error logging in processNextServiceItem
    18e978a89df Improve RetryError GoDocs
    de34540248a Update kube-openapi to fix race
    d0677f528c0 Add json tag
    69bc6855568 node: podresources: graduate to GA
    04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields
    aaa30439bdd reduce util pkg for testing in tempdir.
    4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32
    026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32
    0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32
    1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32
    5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32
    94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32
    4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32
    79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI
    14952cef5b7 kubelet: Move Linux stats to a Linux specific file
    fc8b4657c18 Add tests
    ea4ce5dc28e Alias api/errors instead of stdlib errors
    a179203bdba Support specifying custom LB retry period from cloud provider
    da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs
    e28f3de6568 Revert "proxy startup-time config handling cleanup"
    d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495)
    34d3c7520be update Deps gopkg.in/warnings.v0	v0.1.1 to v0.1.2
    944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs
    671a3f43fdf Correct the changelog for GlusterFS removal in 1.26.
    859690d72a4 Added support for image credential provider for windows and arm64 on gce
    28c573358b0 test for init container restarts
    d727df1741e node: device-plugin: e2e: Additional test cases
    3dbb741c976 node: device-plugin: add node reboot test scenario
    a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure
    96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring
    282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
    d509e79837d node: device-mgr: e2e: Implement End to end test
    dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist
    53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests
    2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints
    f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs
    48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
    c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane
    4d9261c7567 Fix LocationOfOrigin shows up unexpectedly
    76fe41a996e chore: update cgroups and ttrpc versions
    0dbeff4b6e6 remove GA feature gates in 1.28 about network
    4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate
    fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR
    258c4c4251e Remove duplicated config fields from ProxyServer
    9d4f10f5d28 Fix up detect-local-mode validation
    5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device
    5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function
    f24d1d2c950 use go 1.19.x for etcd version monitor compilation
    91ee58050f8 wait: fix PollUntilContextTimeout godoc comment
    b3e0bc88640 scheduler_perf: let the test decide which informers are needed
    969d28b12b7 scheduler_perf: refactor common code
    91df71be549 correct etcd base image reference in the doc
    6b40cd8cd37 update test/conformance/image version to v1.4.2
    6c8be35fa86 update the etcd base image to v1.4.2
    1eca720dcc7 Refactor some watchcache tests
    7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging
    54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging
    152c1a02723 Chore: Replace re-initialized variables with create new ones
    37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging
    eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging
    550d4c00746 scheduler_perf: support test case selection via labels
    79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers
    217196c59fa Add ROX storage tests (#114628)
    6a4cf352b8b remove tracking annotation from validation and webhooks
    2af662b05fe Refactors discovery content-type and helper functions
    170d5ef9fa0 code cleanup for kubeadm
    902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver
    0a582431593 node: device-plugin: e2e: Add test case for kubelet restart
    09100804722 node: device-plugin: e2e: Provide sleep intervals via constants
    4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit
    fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario
    5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message
    5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
    0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error
    8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter
    28519e240ed Fix scheduler performance regression after adding plugin metrics
    c96188a38b5 remove seccomp profile path
    96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner
    0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version
    4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable`
    6da128bdb3e dependencies: go.uber.org/atomic v1.10.0
    87230578802 dependencies: update go.uber.org/multierr v1.11.0
    f7ce6f834a1 Chore: add ipfamilies tweak functions
    78b8af9fed3 scheduler_perf: update throughputCollector
    a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1
    da3e7e37816 stop watcher when error occurs
    018564b8cfc change the seccompProfile field description to match the imlpementation
    6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag
    3c45b61b643 [KCCM]:  have providerID trigger re-sync, but not be required for nodes
    a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
    e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error
    3229deda37b register missing metrics
    24e68b3c6ac use client-go metrics not only rest_client
    2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election
    3f247e59edf Refactor cacher.ListerWatcher code structure
    892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937)
    73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig'
    e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded
    78e6cb1cccb intstr: add FromInt32, deprecate FromInt
    88e2c344390 Enable a bunch of generic storage tests for watchcache.
    860329c04b5 drop v1.25.0 API testdata
    440d5910f7d Chore: add app protocol tweak function
    06993afdd6a Chore: cleanup whitespaces
    3d8f7233da9 Chore: remove impossible and redunant cases
    4a6bc66e40f updating microsft/go-winio package to latest version
    60d25c3ed77 improve remotecommand testing fuzzing the data stream
    d76f5dae67c Add a comment to roleRef to document that it is immutable
    959c90c1d9a Chore: add deletion timestamp tweak function
    4169d7d0283 golangci-lint: allow exceptions for Go naming convention
    4f8eba2a0be Chore: add finalizers tweak function
    28db34a231f Chore: add load balancer tweak function
    1c465c51e80 Chore: add service port tweak function
    0cc7369196b Chore: add LBIngress tweak function
    23c242770fe Chore: add etp tweak function
    2f6bc661dc3 Chore: rewrite newService function
    f9bab9a60b0 add --concurrent-cron-job-syncs flag
    bc00f5c071f Update cri-tools to v1.27.0
    c3384191ea6 remove validation GCE-ism
    28ac914bc54 Remove repeated info
    e0d5c4aa93e Move info where its most relevant
    0a508ad8067 Update `kubectl edit` documentation
    d0412928961 Add v1.27.0 API testdata
    7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations
    95fea2f2bff add test case for merging a patch against empty list
    3469bb05db7 kubeadm: fix unit test panic for TestNewResetData
    ed37e6986b6 uncomment exit trap to cleanup tmpdir
    63d44fdde58 retain KUBE_GOPATH on recursive kube::golang
    4d736a0435e cleanup update-mocks.sh
    726992f9db9 call kube::golang::setup_env before setting up worktree
    17db22d0558 Fix potential mutex usage bug
    39e52449f9f remove nodes resource from CoreDNS RBAC manifest
    7a14c5ad6dd ensure we can remove _output
    11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes
    104c208d0fb add Authentication tracking request/error counts and latency metrics
    65f3454c1d9 fix undefined convertion
    8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0
    6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0
    5c584269a79 avoid volume copy in checkAttachableInlineVolume
    2bbd07c0192 remove defunct interactive tutorial
    1d15354ccb5 update gofuzz dependency
    2cd23c8b17c Update go-logr dependencies
    062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory
    be6709044ad  etcd: Build image 3.5.8-0
    6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event
    eab66a687b2 cacher avoid double locking (#117410)
    a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer'
    0c54d9af6f2 Fix stomping os env in kubectl e2e tests
    766f6c3ad41 Include stderr in cred provider plugin errors
    eaba1703b1b enhancemanet: reduce calculation calls
    a8b808ee6ca Replace the deprecated ioutil methods in the test directory
    a959785f964 dependencies: udpate coredns/caddy to v1.1.1
    0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache
    45e836a968a Generalize few watch tests from cacher
    f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests
    7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv
    d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests
    e8d3a4a105c Cleanup environment in tests that call os.Unsetenv
    2181eea4843 Replace os.Setenv with testing.T.Setenv in tests
    cf125a35611 Replace os.Setenv with testing.T.Setenv in tests
    b9ef1603223 Cleanup environment in tests that call os.Unsetenv
    240fccd7668 Replace os.Setenv with testing.T.Setenv in tests
    89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests
    fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests
    29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1
    0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual()
    d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole
    e340325024d Fix nil pointer in test AfterEach for volumeperf.go
    453f81d1cae kubelet: pass context to VolumeManager.WaitFor*
    4de0d2c6f8f use generic set in storage/validation
    3ac77335303 Add `saschagrunert` to `sig-node-reviewers`
    7fb88eec73c support fieldSelector spec.hostNetwork
    4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8  to v0.3.0
    ff9ebfa90de e2e framework: control k/k/pkg imports
    ee99ca25ee6 Remove unnecessary if judgments
    1359ebcc5b0 fix doc mismatch
    a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers
    399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries
    efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack
    37ea51fd567 Improve the performance of map usage
    9c0153aef9e KCCM: add providerID predicate to service controller
    d3c103edce7 Re-work logic in shouldSyncUpdatedNode
    dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util
    40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet
    030debc1990 changelog: fix formatting issue with v1.27 change log
    4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release
    1b93abb9bac Move kubelet config API to e2e_node
    4e928c96b5e skip checks when topologyPolicyName is PolicyNone
    71a989e5e9c Fix CHANGELOG-1.27 correct
    06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature
    8d19c0002bb Add node check to vSphere cloud provider
    3b7c14e8cfb Remove unnecessary int type conversion
    36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0
    5bce18c98ec dependencies: update go-semver to v0.3.1
    d7270f4ba72 dependencies: update go-oidc to v2.2.1
    b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0
    1595d7f52d7 dependencies: update go-systemd to v22.5.0
    9cfdf989eda dependencies: update gh/fvbommel/v1.1.0
    6b70710b0d1 dependencies: xlab/treeprint v1.2.0
    6320b6843a2 dependencies: update netns to v0.0.4
    9e2bb40e158 fix typo annotation key notes.
    becf73a82b1 add invaild scope test case
    c4e1b01416e replace spew methods with dump methods
    a96358ac0fa Remove some useless error checks
    867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency
    2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints
    6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation}
    432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
    9c5a66e2080 Revert "CR conversion: protect from converter input edits"
    ed0124855aa add log includes pod preemption details
    0979d554435 unit tests: Skip flaky tests on Windows (part 2)
    2d06fad5163 dependencies: azure-sdk-for-go to v55->v68
    625c3025057 change pv recycler scrub cmd to find -delete
    c042837a761 truncate the precision at a millisecond for image pull event message
    804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer
    db5d74935ee optimize evict sandbox logic
    ccf7ddacfce replace ioutil with os, update doc
    5668399a87c Codegen: use openapi-gen via k8s.io/code-generator
    b23ab389b4f Add SIG ownership to controller/nodelifecycle
    375e3cf869b CHANGELOG: Update directory for v1.24.13 release
    f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release
    d567d61aa56 Fix a data race in TopologyCache
    a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation
    83a1774df2b CHANGELOG: Update directory for v1.26.4 release
    a7a8cd6e5de Codegen: subprojects: nuke existing files
    bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff
    9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff
    29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff
    dd7af241c11 Replace diff.ObjectDiff with cmp.Equal
    97bab44cae3 Replace apimachinery diff.StringDiff with cmp
    4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222)
    d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687)
    be101a748dd Remove some unused winkernel arguments/fields/functions
    8a790ac2e1b Remove unused ProxyServer.EventClient field
    9754386c764 Remove write-only ProxyServer fields
    b4c384ebfb2 vendor: bump runc to 1.1.6
    c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager
    4438208511e api: encode NamespacedName with lower case in JSON
    476e407ffd2 cacher: prevent a potential deadlock
    7cdffe37c1d update container storage interface spec to v1.8.0
    10a8ec5b2cc use case-insensitive header keys for http probes
    a6173fad88a Delete duplicate code in schedule.go
    5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception
    277c03fc799 remove these unrelated openapi files (#117051)
    9a468563070 remove reuse buf todo (#117033)
    5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002)
    0eec63fd687 fix the mistake in the release note
    02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note
    75f17eb38fc optimize watch-cache getlist (#116327)
    9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471)
    2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
    73eb7c09309 Codegen: easier to read logs for subproject output
    bbbb695060a Codegen: subproject: chdir to the project dir
    893ec0ca453 Codegen: simpler k8s.io/code-generator/examples
    af29cca6ced Codegen: new tools will not become part of 'all'
    5f7345deaac Codegen subprojects: consolidate generate-*groups
    95e614b3717 Codegen subprojects: deprecate "all" in scripts
    a94ed5b8ac8 Codegen metrics: include v1beta2
    8b68e063e14 Codegen subprojects: regen defaulters when needed
    5200f4b0d36 Codegen subprojects: reify 'all' into explicit
    201653aa870 Trivial change to reduce diffs
    901dea73073 Fix azure disk e2e after migration
    d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs
    ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release
    464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label
    9204e6b286e remove unused constant `expansionFailed` in expansion test.
    4491ba89171 rename variable delete to avoid collision to builtin variable
    d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker
    0020631985e test: Add node e2e to restart kubelet while pod is terminating
    aa73f06e569 scheduler perf: allow creating 0 items
    49bbf7c2681 scheduler_perf: fix race condition
    a869a898257 scheduler perf: remove cleanup func
    b039a2ff2c7 Add new contribex leads to sig-contribex-approvers
    9363afc6502 Fixing broken tests
    d102a6fea51 HPA Controller - Update Owners
    8d18ae6fc24 Use the generic Set in scheduler
    b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits.
    1dec97436c8 Fix typo at job_test.go
    046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0
    f138d29bf2d watchcache: currentCapacity acquires read lock
    c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota)
    ea74a2d877d cpumanager: fix typo in godoc
    1cce3b3e2f5 wait: fix incorrect suggested method
    d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work
    d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one
    26b35ce36ae Remove endpoint related RBAC from scheduler cluster role
    7fa3d54ea5b unittests: Fixes server journal unit test on Windows
    08a324bf512 cluster/addons: set metrics-resolution to 15s
    eba18d503cc cluster/addons: bump metrics-server to v0.6.3
    88e055059cd component-base: avoid data race in log format registry
    a2fb32870f3 test/integration/auth: fix data race
    1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2
    f91518b81a5 Add genericiooptions in allowed list of genericclioptions
    b4e4db336f6 More migrations from genericclioptions to genericiooptions
    5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create
    934516791c6 Swap assert.Equal parameters oders to follow convention
    2d06601b81c RBD:  e2e containers base image has been udpated to F38
    0518dffd259 iscsi: e2e containers base image has been udpated to F38
    8d9386fc402 Remove genericclioptions.IOStreams struct
    c3497b30aca More migrations from genericclioptions to genericiooptions
    00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions
    51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams
    e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
    3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined
    e1bcfd47da9 Sort unmounted volumes message in volume manager
    79b3126f00a skip clear quota if FSQuotaMonitoring is disabled
    0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()`
    731068288e1 correct storage class selection message
    cc8cd88a94d remove duplicate validation for csi
    978da1e8f13 remove GA feature-gates
    bda73bd1129 Refactor remote runners
    e389d140ae6 fix as suggested
    457bb58ebbf kubectl events: Support fully qualified names for --for flag
    1893f639d03 test: Fix flake in node e2e mirror pod tests
    ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread
    70369bfe299 remove GAed KubeletCredentialProviders
    5662566e03a Set GOMAXPROCS explicitly
    56755b8ffdb fix doc mismatch
    8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
    dac85fe2d3f [KMSv2] cleanup comments in v2 proto api
    feba08a6947 Create local copy to avoid potential race condition
    29503fd8d45 openapi: Make file client more easy to re-use
    ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate
    db92cc13880 ftr(etcd): add benchmarks
    05f4e497f1d Deflake TestGetListNonRecursive
    906f0607efc Clean up kms test
    d3f6cb717f7 update conformance yaml
    7bfcfc4d5de docs: fix storage e2e test README
    f7765eb0d42 Add damemi to emeritus SIG scheduling approvers
    bbbd366cf39 Move damemi to sig-scheduling reviewers
    397cc73dc9b delete unused functions in pkg/controller directory
    47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads
    449f847630e [KMSv2] update ci script and add readme
    86e1f4b9d10 e2e node: bump all nodes ready timeout
    beb329f4bfa Do not look at VPC-related resources outside the cluster's network
    8d92cfb1316 Added conversions to/from NamespacedName
    df0a2538205 generate ReportingInstance and ReportingController in Event
    e9b384f5a75 fix typo
    f638e2849fb replaced spew.Sprintf with a util pretty print function
    838ed7feb53 Improve the performance of map usage
    f6fa250e304 Add API approvers
    03be789851d Fix sample-controller docs after moving to context-based cancellation
    99ad88a2611 Remove unnecessary int type conversion
    f2fe1fff655 [KMSv2] add tests for generate transformer
    479fcf0b13f kmsv2: validate encrypt response at DEK generation time
    8d644fbc725 return skip in volumerestrictions
    ade63dd7647 cronjob: add ut for namespace terminating cause no extra log
    9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError
    1031977b7d8 kubelet PodResources API: follow-up review comments
    ec9515a828e Add structured alternatives to strings in client-go/tools/cache
    2b01f63b115 move check for noop managed field timestamp updates
    07ebb22db92 added known issue for 1.27 release
    80480f8e215 combine conditional checks
    7a6d58001b7 handle event errors caused due to terminating namespaces
    af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE
    daa1d287e4d fix GetPodVolumeClaims in comments
    c14068c2023 deflake: Add retry with timeout to wait for final conditions
    fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods
    27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging
    ddc13e983b5 Chore: add selector labels tweak function
    4cab11f26f0 Chore: add persistent volume claim retention policy tweak function
    ba9dfe686fd Chore: add persistent volume claim template tweak function
    f97d3cf7486 Chore: add rolling update max unavailable type tweak function
    1b17b4fa799 Chore: add rolling update partition type tweak function
    f3ffeae426f Chore: add update strategy type tweak function
    5e0161b3de8 Chore: add labels tweak function
    ec34891782c Chore: add annotation tweak function
    b907d5af49f Chore: add finalizers tweak function
    18ba7c0e433 Chore: add ordinal start tweak function
    3eb34d8b6ce Chore: add min ready seconds tweak function
    2161d095fa1 Chore: add template restart policy tweak function
    4418a9f5906 Chore: add replicas tweak function
    7fc08e0ce70 Chore: add pod management policy tweak function
    77c7d6efcf6 Chore: add basic make function for stateful set
    4a667a1026c fix: remove case sensitive checking of probe headers
    81a0ea3da3c return name when error occurred in csi-translation
    a2cf4e73459 use describe node to print node events as well
    e5674903178 fix: remove last ip when apiserver was shut down
    f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration.
    db5590a194b Remove sig-network-driver-approvers alias
    fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS
    2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network
    10b36075df6 Cleanup: use Set instead of map in endpointSlice utils
    eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting
    94f2d351644 Wire bootstrap token authn secret lister only when it is enabled
    d71aea434e5 docs(readme): add go report and latest release badges
    a780544f58c add log for kubemark start
    d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods
    41ed0e12341 Add an image for kubectl
    1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark
    8d3a498c879 don't ignore UID impersonation in webhook clients
    364b66ddd65 admission ApplyTo: take in clients
    630af564be3 Update cri-tools to v1.26.1
    1aeec10efb7 DRA: get rid of unneeded loops over pod containers
    017bb93887f certificate controller: use contextual logging
    c94a9a14d8d update gofmt
    8cbe9fe543e trigger update event when service ipFamilies changes.
    b430464df06 gce: podresources:  don't disable on windows
    6b4ffdb9f75 node: re-implement Localendpoint on windows
    195fc2f5162 kubelet: podresources: rename variable
    d6d19a290de Simplify statefulset fuzzer
    376bda41c74 undeprecate kubelet --provider-id flag
    8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings
    c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos
    31e1df9ae6c Bump Konnectivity to 0.1.2
    aadb87bdcdb kubelet: Do not mutate pods in the pod manager
    13192176002 Remove vestigal err check from CEL admission controller.
    a6ffbb41f8e Squashed commit of the following:
    bbf2b968c89 skip pod resource check when request is zero
    64ecb161d47 Codegen: git grep returns non-zero if no match
    241d46d1dd5 Codegen: deepcopy needs to run before swagger
    3405853e6d0 Codegen: clean up stray ls-files use
    3dd0c416639 support short name for flowschema and prioritylevelconfiguration
    e2b10505162 add some buff for pod initial restart count that is not zero
    efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests
    b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted
    4d3f92d5f75 Update toplogy keyset initialization
    a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating
    37aff025ff8 cleanup: remove Clear for fake job controller
    b7cdbca2374 Add more tests that should exist but don't for some reason
    67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver
    5dca1be0160 Add tests
    bab2c18c246 Add jsonpath support for explain
    77692f1b1c5 fix linting
    fabf1cba947 Add warning about TLS 1.3 cipher suites
    6ad156d80ee Cleanup: modify some sentences about statefulset
    13354d3da4d Add note about TLS 1.3 cipher suites
    c50c19d13af remove unused not api functions in the pkg/apis directory
    b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring
    a3b44b574fb cluster/gce: Fetch image from image family
    26f0325734c fix typo in volume util
    0311a4e8e6d Fixed typo
    9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e
    6f19e8656f5 Apply suggestions from code review
    1134134e727 kubelet/cm/containermap: Improving test coverage
    87f094c5e88 Replaces path.Operation with filepath.Operation (part 2)
    5111bced373 fix test cases that may be incorrect
    9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy
    bd778449f4d versioning of CRI API
    34d980e7709 i18n: Fix bug where package-level variables are not translated.
    ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go
    fd4adba9acd add sig/storage label for pkg/controller/volume package PR
    2557b35202f controller: add non-exist node test case
    95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug
    76c8765bda5 ensure etc-host file permission is 644 whatever umask is
    73883c71574 Remove default annotations from copied storage class
    f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver
    583ea17efd6 Add parameter to set SecurityContext for containers in tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
08435d20b1 recipes/classes/scripts: Drop SRCPV usage
bitbake has been enhanced such that SRCPV is no longer needed in
PV to handle updating git hashes and task signatures.

We can simplify our PV by dropping SRCPV

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Martin Jansa
884c0bbbc0 kubernetes: fix installed-vs-shipped with usrmerge
* fixes:
ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package:
  /bin
  /bin/k8s-init
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
kubernetes: 2 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:47:55 +00:00
Chen Qi
fcf7968f1d kubernetes: set CVE_VERSION explicitly
The CVE_VERSION defaults to PV, but in NVD database, there's no
prefixing 'v' in database. So set CVE_VERSION explicitly for better
CVE scanning.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Chen Qi
3ce3ef9486 kubernetes: do not strip binaries at build
Yocto/OE has its own way to control binary stripping. So don't do
it in the go build process. Otherwise, we'll get empty dbg packages.

Setting DBG=1 solves this problem, as stated in comments in the Makefile.
"""
  # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging
  # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug
  # information.
"""

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-05 23:46:19 -04:00
Bruce Ashfield
da0cfbb0b4 kubernetes: update to v1.27.1
Bumping kubernetes to version v1.27.1-89-g2555e0f90e8, which comprises the following commits:

    2eccb77b2c5 OpenAPI V3 invalid document checks
    642ea896178 update for feedback
    0457fbc83b3 QueryParamVerifier falls back on invalid v3 document
    4cd33af1419 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
    ce458add6f1 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
    3a56c1e954b Fix CHANGELOG-1.27 correct
    fa86f2dce30 benchmark test to evaluate the overhead of podMatchesScopeFunc
    4a2e6971f7d Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
    c041924dd10 Update podFailurePolicy comments from alpha-level to beta
    7f9b3cb8540 Disable NewVolumeManagerReconstruction feature gate
    3324649c1c6 releng/go: Update images, dependencies and version to Go 1.20.4
    ae2f576d0b7 Bump konnectivity-client to v0.1.2
    8af1ce5863d Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
    940b6892a1e node: device-plugin: e2e: Additional test cases
    4cf566e32e9 node: device-plugin: add node reboot test scenario
    d67481c4784 node: device-plugin: e2e: Capture pod admission failure
    6f5e29e26c4 node: device-mgr: e2e: adapt to sample device plugin refactoring
    367e3d7c471 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
    d241f58d8c8 node: device-mgr: e2e: Implement End to end test
    aac4c15e624 node: device-mgr: Handle recovery by checking if healthy devices exist
    b157e1741fb node: device-plugin: e2e: Add test case for kubelet restart
    5278e9c02cd node: device-plugin: e2e: Provide sleep intervals via constants
    b3c58acde98 node: device-plugin: e2e: Update test description to make it explicit
    0cd0fe70aa1 node: device-plugin: e2e: Isolate test to pod restart scenario
    ed8d4e1d6a5 node: device-plugin: e2e: Annotate device check with error message
    4899dc75dde node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
    c81ec1ae5b0 node: device-plugins: e2e: Refactor parse log to return string and error
    86904a7c580 Update kube-openapi to fix race
    ee1d7eb5d82 Use absolute path instead requestURI in openapiv3 discovery
    bbca939c661 proxy/ipvs: don't bind nodeips to the dummy device
    ca1e563141a proxy/ipvs: add a GetAllLocalAddressesExcept() function
    3ce0c108fe9 Refactors discovery content-type and helper functions
    574829867a9 Fix scheduler performance regression after adding plugin metrics
    192e9dae316 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
    8d0ac2f6f8f Fix bug where CEL listOfString.join() results in unexpected error
    57e67a91e39 Fix directory mismatch for `volume.SetVolumeOwnership()`
    d0514936f3a Fix stomping os env in kubectl e2e tests
    7a6640798a7 KCCM: add providerID predicate to service controller
    8221a54e1ee Re-work logic in shouldSyncUpdatedNode
    a9d07f4e9ef add log includes pod preemption details
    9ef90afb4fb verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
    b598ea5c392 deflake: Add retry with timeout to wait for final conditions
    2eb94fa835a kubelet: Mark new terminal pods as non-finished in pod worker
    ae07535c855 test: Add node e2e to restart kubelet while pod is terminating
    861e1935e2a kubelet: Ensure pods that have not started track a pendingUpdate
    ae92fd28072 changelog: fix formatting issue with v1.27 change log
    95feac5269b Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1
    4c9411232e1 Release commit for Kubernetes v1.27.1
    2c81ecc2e29 use case-insensitive header keys for http probes
    1601bb75401 fix: add the bug as a known issue o on the v1.26 release note
    fddf859d6a5 kube-aggregator: correctly use client-go TLS cache with custom dialer
    845ba3e3a23 Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
    a1f97a35fcb Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
    1da781e29b3 Revert "CR conversion: protect from converter input edits"
    f564f7a3559 api: encode NamespacedName with lower case in JSON
    e827a4b61f5 Do not look at VPC-related resources outside the cluster's network
    d662e339aa5 kubelet: Do not mutate pods in the pod manager
    d977e7e0dbf Fix azure disk e2e after migration
    e599722bc59 vendor: bump runc to 1.1.6
    25b061d8202 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
    854c72766bb fix: the volume is not detached after the pod and PVC objects are deleted
    398e38784e7 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0
    1b4df30b3cd Release commit for Kubernetes v1.27.0
    2b6072ba00c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0-rc.1
    ad18954259e CHANGELOG: Update directory for v1.27.0-rc.1 release
    80bc6ffd0df Release commit for Kubernetes v1.27.0-rc.1
    951f8dcc965 Return error for localhost seccomp type with no localhost profile defined
    4e0bc2397da Update publishing-bot rules for release branches to Go 1.19.8
    1972dd10058 Do not log entire pod struct while attaching the volume
    b19c362bf52 Update distroless-iptables to v0.2.3
    2a69edb43de [go] Bump images, dependencies and versions to go 1.20.3
    b5dd5f1f3a7 Investigate and fix the handling of Succeeded pods in DaemonSet
    873127e3b04 Export WebhookHandler struct because some CCMs use Run directly
    735bbc135c3 Clean up formatting
    27ad623b3d1 Skip vendor directory when removing generated files
    63b5ca69f1f .*: update vendor dir and cleanup
    1ad7cacba59 publishing-bot rules for the new release-1.27 branch
    b83600de01e fix  nil pointer dereference panic for deprecated metrics
    5469c198e5d kmsv2: validate encrypt response at DEK generation time
    0e9dd5c51d8 Call function that validates in-place vpa resize policy

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Martin Jansa
cd816688c5 k3s, kubernetes, nagios-nrpe: fix Upstream-Status formatting
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:41:38 -04:00
Chen Qi
a969fd9041 kubernetes: make CC for amd64 match other architectures
Change 0001-hack-lib-golang.sh-use-CC-from-environment.patch to also
remove the 'export CC=xxx' for amd64. The original patch is a little
strange, it removes such statements for other archs but leaves amd64
untouched. If we're using CC from our environment, we use it for all
targets.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-27 22:13:43 -04:00
Bruce Ashfield
8fcd817417 kubernetes: update to v1.27.x-rc
Bumping kubernetes to the next release candidate (april 2023).

We refresh our $GO patch, drop the need to do release artifacts
preparation and add a new INSANE_SKIP for kubelet.

But otherwise, the build and content the same or similar.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-27 22:13:43 -04:00
Bruce Ashfield
2119189361 treewide: bulk update patches with status field
While the insane.bbclass upstream-status check hasn't been made
default, users of meta-virtualization may have it enabled in their
distros .. so the effect is the same. We must have this tracking
tag in out patches.

This is a bulk update to add the tag and silence the QA message.

As packages get updated, the normal/routine process of checking
the patches will continue, and the status fields may (or may not)
get more useful.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-27 10:32:06 -05:00
Guenther Meyer
bcc7d479bb kubernetes: fixed typos
After upgrading from honister to kirkstone the build always failed
during the package_write_ipk step, because the package name has
been overwritten because of the typo in FILES.
While investigating, I discovered another typo in class-devupstream.

Signed-off-by: Guenther Meyer <g.meyer@signum-media.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:47:28 -04:00
Bruce Ashfield
d9af46db9a kubernetes: fix more TMPDIR references
Changing the clone location of kubernetes allows us to remove the
vendor symlink "fix". This reduces the number of TMPDIR references
in the binaries.

kubernetes takes care of most of the rest via using asmflags and
gcflags interally which specify -trimpath, but unfortunately these
flags are being recorded into the binaries and leave us with 4
references to the TMDIR:

  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes

We leave these for now, as attempts to remove them have broken
the build, and kubernetes uses 'go install' versus 'go build' to
construct the binaries .. making our normal solutions non functional.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 14:00:46 -04:00
Bruce Ashfield
f1c385030c kubernetes: update to 1.24 release
Bumping to the 1.24 kubernetes release from May 2022.

We refresh one patch, and drop another as the build race looks to be
different (since it is no longer installed seperately).

Otherwise the build is the same, and smoke tests have passed.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
420cb45082 kubernetes: inhibit package QA warning
WARNING: kubernetes-1_v1.23.6+gitfbcfa33018159c033aee77b0d5456df6771aa9b5-r0
do_package_qa: QA Issue: kubernetes-misc: ELF binary
/usr/bin/kubectl-convert has relocations in .text [textrel]

This textrel is acceptable, so we can inhibit the warning.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
ebd4e07b77 k8s: update to 1.23.6
Bumping kubernetes to version v1.23.6-rc.0-16-gfbcfa330181, which comprises the following commits:

    1e8f6d51484 Copy request in timeout handler
    edd7a386c61 kube-up: use registry.k8s.io for containerd-related jobs
    3194c87ba25 e2e: Wait only for the service account
    a62ee8e5c3b e2e: Wait for kube-root-ca.crt to be created
    651b1fa1cce Include pod UID in secret/configmap cache key
    33d089b173c Move kubelet secret and configmap manager calls to sync_Pod functions
    7f02733e4d8 test: Verify that nodes do not transition to Failed while ready
    77865d3db93 test: Add E2E for job completions with cpu reservation
    b51d11be7a4 test: Add E2E for init container pod deletion
    290cdbf8792 kubelet: Delay writing a terminal phase until the pod is terminated
    914475e2e9f Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
    b3b64745789 Release commit for Kubernetes v1.23.6-rc.0
    c285e781331 Release commit for Kubernetes v1.23.5
    01c2f1c6420 Remove apf_fd from httplog
    c52cd9c5920 Update Go to 1.17.8
    1a897af197a cluster/gce: update konnectivity image tags to v0.0.30
    d741174d7e1 bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
    0b8199041d1 fix dryrun when ca file exists
    903f164b679 fix regression introduced by PR 100320
    56bfc202e45 Add unit tests
    a5faf0b5ce2 Fix nodes volumesAttached status not updated
    4c85abf90bb Fix default config flags
    1570a75766b test/e2e/framework: include the new control plane taint
    60cd43c44e0 kubelet: Clean up a static pod that has been terminated before starting
    33863be9478 Add an e2e test for updating a static pod while it restarts
    621894de9d6 cronjob_controllerv2: do not filter jobs to be reconciled by labels
    c9f904304d9 kube-proxy: fix duplicate port opening
    f783e573f11 increase Azure ACR credential provider timeout
    ba2cd0ca3db Updating EndpointSlice strategy to retain node name in topology until field is set
    4e69dd88613 fix: do not return early in the node informer when there is no change of the topology label.
    68ea240512a /test/e2e_kubeadm: adjust label checks for 1.23
    2efffd62367 Ignore container notfound error while getPodstatuses
    9f5e25033b6 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
    d4b2d8cf961 Release commit for Kubernetes v1.23.5-rc.0
    e6c093d87ea Release commit for Kubernetes v1.23.4
    949798fe712 Add PDB selector patch integration test
    47fc5aea4a2 Revert v1beta1 PodDisruptionBudget select patchStrategy
    ef293a9ee95 test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
    799ffd58065 kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
    c465ceccb32 Update Go to 1.17.7
    f0eac451011 Use serializable struct for x-kubernetes-validations in openapi
    02d1a291c8b Make JSON schema round tripping test more strict
    30eff360132 ignore CRI PodSandboxNetworkStatus for host network pods
    34a8474e600 set secondary address on host-network pods
    14c399ec5e3 Deeply copy JSONSchemaProps.XValidations.
    9fe0c40c8e5 wrap error from RunCordonOrUncordon
    0d487176d3a Ensure the execHostnameTest() compares hostnames
    733c0ebc7c3 Revert "Fix comparison between FQDN and hostname"
    ebfa08cd39b service REST: Call Decorator(old) on update path
    92d09f90c01 add namespace in azurefile volumeid
    5830d1474ff fix: azurefile volumeid conflict in csi migration
    bce4e5ba5b1 Mark device as uncertain if unmount device succeeds
    4b868d09c98 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
    72506a8439c Release commit for Kubernetes v1.23.4-rc.0
    816c97ab8cf Release commit for Kubernetes v1.23.3
    f2c6108f462 kubelet: fix podstatus not containing pod full name
    398effdfe0d Fix bug with node restriction blocking pvc.status.resizestatus change
    6d08a56228a Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
    996d8fca977 Set max results if its not set
    9c31df589b7 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
    918dd8343f0 Release commit for Kubernetes v1.23.3-rc.0
    9d142434e3a Release commit for Kubernetes v1.23.2
    4935e0a527e Update k/utils to v0.0.0-20211116205334-6203023598ed
    38e9dce15f4 [go] update to Go 1.17.6
    28ad5463fda fix: remove outdated ipv4 route when the corresponding node is deleted
    dfea07a3b04 fix: delete non existing disk issue
    65b309c76d8 Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
    677eae51666 fix containers order after applying
    89d8be52ef4 generated: ./hack/update-vendor.sh
    04f3c5793c1 upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
    8c8fe66f7aa Execute sync before taking the snapshot
    4b1d9d80da7 Correct the feature gate string for RBD migration.
    50e813278cd fix: azuredisk parameter lowercase translation issue
    879947434c0 removed unnecessary log line
    88249a973a8 kubectl: add integration test for result reporting
    16a4de9268a cli: let kubectl handle error printing
    c5365784330 cli: avoid logging command line errors in more cases
    26dae30f913 Fix header mutation race in timeout filter
    81c8d0aad93 clear pod's .status.nominatedNodeName when necessary
    f61c4b18c42 use node informer to check volumes attachment status before backoff
    f4ba875cdfd When volume is not marked in-use, do not backoff
    e36b9382ecd kubeadm: remove the restriction that the ca.crt can only contain one certificate
    f4835a2cd3e flake fix: remove the error handler for cronjob integration test
    962ab763c5e Fix the leak of vSphere client sessions
    cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls
    d42a44fcb2f Enabling kube-proxy metrics on windows kernel mode
    e6a8826e992 Remove JSON logging performance regression

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-28 12:05:00 -04:00
Bruce Ashfield
db7647c53e kubernetes: update to v1.23.2
Bumping kubernetes to version v1.23.2-rc.0-26-gfa546d8cc76, which comprises the following commits:

    cce0b96068c fix nil pointer in create secret commands
    27a66989d0f Fix order of commands in the snapshot tests for persistent volumes
    cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls
    271a9f0e58d Improving performance of EndpointSlice controller metrics cache
    98cc4f9e96a fix the error when cleaning up jobs for cronjob
    6ca361089db Update CHANGELOG to add missing release notes.
    40d718778d4 apf: ensure exempt request notes the classification
    77b0a633575 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
    aef116487af Release commit for Kubernetes v1.23.2-rc.0
    86ec240af8c Release commit for Kubernetes v1.23.1
    1292aee8707 add gce loadbalancer no-op finalizer and existingFwdRule tests
    40c6f562eb3 disable gce service handling if has rbs forwarding rule
    41b00595137 add ELBRbsFinalizer
    036fd24b91c add gce elb rbs opt-in annotation
    78e8cb0743c cherry pick of knp 0.0.27
    0072226ca87 Re-introduce removed kubectl --dry-run values.
    c237c5c78fc Point flowcontrol users at v1beta2
    c836ebae52f [go1.17] Update to go1.17.5
    d065f7ffe77 dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
    ea103cb23a9 mount-utils: Detect potential stale file handle
    1346242fd57 Skip creating HNS loadbalancer with empty endpoints
    38a678fccfb Add regression test for CPUManager distribute NUMA algorithm
    6d437c7e827 Add unit test for CPUManager distribute NUMA algorithm verifying fixes
    53fd9db1629 Fix accounting bug in CPUManager distribute NUMA policy
    9cb973ac5ee Fix error handling in CPUManager distribute NUMA tests
    462f3c90b05 Add a sum() helper to the CPUManager cpuassignment logic
    03666ecf4fc Allow the map.Values() function in the CPUManager to take a set of keys
    22b6be8c2cb Fix CPUManager algo to calculate min NUMA nodes needed for distribution
    471dd78f5ea Fix unit tests following bug fix in CPUManager for map functions (2/2)
    1db0c5136e7 Fix unit tests following bug fix in CPUManager for map functions (1/2)
    18392c0c4ca Fix bug in CPUManager map.Keys() and map.Values() implementations
    4c7bcbddd62 Ensure we balance across *all* NUMA nodes in NUMA distribution algo
    d1248480b20 Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
    3a9b3072612 Round the CPUManager mean and stddev calculations to the nearest 1000th
    5fc309181ab updated deprecation messages from 1.23 to 1.24
    f94a022c1bb kubelet: set failed phase during graceful shutdown
    b63d5a805b3 kubeadm: avoid requiring a CA key during kubeconfig expiration checks
    a18dbc12a46 kubeadm: print the CA of kubeconfig files in "check expiration"
    880e0ac50f7 kubeadm: validate local etcd certficates during expiration checks
    f9c8af54ccb publishing-bot/doc: add component-helpers to the readme
    3245fe216f2 publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
    57f88ec404e Changelog: mention kube-scheduler bits deprication
    f42cbbbff43 rbd: initialize ceph monitors slice with an empty value.
    0a1d2914614 Direct v2betaX users to migrate to HPA v2
    064a272ee03 DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
    dd1b0a12471 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
    8aef834386e [go1.17] Update to go1.17.4

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-06 21:20:15 -05:00
Bruce Ashfield
14025b2ee5 kubernetes: add sysctl.d configuration
The startup of kubernetes relies on some kernel/runtime configuration.
We create a sysctl.d snippet to ensure that critical ones are set when
installing our packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:59:12 -05:00
Bruce Ashfield
308d31d026 kubernetes: add README
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15 12:55:28 -05:00
Bruce Ashfield
4d0f0a5ca2 k8s: introduce host/controller initialization script
Adding a simple helper to setup a host to the NodeReady state.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13 12:20:43 -05:00
Bruce Ashfield
ee1e169f0b kubernetes: update to 1.23.x series
Bumbing kubernetes to the latest release branch (now that our go
compiler meets the minium standards).

We also add a networking configuration similar to the k3s one, but
named appropriately so that CNI will read and do basic configuration.

We also add some missing rdepends that were preventing the controller
node from fully initializing.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-10 09:02:58 -05:00
Bruce Ashfield
c5d89fea4a kubernetes: update to v1.22.4
Bumping kubernetes to version v1.22.4-rc.0-26-ga82c1e72259, which comprises the following commits:

    a1bc265ce68 Fixed unit test SELinux support
    9286d722d5e Add shortcut for SELinux detection
    8ddc2963808 Don't guess SELinux support on error
    24b725f29f1 Use separate pathSpec for local and remote to properly handle cleaning paths
    3bf2248bda7 [go1.16] Update to go1.16.10
    bd146ab0e1b Automated cherry pick of #105122: added keys for structured logging (#105137)
    98ad7ac4ef4 Update debian, debian-iptables, setcap images to pick up CVE-2021-33910 fixes
    b9236d7cd4a Fixing how EndpointSlice Mirroring handles Service selector transitions
    9e778cb6ede Fix race condition in logging when request times out
    dee25f4db12 Remove nodes with Cluster Autoscaler taint from LB backends.
    e565102bce7 Support cgroupv2 in node problem detector test
    33b5f0f1eaf Update CHANGELOG/CHANGELOG-1.22.md for v1.22.3
    39f5a506c81 Release commit for Kubernetes v1.22.4-rc.0
    c9203682049 Release commit for Kubernetes v1.22.3
    6765a52acd9 Free APF seats for watches handled by an aggregated apiserver.
    dd8563b0184 Run storage hostpath e2e test client pod as privileged
    fc580a41252 support more than 100 disk mounts on Windows
    176ba1d5236 [go1.16] Update to go1.16.9
    cdfd8141855 Clear initial UDP conntrack entries for loadBalancerIPs
    b30f24e2579 Verifying the auth headers are set for upgraded aggregated API requests
    0dfe8e33143 apiserver aggregator upgrade unit test
    36a9689ce81 Aggregator uses the regular transport even if the request requires upgrades
    5fb05afd9f8 Fix PreferNominatedNode test
    410c0413757 Remove Error Message Check Dynamic PV Tests
    fcb66167905 go fmt
    82cd11e646e Add e2e test to verify kubelet restart behaviour
    8fa5ff3712c kubelet: set terminated podWorker status for terminated pods
    bc392586f01 Fix quota controller hotloop in integration tests
    af46778d58d remove StartedPodsErrorsTotal metrice message
    13d852c73dc Copy VolumeSnapshotContent annotations in snapshottable.go test
    ae10967d23f Fix bugs in e2e pod test
    60e425c9009 Ensure terminal pods maintain terminal status
    c44db53f2c2 Do not sync Waiting statuses for Terminated pods
    4ca2cee155c Adds CancelRequest function to CommandHeadersRoundTripper
    cd94fec74c9 Fixes kubectl command headers which hangs on kubectl run
    60ee69c79bb Revert "Build non-static binaries with PIE buildmode"
    e989925e232 Ignore VMs in vmss delete backend pools
    407cc91f95a Fix CSR test to accept certs shorter than the requested duration
    6bf5db2e3f7 fix: skip not found nodes when reconciling LB backend address pools
    3ceb7b87649 fix: consolidate logs for instance not found error
    e15dcbe404c Remove a duplicate StorageClass creation call
    6763300949a Update Containerd version - GCE Windows
    a135518af00 e2e scheduling priorities: do not reference control loop variable
    cc1eb760389 storege e2etest: Delete restored PVC/Pod in snapshottable
    614988c6626 pkg/kubelet/cm/memorymanager: Fix ErrorS key/value pair
    2f850d636e8 v1.22: Fix test flake in old svc registry
    20fa03d60ea 'New' Event namespace validate failed
    2ff2780dcc5 kubelet: Handle UID reuse in pod worker
    a6539a662cd Add test for recreating a static pod
    2d9957274a4 Update CHANGELOG/CHANGELOG-1.22.md for v1.22.2
    9f314ed137d Release commit for Kubernetes v1.22.3-rc.0
    8b5a1914753 Release commit for Kubernetes v1.22.2
    4fa7cdfa93c Refine locking in API Priority and Fairness config controller
    b23fffb83ed kube-controller-manager: properly check generic ephemeral volume feature
    38c7182897c Fix null JSON round tripping
    aeff924339a Propagate conversion errors
    a69920a9588 integration test
    b7854d5f1c9 fix 104329: check for headless before trying to release the ClusterIPs
    d8ead0e1c7b fix detach disk issue on deleting node
    c948d8cc53b kubelet: fix sandbox creation error suppression when pods are quickly deleted

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-10 23:25:50 -05:00
Bruce Ashfield
0a7ae8bc50 global: convert github SRC_URIs to use https protocol
github is removing git:// access, and fetches will start experiencing
interruptions in service, and eventually will fail completely.

bitbake will also begin to warn on github src_uri's that don't use
https. So we convert the meta-virt instances to use protocol=https
(done using the oe-core contrib conversion script)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02 09:57:03 -04:00
Bruce Ashfield
ac399ad091 global: add explicit branch to all SRC_URIs
As introduced in the oe-core post:

  https://lists.openembedded.org/g/openembedded-core/message/157623

SRC_URIs without an explicit branch will generate warnings, and
eventually be an error.

We run the provided conversion script to make sure that meta-virt
is ready for the change.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02 09:57:03 -04:00
Bruce Ashfield
9e5daf4885 kubernetes: add SRCREV_FORMAT
recipes that use multiple SCMs in the SRC_URI, must supply
SRCREV_FORMAT or SRCPV triggers an expansion error. While
this isn't fatal during the build, it can cause issues with
setscene (and possibly) other tasks failing, which then
leads to no sstate re-use, etc.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19 23:21:03 -04:00
Bruce Ashfield
45e5f2e821 kubernetes: introduce devupstream variant
Introduce a devupstream variant of k8s, so we can track development
while also packaging the latest released versions.

We set the SRECREV to 1.23.x as it was previously, and before the
go version dependency bumps to above where OE core is currently
providing.

We move the patches to a :append, so they can apply to both the
released and devupstream versions.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-12 10:15:21 -04:00
Bruce Ashfield
8e8b2ca3dd k8s: set to 1.22.3 release
As it turns out 1.23.x won't release in time for the next meta-virt
release, so we back off to the 1.22.x release branch.

To avoid PV issues when the number goes backwards, we add PE = "1"
to the versioning.

1.23.x will return in a devupstream format in another commit.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-12 09:15:23 -04:00
Kai Kang
17365d3afa kubernetes: update sed expression
It misses a backslash in sed expression and causes warning when
run do_compile:

| sed: -e expression #1, char 35: Unmatched ) or \)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-30 22:25:49 -04:00
Bruce Ashfield
92a4193973 kubernetes: update to 1.23-alpha latest
Bumping kubernetes to version v1.23.0-alpha.1-58-gf6331c74b67, which comprises the following commits:

    6616655b7b6 create common interface for controllers.
    c1284118156 fix typo: Modify PodTrackingWithFinalizers to JobTrackingWithFinalizers
    6dfae64d9be REST: Document mutable inputs on Create()
    42c7e621804 Fix registry tests to look at result objects
    75dea6b8bc2 Service REST: Use DeepCopy() on Create() and fix tests
    322bc827771 Fix buffered signal channel go vet error
    183498a410c Adds CancelRequest function to CommandHeadersRoundTripper
    bdedd2a4c16 apiserver: add key/value pair to httplog
    3a660b72941 bump e2e loadbalancer timeouts to 15m
    2c73d7834ac update vendor
    e1e4408ab34 allow k8s.io/utils/net imports
    0cd75e8fec6 run hack/update-netparse-cve.sh
    e9ddac5d853 rename net.ParseCIDR on messages to avoid false positives
    06f2d678eec update and verify netparse
    c2532351525 vendor: bump k8s.io/util to get fix for LRU cache
    21491aa5a1a Bump livenessprobe to 2.4.0 in e2e hostpath driver spec
    0af1c83e035 CHANGELOG: Update directory for v1.22.1 release
    b1a6f8cdf90 kubectl proxy: append context host path to request path
    950c4dafecb CHANGELOG: Update directory for v1.23.0-alpha.1 release
    3c1a3dea59c test images: Adds Windows Server 2022 to the BASEIMAGEs
    c3509f49f96 Update-vendor to add k8s.io/utils/strings/slices/
    25453708ea2 Remove pkg/utils/slice from kube-proxy
    b18d6ee61d0 Update cobra to v1.2.1
    f5e97186d29 Lower requests b/c multiple containers will leave pending pods
    ccbdf041a2f Fix slice type comparison bug
    0ba731253e0 add tkashem as a reviewer of apiserver
    513b55b00d8 hostNetwork tests can't share the same port
    6a6e24702c9 Update cri-tools to v1.22.0
    fa9d5546cdf Upgrade the default csi-proxy version installed by kube-up.sh
    f9375f20584 Update kubectl GitHub support issue template
    5e03a1f070e Regenerate applyconfigurations
    ffed59d168c Fix allowed imports for kube-openapi
    0e925f266f7 Update unit tests to handle go1.17 certificate parsing error messages
    72fd01095de re-order imports for kubeadm
    b15c2130aad Bump k8s.io/kube-openapi
    7cbac6bde0f [volumeScheduling/metrics] Fix buckets initialization
    76f03f000a1 Fix use variables in the loop in vsphere_util
    04d83edd3c3 SCTP tests run only on 2 nodes
    5b3c226c34a Add name and namespace to structuredmerge errors
    00dd02f89c8 test images: Use PULL_BASE_SHA for non-git image building
    cdbfd009dac Mention seccomp annotation removal in v1.25
    edc19b80727 fix: skip case sensitivity when checking Azure NSG rules
    804ce496e32 image: Change http to https
    7953cf0ce9f fix typo of rate limiter
    8264dbe17d0 Add unit tests for validateStructuralInvariants
    28de406a379 Allocator renames for clarity
    907fceb2067 Remove unused NewContiguousAllocationMap
    9c4d5b69ecf Fix storage class setup in regional_pd.go
    a26f7f2b58d Add non-vendor version ldflags
    87a4e082aca Change defaulter-gen input to package path
    a619be8e48f bump gengo to include defaulter-gen package support
    eba9d33c3ee Fix insufficient privileges to bind to port
    37e9517c2f6 Fix typo in CHANGELOG-1.22.md
    d2a27a58f0a Fix extra latency and add tests for that and width
    29bd66d0189 Remove "pkg/controller/volume/scheduling" dependency from "pkg/scheduler/framework/plugins"
    4849bdcc0a1 updating co-chairs
    27f15035147 rename audit Checker interface
    aa9380e017a Add termination hook to the startup script - GCE Windows
    e36a14730bd reducing the number of containers created based on the ports used
    6e3923d0a4f send retry-after until ready
    096c3e8f2d2 kubeadm: further improve the dynamic version population
    c295a850c66 update instrumentation reviewers
    593eda4ad34 Add unit tests for local volume expansion
    d68186452d9 apf: free seats in use after additional latency
    05beda5c402 Increase time to wait for nodes to become unready
    704628fde41 Update golang used in etcd image to 1.16.7
    1013e000af5 code cleanup:fix spelling mistake in CHANGELOG-1.22
    67e14290aae Fix build with multiple GOFLAGS
    145cec925af reduce the number of containers created by 66%
    8771d60e541 CHANGELOG: Update directory for v1.21.4 release
    874199aff28 CHANGELOG: Update directory for v1.20.10 release
    c4f18223dab CHANGELOG: Update directory for v1.19.14 release
    c69f55519e2 Revert "E2E test for kubelet exit-on-lock-contention"
    11ed96baf57 generated swagger docs
    dfaeacb51f9 CSIDriver: allow "StorageCapacity" to be modified
    ea3c7d98a5c test images: Removes Windows 1903 and 1909 images
    d9f22688166 test images: Adds sync.exe to Windows agnhost images
    94ac8962693 test images: Simplifies the agnhost binary version
    3b6cd89f016 add aojea to test OWNERS
    1181421112c Update version of Cluster Autoscaler to 1.22.0
    e6cb526f6bb set umask on linux and darwin when testing kubeadm copycerts
    ff7307bf9c2 fix single pointer variable
    3af26bae2c3 Refactor defaultpreemption for out-of-tree plugins
    c799a37654d revert test STABLE declaration
    08bec6da0fc Keep MakeMountArgSensitive and add a new signature that receives flags
    83889ae5940 apiserver: refactor WithRetryAfter server filter
    c4ecdad5708 Copy golang license to staging copies
    0379c8f96a7 Fix documented version for DisableKubeletCloudCredentialProviders feature gate
    3182b69e970 apiserver: add a new mode for graceful termination
    e8381733068 apiserver: rename test variables
    f63dbd481fc Warn if docker buildx is not available
    95e000fd657 support kubeadm join dry-run
    1db36ae3b30 Refactor goroutine counting
    75f0a94aba5 Remove 1.20.0 API test data
    bb08d70f403 Add 1.22 API test data
    30e9a420c46 kubelet: fix sandbox creation error suppression when pods are quickly deleted
    1ea65e6213c remove listx from OWNERS_ALIASES
    86c6e25016a Typo in a comment.
    b9b76dba6ee Update the unit tests to handle mountFlags
    338f8ba0bf8 Add missing interface method in mount_unsupported.go
    296b30f1436 Pass additional flags to subpath mount to avoid flakes in certain conditions
    3b0c8980824 Regenerate openapi
    f98ff655647 Drop DefaultGarbageCollectionPolicy checks for legacy apps REST API versions
    97c5b8de9ae Drop legacy validation logic for CRD API
    e3538edc227 kubeadm: update unit tests to support dynamic version updates
    207ffa7bdc6 kubeadm: dynamically populate the current/minimum k8s versions
    1ceb118e3cb Drop legacy status logic for volumeattachments API
    c702dd43940 Drop legacy validation logic for networking API
    b1d344db44d Drop legacy validation logic for certificates API
    befffd1565e Drop legacy validation logic for admission registration
    8fd371353c1 Fixes 104067; Explicitly states Docker CLI plugin buildx required for building using Docker
    39a1293cbc8 Drop beta REST APIs removed in 1.22
    808659cc428 pin-dependencies.sh: support switching repos
    768d69a423a add 'projects/' suffix if this library is used with an older version of the google api library
    cdc225f2979 bandwith --> bandwidth
    2c2661a4113 e2e test: lock-file and exit-on-lock-contention
    5eae896d71a Remove AllowInsecureBackendProxy feature gate
    4af506c9895 Add getOSInfo err info
    73a5cce3e64 device manager: do not clean admitted pods from the state
    93a237abd82 memory manager: do not clean admitted pods from the state
    66babd1a90c cpu manager: do not clean admitted pods from the state
    85d83ebd288 staging/publishing: Set go1.15 version to go1.15.15
    619e38141b6 remove unnecessary waits from watch conformance test
    1ce594b7ee0 Fixes flaky GKE kubectl test
    80ca6a4ae6f Some cleanup of the package for event clocks
    dc079acc2be sched: retry unschedule pods immediately after a waiting pod's deletion
    4f1b1d72e31 Update setcap image to buster-v2.0.4
    cafad985366 Update debian-iptables image to buster-v1.6.6
    08d8f29a7a3 Update debian-base image to buster-v1.9.0
    d166cabd9e2 Add e2e for local volume expansion
    f9efd14d443 TAG used when building pause is configurable
    b98594bc793 Add ibabou to gce/windows OWNERS file
    d2ed3b28b79 Revert "revert Bump DynamicKubeConfig metric deprecation to 1.23 by delta update"
    6b9dc099f88 [go1.16] Update to go1.16.7
    296c18ec323 apf: estimate list width
    7db782ee039 apimachinery: remove unused ignoredConversions map and nameFunc in converter.
    b66d52f6a8b make notes more easily to understand
    561ce035b5b Avoid spurious calls to update/delete validation
    00d89aad506 Allow a custom kube-cross image + tag to be specified
    c2a3b793d3e apf: use EventClock rather than a PassiveClock for queueset
    023f6a90db8 Add SergeyKanzhelev to node e2e test approvers
    ddaa06abeea Propose myself as a reviewer for cluster/gce/gci
    c8431f42d9a kubeadm: Reduce the backoff time of AddMember for etcd
    dfde50b1856 fix unsafe json construction for digestConfigObjects.
    8ed1628a6e7 Add a new webhook metric tracking request totals.
    3cfe3d048ff Improve dynamic cert file change detection
    f9a791ff262 Remove kubectl book
    a947c32783e Add feature gate to disable in-tree credential providers
    d866272d65a Correct comment related to HugePageStorageMediumSize feature gate
    a04a98154e5 Remove the StartupProbe feature gate
    af2129b77d0 Allow override of `CGO_ENABLED=0`
    d9d41b70f64 Fix metrics reporting for the deprecated watch path
    dcb298c9552 Introduce event clocks based on k8s.io/utils/clock
    2c60feffbee apiserver: add callback to get notified of object count
    c486b229d28 refactor(kubeadm): remove the flag --port from KCM manifest
    9351b57defe Skip node e2e test for recovering from ip leak with docker
    ff0e1f4fe97 Add the pod field to all volumeToMount info level logs
    691b45e220c Clarify ready (#103782)
    9cf3ad5cffa Remove duplicate dependencies from 1.22 changelog
    952aa1b2d26 add integration test for apiserver hsts
    ff165c88239 Replace usage of Whitelist with Allowlist within Kubelet's sysctl package (#102298)
    3e44139ae46 [jobs][registry]: Warn if no propagationpolicy set
    9cffbab037e Log kube-env variables from startup script
    a7834389b44 check APIStatus.Code in Is* family of functions
    5d84ffa6c26 Update configure-helper.sh
    b0039559ddf Update configure-helper.sh
    572a24d854e add a keepalive time to the konnectivity server
    0376c58c44d Update configure-helper.sh
    ab595f37d25 CHANGELOG: Update directory for v1.22.0 release
    8cf10d9a200 set showHiddenMetricsForVersion=1.22 in dynamicKubeletConfiguration test
    9d30eb88dfd retry apiserver errors on e2e service tests
    ea1bc18bc17 Use docker buildx for etcd image
    ee7562a2f8a add clusterIP allocator metrics
    94a58a3b146 remove GAed feature gates sysctls
    ac076838c81 Add ehashman to node e2e test approvers
    3463c2dfa97 Skip NVidia GPU test in node e2e CI jobs for containerd and other runtimes
    4efc9a95695 Fix zone calculation - consider only untainted nodes
    c8208247113 Add pod context to volume lifecycle logs
    c35502ad4bd Remove AUFSUmountHung from NPD test
    dab19517e5a Explicitly restart kubelet to stabilize serial-containerd job
    980cf854397 revert Bump DynamicKubeConfig metric deprecation to 1.23 by delta update
    72223406ac6 Remove stray DNS port references in NetPol tests
    b7ea7a7766b kubeadm: disallow the mixture of --config and --patches
    375ef778c4b kubeadm: remove deprecated --experimental-patches
    34f49596332 replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace
    7e2d6301bf9 [k8s.io/kubectl/pkg/drain/drain]: minor typo fixup
    1a3eda9394b fix: 81134: display conflicted taint without a json representation.
    a77f4f4c29b Log e2e-node kubelet output directly to file
    163e4974b63 e2e node server: fix crash in log line
    1a87ae19a62 Revert "Add a namespace label to admission metrics and expand histogram range to 0-10s"
    09dc055984e Update golang.org/x/time/rate (#104014)
    a2a22903bc0 delete stale UDP conntrack entries for loadbalancer IPs
    2635415482b fix error variable name
    9f735e71bbb Simplify APF promise to what is really used in the code
    9cee586ee98 apiserver: avoid repeated loading context for requestInfo in Namer.Name
    c406f2edab6 Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools
    f720c4fd44b hack/verify fixes
    ecb38137269 Update component-base OWNERS to include SIG-Architecture
    fec260d083f Add release note block to cherry-pick script
    260b5ef1554 fixing scripts from https://github.com/google/protobuf/releases to https://github.com/protocolbuffers/protobuf/releases
    59a7cc12c9f Mark failing node serial tests as flaky
    b5f24c334e4 Bump DynamicKubeConfig metric deprecation to 1.23
    a1cf44eab44 Remove unused promise code from APF
    05cfbecab99 test images: Adds image labels by default
    bbb368b7012 Update e2e test images url
    4549573a447 minor cleanups
    ca90849724e add kube-openapi/pkg/schemaconv to kubeadm import-restrictions
    4606ebe423a update node-problem-detector v0.8.9
    99bc2b077fd Added support for multiple --from-env flags
    4edb6e01bed Add kube-openapi to client-go import restrictions
    df1d9380fbd Fixes (temporarily) curl piped to shell security vulnerability
    3628065b455 fix boilerplate and staticcheck
    85bc3c4f857 fix vendor
    49c86bde556 fix extract_test
    af11c4ac9be remove apiserver impor from client-go
    93ef5acb35f Fix kubectl version unit test
    a4dfe406507 Start the informerFactory in the ControllerContext
    db48793269e Set idle and readheader timeouts
    f1e1f3a416b Fix disruptive subPath test failures
    363d47c08c8 staging/publishing: fix rules for legacy-cloud-providers for 1.22
    d38c2df2c4b client-go: deltaFIFO trace slow handlers
    55765f1b49e sched: support HistogramVec in scheduler performance test
    479e2ae307c wrap extractor errors
    7bfc420351f simplify test to only test the new logic of extractUnstructured
    1122091b065 Revert caching in favor of simple ttl
    53582a0104f remove commented out code
    c9e97de46bb Address PR feedback around gvk parser generation ergonomics
    9b9925f56db Restructure caching logic
    7cb18e84f13 comments
    f6ce385e444 remove test script
    604db6eb2ad rename cache, add to integration test
    235a57a29e5 Add HasOpenAPISchemaChanged to DiscoveryInterface
    7b9757faa49 basic caching working
    dda31bbf2e7 Manually set GVK in extract, add commentary to extractor
    9f4a4d812d2 Write TestUnstructuredExtract
    6e481c5db19 Initial UnstructuredExtract without caching
    b15ed04c9dc Allow non-subsetting ILBs to update when the feature is enabled.
    2ad2bc68443 kubectl: Add labels to ingress describe
    004e4414839 refactored master to controlplane
    00080d400fe Allow customizing spam filtering in event client library
    822eb29b6f3 client-go/events: avoid referencing a nil related object
    1555877cc5d fix data race for Test_Run_Positive_VolumeMountControllerAttachEnabledRace
    8dc091ef2e2 Fix wrong log
    ae7b9787ee7 cleanup description on deprecated include-uninitialized flag
    dc9eb82e0aa Fix NPE in test/e2e/framework/providers/azure
    7fa0b9b6c10 add --concurrent-ephemeralvolume-syncs flag for kube-controller-manager
    93146048b4c Mark "update Node.Spec.ConfigSource" node e2es as slow
    4115bef8268 Update references to test/conformance/image
    024930df119 Move cluster/images/conformance to test/conformance/image
    3520e8b3393 Fix a typo in comment
    75f0007d2bc Overlaid OS's environment variables with the ones specified in the CredentialProviderConfig
    00e31ce565a Fix incorrect comments in scheduler_queue.go
    fef5c0c1a63 Improve storage test skipping pattern.
    523b4c0918f Replace 'x.Sub(time.Now())' with 'time.Until(x)'
    326471d8806 k8s.io/code-generator: Change BoilerplatePath() to locate file or require explicit flag
    2cacfada265 Update Containerd version - GCE Windows
    45cf1697ba0 Changed flag name underscore warning to avoid recommending potentially invalid flag name
    97ba475941f add new metric
    94977dce8d1 Update doc description for --audit-log-maxbackup
    971e0c4400c Fix a typo in comment
    f174307e494 k8s.io/code-generator: Enable generate-*  scripts usage as module deps
    8ad83fd685f Make crictl tests host local
    80e4007bc3b test: e2e: HPA ContainerResource
    5be47eaf275 kubeadm: update references to legacy artifacts locations
    e2b6816953c Deprecate apiserver_longrunning_guage and apiserver_registered_watchers
    019e8f71b6a refactor: normalizing URL string locally and move out from purell package
    38239d3025d migrate  cmd/kube-proxy/app logs to structured logging
    dd2c3830600 decouple timeBudget from real clock
    66803689585 Add: specify that reason is a field to record the reason why failed
    6490fcc5bbc setting the status to fix on the known issue
    9f09064104e feat: Provide IPv6 support for internal load balancer
    51e4694cd66 fix typo scheduling queue to active queue
    ef181c14e12 Provide reference to impersonation options for kubectl auth can-i command.
    b09bbd808ae testing patches.  add k8s.io/staging, remove local home
    6d988acb558 Ignore 'wait: no child processes' error when calling mount/umount
    d05b232afc8 optimize the code
    5fdfe872d61 e2e: update makefile example for building images
    ac09f7a8bd3 TODO comment should have been removed with #2912, the restartCount docs wasn't updated as part of #6794.
    318b9a95786 remove superfluous [Feature:SCTP] tag in some test names
    50b3cbe9990 e2e: remove unused sync.WaitGroup
    9d405710fe7 e2e: remove runKubernetesServiceTestContainer
    5347f67e35b Using full url format as runtime endpoint
    d9b8c5f992c add deprecation for Azure Disk Kind in csi migration
    baf0bf831d1 Fix typo in comment in endpoints_controller
    f0b34bd24a7 Pass unknown labels in allowedTopologies during CSI translation
    4101c8b3cb3 Set out.TargetCPUUtilizationPercentage correctly when converting autoscaling_HorizontalPodAutoscalerSpec to v1_HorizontalPodAutoscalerSpec
    1980b18c458 Solved the test problem and added update comment
    d1e9da9f8a0 update comment with EnqueueExtensions
    5f0925a2941 Flake #99979 increase delay for ready state propagation
    1887ddfc968 Make --configure-cloud-routes configurable in local-up-cluster
    169583bf4ed tests for path resolver, add KUBE_ROOT to both top level func calls
    2d3323d1fb4 try to fix the in_tree_volumes cases: refactor the projectBasePath logic
    82728b5f71d Add integration tests for updating Job parallelism
    7911a08fb31 Remove ServiceAccountIssuerDiscovery feature gate
    e75f3fb563e add happy path tests for two types of imports
    d3aabe23974 fix existing unit tests
    585ce7f04dd missed a paren
    bde2ef2a1a0 review comments
    60d446fe3db Drop end of sunrpc port range to avoid port conflicts.
    c79a0a08828 Get rid of unused flowSchemaRVs in P&F
    73211256e8f Rename width to workEstimate in P&F code
    2b03c771895 e2e: fix NFS options test for IPv6
    d02568aab52 client-go/tools: update events version in doc
    7a36a5b827e fix test failures in legacy cloud provider: add 'projects/' after upgrade
    ef3c344868d seems to work, needs tests and a lot of cleanup
    2bc5ff6ab34 Set EC2 instance cache max age to 10 mins
    2926b4572e6 upgrade google.golang.org/api to v0.45.0
    18d583653c6 upgrade github.com/prometheus/common to v0.28.0
    abd8acc2599 fix exec failure for gomock finish calling
    6c87c222771 Add structured logging for more steps
    a9b7dcc8c21 kubelet: update remote runtimes for cri stat changes
    2dc2b1e239d CRI: add fields for pod level stats to satisfy the /stats/summary API
    a9a3c4bb9aa Refactor of TestValidateIngressClass and TestValidateIngressClassUpdate methods by adding Boilerplate in helper functions #FIXES: 99005
    bf9f3dc7b3d deprecate unused option deployment-controller-sync-period for deployment controller
    927d0c39322 cleanup: Removes GcrRelease and SampleRegistry from manifest.go
    abf735daa83 remove stack trace log when sorting with a bad unsortable field
    18955db4161 fix azure disk translation issue
    5d80d6e7c3d Make cpu request of kube proxy configurable by env variable.
    de442ef8604 Retry hostname->IP: [Errno -2] Name or service not known
    03f9f75e880 fix typo for daemon_controller_test.go
    f2eec0a8167 ResourceConfigForPod: check initContainers as other QoS func
    a7c48e97076 images: Removes OS Version workaround for manifest list images
    97bcfbd674b Allow the actual inhibit delay to be greater than the expected inhibit delay
    d9be5abc378 kubelet: add shutdown events
    0839c00b76b Increase pressure timout on DiskPressure test
    992993257d8 Removed usage of github.com/pkg/errors
    8eee78a61f0 Update github.com/pkg/errors to go native errors pkg
    7b98a0770fe remove not used IsStaticPod, prevent possible panic
    f9e4a015e22 tests: Spawn poststart / prestop pods on the same node as the http pod
    e2477171ca2 Ensure images are pulled after eviction tests
    a93ad421ee9 Return StatusError 404 in fake client when resource is not found
    a0e8a98bcb6 Add support for expanding local volumes
    c882437f220 e2e test: bump ProgressDeadlineSeconds in Deployment iterative rollouts
    9d636fea046 e2e test: fix Pause in Deployment iterative rollouts
    a1e56b4f6d1 Update the typo in values of pods in performance-config.yaml
    5b426818404 Correctly drain timer
    6a0452e861e cleanup: fix errors ending with punctuation in proxy
    82402c5af0c Omit redundant nil check in type assertion
    68ec18a050d code-generator/register-gen: groupName can't use '// +groupName=somegroup ' to override
    1dc4a29a1ae fix typo in retry doc
    7aab5df381f use already defined variable
    72271dcc9c5 Fix error path in file /verify-prerelease-lifecycle-tags.sh.
    82a9fb9d0ec subatomic: Creates the symlinks to user-visible files later

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-27 10:50:45 -04:00
Bruce Ashfield
d876cfc5bf global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides
separator.

This is pass one of updating the meta-virt recipes to use that
syntax.

This has only been minimally build/runtime tested, more changes
will be required for missed overrides, or incorrect conversions

Note: A recent bitbake is required:

    commit 75fad23fc06c008a03414a1fc288a8614c6af9ca
    Author: Richard Purdie <richard.purdie@linuxfoundation.org>
    Date:   Sun Jul 18 12:59:15 2021 +0100

        bitbake: data_smart/parse: Allow ':' characters in variable/function names

        It is becomming increasingly clear we need to find a way to show what
        is/is not an override in our syntax. We need to do this in a way which
        is clear to users, readable and in a way we can transition to.

        The most effective way I've found to this is to use the ":" charater
        to directly replace "_" where an override is being specified. This
        includes "append", "prepend" and "remove" which are effectively special
        override directives.

        This patch simply adds the character to the parser so bitbake accepts
        the value but maps it back to "_" internally so there is no behaviour
        change.

        This change is simple enough it could potentially be backported to older
        version of bitbake meaning layers using the new syntax/markup could
        work with older releases. Even if other no other changes are accepted
        at this time and we don't backport, it does set us on a path where at
        some point in future we could
        require a more explict syntax.

        I've tested this patch by converting oe-core/meta-yocto to the new
        syntax for overrides (9000+ changes) and then seeing that builds
        continue to work with this patch.

        (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284)

        Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02 17:17:53 -04:00
Bruce Ashfield
11036424a9 k8s: update to v1.12.0-alpha
Bumping kubernetes to version v1.23.0-alpha.0-33-gd9d4f0c69cb, which comprises the following commits:

    363d47c08c8 staging/publishing: fix rules for legacy-cloud-providers for 1.22
    6d1556df7bb Update to using apiserver-network-proxy v1.22
    7728428f017 Do not try to create an audit log file named "-"
    77afa53f9d3 Add e2e testing manifest bundle to e2e_node test suite
    0cce9a4a6c6 Remove conformance status from a sysctl test and relabel
    0aa16fae5b8 staging/publishing: add release-1.22 rules
    3af4fe8c9b6 Use pointer gomega comparison for UsageNanoCores
    2a4a1c1d005 disable aufs module
    0610968bfaa bump metrics-server to 0.5.0
    c5aead020b6 cluster: fix CI metrics-server deployment
    9103b7187c9 Fetch metrics from controller manager & scheduler no run once
    236e72cf8a9 Make CSR cleaner tolerate objects with invalid status.certificate
    c1bac408803 Fix SIG Node SSH e2e test
    33feaee2c2d Fix windows storage tests
    fac3dd6914f CHANGELOG: Update directory for v1.22.0-rc.0 release
    59c0523bca0 Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354)
    536cf819747 Add konnectivity agent to log dump
    d7ee024cc5d kubelet: Make condition processing in one spot
    c2a6d07b8f0 kubelet: Avoid allocating multiple times during status
    9efd40d72ad kubelet: Preserve reason/message when phase changes
    9d0b32858a5 update cos 85 version to latest.
    e5b434e990d kubelet/cm: don't set Devices
    eb5df869baa vendor: bump runc to 1.0.1
    aeb82243fc8 Revert "tests for statefulset PersistentVolumeClaimDeletePolicy api change"
    faed88bb720 Add additional APF test for handling other panic types
    ef435b85b47 Optimize APF support for watch initialization to fix the pod startup time regression.
    1f2902a336c Fix panic in master upgrade tests
    e5a1f86e0ac add apiserver tracing integration test, and fix endpoint validation
    10a3cc815be Revert "statefulset PersistentVolumeClaimDeletePolicy api change"
    fb5b966a88a Revert "Add StatefulSetAutoDeletePVC feature gate"
    0d1aa3a1b87 CHANGELOG: Update directory for v1.21.3 release
    1e5ba82fd0b CHANGELOG: Update directory for v1.20.9 release
    fc6a5be694a CHANGELOG: Update directory for v1.19.13 release
    be34dc95b5d Remove E2E test for NodePreferAvoidPods scheduling Score
    a2ea04bab3e tests: Updates cuda-vector-add:1.0 image to the promoted registry
    a3b6f0557d2 device-plugins: replace gcr.io/gke-release to use the community registry
    f5bc129a991 CHANGELOG: Update directory for v1.22.0-beta.2 release
    a6ac42082b4 client-go exec: fix metrics related to plugin not found
    5e1b5ec398c Revert counting deleted pods as failures for Job
    75748c185ea enable verify-golangci-lint.sh
    07332ad3985 fix ineffassign and varcheck
    26cc8e40a8f fix deadcode issues
    b74fe232e34 update golangci-lint to newer version
    416efdab26a Remove Endpoints write access from aggregated edit role
    6c61ee51b90 Revert granting EndpointSlice write access to edit role
    de9cdab5ae3 kubelet: Prevent runtime-only pods from going into terminated phase
    aaa7de0ac67 Update API description for probe.terminationGracePeriodSeconds
    bf2ae14501e Move feature flag to beta (but leave as false) and remove the feature flag from Kubelet
    83f8d1ad72d [go1.16] Update to go1.16.6
    65618bfd696 Add sync reconstructed volume from desired state of world for volumemanager
    9fa641b9add test/integration/endpoints: check for pod existencen in TestEndpointWithTerminatingPod
    1280a365e4a Revert "use PermitWithoutStream=true for etcd: send pings even without active stream"
    bc475373b24 Drop direct dependency on gotest.tools
    32783f75684 PodSecurity: Initial webhook implementation
    2878e472ad7 test/integration/endpoints: improve docs for TestEndpointWithTerminatingPod
    0aa1b3b0bfc test/integration/endpoints: add a test to ensure Endpoints does not include terminating pods
    642eff0c69d Rename NodeSwapEnabled flag to NodeSwap
    d1ef44242a3 Make khenidak a sig-net approver
    c2aaf0667fd PodSecurity: make integration tests run sparsely
    9dd59017c4c add tracing to webhook requests
    581b088f760 integration test: provide a timeout for /health
    a570008cbd6 apf: fix virtual clock
    5918869ed6c Revert 103327: "kube-scheduler: ensure the default config output of --write-to-config is usable"
    1727cea64c1 Fix index out of range if multiple default plugins are overridden
    b14c10ae301 create LeaderMigrationConfiguration v1beta1
    40b2155ddb7 promote ControllerManagerLeaderMigration to beta.
    995278c9fbb add ControllerManagerLeaderMigration as beta
    513bd93f76d update test for feature gate
    412962204ff Fix the code is leaking the defaulting between unrelated pod instances
    2b88dc381e1 [PodSecurity] Add test coverage for pod-template-containing objects
    0fa01c371c9 Mark volume mount as uncertain in case of volume expansion fails
    fd0db61d6c3 test/intergration/endpointslice: add tests for endpointslice terminating condition
    826a5219dac promote EndpointSliceTerminatingCondition to Beta
    a2fb8b00392 smtalign: e2e: add tests
    23abdab2b77 smtalign: propagate policy options to policies
    6dcec345dfb smtalign: cm: factor out admission response
    c5cb263dcf2 smtalign: propagate policy options to cpumanager
    6dccad45b4f smtalign: add auto generated code
    cc76a756e40 smtalign: add cpu-manager-policy-options flag in Kubelet
    649b87aaf85 prevent mutation of deletion options during delete collection
    d95b14e1abf Revert "apiserver: add callback to get notified of object count"
    d5d9327351d Only use dualstack if the node and config supports it
    8e2b728c68a Explicitly skip host file mounting for windows
    2dd26221881 Track Job Pods completion in status
    7da1a0b2304 update the help text of KubeletConfig following the DynamicKubletConfig feature deprecation
    41c5bca3496 kubectl: update set command description to include cronjob resource (#102503)
    bb56a0bd048 Add Job.status.uncountedPodUIDs
    418fa71b6b1 Simplify use of the fake dynamic client
    62d7a417fa6 CHANGELOG: Update directory for v1.22.0-beta.1 release
    40f1db8d2d4 update license gathering script for forked code
    79e230ea212 fix kubelet panic when DynamicKubeletConfig enabled
    b6b3a692843 Don't set sysctl net.ipv4.vs.conn_reuse_mode for kernels >=5.9
    369c4a2b98b Use cmp.Diff() replace reflect and diagnosis
    7f9d2eda828 limit warnings to requests that would otherwise succeed, reformat warning message
    36907db929e PodSecurity: Drop field path from container visitor
    78953990777 PodSecurity: seLinuxOptions: regenerate files
    d5419707516 PodSecurity: seLinuxOptions: cleanup
    19c8ab297c0 PodSecurity: sysctls: cleanup
    e178695c25b PodSecurity: seccompProfile_baseline: regenerate files
    bebf6129672 PodSecurity: seccompProfile_baseline: cleanup
    2af08d1a5a0 PodSecurity: seccompProfile_restricted: regenerate files
    88a12412998 PodSecurity: seccompProfile_restricted: cleanup
    43146d4377f PodSecurity: runAsNonRoot: regenerate files
    5fc06591a2c PodSecurity: runAsNonRoot: cleanup
    edb7cdb02aa PodSecurity: restrictedVolumes: regenerate files
    676240a342a PodSecurity: restrictedVolumes: cleanup
    4a69c579923 PodSecurity: procMount: cleanup
    f9b8dfd0e69 PodSecurity: privileged: cleanup
    7c704674003 PodSecurity: windowsHostProcess: regenerate files
    9dce1d6a493 PodSecurity: windowsHostProcess: cleanup
    45485bb7aea PodSecurity: hostPorts: cleanup
    f709cf05f41 PodSecurity: hostPathVolumes: regenerate files
    a39c448684a PodSecurity: hostPathVolumes: cleanup
    826c57701c7 PodSecurity: hostNamespaces: cleanup
    62b71175e74 PodSecurity: restricted capabilities: regenerate files
    f10dfc6e304 PodSecurity: restricted capabilities: cleanup
    bd4dc42a72e PodSecurity: baseline capabilities: regenerate files
    809abf4f5b9 PodSecurity: baseline capabilities: cleanup
    b390e9e32dd PodSecurity: appArmorProfile: cleanup
    8291f8490b9 PodSecurity: allowPrivilegeEscalation: regenerate files
    1e2886341a6 PodSecurity: allowPrivilegeEscalation: cleanup
    648b970718e PodSecurity: add message helper
    92541f46e6b Restore ability to print long strings
    5d80665b0a6 Fix dbus config path for GracefulNodeShutdown e2e
    6c72fbaa899 update vendor after switch
    79d0c6cdc10 switch from golang-lru to the one in k8s.io/utils
    3a221b33324 update to new k8s.io/utils
    a3f57886a26 fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total
    a6b30e96294 podsecurity: added ValidatePodSecurityConfiguration
    c3d9b10ca83 feature: support Memory QoS for cgroups v2
    80dda49ce22 Service: Fix semantics for Update wrt allocations
    6cf3e36c370 kubeadm: statically default the "from cluster" InitConfiguration
    0a42f7b9890 Graduate EndpointSliceProxying and WindowsEndpointSliceProxying Gates
    1dfacd3c702 PodSecurity: use code/reason/details from admission library
    fb9cafc99be sched: provide an option for plugin developers to move pods to activeQ
    9bd857ca047 Truncate endpoints over a 1000 addresses
    d9e3fbff949 apf: fix bootstrap ensurer log message
    bb3fe633b47 add test for triggering race condition
    33e6ebc8f8d update translations
    ab1807f2bcb copy podStatus.ContainerStatuses before sorting it
    1e0f695afa9 fix translations location in update-translations.sh
    6408f3dffc0 Update generated files
    250f47a45c5 Rename to capabilities_restricted
    08608a24f14 Update dropCapabilities check/fixtures
    ce257266aa7 client-go: copying object to fix data race (#103148)
    2c116055f7e [disruptioncontroller] Don't error for unmanaged pods
    a8793dcb3e2 Implement check_dropAllCapabilities.go and test/fixtures_dropAllCapabilities.go
    3fadea4ea2e Bump version of Addon Resizer used by Metrics Server
    6b736f34848 Minor adjustments to descriptions and example text
    cea1dcfeed2 Add watch tracker to APF for request cost estimation
    2df05df6982 Avoid code duplication in watchcache
    96406b915d3 Clean up the remaining master names in test/integration
    7f1c4977d7a Refinements to pick queue logic in P&F
    26e83ac4d43 kubelet: ignore /dev/kmsg error when running in userns
    192790c52fe kube-proxy: allow running in userns
    dbe01551397 kubelet/cm: ignore sysctl error when running in userns
    b16323e37ce New feature gate: KubeletInUserNamespace
    af19d7f415d fix delete nil pointer panic
    d8fe255f413 Add test for validateProbe
    e378600c90d Add validation for Prober TerminationGracePeriodSeconds
    1ff5ae2cb5f Regenerate
    20de04d6c30 Update API documents
    00dba76918e Add DataSourceRef field to PVC spec
    5b787aa1843 Clean up testing of AllocateLoadBalancerNodePorts
    eae4a19bd35 Fix small bug with AllocateLoadBalancerNodePorts
    3eadd1a9ead Keep pod worker running until pod is truly complete
    68dadd40d63 Fix pkg/api/pod/util tests to ensure feature gate is set
    adcfcfa2e78 add yaml separator validation and avoid silent ignoration
    04d59ff2df3 test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network)
    9977ea371b1 test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network)
    025c95a778b test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod
    f6bc5d01402 test/e2e/network: add Service internalTrafficPolicy test pod to pod
    2d0f99fba18 Fix resource metrics e2e test
    28152a26fee fix: return empty VMAS name if using standalone VM
    ad8275f294f Added unit tests for ExpandPathsToFileVisitors
    dffc2a60a28 deprecate and disable by default DynamicKubeletConfig feature flag
    68ccb8a9477 Use system-validators v1.5.0
    b1f34ea205f add RetryOnConflict to pod status updates
    6d4096cc69a Upgrade kustomize-in-kubectl to v4.2.0
    a46b42a92b8 Manually update kustomize attachment points.
    212ce7c2871 Shorten test time
    a42c066af70 Fix Data Race in nodeshutdown restart
    c69ad8c57a3 e2e: increase readiness gate timeout
    71f810bb71e Add distributed tracing to the etcd client
    babebf76d39 Apply PSP container tests to EphemeralContainers
    aff49ca6846 Generated code for securityContext in EphemeralContainers
    70765fa24d5 Allow securityContext in EphemeralContainers
    ebe550bd488 Upgrade etcd to 3.5.0
    7839668877e GCE Windows: Set TCP/IP parameters to keep idle connections alive on GCE.
    30d2ad576ac Remove ManagedPod,ManagedContainer metrics
    1c8675fc02f Ensure node e2e apiserver and test suite can open enough files
    c4e644406ed test images: Adds windows-nanoserver image
    d5cb5065c46 Skip node container manager test on systemd
    03d60a89a0c Add build instruction for buildx CLI plugin
    82e4ab5ec62 Improve slice allocation in LabelSelectorAsSelector
    19c23949154 Add benchmark for LabelSelectorAsSelector
    3f0b64ec959 kubectl: show consistent unit format in quota describe
    0a83041d4d3 remove Factory that not used
    9e372bffeff e2e: test SSH port on NodeSSHHosts
    c12aa0f6b75 promote HugePageStorageMediumSize to GA
    849dbe034b3 use PermitWithoutStream=true for etcd: send pings even without active streams
    29178fff1c9 Add kubelet managed pod metrics
    b42c1a3e474 test images: Adds cuda-vector-add-old image
    a70323d6320 Updating OWNERS_ALIASES for SIG-Windows

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-27 09:24:21 -04:00
Bruce Ashfield
33fab067b9 k8s: update to 1.22-beta
Updating to 1.22-beta. We drop our bindata patch, since the generated
bindata is no longer used.

The following commits are part of this update:

    9e87082b85f [Pod Security] Baseline + restricted policy checks for seccomp (#103341)
    a7469cf6804 sort and filter exposed Pod IPs
    cf6ba6096f9 Move pod-security-admission to an external Attributes interface
    6bfaeaf9165 Deprecate azure and gcp in-tree auth plugins
    55847256058 Explicitly set LimitedSwap case with fallthrough
    0ecc7ba311a Update the logic to pick the best queue in P&F
    4c9c761bbb2 instantiates scheduler ComponentConfig after parsing feature gates
    74f5ed6b172 This introduces an Impersonate-Uid header to server side code.
    2220fc61496 PodSecurity: clean up unnecessary passing fixtures
    ea54b1b152c PodSecurity: Make check-specific passing fixtures optional
    9a5237ca63a Custom plugin config should take precedence over default plugin config
    823a0f101ac Don't return in api validation
    4b9230ed27f Promote LogarithmicScaleDown to beta
    24e19229101 apf: add additional latency into width
    20e1c4d7548 exec credential provider: update tests+metadata for v1
    04d59ff2df3 test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network)
    9977ea371b1 test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network)
    025c95a778b test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod
    f6bc5d01402 test/e2e/network: add Service internalTrafficPolicy test pod to pod
    28f3f365057 Promote the ServiceInternalTrafficPolicy field to Beta and on by default (#103462)
    d0c422fd9c8 Hide long and multiline strings when printing
    edbaf9d5d36 test/integration/quota: poll for ResourceQuota used status in TestQuotaLimitService
    caf42fde430 test/integration/quota: refactor Service forbidden check into helper function
    54bc1babe16 test/integration/quota: update TestQuotaLimitService to explicitly check for Forbidden status when quota limit is exceeded
    87cef2ca736 test/integration/quota: deflake TestQuotaLimitService by collapsing test cases and adding a short delay for resource quota to propagate
    a85f3e4cce6 Fix(test/integration/util): fix typo on logging message
    a2c1b284da2 update url
    1002b0d163d apiserver: add callback to get notified of object count
    b6b1674f560 Switch to the version instead of the `latest`
    194ed1408dd update translations
    66dbfbce105 update-translations.sh: add fix translations option (-k)
    079d8aeb1e4 fix update-translations.sh
    06124c1d1c6 Add backwards compatibility for kubectl debug
    f01d251e38c kubeadm: statically default ImagePullPolicy in v1beta3
    bb6d5b1f95a memory manager: provide unittests for init containers re-use
    960da7895cc memory manager: remove init containers once app container started
    b965502c495 memory manager: re-use the memory allocated for init containers
    94414bea475 kubeadm: fix godoc formatting for v1beta3
    61d88af9e40 Revert "Update runc to 1.0.0"
    5ea9460234a Readable error message on the plugin configs of the removed plugins
    2069ff9efcd fix compatibiltiy_test failures
    1f24a198e76 reduce cpu usage of kube-proxy with iptables mode
    29814890f6a fix compatibiltiy test
    f1f0183d2bb refactored extenders from scheduler/core to scheduler
    570365178a8 merge packages of scheduler/core and scheduler
    26f223fa6ed Bump `distroless/base` image to latest version
    772344aef22 kubeadm: fix nil pointer in  Cfg() feature gate checking
    c2a8cd359f1 re-order the imports in kubeadm
    c50b3074fe8 Moved VOLUME_MOUNT_GROUP capability check from NodeStageVolume to MountDevice; added log message in SetupAt to indicate FSGroup is delegated to driver
    794a925a85f Pass FsGroup to NodeStageVolume
    0e315355dfc Pass FsGroup to MountDevice
    ae5668edefd Pass FsGroup to NodePublishVolume
    65db13a3a5f Combine capability check implementations
    99700f7faff feature gate
    c24dfe528a0 cluster,hack: Use community infra GCS bucket for retrieving CI builds
    1ae9b8f04dc Update kernel components to run as non-root in kubeadm.
    83ee392ed42 implement EnqueueExtensions interface in volumebinding
    c96c809539f Add integration test for LB node port control
    c8bc4202454 Fix the beta release version.
    79b6df96fc6 Add tests for LB type service
    24592ca9890 Update the related tests
    05c6eaf0d16 promote ServiceLBNodePortControl to beta
    8972efc65fe change tracing service from kube-apiserver to apiserver
    58b91ffca9e adds HasBeenReady signal that fires when the readyz endpoint succeeds
    ca108d109d5 readyz signals when the handler succeeds for the first time.
    968185e1f7c Warn user for runtime support of debug targeting
    6d6d200c3a7 dry-run can work when using an external ca
    6c88a62cb4c remove logging from the Signal method
    dae08bc3a73 rename terminationSignals to lifecycleSignals
    c91496dda04 cluster: enable debug handlers on GCE master nodes
    2b84b49ea98 Service REST test: Remove pointless cleanup
    ca708fa9ac3 Service REST test: Fix some names
    54b6a416fba Service REST test: better IP and port alloc checks
    8d49502fcd4 csr: update e2e conformance test with expirationSeconds usage
    29b3fa78263 Generated
    cd91e59f7c3 csr: add expirationSeconds field to control cert lifetime
    0a38b2804d9 add deprecated message for igonre-errors flag, and fix unsafety http link
    43b13840db5 Service REST test: remove obscure const
    44eb475b101 Service REST test: remove unused return value
    d6208606f33 Service REST test: remove pointless scaffolding
    48e591eba23 Service REST test: remove obsolete setup param
    a3b05033f66 Move endpoints test-helper funcs to a package
    012bfaf98d3 Service REST test: remove last use of "inner"
    22ed090e734 Service REST test: mostly remove tests of "inner"
    7e8882d189f Service REST test: Remove pointless scaffolding
    175f4f33873 Move service test-helper funcs to a package
    b1fcbab8014 Service REST test: helper funcs for ports, too
    5f65ba7d766 Service REST test: Use helper funcs to streamline
    d64bb1b29ed Service REST test: always check errors
    d3a0332b6cd Service REST test: remove unused fields
    292b1444ebf Remove bad test for AllocateLoadBalancerNodePorts
    0bb280044ec Fix typo in IP allocator error
    5970c4671cc Add an IPFamily() method to ipallocator
    89b633d3532 Fix doc comment
    13a1804a5f5 podsecurity: add restricted volume type check
    622f69bf8d4 kubeadm: update v1beta3's godoc changelog
    11d444b00e0 kubeadm: remove versioned copies of the bootstrap token API and utils
    14fa296bb38 kubeadm: use the bootstraptoken/v1 API across the code base
    5b7bda90c03 kubeadm: introduce apis/bootstraptoken/v1
    1cfbb0aa25b remove webhook.go to revert changes to conformance test
    ac4bb885be8 hostProcess test fixture data
    49d31c45b12 PodSecurity: baseline hostProcess check
    80494481135 [PodSecurity] baseline - apparmor Implement the "AppArmor" check from https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
    b0ffaa93f5c move tracing instantiation further up, and check for nil
    f0ffba75ad5 Add baseline check for procMount type
    210c610d662 make sure to split NPD hashes by architecture when upgrading to 0.8.9
    db3534dd648 master too main cleanup
    e2e1c94f063 use native error instead of github.com/pkg/errors
    2cab85a4034 Mark net.ipv4.ip_unprivileged_port_start as a safe sysctl
    ba6b4c5a18c PodSecurity: test GA-only cases and alpha/beta fields separately
    e87016cf941 PodSecurity: add ability to skip failure cases if relevant features are disabled
    b522e95aaeb Prioritizing nodes based on volume capacity: API changes
    03b7a699c24 Kubeproxy uses V1 EndpointSlice
    ab5b77944ec kubelet/cm: don't set Devices
    4e7cf5413d5 vendor: bump runc to 1.0.0 pre
    67bc23411b6 [storage] [test] Ensure proper resource creation
    5bd3334ad69 [PodSecurity] Add privileged containers baseline check
    b790cf388ce Bump SMD to v4.1.2 to pick up #102749 fix
    1c39cf23652 Fix incorrect user and group for kube-scheduler when it is running as non-root.
    7ad44d04fce Enforce ReadWriteOncePod access mode during scheduling
    d57e143277e [PodSecurity] Implement host ports check
    9c150b0f22f Error string should not be capitalized or end with punctuation.
    584eb5e947f Update local-cluster-up.sh to auto-detect darwin and skip kubelet and kube-proxy
    1ac0e018d5b [PodSecurity] Implement sysctls check
    4a2aef00d6d adds metrics for authorization webhook
    6c86c34457e kube-scheduler: ensure the default config output of --write-to-config is usable
    1441a330300 hostPath baseline check for Pod Security Standards
    1fa673c15c9 Extent the `NodeResourcesBalancedAllocation` plugin to cover more resources
    71cb2d71a87 podsecurity: add baseline hostNamespace check
    da4aaf81cdd Error should be checked first, then go to other steps.
    c1d5a3a99e1 Update golang.org/x/net to v0.0.0-20210520170846-37e1c6afe023
    03f85e9ade8 Update NPD release version and include windows defender config
    5c00024c70b kubeadm: fix wrong check for keys/certs during "download-certs"
    f0d917a3caa add fuzzer patch to fix tests
    39f32d7286a Ensure MemorySwapConfig can't be set without feature flag
    d4041cb80f9 Add generated files for swap API changes
    d3fd1362ca1 Rename NoSwap to LimitedSwap as workloads may still swap
    0deef4610e8 Set MemorySwapLimitInBytes for CRI when NodeSwapEnabled
    7342acb0b83 Add validation for KubeletConfig MemorySwap
    7d50271d217 Update CRI with memory_swap_limit_in_bytes
    bda03b4818d API change: add MemorySwap to KubeletConfiguration
    9eeec68d67e Update local-up-cluster.sh swap warning
    0dd4ce40adc Add NodeSwapEnabled feature flag
    ac41e565822 docs: add documentation on adding files to the embedded data
    deb14b995ac Add score plugin for NodeResourcesFit
    ebc3fdb2936 Store PVC reference counts in NodeInfo cache
    c65b80a6378 [storage] [test] Remove extra zone test
    0ab03d3d5bb dependencies: remove go-bindata
    bbccf2ecb43 e2e-node: move to embedded test manifests
    d98b2dd2d62 generated: remove usage of go-bindata
    68b334d02bf test: setup embedded file sources for manifests
    ceb42d09389 Update github.com/pkg/errors with go native errors pkg
    8e4212c01a7 test/integration: rename package and files name from master to controlplane in test/integration
    903d76f558e apiextension: fix typo and test case in conversion integration test
    3af6329caf2 e2e-framework: add an EmbeddedFileSource to sources
    7546e5d6dc9 vendor: update manifest
    43c2e454a05 hack: remove bindata generation logic for translations
    eb75b343949 kubectl: use embedded translations instead of generated bindata
    5ece28b77a2 kubectl: move translations to i18n package to kubectl staging directory
    322c18c147d adds metrics for authentication webhook
    b7d732d3d6f Map PV access modes to CSI access modes
    8db83c89aab CSI client helpers for NodeGetCapabilities
    5f98f6cfa47 Update helper methods to print and parse ReadWriteOncePod access mode
    2b98f8edc77 Enforce ReadWriteOncePod access mode during mount
    7491d016519 Validate use of the ReadWriteOncePod access mode
    48ba5020a28 ReadWriteOncePod PV access mode and feature gate
    358d2e0bd1f Export contains access mode helper method
    83e3ee780ad Rename access mode contains helper method
    dba8ee229ea Add validation options for PersistentVolumeClaims
    9ba0eed7c50 Add validation options for PersistentVolumes
    477aef192f5 fix loadbalancerclass integration test funcation name
    ffdf3f50073 update node-problem-detector npd to v0.8.8
    f80f9eeb6d0 Destroy the created runtimeclass resources at the end of the test case.
    ab4918b6bc0 remove redundant clause in string_slice_flag
    f59523ab4c8 Update dns-horizontal-autoscaler to use the wqmulti-arch image
    c21f9cb59d2 Fix grammar
    6f9011a4ae4 PodSecurity: vendor: generated files
    b8bdcf64419 PodSecurity: update dependencies
    724fbfbb69b PodSecurity: test: generate fixture data
    93c6f8969a8 PodSecurity: check: addCapabilities
    3733e209c91 PodSecurity: check: allowPrivilegeEscalation
    a8206ef58be PodSecurity: check: runAsNonRoot
    12ea930aae3 PodSecurity: check: selinux
    42dc070b476 PodSecurity: kube-apiserver integration test
    f39bddd7677 PodSecurity: kube-apiserver: admission wiring
    65a42a483cd PodSecurity: pkg/features: feature gate
    02a61877576 PodSecurity: admission: admission library
    29f5ebf1fe8 PodSecurity: test: framework
    1436d35779f PodSecurity: policy: registry
    5183ea0bf03 PodSecurity: metrics: stub interface
    a3ba921b168 PodSecurity: admission/api: configuration API
    9ce17c87738 PodSecurity: api: runtime API
    79d400c4416 add tracing to the apiserver's client-go requests
    48dfa2a5542 generate scheduler merge patches on the pod status instead of the full pod
    def93317b48 Kubelet Credential Provider
    30a6812aa13 promote client.authentication.k8s.io to v1
    889dcb5b54d e2e: node: fix npd test failures bumping image
    669fb501368 upgrade staticcheck to v0.2.0 and update the static failure packages
    39a373b162f correct example command of kubeadm help
    a8d4cfac933 Allow delete with grace period 1s even if metadata period is negative
    45ce2dfacc8 Treat negative as 1s in delete path
    40593fa4d36 spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative
    1b73a0040a4 Promote Stateful Status e2e test to Conformance
    405e9a5172a Promote Deployment Status e2e test to Conformance
    d3ad1d77f36 Promote Statefulset list and deleteCollection e2e test to Conformance
    266ffa85266 bug fix in sctp test
    4add8ed9106 kubectl command headers as default in beta
    aeccadda4ff Update setcap image to buster-v2.0.3
    1721be087d0 nodeport tests: node addresses must match the service IP family
    0a8a9188c98 Update debian-iptables image to buster-v1.6.5
    42f9333e7fa Update debian-base image to buster-v1.8.0
    70124846fa4 control plane typo in node role path
    21fd224ebdb Updated to use konnectivity client v0.0.21, and implemented placeholder context
    2eb50ee2fd5 fix comment on dual-stack integration test
    80171465b35 Renamed variable containing master to control plane
    fa7b5d86e63 remove duplicate validation on services
    20f84b12a16 Optimize scheduler res scorer on non-requested extended res
    0cdd8c1c109 Removing ServiceAppProtocol feature gate
    913c449a42f add unit test to verify graceful termination behavior
    a84c1b71005 apiserver: NonBlockingRun should return a listener stopped channel
    d85619030e3 apiserver: refactor graceful termination logic
    79550ed40c6 Add distributed tracing to the apiserver using OpenTelemetry
    916dbc335c9 nodeport tests: node addresses must match the service IP family
    02a3caba9c4 refactor default IP family cluster detection
    9accb994dff tests: Wait for the network connectivity first
    16b7d473f23 Narrow the scope of the json/register test case usage checking
    179e48c4bec Add missing comments in APF API types
    fe161579e20 Add integration test to promote serviceloadbalancerclass feature to beta.
    ecc53182475 Remove MPL-licensed dep from lruexpirecache
    1e250610b20 Fix panic in pkg/volume/csi tests
    7f893f6bd62 Split documentation according to both mechanisms available for migration
    b6a317aeafc add a function that returns default scheduler configuration
    5feff280e1a remove fakefs to drop spf13/afero dependency
    af825b43577 Remove default JSON logging format registration from component-base/logs package
    d3dfe124dac Update mounter interface in volume manager
    4233056f804 Move HPA v2beta2 deprecation to 1.23.
    538e7777c39 kubeadm:remove deprecated flags CSROnly and CSRDir
    8f08db9164b Change log level to Debug
    7cf30d56906 fix/remove-errors-pkg
    89a4d4b0717 kubelet: modify the function of getCgroupSubsystemsV2 to use libcontainer API
    23ce7977b75 Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default
    cf07d42337b removes unused libraries
    7e891e5d6cf csr: correctly handle backdating of short lived certs
    70a524659aa kubeadm: add {Init|Join}Configuration.Patches.Directory to v1beta3
    a4402122b4f kubeadm: add the --patches flag and deprecate --experimental-patches
    70c0fdda0c6 Add lilic as Instrumentation reviewer
    b259686b367 tests for statefulset PersistentVolumeClaimDeletePolicy api change
    43f8f58895d add containers starttime metrics for metrics/resource endpoint
    0762f492c5b Add config checking for inflight limits
    e4e735cd1cf statefulset PersistentVolumeClaimDeletePolicy api change
    0feba0c4eec Add StatefulSetAutoDeletePVC feature gate
    5d461adb3b8 Apply suggestions from code review
    93365919b50 Fix staticcheck failures
    674802147c8 update to remove github.com/pkg/errors
    730c21d386a Drop etcd tests dependency
    01760927b82 Simplify running embedded etcd server in tests
    cf9510751d5 StatefulSet minReadySeconds e2e
    47615c20207 e2e: node: remove obsolete AlphaFeature tag
    e7a240395e9 uses native errors instead of github.com/pkg/errors
    12dcd2f84d4 Remove usage of github.com/pkg/errors
    8b7003aff4c Add SeccompDefault feature
    4b140218747 update github.com/pkg/errors to go native errors pkg in staging
    3b36e6bcea4 kubeadm: fix image pull policy integration
    b4dddbafa2f CHANGELOG: Update directory for v1.22.0-beta.0 release
    c5498744c9e Making a run test.
    cd318aec0ba Disable deprecated volume limits test when migration enabled and replace with CSI-specific test
    6583b05f07b replace more powershell commands with /bin/sh in volume/fixtures.go
    7aa8a497df0 replaced usage of powershell commands with linux commands
    f0d7e9c9d1d undo windows compatibility changes because the linux commands work
    9a146bc3e99 Remove [LinuxOnly] string from ginkgo tests
    54070a66284 Enable another test in windows, use a /bin/sh command instead of a PS one
    ee34cd640ac enable gcpdcsi multivolume tests with windows nodes
    58a83ecbdb3 integeration tests
    2c6bba29360 fix auto upgraded preferDualStack services (in cluster upgrade)
    d4767ed5ebe memory manager: move to beta
    b6c75bee15e Remove balanced attached node volumes
    63a23f1ed7a Transitive dependency: high CVE fix
    681905706d4 e2e node: provide tests for memory manager pod resources metrics
    03830db82de Implement all necessary methods to provide memory manager data under pod resources metrics
    24023f9fcc7 Extend pod resource API response to return the memory manager information
    0f922b200f3 Simplify the formula used in the RequestedToCapacityRatio plugin
    3daef0a5343 Allows manual restart of dbus to work in Ubuntu.
    ec93b3b0be4 Stop using github.com/pkg/errors
    0dd1624ec8e update cri-api v1
    25f479c2ac7 fix'--log-file only works if --logtostderr=false'
    d95f677dd86 Fix OWNERS
    249db7ceb39 wait for endpoints to be available
    44360b315ca GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam.
    459fe7d08ad add support of imagePullPolicy to kubeadm
    8231a3e9210 CSIServiceAccountToken ga
    e2061cfcd81 Expose envvar CSI_PROXY_VERSION
    518844fd25f use GA topology labels for vsphere
    1e949fa9280 updating github.com/pkg/errors with native errors pkg
    4d11c3cd8cb deflake TestClientReceivedGOAWAY test
    6cb448c10e2 Specify etcdctl version for livenessProbe
    676958c2bd0 Fix NodeAuthenticator tests in dual stack
    b22d0b13cc4 Fix verify staticcheck flake in cluster/images/etcd
    ea419eaf339 Add shu-mutou to dashboard approvers
    6203d4fc6af apf: calculation of dR/dt should use seats in use
    6d3fd8353c3 don't panic if nodeIPs are not found
    1f9d448283a Use errors.Errorf instead of errors.Wrapf when the err is nil
    afea48d23f0 test/e2e/network: remove dependency to google.com for in-cluster networking tests
    292f2a67bd6 Update logging example with caller
    e37d6d6c6dc Simplify zap logger initialization
    a2a8080169a Fix: typo with hack/update-codegen.sh
    fc38aeed6f8 Fix: typo on ExtractHoge
    b9d5d5536ed Add log sanitization klog integration tests
    cff40a7bcc1 Add info about source code location in JSON logging
    e371b27e6cb Fix frameworkImpl.extenders being not set
    875f1ffe2bc chore: clean up the tests that have external dependencies
    72a53288a5b Remove gcepd unmanaged zone test.
    35e9d97f3e0 update Azure/go-ansiterm to v0.0.0-20210617225240-d185dfc1b5a1
    8942cba24d4 log if we're running with -race
    68d8bcb64fb remove redundant bits from test-dockerized.sh
    4ee729ce5f2 disable race detector in test-cmd.sh
    55d2868e9d8 don't redundantly set KUBE_RACE in test-integration.sh
    3c44b86ad65 enable race detector by default in make test
    6c0463bd2b6 fix: properly wrap errors when reading response body in the client
    3930629e130 Track generalization for width
    676f0450ed3 Add APF metrics about R(t)
    e72effbf12e Remove omitempty from PathType
    774d228637d remove the path if it exists before writing pki data.
    5d15ed02b56 Extract columnPrinter interface for printing the values behind additional columns
    1c2ba3162db update internal modules
    e977740ae63 Rename master to apiserver in test/integration
    9571b1f8844 update vendor
    4eab19ae7d9 Clean up the master term in test/integration comments
    54fde5d119f Make logged verbs match metric-reported verbs
    762eeb0988c Use the hostprocess feature flag and assign a user
    ff716cef508 apf: take seats into account when dispatching request
    47171077bf3 CHANGELOG: Update directory for v1.21.2 release
    0ccf53dd200 CHANGELOG: Update directory for v1.20.8 release
    780872223f2 CHANGELOG: Update directory for v1.19.12 release
    6ae7b551143 update internal modules
    97031da5e29 Correct comment block from openapi_v2.NewDocument to openapi_v2.ParseDocument
    c691386fef7 Update github.com/googleapis/gnostic to v0.5.5 and updating transitive dependencies go-cmp, protobuf,, to adapt the latest gnostic release which cosists of [Update protos for Go protoc plugin compatibility]
    edd0cd79eb0 Updating non-vendor specific code to support/use AWS-SDK-GO v1.38.49
    1b27430b506 Updating AWS-SDK-Go to version 1.38.49
    c673e166383 Fix ServerGroupsAndResources docs typo
    1a4b0ee09bb remove excess error handling
    45d18acbcc1 add info for possible failed listAndWatch grpc call
    c789898f793 when new manager failed should return err
    da35add03f7 Rename master to apiserver in test/integration
    eed37fa47d3 fix: cleanup outdated routes
    5a0756c5f4f Update etcd in kubeadm to run as non-root.
    9e694a45f94 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
    3c59e742f3b Create List, Patch & DeleteCollection StatefulSet Test
    63d12371021 Fix Node Resources plugins score when there are pods with no requests
    584503d2ed3 Speed up unit tests in -race detection mode
    d41249f7803 CHANGELOG: Update directory for v1.18.20 release
    d5da73032f7 Add unit test for DSWP with uncertain volume
    f795b02f4f8 Refactor dswp unit tests
    2fcb5e9cf79 Add PodRemovedFromVolume
    ca934b8f5cb Add GetPossiblyMountedVolumesForPod to let kubelet know all volumes were unmounted
    f4b41c0a171 Fix UnmountDevice error cases
    54ad7e40f1a Add e2e test for NodeUnstage error cases
    a47afdded0e cmd/kubelet: replace KEP link with the documentation one as it is available now
    0bfd1cb7c71 Update gomock to 1.4.4, removing a few extra dependencies.
    7fcdbbef06d Switch to github.com/coreos/go-systemd/v22 and drop older package
    265ef1741f9 Move scheduler plugin set and configuration defaulting to component config
    057422504ab Run volume cloning tests in the same topology segment
    abf65843227 update string_slice_flag add nil judgment
    cf2a3c32309 Kube proxy for windows userspace, remove dns Mangling, vendor updates
    b98824c55d9 Update Azure Go SDK to v55.0.0
    480093bd1f4 test/e2e/network: mark network_tiers.go tests with GCE tag
    f298a658aed e2e metrics: remove redundant checks around metrics tests
    a4c7e91b591 e2e metrics: skip tests when metrics grabbing is disabled
    1d3420ca72f e2e metrics: check whether debug handlers are available
    5e9076da93c e2e: grab controller and scheduler metrics via port forwarding
    3e0269ce6e1 Move common code to ensureTopologyRequirements
    4ee38f33d21 update etcd makefile to build v3.5.0 image
    6448181d95c Update to etcd v3.5.0 client
    207f9e8b714 switch go-flow-levee to tagged version
    84112d36900 refactor cmd/kubeadm/app/preflight/checks_test.go()
    5ca47deb0aa Promote DaemonSet Status e2e test to Conformance
    f7d02f4d25a Promote ReplicaSet Status e2e test to Conformance
    503f5e1b528 Quiet grpc info logs in apiserver
    dd5f67d23c0 Kube proxy for windows userspace, remove dns Mangling
    8fb909291fb Skip migrated metrics for Windows CSI tests
    f02948e7766 Use container-storage-interface spec v1.5.0
    6ba7b3d26b3 allow enabling Leader Migration without config flag.
    bade96ed78f implement wildcard component.
    eadfe46e036 Do not throw error when we can't get canonical path
    14085c50d3c bump KUBE_TIMEOUT to 180s
    2f7456076e0 apf: always include seats in virtual time
    9469756b6cb Ensure kubelet statuses can handle loss of container runtime state
    211485c23d3 last-applied-config annotation no longer mirrored to endpoint slices
    ceb1dbd2f1f statefulsets: MinReadySeconds implementation
    01bb0f86b02 update comments and owners file for pkg/util/removeall
    f1de598233e Improve terminated pod message when node is shutting down
    f9343f837dc Use LoggingConfig within LogOptions
    5cfc39ef5e9 Update protobuf,grpc,etcd dependencies
    bc86d12dd9c Update generated files for endPort promotion to Beta
    a26c392de17 Fix etcd egress dialer addr parsing
    19db126d76e Exercise egress configuration in local-up-cluster
    f283deee6b6 Quiet embedded etcd logs
    068e4c55a8a Eliminate parallel and unnecessary embedded etcd instances
    52b629efbc8 Drop use of deprecated clientv3.SetLogger
    2979c3325e3 Switch to go.etcd.io/etcd/client/v3
    ff2c6142459 Switch to non-deprecated timestamppb.Now()
    1134456c89c Fix CSI mock driver to get marshaleable grpc error
    77ab4bdbbcc Drop etcd v2 support from test util
    5f1983d8710 Drop etcd v2 support from etcd migration image
    1e1a60e310d publishing: Use go1.15.13 for 1.20 and 1.19 release branches
    9f18ddf03ce Promote endPort field in netpolicies to beta
    e427d2f22a7 test/cmd: kubectl and exec plugins don't fight for stdin
    60246f69cc0 kubectl: don't fight for stdin with exec plugins
    cd83d89ac94 exec credential provider: InteractiveMode support
    ca254e978b5 feature: add unified on cri to support cgroup v2
    be48f1d272d Add test cases to the addAllocatableThresholds function in pkg/kubelet/eviction/helpers.go
    8fe00a7e484 Start deprecation of --record flag
    5ea3dd531c7 Update certs.go
    83ee5da75e9 Fix:slow memory leak may be in kubelet podworkers.isWorking
    74feb075948 kubeadm: CoreDNS permissions for endpointslices
    188193e1c0b kubeadm: upgrade coredns 1.8.4 and corefile-migration to v1.0.12
    a3e464490a5 Fix some typos and omissions in kubeadm APIs
    ff0f83b4b2d skipping more tests in case when ExecProbeTimeout set to false
    4b36a5cbe95 Switch to github.com/robfig/cron/v3
    f042b4968d3 Fix broken KEP link for issue #101008
    c329202ee8e update comments to reflect wildcard component.
    44cb4a63f61 Allow write on events to edit role
    7560f33e27d kube-scheduler: stop using insecure serving bits
    59b4b124df0 Update kubeadm control-plane to run as non-root.
    de2f9f17093 Remove error wrap from logs
    2e06066bab8 Migrate kube-proxy to use v1 Event API
    8748f3105bb Update corefile-migration to v1.0.12.
    60ab908119f Fix - Winterm issue on Windows 8.1 in kubectl exec
    9f7d61c520f Upgrade ANP components to v0.0.20.
    106f416873c Upgraded konnectivity-client to v0.0.20
    9109d928cd0 test(proxy::config): deflake TestInitialSync
    44b396ae0e6 owners: update puerco/cpanato and clean up old members
    c13c3ebc793 Remove deprecated scheduler CLI flags hard-pod-affinity-symmetric-weight and scheduler-name
    c710f99ef73 apf: add a gauge for the number of seats currently in use
    9d514b2de42 Konnectivity: tune flags for larger clusters (5k nodes).
    36eaa11d50b cleanup usage of NewPodNominator
    fd972934e49 client-go: reduce log level of reflector again
    369416b7636 cm: handle nil cpumanager avoiding segfault
    29aa4c0ee81 Check content of volumes in snapshot/clone multivolume tests
    89284a1ba7f run_remote: improve error reporting
    654ec0866a9 kubeadm: use a suggested example in v1beta2/3 docs
    9255f2ccf38 Fix kubelet cpuset typo
    68f139548b3 Remove unused parameters from TestConcurrentAccessToRelatedVolumes
    77c04d22844 Increase KUBE_TIMEOUT default to a passing default
    110c39ef60c unroll extenders
    dae335c1150 Fix test failure in some envs.
    90df026709d JSON log format registration for kube-controller-manager
    170c93bf05e JSON log format registration for kube-apiserver
    52f5ba3a58d Remove SchedulerAlgorithmSource from scheduler's internal CC API
    a5825d68365 JSON log format registration for kube-scheduler
    e6bf19bcf69 Update CreateInitStaticPodManifestFiles, CreateStaticPodFiles and CreateLocalEtcdStaticPodManifestFile to take into account if the command was run as dry-run.
    183bc3cece7 Allow scheduler maintainers to approve changes in the internal apis pkg
    46f3e4dfdd4 Define in-tree scheduler plugin names in separate pkg to break a cyclic depednecy when moving plugin defaulting to CC
    a84b91f08c1 fix net-tiers e2e test
    6d7c83f2cd1 the last upperbound of kms latency metric is too small
    9b72eb1929a apf: add plumbing to estimate width" of a request
    12447bc8038 Upgrade etcd server version to 3.5.0-rc.0
    c98306a09e9 test: adjust summary test for cgroup v2
    c0c9f1f318c Ignore first SIGINT in node-e2e tests
    bd80603c9e5 JSON log format registration for kubelet
    386036d23d0 Add k8s.io/component-base/logs/json/register to vendor
    dc5626cc183 Upgrade debian-base to buster v1.7.1
    897f8012fdd kubeadm:Run preflight checks for diff to check that the manifests already exist
    484eb018222 kubelet: do not call RemoveAll on volumes directory for orphaned pods
    528baa09f6d e2e storage: disable health-monitor controller in hostpath deployment
    1932536ebe3 CHANGELOG: Update directory for v1.22.0-alpha.3 release
    a94aa0ea9a3 Update version of go-flow-levee for verify-govet-levee check.
    de7e56bf374 apiserver: close handler chain right after shutdown delay duration
    652e056e61f Add dims as approver in build/ directory
    3968ee532d9 CSI e2e: stop leaking pvs in CSI mock snapshot test
    1524526991c [go1.16] Update to go1.16.5
    1eb8060dd61 Add test for CSI mounter
    0fcd3c951c5 test/integration:  Rename master to controlplane or apiserver
    257b494478a test/integration: Rename masterConfig to instanceConfig
    ac5535c9491 test/integration: Rename MasterConfigOptions to ControlPlaneConfigOptions
    3ac8d8c9cee endpointslicemirroring controller mirror address status
    8d0936b7436 Check empty zone after the validation of providers
    aea2e33175b gendocs: using bytes.NewReader(nil)/ioutil.Discard instead of os input/output to generate command
    c065d7c7b3b Fix NPE for CSI mounter
    f22b07d8b42 add e2e test for immutable label selector in netpol
    ff164f90130 feat: remove ephemeral-storage etcd requirement
    bb6151906f1 Add utils to set file/directory owners and permissions.
    95c8b02096b Add explicit capability for online volume expansion
    28511e82ad9 Add e2e test for a volume + its clone used on the same node
    7a63dff88bb Update konnectivity default
    3c8e56bef95 scheduler: graduate CC to v1beta2, deprecate plugins
    2067b69b922 storage e2e: extend timeouts for subpath restart tests
    3a830aacb0e Trivial: fixed typo in logs requrested --> requested
    64946cd50d6 fix flake integration rotation via informer
    7ced405de5a Create a new modele component-base/logs/json/register for optional json register
    92b52a4fb56 populate last successful time to cronjob status
    77bb053102c Use native zsh completion
    7b0fbb72929 add audit log test cases for cross-group subresource
    46aa6045e4c Add tests for completion utility functions
    1babceac650 Revert "Add Go tests for custom completions"
    9625872d1e4 Join common functions for completion
    9d03185d3c1 Update staging/src/k8s.io/kubectl/pkg/cmd/config/config.go
    c0b3a698fa1 Add Go tests for custom completions
    879cdc5fa9e Move all completion bash code to Go code
    663b13e8149 refactor: implement custom completions for some flags using Go
    c5d70e9db1e Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver}
    aa9321f534b Add example showing impact on log output
    8e85a2b0c23 sched: fix a bug that a preemptor pod exists as a phantom
    c15fd76ee90 e2e storage: enable health-check controller in hostpath deployment
    88174fc3f2c Add klog integration tests
    c9414c2bbaf fix bug where string slice flag is not assigned
    2e167a1399b Disable zap sampling and cleanup config
    a9a2346e194 Cleanup json logging benchmarks
    d8e91ab7275 Fix test order in /pkg/probe/http/http_test.go
    1010e6a9d98 proxier/ipvs: fix test cases where ready endpoints were not used
    cc2e9394be3 kubelet: Fix test order in verifyContainerStatuses
    91e5d98b572 Fix audit unit test file location
    4ebc0c94a4e Remove legacy metrics client from podautoscaler
    3175dbd8554 Update owners for structured logging library
    f5739a15d1b The test was not very useful and required elevated access
    8eb7e81bc94 proxy/ipvs: add unit test Test_HealthCheckNodePortWhenTerminating for ensuring health check node port fails when all local endpoints are terminating
    ed4fe073755 proxy/iptables: add unit test Test_HealthCheckNodePortWhenTerminating for ensuring health check node port fails when all local endpoints are terminating
    14cc201b58b proxy: add test case in TestGetLocalEndpointIPs for when all endpoints are terminating
    3e459997c83 proxy/ipvs: add a unit tests for when the ProxyTerminatingEndpoint feature gate is disabled
    68ebd16a2ca proxier/iptables: refactor terminating endpoints unit tests with test table and test for feature gate
    f92265f6543 proxier/ipvs: check feature gate ProxyTerminatingEndpoints
    8c514cb2329 proxier/iptables: check feature gate ProxyTerminatingEndpoints
    25e2c92733c add feature gate ProxyTerminatingEndpoints
    cf9ccf5a8e2 proxier/ipvs: unit tests should specify Service ports
    d82d851d89a proxier/iptables: include Service port in unit tests
    4c8b190372a proxier/iptables: reuse the same variable for endpointchains for better memory consumption
    55881093d8a proxier/ipvs: add ipvs unit tests for falling back to terminating endpoints
    9d4e24aa32d proxier/ipvs: fall back to ready terminating if no ready endpoint exists
    b54c0568d8c proxier/iptables: add unit tests for falling back to terminating endpoints
    732635fd4b2 proxier/iptables: fallback to terminating endpoints if there are no ready endpoints
    be92fc83e2e proxier: simplify toplogy FilterLocalEndpoint function
    e797a5a1989 client-go: fix flake in test TestRequestWatchWithRetry
    892d4fabb84 Revert "Merge pull request #102581 from liggitt/revert-watch-retry"
    fbf2d2df268 only delete forwardingrule and address when net tier annotation is specified
    d9f82f7eba4 Drop viper stuff in test/
    558bdd18aa2 Update cronjob integration test to batch/v1
    6871b2b3c73 Rename masterConfig to controlPlaneConfig
    812a04539cc remove redundant code
    45179bb989a update debian-iptables to v1.6.2
    c26c423b1ca storage e2e: disable health check containers
    82be7aad262 Update etcd makefile to build v3.5.0-rc.0 image
    ceaf9b9d16a add ut for preventing dropping null from arrays
    ca279bbcc18 Fix race in attachdetach tests
    6e0650e3e13 upgrade gopkg.in/evanphx/json-patch to v4.11.0
    e35af41a123 Revert "client-go: add retry logic for Watch and Stream"
    58833d652d5 Support subresource match
    38d3ae1a060 api: update API compatibility tests to remove topologyKeys from Service
    e9c7fa49d95 core/v1: add unit tests to ensure deprecated protobuf field numbers are not re-used
    d96af5f2761 kube-proxy: remove ServiceTopology implementation
    f119b8df5f2 apis: update generated code after removing Service topologyKeys
    4d38d21880a apis: remove Service topologyKeys
    8c376426f3e features: remove alpha ServiceTopology feature gate
    0b8dc56408f fix volume failing test
    a2a4b50bc15 fixed deadlock
    ae603a38bc2 remove -ssh-user from cluster scripts for GCE
    f94391789f1 Add doc.go for client-go apply support
    5bf7bb52fe4 Remove -k from toCurl output
    ba708e5fc9e graduate SuspendJob to beta
    8aba8e2a2cd remove the ssh tunneler implementation from kube-apiserver
    6449416a3d7 Add scalability label to kubemark OWNERS
    84590fe27cd remove --ssh- options, deprecated 13 releases, that only work on GCE
    ab45d5e4963 part of master to controlplane in test/integration SetMaster -> SetAPIServer
    51717256f97 fix(timezone): the timezone is standardized to UTC
    1331c76aa3d Added field-selector option for kubectl top pod
    08ad7114d3f make lint-dependencies happy!
    29def9ff6ab Updating to prometheus/common v0.26.0
    77b5ad2fb02 Part of master to controlplane in test/integration(1.22)
    2c9f02c3290 Add test
    506fabc9ab9 Close the used modules file
    b87ad95fec3 Close the used file
    918246d7a16 update error info with the new limit in #98753
    387154f1a9a Part3: master to controlplane in test/integration Rename RunAMaster to RunAControlPlane
    f6d015be7a0 kubeadm: add utilities to manage users and groups
    dfd67c7d79e Add unit test coverage for init container phases
    47a7fcb17b4 GCE Windows: Only create NPD kubeconfig when the file path is defined.
    b8edcd3bb33 add loadbalancer name to ESIPP tests so regex pick them
    8e2eeffa792 PokeHTTP default timeout to avoid hanging connections
    21073e3b347 loadbalancer outer poll loops should have a longer timeout that inner loop
    27e20e226eb e2e lb use same variable for endpoint path
    bd2d63dd57e Fix closing of decorated watcher channel on timeout
    8847a250267 apf: fix flake in test
    5d4c1162b94 hotfix(staging_apiserver_pkg_httplog): restore depth to log calls
    53af0027420 storage e2e: capture driver pod changes, including all events
    9eea445bcce Update test cases for 'RESTARTS' column in 'kubectl get pods'
    ec4182d0032 Add last restart time to 'RESTARTS' column to 'kubectl get pods' output
    ce08fd59767 Add test cases to the LoadClientConfig function
    211e9747224 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
    4b0d0d6fc7d Fix spurious Feature tags on some NetworkPolicy tests
    c3a9c7da160 Promote CronJobControllerV2 flag to GA
    1619e8eb953 Clean apply's prune and kube addons with batch/v1 CronJob
    1bf8edfdd44 remove GAed feature gates group: LegacyNodeRoleBehavior/ServiceNodeExclusion/NodeDisruptionExclusion
    8054b0f808d Fix watch rejections in P&F filter
    15c4d579f08 Use objGV instead of gvk.GroupVersion
    eac1d23825b nit: Update comment to match headers change.
    b049e1b9ab4 Cleanup redundant failure reason in InterPodAffinity plugin
    95ac461a290 serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match
    58d7bf67d46 Simplify objGV construction
    b9b01a0f901 Simplify objGV construction
    19c72a6cd05 Simplify objGV construction
    0ae6a7bac6b Simplify objGV construction
    86d68effc21 clean code
    355be993906 Default GCE testing to using konnectivity
    673352dbd25 Cleanup Framework interface
    97ba90cbfb4 use subpath for coredns only for default repository
    9880ceceb94 Add KEP links to sig-net feature gates
    9d2135f703f reuse fake topology manager
    8b3162d67b2 clean code
    f3f59d420a6 remove LinuxOnly tags for subset of dual-stack tests
    39d45fcceff Add user and group name constants for kubeadm rootless control-plane.
    3cb4f3e1bf0 GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression.
    8d9dd7b6eae Avoid warning on seccomp field usage
    f2ca9c17946 Fix regression for timed-out stream cleanups
    452e2eaf1ba Fix RollingUpdateDaemonSet godoc regarding rounding
    e3841e91c81 fix watch_cache_capacity metrics
    5b0bafabf6b vendor: upgrade cadvisor to 0.39.2
    4567a431010 Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error
    e105611d3a7 Azure auth forwarding adal refresh error to tokenSource, fixes error when token refresh fails.
    d9d51541a87 Address watch panics in P&F handler and extend testing.
    582b492cc09 Pre-allocated memory
    341f6e42673 Refactor logs options
    607d3819498 client-go: add retry logic for Watch and Stream
    f9249061737 Bump golang.org/x/text to v0.3.6
    6a374b50f92 Add tests to logs
    eb114115fdb Improve func ToSelectableFields performance for event
    1431eab36d3 Remove Godeps
    329f7d55d13 Fix auditing failed of request: encoding failed
    ade167e53af Delete AvailableResources judgment for GA features
    c7111515c5b Enable protocol-buffers by default
    3c899f9b54d sched: fix Dump's doc comment
    24a1f9d817c kubeadm: use "SkipPhases" from configuration for "init" and "join"
    ac161866aa7 kubeadm: add SkipPhases in {Init|Join}Configuration for v1beta3
    39d74049615 Uniform output string.
    47c8c48e2cf Remove Redundant alias
    2787e8c18ce Kill container runtime with SIGKILL
    1b6cf83cf40 Error message should not be capitalized.
    d3f92af74f1 Part of master to controlplane in test/integration NewMasterConfig -> NewControlPlaneConfig
    cd3709232f8 Fix VolumeAttachment garbage collection for migrated PVs
    02bade46443 Fix a grammar error in doc
    c9fe8ddf68d bump calico to v3.19.1
    816a069d543 Add a test for verifying compute basepath.
    36cdb72eb6f (scheduler e2e) Create balanced pods in parallel
    3813ed1ef71 fix prometheus-to-sd image for fluentbit
    12fe4dee2b0 Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml
    f9a04f3bc4a Move error reporting to volume plugins
    0ed0714f8c0 Simplify kube-cross dependency handling
    39d9e98a6f9 Build non-static binaries with PIE buildmode
    ac17d03e76c Remove set errexit from etcd manifest
    ae4db677f41 Update kube-cross to v1.16.4-2
    c694b9f7619 CronJob: switch storage version to batch/v1 in 1.22
    781c65a40c2 fix: skip pods with empty ip
    580b557592c Log spelling formatting and a redundant conversion
    5c2841c8cd4 Forbid the use of --config and --cri-socket at the same time
    6738380a80c cleanup tempDir after fsstore_test.go
    d9681d72669 AllowExpandedDNSConfig if haveSameExpandedDNSConfig(newPod, oldPod)
    6317ce63c6a Add feature gate ExpandedDNSConfig
    819059f641d kubelet: Validate the length of the DNS search path
    a95842095ec Retry reading /proc/mounts indifinetly in FC and iSCSI volume reconstruction
    82cfe9f14f8 ConsistentRead tries 10 times
    1d16f934b94 Bump k8s.io/utils
    64e8396e300 Retry detaching FibreChannel volume few times
    faae926d15d Changes headers to IETF standard
    d7a67a3b8e5 change log line to print actual pod uid instead of address of the pod uid
    876174125bc upgrade klog to v2.9.0
    27044f48552 depracate ValidateProxyRedirects as it is with StreamingProxyRedirects
    363b78fe883 Promote cronjob to batch/v1: kubectl sparse_test prune
    90e215dfd29 add api e2e test for port ranges of netpolices
    9cfbf062256 cleanup PodPreset testdata
    0cc217647ca Implement support for watch initialization in P&F
    507710b50f8 Update CNI plugins v0.9.1
    4acb6a865c9 storage e2e: use csi-driver-host-path v1.7.2 in single pod
    d98a83bb01b kubeadm:return error info normally
    80a5b004451 Removing utils/mount dependencies from vendor
    2769e99dba2 remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg
    e89d2a77795 Promote Daemonset list and deleteCollection e2e test to Conformance
    5e4c59ba991 Promote Replicaset list and deleteCollection e2e test to Conformance
    e43e9696cc6 Fixed sort-by not sorting Resources as expected
    8651fcb25a7 Implement a windows Netpol NewModel
    4c95bc8830b testdata: StatefulSet
    f3ab9550180 validation: Handle presence of api introduced
    d11cc95376c feature: Add minReadySeconds featuregate
    5464b649812 generated: Changes for api introduced
    49af8358522 api: Introduce minReadySeconds,AvailableReplicas in Statefulset
    df4c34e771c Update pd csi driver images to use v1 images (CSINode, CSIDriver, etc)
    17551f291d0 Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin
    f871475a5e5 Grant PSP permissions to all serviceaccounts in e2e, not just default
    80fa50e0d74 Update etcd image revision
    33fe4bb0764 Update debian-base to buster-v1.7.0
    3bcc15e19dd Update debian-iptables to buster-v1.6.1
    6c0976814ca use ownerReference to build default spreading contraints in the scheduler
    2e771b8e745 Make a public ValidateAnnotationsSize
    8e5a9824425 kubeadm: remove the cgroup driver detection code for Docker
    a013c6a2db5 Adding IPV6 (Dual Stack) support to handle IPV6 pod cidrs
    93f79103e54 kubeadm: add "+optional" to fields with "omitempty" in v1beta3
    2c79f52de90 Local PV e2e: fix leaked local volumes
    38c56883f1c e2e: hugepages: delete test pod after the test
    e862421c2bc Update etcd makefile to build v3.5.0-beta.3 image
    383ce85649c [scheduler] avoid comparing function pointers in unit tests
    c9ec4862872 Part of master to controlplane in test/integration Rename NewIntegrationTestMasterConfig to NewIntegrationTestControlPlaneConfig
    1b6895c11fb Fix: remove framework.ScoreExtensions interface check
    5908cd0d90d simplify returning boolean expression in /pkg/volume
    9e257ec194f Optimization logging format for pkg/kubelet
    55ff9630179 Make validation totalAnnotationSizeLimitB public.
    69019a03d3a Add netpol tests for windows
    2d361d43063 e2e: Flag questionable durations in container status on termination
    f9cb68a2b13 Fix EndpointSliceCache::getEndpointsMap for different endpoints with same IP
    f1aee7e0496 kubelet/cm: GetResourceStats -> MemoryUsage
    517feed45b5 Add: interface check
    202a0120937 Add restart unit test
    b344d4d4422 api link is missing
    20c02357cad Add hint to fake topology manager.
    c299b8fc9a0 kubelet/cm: rm propagateControllers
    fadf3e15316 Graduate prefer nominated node to beta
    e8f69398c35 simplify return boolean value expression in cmd/kube-controller-manager/app/certificates.go
    c24b87b1336 Fixed a possible nil pointer dereference caused by variable `plug`
    c201a78dff9 Remove etcd connection apiserver preflight check
    3c1576ae573 Create e2e Deployment status lifecycle test
    bcfa3604a28 Create e2e test for Statefulset Status endpoints
    990d0949c4e Add test, after restart dbus, should be able to gracefully shutdown
    9c59e6c85fa After dbus restarts, make GracefulNodeShutdown work again
    ae90e6b9a1f Retain the test coverage of TestObserveWebhookRejection.
    fb23e449ab6 Add attr to the argument list of ObserveWebhookRejection, and remove operation, as it is included in attr.
    f40b10e3aa0 Prevent data race condition in vsphere unit tests
    f9ee64007ee apf: always create missing bootstrap configuration object(s)
    32c14da9025 fix(metrics-proxy): wait for enough component pods to show up first
    6c63ef147cc extract same code of es and esm to pkg
    72fe1b722ce Make the service account error more apparent
    88b31814f4a BoundServiceAccountTokenVolume ga
    619fff10eac handle Unmarshal error
    074f25523b2 scheduler_perf: correct error handling
    55be51a2dbe Issue [2683](https://github.com/kubernetes/org/issues/2683) was closed with PR [2690](https://github.com/kubernetes/org/pull/2690O) sSimran should now be part of kubernetes ORG
    330fee13506 remove the RunAsGroup feature-gate
    5ea01629066 e2e: deflake test by not relying on events
    3916c009551 fix manual trigger of readinessProbe on startupProbe success
    fa1a4100c6c Remove CSIMigrationVSphereComplete flag
    baa88b26cdc Remove feature gate to GA the setHostnameAsFQDN feature
    60377ba1a37 graduate IngressClassNamespacedParams to beta
    2eb90f9b809 Default StreamingProxyRedirects to disabled
    afe28c6fc83 kubelet_pods.go: clean makeEnvironmentVariables
    1df3a735d3b go-to-protobuf: small fixes to improve debuggability
    2335547a9cf cleanup: delete tempDir after flexvloume_test is executed
    650666406e1 update kubelet_running_pods metrics comments: pods that have a running pod sandbox
    a3b2e35d700 Making a run test.
    125fb04dbf2 Relax node_id length limit to 256
    2dbdfd0902e Extend the max of admission latency buckets to 10s.
    e7db88b0b65 Add a namespace label to admission metrics.
    3bad31b531e Add allowAutoIOPSPerGBIncrease to translated AWS EBS StorageClasses
    4272ac92a76 Document the NodeAddressType values
    b9d9cc38b52 fix: inaccurate miss schedule times of cronjob v2.
    78323910db5 Fix typo: Use uniform format of structured klog
    8725c960149 Fix csi_client_test.go metrics nil pointer dereference
    79126376f02 Add test for counting inodes correct with hardlinks
    d45ba645a8f Get inodes and disk usage via pure go
    6e54f067e9d Support dynamically set log level for kube-proxy
    1d764952dad Fix  incorrect test code in pkg/volume/csi/csi_attacher_test.go file
    64fca6bda7d doc: remove the description `socat` is required
    80b4277bff4 Optimize the structured Logging migration.
    0eb40b3ded6 e2e: reduce pods used in shared local pv test
    dea89e549fc Fix use nil err
    086cdfb3601 Use docker buildx for the build-image.
    2d3073c5917 Tweak kubelet config comments for consistency and readability
    fdcbb54febd Improve kubelet config type documentation
    bc3e7b5dca3 nit: use %v for error as it is already quoted
    04f091790ee e2e: TM: wait for SRIOV devices in pod scope tests
    8e7b5ff480b staging/src/k8s.io/apiserver/pkg/registry:migrate logs to structured logs
    3ec63238c53 fix kubectl alpha debug node does not work on tainted nodes
    88fbd370407 Fix the url 'version's comparation of github.com/Azure/go-autorest/' lost
    1995f28c64a Simply modify the Kubectl logs information
    385b7d7ff07 fix --event-qps and --event-burst
    620c23473fb fix Spelling error for klog
    00da68dbc25 Adding restart kubelet flag on e2e test
    07002e41bbe Update Calico to use a non-conflicting route table range
    ad156aff59e ignore "vmdk not found" vsphere errors during unmount (assume success)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

/
2021-07-08 08:41:41 -04:00
Bruce Ashfield
30774e6c21 k8s: bump to v1.22-alpha
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:53 -04:00
Bruce Ashfield
cd75395b16 k8s: move to 1.21 release
Updating kubernetes to the 1.21 release. Minor build changes and
patch refreshes were required.

The changelog is massive, so we won't list it here.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-16 09:32:44 -04:00
Bruce Ashfield
46dc0363e3 k8s: update to v1.20.4
Moving off the 1.20.x-rc and onto a dot release tag. This pulls in
the following commits:

   e87da0bd6e0 Release commit for Kubernetes v1.20.4
   5682545c2da Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3
   f8f2fa827d3 Release commit for Kubernetes v1.20.4-rc.0
   01849e73f3c Release commit for Kubernetes v1.20.3
   58c5493f22a kube-cross: update image to use v1.15.8-legacy-1
   e000e9722bb [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8)
   3365196e9d8 Use go-runner:buster-v2.3.1 image (built on go1.15.8)
   91f2745f08c staging/publishing: Set default go version to go1.15.8
   3c777448311 Update to go1.15.8
   b570189cf1f Revert "make hostPort match test linuxonly"
   6698a4e7afc Revert "conformance changes"
   6a31f8d17ef dockershim hostport respect IPFamily
   a456eb4eaf6 dockershim hostport manager use HostIP
   5d9910a0172 Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate
   ac866d63911 make podTopologyHints protected by lock
   b84ee98db74 kubelet: Fix mirrorPodTerminationMap leak
   d381d6c52cc kubelet: Delete static pods gracefully
   b2576fb35f7 kubelet logs print 'kubelet nodes sync' frequently
   7826a1c6b87 WIP: node sync at least once

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-17 09:27:54 -04:00
Bruce Ashfield
4ede0acf44 kubernetes: bump to v1.20.3
0e3bf6dad9f kubeadm: drop explicit constant override in version test
   1619e810d1c kubeadm: get k8s CI version markers from k8s infra bucket
   42a3b9e85ef fix kube-scheduler cannot send event because the Note field is too large
   afb0de9647c Fix nil pointer dereference in disruption controller

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-10 08:43:05 -05:00
Bruce Ashfield
5834c7eb11 kubernetes: update to latest 1.20-release
Integrating the following k8s commits:

   62b808f34d7 Update region_pd e2e test to support PV have GA topology
   85fd25ef54c Recover CSI volumes from dangling attachments
   b81c612b12b IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining "uncertain" and "detached" into "false"
   5a957b08153 Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node
   3a83880d442 Fix translation of Cinder storage classess to CSI
   e1ee8ed5f41 Resolve IP addresses of host-only in filtered dialer
   a73b4122b3c Deflake ingress updates
   570e423af0e ignore cgroup driver check in windows node upgrade
   c0fc4d4dc38 aggregate errors when putting vmss
   c8cc26f1523 fix azure file migration issue
   8ba5a06139d kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images
   baa6b2bd066 reduce buckets for etcd_request_duration_seconds
   745bdd0016e cleanup subnet in frontend ip configs
   3a5c02dbf51 conformance changes
   b241e6882c0 make hostPort match test linuxonly
   20b66e4ec1e Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes
   4c1bc2d6b06 Add unit test for child scope mismatch with missing parent
   87344c8d52c vendor: update cAdvisor to v0.38.7
   8ae140db2b9 Use volumeHandle as PV name when translating EBS inline volume
   a525ddc8521 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2
   112e823d906 Release commit for Kubernetes v1.20.3-rc.0
   faecb196815 Release commit for Kubernetes v1.20.2
   7394cae9159 kubectl-convert import known versions
   8e44c89eefe Revert "Merge pull request #92817 from kmala/kubelet"
   1fc106ac183 fixes nil panic for nil delegated auth options
   d65732141da Lower the frequency of volume plugin deprecation warning
   d8a1dfb21f1 move all variables in sampleAndWaterMarkHistograms::innerSet
   ffed9c3a48c handle webhook authenticator and authorizer error
   c3e150fada2 use default unkown sock for kubeadm cmd if cri detect is not needed
   2d0ffc16769 cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip
   d0dfecaf038 fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable
   287ca883635 Release reserved GCE IP address after ensure completes.
   37e3feac7cb Ensure reproducible builds when build through docker
   4d8ac66fce1 Fix cadvisor machine metrics
   3c67a0a760b Create OWNERS for most of the API Priority and Fairness impl
   a1ac5f4894b fix the deadlock in priority and fairness config controller
   16559f765ea Cherry pick 443 and 448 from cloud provider azure
   d8ba4e4af42 Fix bug in CPUManager with race on map acccess
   0f764ea81e6 clean up executing request on panic
   a79db17be1a fix azure file secret not found issue
   98dffa75232 fix: azure file latency issue for metadata-heavy workload
   0c0d4fea8dd Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1
   764cafccc4e Release commit for Kubernetes v1.20.2-rc.0
   c4d752765b3 Release commit for Kubernetes v1.20.1
   afaa0c6e621 Avoid checking the entire backend service URL for FR equality.
   6666afa3317 Revert "Use host IP instead of localhost for control plane component kubeconfig files."
   787e3a62cab Add more logging for Mount error
   8a224b526c3 etcd version for 1.19 is 3.4.13 for cve fixes
   5483a7230d7 Use non privileged ports
   0c1a53829dd Flush FibreChannel devices before deleting
   34077eedb6c Fix FibreChannel volume plugin corrupting filesystem on detach
   416165a0cc6 vendor: update cAdvisor to v0.38.6
   2e6a0a0a126 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0
   49eb3a86d5b Revert "iAdd host IP to etcd listen client URLs."
   f674d4e84d5 fix migration logic
   d1e54b9922b APF e2e: disable drown-out tests temporarily
   7d6ffe0b1a4 Add AcceleratorStats to cri_stats_provider
   3321f00ed14 Release commit for Kubernetes v1.20.0-rc.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-05 23:25:02 -05:00
Bruce Ashfield
6049f9abf8 k8s: update to 1.20 release candidate
As part of this update:

  - we refresh our CC patch to apply cleanly
  - adjust the host side GO_LDFLAGS to drop linker flags that cgo
    doesn't like when building generated_files.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-12-03 09:56:25 -05:00
Robert Yang
28fda6d848 kubernetes: Fix race issue for installing go2make
The src/import/build/root/Makefile.generated_files are called several times
during the build, so the following target which installs go2make will also run
several times:

$(META_DIR)/$(GO_PKGDEPS_FILE): FORCE

It runs automatically when the Makefile is called because of:
sinclude $(META_DIR)/$(GO_PKGDEPS_FILE)

So there is a race issue of go2make when parallel build:
hack/run-in-gopath.sh: line 34: build/tmp-glibc/work/corei7-64-wrs-linux/kubernetes/1.18.8-r0/git/src/import/_output/local/go/bin/go2make: No suc h file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-10-15 10:57:12 -04:00
Bruce Ashfield
535a3e8279 k8s: fix 32bit ARM build
Remove the remaining 'go' calls, and replace them with $GO. We also
must explicitly pass "GO='go'" on the host side build call.

This avoids the gnu-stubs header file issues, since the 'go' binary
cannot use the sysroot.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-08-12 13:03:46 -04:00
Bruce Ashfield
00b472ca43 kubernetes: update to release 1.19-rc3
In preparation for the fall release, update to the 1.19 release
branch of kubernetes, so that the change can soak and we can work
through the rc's

No unexpected build or patch issues with this bump and basic
sanity testing passed. Once ore components are updated, extended
testig will occur.

Sanity built and tested on x86-64 and arm64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-31 19:01:25 +00:00
Bruce Ashfield
55b15a06e5 kubernetes: fix ARM64 build
The first part of the kubernetes build generates some host/build files.
These use the build/host compiler and not the cross infrastructure.

It was working by luck on x86 build / target matches, but blows up on
an ARM64 build.

We fix the CC/CFLAGS settings for the host part of the build to use
the host/build flags and then restore the cross settings for the
rest of the build.

Tested on arm64 and x86-64.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-10 14:52:05 +00:00