mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-19 20:59:41 +02:00
df90aeb1ae
1048 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Bruce Ashfield
|
df90aeb1ae |
cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
258742feb5 |
moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
f12df6ce27 |
runc-docker: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d04caa21f0 |
buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
b78f5ac678 |
runc: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Patrick Wicki
|
380eae7bdd |
podman: require catatonit
Alternatively, we could add it to RRECOMMENDS. But I would say, given its name, managing pods is part of podman's core functionality and that requires catatonit, which is currently only pulled in for the ptest: root@qemux86-64:~# podman pod create Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Patrick Wicki
|
992253f871 |
podman: remove skopeo rdepends
Podman does not require skopeo to run. They are both independent tools. In distros like Debian, Fedora and Arch they don't depend on it either. Skopeo also seems to be used in some of podman's tests, so it makes sense to keep it around for the ptest. We do require skopeo's libdevmapper dependency, so include that directly. And inherit container-host to make sure the container configs are present on the device. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4cea448064 |
runc-opencontainers: update to 1.1.12
Bumping runc to version v1.1.12-14-ge8bb71e1, which comprises the following commits:
6379b58d libcontainer: force apps to think fips is enabled/disabled for testing
265e7371 Vagrantfile.fedora: bump Fedora to 39
59056a02 silence security false positives from golang/net
452bf88e build: update libseccomp to v2.5.5
3fada6ec tests/int: fix flaky "runc run with tmpfs perm"
aae41a4b Fix integration tests failure when calling "ip"
82a8b979 update go version to 1.21 in cirrus ci
03271050 ci/gha/cross-i386: pin Go to 1.21
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a03ff1cd0a |
containerd: update to v2.0.0-rc.1
Bumping containerd to version v2.0.0-rc.1-8-g0426e3c2e, which comprises the following commits:
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
c5ba71d11 Makefile: update default PACKAGE to v2
094bafe2a apparmor: Allow confined runc to kill containers
e461a59ae fix migrateConfig for io.containerd.cri.v1.images
eb5a0c04b apparmor: add `signal (receive) peer=/usr/local/bin/rootlesskit,`
5e470e1ca Update HTTPFallback to handle tls handshake timeout
a37b451cd build(deps): bump tags.cncf.io/container-device-interface
888fd315f Update CNI to v1.2.0
13e6b2b68 update to go1.21.9, go1.22.2
42e4de9c5 Prepare release notes for v2.0.0-rc.1
4a31bd606 chore: use errors.New to replace fmt.Errorf with no parameters will much better
a6a82c102 Update hcsshim to v0.12.3
7e60d5a07 Account for ipv4 vs ipv6 localhost in windows port forwarding
a153b2cd3 mod: bump github.com/containerd/nri@v0.6.1
77512e2d7 build(deps): bump the golang-x group with 3 updates
c8d9eba7c build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
1c0f73aa0 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
32caaee48 Snapshotters: Export the root path
b82ced57f fix: close profile
c7ea06a69 fix default working directory `hostProcess`
1040c7b98 build(deps): bump the otel group with 8 updates
b50e9eae4 Refactor spots to make use of sys.IgnoringEintr
3ea69db8e Add helper to ignore eintr
1b6222418 Bump tags.cncf.io/container-device-interface to v0.7.1
ad584ebec Replace direct waitid syscall with unix.Waitid
7c5078459 Remove empty default tls configuration in ctr
b6e361694 cri: add pause image name to annotations
0ec14fdf8 core/diff/apply: use unix.Syncfs
739659a4b build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2
433279438 Transfer: Registry: Enable plain HTTP
88b4cc659 address review comments
f20c49311 Update tracing documentation to add details about manual instrumentation
63d5573a3 remote: Fix HTTPFallback fails when pushing manifest
2474a99c3 Add IsNotFound case to ListPodSandboxStats
3830f8167 fix(cri): fix unexpected order of mounts since go 1.19
cbb644182 build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2
362fcf2d2 build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0
5b6ae0f79 Use different containerd sock address in tests
ab2c569fb ctr: fix parsing mount options
b97ef91fb Change port forwarding on windows
ea681afba docs: fix typo
6d00c3ada runc-shim: only defer init process exits
da4ca4949 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
dd72fb3b2 build(deps): bump github.com/intel/goresctrl from 0.6.0 to 0.7.0
e41e9e11b transfer: Platform matcher should match multiple platforms
d0d35f0d0 core/images/archive: normalizeReference: remove outdated TODO
26158609b pkg/seutil: move to internal/cri
33732bc13 pkg/systemd: move to internal/cri
0d0850af1 Prepare v2.0.0-rc.0
f5abb63c0 Update mailmap
30813f646 build(deps): bump github.com/containernetworking/plugins
0fafc0c50 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7c1fca096 Update migration script based on usage
45e425ccc vendor: github.com/golang/protobuf v1.5.4
4aa6fedd5 CRI: postpone removal of deprecated config properties
34c545824 Automatically decompress archives for transfer service import
df26c189a Clean cri options and useless parms
88421068f Fix invalid event filter in podsandbox
357c59b79 Update github actions ci to run on forks
4b719cc4b build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1
10c7f03b3 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
21d3fedf4 build(deps): bump softprops/action-gh-release from 1 to 2
228aa42a6 build(deps): bump the otel group with 8 updates
47d13767f Clean typos in plugins.
7ac9d6909 Use the Go toolchain in CI matrix to build binaries
6a96e4501 Move shim package to pkg
f25770e48 Wire through CRI ContainerCheckpoint RPC
7ecdebff9 update to go 1.21.8, 1.22.1
723306d0e Disable OOM set score unpriv test temporarily
994fdd74e Don't create new scratch VHD per image for CimFS
016b588a9 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
d9409c461 Update hcsshim to v0.12.0
00d714e90 build(deps): bump the golang-x group with 2 updates
ab4de3e4c build(deps): bump azure/login from 1 to 2
713dd8f8d go.mod: k8s.io/cri-api v0.30.0-alpha.3
d9b9160ae mv internal/testutil pkg/testutil
752917c0f build(deps): bump github.com/prometheus/client_golang
7a3b7fba5 Transfer: Registry: Enable to use registry configuration diretory
1bf781d8e Cleanup introspection interface
5bd204109 Remove grpc from Client connection interface
347346e3c Add ttrpc support to content proxy
9104e6a24 Add events proxy interface
892dc54bd runc-shim: process exec exits before init
9128ee0a9 Move nri packages to plugin and internal
d0da3d1ca sandbox: make event monitor in CRI independent
17ea3959b adds mediatype to oci index record
c5ef8a2c2 fix(docs): fix duplicate instructions for windows installation
87e8e9c7f Add Go client stability in releases for 2.0.
72f21833b Move events to plugins and core
caa9e2075 add k8s 1.29 and 1.30preview to support table
154ed26a7 vendor: go.etcd.io/bbolt v1.3.9
6d1dfe55f cri: ensure the pause image loaded in older versions is pinned
2884b318f build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
bd44df8a1 refactor code - clean switch and if statements
a60e52f58 sandbox: add struct tags for PinnedImages
a0b73ae11 sandbox: optimize the lock in PodSandbox
0f1d27412 sandbox: add methods to sandboxService
a2768f19d plugins/sandbox: move local plugin into services
d651cb743 mediatypes: support zstd compression
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e7a13cbbc3 |
containerd: consolidate to "containerd"
We no longer need the split between container-docker and containerd-opencontainers and dependent layers have been given over a year to adapt. We do keep the provides and rprovides around for a bit longer, but those will also be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
e9bb0a338f |
kubernetes: Pass -trimpath to build
Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
e46214eea8 |
containerd-opencontainers: fix wrong version display
* Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
b50d4899fa |
kubernetes: skip textrel QA warning
-buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Theodore A. Roth
|
74455bb615 |
podman: Fix missing brace in FILES
When converting to use {systemd_user_unitdir}, the closing brace was
omitted
Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Lukasz Czechowski
|
0b5cf63796 |
podman: fix location of user systemd service units
The value of USERSYSTEMDDIR is currently set to
${systemd_unitdir}/user, which might not be present in user unit
search path.
Use dedicated bitbake variable ${systemd_user_unitdir} instead.
Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Xiangyu Chen
|
8410846c0b |
lxc: fix broken test cases
Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
da840d8845 |
runc-docker: update to 1.1.12
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
d0b1a374 keyring: update AkihiroSuda key expiry
d561e5da keyring: update cyphar@cyphar.com key expiry
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
b2777a4389 |
podman: update to 5.0.1
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits:
63f6a78eb Packit: Enable CentOS Stream 10 update job
e22c9dd65 Bump to v5.0.2-dev
946d055df Bump to v5.0.1
131f3d089 Add release notes for v5.0.1
2967eb9a2 [v5.0] libpod: restart always reconfigure the netns
92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns
b1dbd477e [v5.0] Bump Buildah to v1.35.3
ebe3f395b hyperv: error if not admin
4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD
312313872 Use built-in ssh impl for all non-pty operations
70fe2a1c9 fix remote build isolation on client side
bfc63cc32 fix remote build isolation when server runs as root
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5853fc67da |
docker-compose: update to v2.26.0
Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits:
33712277 chore(desktop): revised feature detection for file shares
e9dc8201 Add Navigation Menu to compose up
39504607 Add support for volume Subpath option
3b541b07 Bump docker v26.0.0
25671ae6 introduce config --variables to list compose model variables
0191e69d Fix docs on default build image name
897d239f Bump compose-go to v2.0.2
c5a760ce add support for annotations
26f687a1 Revert "Bump compose-go to v2.0.1"
ad414613 Bump compose-go to v2.0.1
db4ed895 feat(desktop): synchronized file share integration (#11614)
1b5fa3b9 feat(experiments): add experimental feature state (#11633)
4f97edf3 reduce timeout of the Otel tracing command
bc5fc6ba fix `compose config --format json`
f937e42a Bump compose-go v2.0.0
f46ca459 services shell completion bugfix
b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig
5a1ba0ef only use ToModel when --no-interpolate is set
17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593)
4efb8970 chore(deps): upgrade go to 1.21.8 (#11578)
f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566)
34b11c4f Add test summary for test jobs in ci
c525373a make code simpler
e99b8ace avoid duplicated "xx exited with code 0" message
8ab8df86 introduce --watch
de178267 move code into small functions for better readability
1680f9a8 restore support for `config --no-interpolate`
5c4f3370 remove docker cli step in ci.yml
58ec0e9f get log to manage `attach`
349d9f34 bump compose-go to version v2.0.0-rc.8
697a48af use an dedicated compose file --quiet-pull e2e test
9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state
d10a179f add support of QuietOption to create command
94246f3c pass QuietOption when starting dependencies from run command
9630cc58 when ran with ANSI disabled, force progress=plain
6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable
9b0e3d53 ci: bump engine version to `25.0.3`
de3da829 sort containers to optimize scale down
c79aabde discard stdout for laaarge log test
0aad3221 use listeners to collect include metrics
b1c06770 docs: update cli reference link
e330f590 docs: unify no trailing dots in docstrings and help (#11301)
16c8099c Use listener for file metadata
07bda596 fix deadlock collecting large logs
d2034029 chore(watch): remove old `docker cp` implementation
894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481)
3ba66453 pass All option to backend api.Service when length statuses is not equal to zero
2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu)
1fea7c1b build(deps): bump github.com/opencontainers/image-spec
acf2ffb0 feat(tracing): add project hash attr
0d48a93f chore(load): ensure context passed to load
aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44
6ef55a53 bump compose-go to v2.0.0-rc.4
a553db33 CI: docker engine version matrix
05bec55d build(deps): bump github.com/docker/cli
8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382)
a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426)
05820018 Fix canonical container name
da1a34a8 don't check external network existence when swarm is enabled
8b023ae0 build(deps): bump github.com/docker/cli
8c80297c build(deps): bump github.com/docker/docker
7e991515 Add support for storage_opt
d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1
71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues
25d16d1f build(deps): bump actions/upload-artifact from v3 to v4
ab97dcc7 update MAINTAINERS file
a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE
811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail
1551fcb4 introduce stopAndRemoveContainer to share logic scaling down
eb4249ec bump compose-go to v2.0.0-rc.2
1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381)
053a5604 docs: update link to use canonical URL for command
34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1
56e38260 go.mod: github.com/google/uuid v1.5.0
c28bf522 bump version of compose-go to v2.0.0-rc.1
51c113b6 build(deps): bump github.com/docker/docker
7cdc7e15 remove watch command from the alpha command
fb026543 build(deps): bump github.com/docker/cli
d688d3bf fix(tracing): batch span exports to prevent blocking
898e1b60 signals/utils: always handle received signals
f414bf78 fix engine version require to use healthcheck.start_interval
3c4593f2 Stop the resource timer after last expected event
d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347)
26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349)
191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348)
5d05df6e update compose-go to version using immutable Project functions
b621948c feat(cli): report more useful User-Agent on engine API requests
f5c53c2d ci(deps): bump golangci-lint to v1.55.2
1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331)
2bf2b22f Add source policies for build
575f2ed7 watch: remove requirements for tar binary and for sync target to be rw
5f4b22ed make docs
dcf6bd77 make mocks
80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach
2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach)
d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317)
27987415 gha: update DOCKER_CLI_VERSION to v24.0.7
566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1
d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1
a1d36379 go.mod: github.com/klauspost/compress v1.17.4
0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4
2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0
dcbf005f up: gracefully teardown when command ctx cancelled
e105f165 introduce `stats` command
ce5a0c65 Fix cancellable context detection in `AdaptCmd`
f58f23a6 remove ServiceProxy which was introduced for archived compose-cli
9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3
ccd83b8a go.mod: github.com/gorilla/mux v1.8.1
9e57850c go.mod: github.com/docker/distribution v2.8.3
35d3a7ca go.mod: golang.org/x/crypto v0.17.0
6c998602 go.mod: golang.org/x/crypto v0.16.0
402f3688 go.mod: golang.org/x/text v0.14.0
30dd3e66 go.mod: golang.org/x/term v0.15.0
0c4fa017 Bump compose-go v2-beta.2
b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
17da54da introduce build --with-dependencies
1baa4f44 up: fix write/close race condition in logPrinter
7781b7c9 deps: update docker/cli to fix go version selection issue
785835b1 Add support for endpoint-specific MAC address
e4fb5545 build do not require environment to be reslved
74cc0912 github.com/golang/mock is deprecated
5e61c62e collect services to build using WithServices
fb3868ff add support for start_interval
bdbda790 include disabled services for shell completion
ae4fd791 bump golang to version 1.21.5
26aca867 avoid use of service.Name when iterating on project.Services
138facea project.Services is a map
cda04f28 adopt compose-go/v2
85a1aec1 regen docs
9c29d223 use custom config type for OCI v1.0
df6fe59f tweak help message on oci version flag
07df9cc4 fix typo
7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0
111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR
8026d0e2 adopt container.RestartPolicy*
df1533a1 [lint] don't use deprecated types
8639fbae go mod tidy
56e2ad9e update to v1.25 for RunAttach
ce1ddb6c fix combination of --pull always --no-build
c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0
1f148244 send out a cancel event on SIGINT/SIGTERM
9faef4ae Update README.md to use standard compose.yaml file name
59f11ecb Fix configs are mounted under /<id>
750553c8 introduce compose logs --index to select a replica container
8c964f5a Update E2E test
90ca13b7 Fix E2E test to have index in the correct position
f9946127 Fix docs
ddda59a1 Add index option to compose logs command
e981c358 Add failing test
16c4241c log we don't expose service ports when --verbose
9025d63a bump ddev
a1de0b96 Restore `Project` is ps json output
caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project
29e9fdba let contributor know we might close unanswered issues
c665c53c bump buildx to v0.12.0 and adapt code to changes
a39cf75e build(deps): bump github.com/compose-spec/compose-go
46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
5c5d30c6 build(deps): bump github.com/docker/cli
36fa8d4e build(deps): bump github.com/docker/docker
2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
5e77ae92 avoir use of []types.ServiceConfig
f5572201 identify services to build and don't display 'building' if none
8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
cb01186c push also consider build.tags
9c4efbdd Strip project prefix from docker-compose up output
8ea7c9e0 Make it context aware and add test skipping options
c1694360 render quiet after filtering applied
254a94b0 bump golang to version 1.21.4
cf608fa9 bump compose-go to v1.20.1
426377a4 reject compose file using `secrets|configs.driver or template_driver`
493f6c80 skips flaky e2e tests on watch and attach
646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
2945532f fix --pull documentation
e5cd265a improve watch configuration logging Add action associated to each managed path
d646d757 lint
71237ef6 do not resolve cache dir until remote resource is in use
0d905a89 add a copyright notice with original author
b847c7f5 implement runtime file selection
5e3d8f67 re-implement cache folder detection
67279088 introduce --resolve-image-digests for publish to seal service images by digest
4cd61957 fix build
0d4cbbdb fix
9631a49d ENGDOCS-1764
328ca3f2 add docs upstream validation workflow
e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
616bba0a linter errors fixed
ee6e3c2a NetworkList to NetworkInspect for ID search
c7e31a3c Squashing feature branch commits in order to add signoff message.
704a9fd3 Use project.ServiceNames() if no service specified in hash
d9e0e42d Add branch configuration for pull_request trigger
c48e3c4a Initial codeql.yml commit
dd0803db fix SIGTERM support to stop/kill stack
39008c53 align with OCI artifact best practices
6c345b37 refactor(cmd/compose/run): remove redundant `len` check
1ffa194e fail start if depependency is missing
b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
3d0207eb remove uncessary return value of pullComposeFiles function
16a7c209 enable profile when down is ran with explicit service names
818bc3c3 add sync+restart action to watch attribute
38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
9b4d577c remove refrecence docs generation
14b43c1a remove cucumber tests as we haven't added new ones for a while
9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
2c0b0232 add dry-run support for publish command
599e4b24 extract method to reduce cyclomatic complexity
fe8c2780 warn user remote resource is disabled
a345515f Don't delete dependent services
8967df7a Apply platform before hashing
4f694919 deps: remove deprecated github.com/pkg/errors
6ecab957 Include image name in error message
12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
991901f2 pkg/remote/oci: refer to the manifest as manifest
2d971fc9 update the watch warning message when no services with a develop section
78f33619 ci: enable verbose output for e2e tests (#11045)
44d21280 truncate command by default, introduce --no-trunc flag to get the full command
ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
ab81db5b config --xx don't need `env_file` being parsed
61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
6be5f300 move watch from alpha to main command
c34c306c TestWatch to use new `develop` section
5ca35c88 implement publish
805541be watch: use official `develop` section (#11026)
8f489d6d build(deps): bump github.com/opencontainers/image-spec
9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
a697a069 introduce pull --missing flag to only pull images not present in cache
8af49ff3 resolve service reference into container based on observed state
f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
6d5eb6fd update to go1.21.1
9d7e0ad6 correct scale error messages formatting
1a98a70b add scale command
19bbb12f ci: tweak restricted imports in linter (#10992)
7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
13115468 cli: fix `--build` flag for `create` (#10982)
e1aa4f77 otel: add args & flags to cli traces (#10974)
d7b0b2bd watch: build & launch the project at start (#10957)
e0f39ebb pull OCI remote resource
c9d54f09 introduce publish (alpha) command
52e54ef9 doc: updated README.md to remove broken link
f4f2e934 migrate to github.com/distribution/reference
32c3d0a3 Enable service explicitly requested to be restarted
1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
407a0d5b up: fix various race/deadlock conditions on exit (#10934)
8caa6f1f pkg/api: replace uuid for basic random id
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
fb2d44b8a0 |
podman: add new kernel module rrecommends
Testing podman + netavark without kernel-modules installed in the image shows some are missing from the rrecomends. It could be argued that they belong in netavark, but since podman + netavark are almost always used together, we group them here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
081ef3c19c |
podman: update to 5.0.0
Tested with cni:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep cni
cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64
root@qemux86-64:~# rpm -qa | grep neta
Tested with netavark:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep netavark
netavark-1.10.3-r0.core2_64
Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:
bfc63cc32 fix remote build isolation when server runs as root
f32338dfc bump version to v5.0.1-dev
e71ec6f1d New release: v5.0.0
6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
eb2b16d6d [v5.0] Bump Buildah to v1.35.1
43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
4a84f39b3 Switch to 5.x WSL machine os stream using new automation
a03de4c14 rpm: use macro supported vendoring
069439820 Bump to v5.0.0-dev
f8888a13b Bump to v5.0.0-RC7
2e387df07 Add release notes for v5.0.0-rc7
d36ce9c2b fix invalid HTTP header values when hijacking a connection
8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
59512272b pkg/machine: make checkExclusiveActiveVM race free
51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
1ca93f3fb pkg/machine: refresh config after we hold lock
71320df8e rpm: update containers-common dep on f40+
e58cb97de Change API socket to be machine name isolated
dbf38779b Makefile: drop tests-included from validate target
0fdd83173 Add release notes for v5.0.0
d7bc7b7b4 do not require policy.json
82597144b Machine decompress.go refactoring follow-up
abaa179aa Add target win-gvproxy in winmake.ps1
4c5d26f6f Add final machine endpoint
068ddfd19 update API doc version to 5.0.0
f2af295e4 Bump to 5.0.0-dev
d26113ca8 Bump to 5.0.0-rc6
52ed774c2 docs: generate-systemd: add clarification statement
3d6758a61 docs: quadlet: improve docs on root/rootless dirs
885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
e6ac569a1 [CI:DOCS] Remove outdated references
364813da6 Add note for RHEL 8.5
e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
9b21a5b79 Bump to v5.0.0-dev
bbad09bb0 Bump to v5.0.0-rc5
432f4fbf9 Fix Mac CI
d54a37399 Complete policy.json inclusion
b234bb55e Bump Buildah to v1.35.0
5d3a19f8d podman compose: enable machine socket connection
6f4ee16d9 [CI:DOCS] Add farm command to commands list
25f3a8ce7 podman machine start/stop do not write config unlocked
75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
7a7591492 podman machine init: do not write config unlocked
7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
4c6505be5 Fix the logic for detecting an unexpected close error
81906081e vendor libhvee-0.7.0
3c9c5be7d podman machine set: change options only locked
a65b546c6 Remove copySparseFile
2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
724c5a06b Don't read full VM File before decompressing
ff81cf7c7 [CI:DOCS] Fix windows installer action
4d2fc293c machine: make more use of strongunits
92b67a69a Fix wrong units size return
79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
d6d260174 [CI:DOCS] Migrate podman container image
a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
39851a0b9 CI: try to fix more flakes
835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
945995be1 e2e: fix potential race in file-locks test
02403c2e6 Makefile: podman should have correct selinux label
9ee96a956 properly implement pull-error event status
155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
6272abbbb Resurrect auto-port reassignment, but for all providers
ef7727238 Refactor env dir and port functions into new leaf pkgs
eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
e8bf9a323 Update podman-for-windows.md
8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
e09444327 machine init: print output to improve UX
530782e11 logformatter: fixes for Macintosh
ebce0e71d test/e2e: check for stderr errors in cleanup()
ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
fc4e16366 Bump to v5.0.0-dev
bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
cfc5b8e0f Bump to v5.0.0-RC4
185981fa5 Copy past golang/expansion form ks8.io/kubernetes
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3fbc1ae7ca |
podman: conditionally add cni build tag
We should ensure that cni is built as part of podman if that's the configured virtual runtime. Although cni is not a primary networking backend for podman, this also allows it to be skipped if netavark is used. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4e6a74ff63 |
Revert "docker-compose: update to v2.24.6"
One of the vendor components has deleted a commit that docker-compose
is using (and has listed as a replacement in go.mod). Until
docker-compose comes up with a solution, we temporarily revert to
and older compose.
We'll update to the latest 2.23.x if this isn't resolved in 2.24+
before release.
This reverts commit
|
||
|
Bruce Ashfield
|
cabcaf1007 |
k3s: package check-config.sh
In a similar way we package check-config.sh for docker, we package
the contrib script for k3s.
root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924]
Verifying binaries in ./usr/share/k3s:
- sha256sum: sha256sums unavailable
- links: link list unavailable
System:
- /usr/sbin iptables v1.8.10 (legacy): ok
- swap: disabled
- routes: ok
Limits:
- /proc/sys/kernel/keys/root_maxkeys: 1000000
info: reading kernel config from /proc/config.gz ...
Generally Necessary:
- cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good
- CONFIG_NAMESPACES: enabled
- CONFIG_NET_NS: enabled
- CONFIG_PID_NS: enabled
- CONFIG_IPC_NS: enabled
- CONFIG_UTS_NS: enabled
- CONFIG_CGROUPS: enabled
- CONFIG_CGROUP_PIDS: enabled
- CONFIG_CGROUP_CPUACCT: enabled
- CONFIG_CGROUP_DEVICE: enabled
- CONFIG_CGROUP_FREEZER: enabled
- CONFIG_CGROUP_SCHED: enabled
- CONFIG_CPUSETS: enabled
- CONFIG_MEMCG: enabled
- CONFIG_KEYS: enabled
- CONFIG_VETH: enabled
- CONFIG_BRIDGE: enabled
- CONFIG_BRIDGE_NETFILTER: enabled
- CONFIG_IP_NF_FILTER: enabled (as module)
- CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module)
- CONFIG_IP_NF_NAT: enabled (as module)
- CONFIG_NF_NAT: enabled (as module)
- CONFIG_POSIX_MQUEUE: enabled
Optional Features:
- CONFIG_USER_NS: enabled
- CONFIG_SECCOMP: enabled
- CONFIG_BLK_CGROUP: enabled
- CONFIG_BLK_DEV_THROTTLING: enabled
- CONFIG_CGROUP_PERF: enabled
- CONFIG_CGROUP_HUGETLB: enabled
- CONFIG_NET_CLS_CGROUP: enabled
- CONFIG_CGROUP_NET_PRIO: enabled
- CONFIG_CFS_BANDWIDTH: enabled
- CONFIG_FAIR_GROUP_SCHED: enabled
- CONFIG_RT_GROUP_SCHED: enabled
- CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module)
- CONFIG_IP_SET: enabled (as module)
- CONFIG_IP_VS: enabled
- CONFIG_IP_VS_NFCT: enabled
- CONFIG_IP_VS_PROTO_TCP: enabled
- CONFIG_IP_VS_PROTO_UDP: enabled
- CONFIG_IP_VS_RR: enabled (as module)
- CONFIG_EXT4_FS: enabled
- CONFIG_EXT4_FS_POSIX_ACL: enabled
- CONFIG_EXT4_FS_SECURITY: enabled
- Network Drivers:
- "overlay":
- CONFIG_VXLAN: enabled (as module)
Optional (for encrypted networks):
- CONFIG_CRYPTO: enabled
- CONFIG_CRYPTO_AEAD: enabled
- CONFIG_CRYPTO_GCM: enabled
- CONFIG_CRYPTO_SEQIV: enabled
- CONFIG_CRYPTO_GHASH: enabled
- CONFIG_XFRM: enabled
- CONFIG_XFRM_USER: enabled (as module)
- CONFIG_XFRM_ALGO: enabled
- CONFIG_INET_ESP: enabled (as module)
- CONFIG_INET_XFRM_MODE_TRANSPORT: missing
- Storage Drivers:
- "overlay":
- CONFIG_OVERLAY_FS: enabled
STATUS: pass
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
54f80102b0 |
k3s: set version.UpstreamGolang in binaries
k3s will refuse to start if the golang version it was built with doesn't match the VERSION_GOLANG linker variable. As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668 We query our version of the compiler and set it in the binaries to ensure they match. Note: this may cause issues if you bump the golang compiler, but k3s doesn't rebuild. We'll worry about that when it happens. With this change, k3s starts and the node becomes ready. root@qemux86-64:~# uname -a Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux root@qemux86-64:~# kubectl get nodes NAME STATUS ROLES AGE VERSION qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
769cf8be74 |
criu: patch cleanups
Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Tim Orling
|
8dd5ca2900 |
criu: pycriu RDEPENDS on python3-fcntl
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
c735cd2ec9 |
criu: pycriu RDEPENDS on python3-ctypes
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
6f7a7d62cb |
criu: pycriu RDEPENDS on python3-protobuf
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
227452ab4b |
criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHON
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
cd11ca9de3 |
criu: fix pycriu build of wheel
Inherit python_setuptools_build_meta instead of setuptools3, as this is the build-backend declared in the pyproject.toml We seem to need python3-protobuf-native as a DEPENDS, but then the dependency check complains because our version in meta-python is python3-protobuf_4.25.bb Workaround this (for now?) by telling python3 -m build to --skip-dependency-check This allows criu to _build_. Whether it is functional and proper is a different story. Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
9b4acf5185 |
criu: build and install wheels
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and
do_install (python3 -m install) to build and install wheels and avoid the heavy
handed pip install usage.
FIXME: even though lib/pycriu/version.py is properly being dynamically generated,
setuptools/config/expand.py is failing to detect the __version__ attr.
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
||
|
Bruce Ashfield
|
6509f2f6e1 |
criu: update to v3.19
Bumping criu to version v3.19, which comprises the following commits:
f8b14286b criu: Version 3.19 (Bronze Peacock)
f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags
0b62f4267 lib: use separate packages for pycriu and crit
97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness.
e076c11e2 ci: fix codespell errors
41938f14b zdtm/static: test the offset migration of ELF files
29026496d zdtm/lib: add missing signal.h header
a77185dae files-reg: don't change the file pos in get_build_id
5d4179ddb criu/proc_parse: refactor the eventpoll parser
cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check
36a84751e zdtm/cow00: fix typo
48d6a59a2 arch/x86: remove the redundant check
45670b655 apparmor: remove the redundant check
5e8d7dc94 tun: don't parse buffers that have not been filled with data
4c9d23d33 util: allow to run criu under strace
c9fdd355f pie: Mark __export_*() functions as externally_visible
5d6c8bc58 clang-format: disable column limit constraint
81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings
e86e8dac0 memfd: don't reopen file descriptors for memory mappings
28e854d66 amdgpu: fix clang warnings
ba168ab78 ci: enable build with amdgpu plugin
aa38a5989 amdgpu: print an error if the dup syscall fails
940a05c0b amdgpu: don't leak fd on an error path in open_img_file
a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control
66f39adf1 criu: change the comment about magic numbers
9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy
28adebefb Return page size as unsigned long
00f8a56b6 zdtm: check userns once
ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out.
f6e820bed zdtm: Treat ESRCH from kill() as success.
c29c5a1df zdtm: cgroup04: Improve skip check's robustness.
131e464a0 zdtm: cgroup04: Improve error messages.
785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes.
5e544dc44 ci: stop testing ubuntu overlayfs
7a2910f89 py/cli: add --version option
61d9cf6f9 crit/setup.py: use __version__ from pycriu
8adefc90d lib/pycriu: generate version.py
59fcfa80d compel: Add support for ppc64le scv syscalls
d06c9b5cd criu/plugin: Add environment variable to cap size of buffers.
8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration
2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available
32241b00d vagrant: run tests with fedora 38
862cb5c1c vagrant: update to version 2.3.7
d2a0d1fa6 lint: don't fail workflow on indent fail
08f286ed9 CONTRIBUTING.md: improve coding-style related sections
38bf7f42e CONTRIBUTING.md: don't mention ctags
b7a8bb088 zdtm: test execveat(memfd)
c9b2633ca memfd: return original memfd fd for execveat()
480565437 kerndat: check_pagemap: close(fd) on error path
d5284313f kerndat: Make errors from clone3() check more precise.
badf8060c proc_parse: Log smaps entry while dumping VMA.
1800018bc test/other: add test for action-script
ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user()
f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message
b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages.
86ad52bc2 ci/loongarch64: compile tests before running zdtm.py
0085f992c memfd: don't set fd attributes not needed for vma mapping
8c17535f3 loongarch64: fix syscall_64.tbl
6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels
620e8c0a6 Put a cap on the size of single preadv in restore operation.
2547ac8ac zdtm: membarrier: test migration of membarrier() registration
e07155e19 dump+restore: Implement membarrier() registration c/r.
5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs
d1096e3b3 lib/py: add VMA_AREA_MEMFD constant
d3b955e57 ci/docker: install all required packages
9477354de scripts/apt: don't hide apt output
a4b49c46f amdgpu_plugin: remove duplicated log prefix
69200bec7 irmap: scan user-provided paths in order
2a131167b page-xfer: Pull tcp_cork,nodelay().
6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr
3628589b5 zdtm/memfd00: test memfd file mode
dfa541095 memfd: dump and restore permissions.
ac1219f4e sk-inet: Extend 'TCP repair off' failure log.
25d033080 restore: Skip dropping BSET capability if irrelevant.
fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting
a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting.
7df3f6595 restore: Fix capability migration requirements between different kernels.
7ab02639f restore: Skip setgroups() when already correct.
4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids.
99188cfbe tty: Avoid EPERM for no-op chown().
113957270 memfd: Avoid EPERM for no-op chown().
96fa42b79 cgroup: Replace restore_perms() with cr_fchperm().
b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes.
f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.
21560270d util: Implement fchown() and fchmod() wrappers.
e25a243b2 ci: add workflow for loongarch64
788e1e92e zdtm: add loongarch64 support
ae0811475 criu: add loongarch64 support to parasite and restorer
ec6dc2d5c images: add loongarch64 core image
c9df09eea compel: add loongarch64 support
b304106e6 include: add common header files for loongarch64
8a24d4872 ci: add workflow to ensure self-contained commits
23313080a kerndat: don't leak a socket file descriptor
b2d74fbfd zdtm: replace NR_fstat with NR_statx
8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled
6b8107cd1 irmap: Reduce error log severity to warning.
4eb6cc319 mount: Demote fsnotify logs for ignored failures.
3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits.
804c0ba82 soccr: Log name of socket queue that failed to restore.
4018b7877 soccr: Log offset when failed to restore socket's queued data.
1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket.
5a723937a compel: Log the status word with "Task is still running" errors.
664598dc7 files-reg: Debug "open file on overmounted mount" error.
a5fe99d2c cgroup: Propagate error on cgroup mount failure.
056cac474 zdtm: drop python 2 compatibility
002f2372a lib/py: drop python 2 compatibility
d388b91de test/others: drop setup_swrk() py2 compatibility
ee9983d4a test/criu-ns: drop python 2 compatibility
ede018176 make: remove checks for python 2 binary
642fd99bf remove python-future dependency
376f3d180 crit: add requirements.txt for pip>=20.1
f5d06571c crit: drop python 2 support
7825f4ebf coredump: drop python 2 support
05f0535de ci: clean up CentOS 7 related tweaks
362d8fa5c ci: disable CentOS 7 test in Cirrus CI
94c9e4787 readme: refactor asciinema link for video playback
7bda5e656 zdtm: Update netns purpose comment in zdtm_ct.
9ad59f58f util: Make CRIU run_id machine-level unique.
eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing.
bf8446ae5 kerndat: unexport kerndat_nsid()
f2011e1c7 util: Downgrade ignored errors to warnings.
2aa9cb933 rpc: Support setting images_dir by path.
439b52243 rpc: Support gathering external file list after freezing process tree.
82a0db036 docker/podman: test c/r with action-script
28d005638 action-scripts: allow shell scripts in rpc mode
3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32().
f043cb22a build: Guard against libbsd's version of `__aligned`.
c5142104a build: Use make-provided AR for building libzdtmtst.
88f8fdda8 build: Fix LIBS vs LDFLAGS order.
cbbe6c683 build: Debug system feature tests.
1a1fa439c build: Remove HAS_MEMFD test
2bf10c8d2 restore: remove unused `secbits` field.
e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host.
eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.
ffa1e47fd sockets: Increase the size of sockets hashmap to 16K.
304a309ae test/thp_disable: fix lint
c97cc6a6c Allow skipping iptables/nftables invocation.
d0ac547b3 zdtm: sock_opts00: Improve error messages.
6bc00fcb8 zdtm: Implement test sharding.
1fb5c410c zdtm: Allow --keep-going for single test.
ed88e3241 zdtm: Add timeouts for test commands.
516fade93 zdtm: Allow overriding /tmp.
4b764a9dc Allow passing --log_to_stderr via RPC.
1e5ebec39 Allow passing --display_stats via RPC.
0e88a91ff Allow passing --leave_stopped by RPC.
4455444ee compel/test: Return 0 in case of error in fdspy
4c1409b8f Fill FPU init state if it's not provided by kernel.
93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration
01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration
a0c78a790 zdtm: thp_disable: Output a single failure message
2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected.
21ce76263 Restore THP_DISABLE prctl.
9943dcde1 Fix mount(cgroup2) for older kernels.
0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16.
a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions
2ac15e3ad action-scripts: Add pre-stream hook
c6ac396aa timers: improve and fix posix timer id sequence checks
fc08fa907 criu-ns: Update shebang line to python
9cd09f586 criu-ns: Install Python pathlib module in CentOS 7
9c9e8ea3f criu-ns: Add tests for criu-ns script
e4b6fb2d1 criu-ns: Add support for older Python version in CI
733f16551 criu-ns: Add --criu-binary argument to run_criu()
36709536e lib/c: add empty_ns interfaces to libcriu
b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt
cc607f810 criu-ns: make --pidfile option show pid in caller pidns
50e17a1cf scripts: make newer versions of shellcheck happy
df7b897a2 ci: fix new codespell errors
727d79650 compel: support XSAVE on newer Intel CPUs
fa6af25e7 dump: increase fcntl call failure judgment
1c0f8787b zdtm: Add tests for ip tos restore
04cdbd610 sk-inet: Add IP TOS socket option
4c1a2ac41 criu: Version 3.18 (Silver Sandpiper)
b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid
9b3496043 log: fix timestamp logging when tv_sec>=100
94ac9ee3c proc_parse: fix while condition in parse_pid_status
45e4a6b27 netlink: fix netlink fd flags dump/restore failed
6c728df1d zdtm: modify rseq01 to include a thread
f8da250bb cr-dump: properly apply rseq fixup for all threads
78c4e2c0f cr-dump: move rseq functions before dump_task_thread
85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread
9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test
0c5239932 ci: cancel preceding workflows run
5c8cdceec sk-unix: rework unix_resolve_name
de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old
d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old
ccc790d54 zdtm/lib: fix cwd path freeing
8e6fa9c3b net: Add net log prefix
7f0f07599 crit: fix compatibility with Python 3.12
bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job
66fd45d51 sk-unix: add some missed error printing
a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization
12423abdb mount: allow bindmounts for external fuse mounts
65407616e ci/archlinux: initialize machine ID
34e2b0221 Optimized shell code with <'s (instead of cat + |)
7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump
69befdde1 cgroup-v2: make new field cg_set optional
529f29891 cgroup-v2: make new field is_threaded optional
6e681afb6 net: fail restore if nftables isn't supported but image is present
156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12
4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv
3f8e3220b CONTRIBUTING.md: document make lint / indent
42c4be2a9 net: use get_legacy_iptables_bin also on restore
298286718 pie/restorer: Fix fd leaking on error path
1d4777e45 test: add long command-line to coredump test
edaec5d76 coredump: report missing files without a backtrace
3ca979f9a coredump: handle long command-lines
a0cc95c03 lib/py: reduce code duplication
85b5c1e45 ci/podman-test: drop crun installation script
91ff24b47 ci: disable c/r of cgroups with podman
e7ab6fe63 restore: don't miss futex abort in restore_task_with_children
676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return
7b8035344 mailmap: update my email
1ae9bac54 dump: improve error printing and readability of task_comm_info
11c71656b ci: add test for crit info
9b919ab74 crit: fix empty string comparison
fa4af0430 dump: Show task comm early
fd7e97fcf lint: exclude tags file from codespell
50e42c9dd Add documentation for --ghost-fiemap
4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options
bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options
7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also
f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported
14e883656 proc_parse: Handle btrfs files when map_files is not accessible
d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace
d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem
144b467a0 shmem: pr_err -> pr_perror
6d7c0d007 compel/mips: fix parasite with GCC 12
7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation
fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns
63159c14c mount: simplify code around mount_cr_time_mount
43fa4e76d remap: refactor goto jumping to a while loop
757a2b46c remap: Fix typo
3837d31b5 ci/lint: make push action have at least too commits depth
cec43025a criu(8): Add info about unprivileged mode limitations
80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs
95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files
951c56917 proc_parse: Set VMA_AREA_REGULAR where needed
a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers
0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers
8cfda2748 log: remove all uses of %m specifier in pr_* functions
7459d0204 lint: prohibit to use %m specifier in pr_* functions
f73ba7726 ci: switch from lgtm to codeql
0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure
fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing
ba09fad39 zdtm: add mountinfo topology compare to test lib
2837a13ef zdtm: add mountinfo parsing to test lib
543501d5f zdtm/lib: copy xmalloc.h
d800ef658 zdtm/lib: copy list.h
be61624f4 clang-format: rework make indent to check specific commits
a918093ce scripts/ci: use Fedora 37 for vagrant based tests
1bb84f96f tty: fix codding-style around for_each_bit call
abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros
c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format
aab709b60 log: Write more details in write_pidfile
7c6eb0b85 asm: fix for_each_bit macro
bb3f7bef6 crtools: fix help message alignment for --network-lock
a302b3694 zdtm: fix 'zdtm.py list' command
21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte
9686693aa test/javaTests: update org.testng:testng (Maven)
5c60d35be sockets: tiny style fix
5a19c3432 non-root: Don't dump socket option SO_MARK if 0
2180e03b9 non-root: Rework socket bufs for unprivileged mode
e5ccfbb24 Fix typo in comment
bdbccc315 zdtm: add two tests for highly sparse ghost file
f3fdce81a files-reg.c: fiemap algorithm for ghost file
14b9ec195 ci: fix make indent
d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python
095b3e84b ci/lint: install ShellCheck with dnf
c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0
fa2c585c2 amdgpu: define __nmk_dir if missing
c7211f52d Remove execute bit from source file
f5e0f641a cgroup: Remove redundant code that handles zombie tasks
c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned
153614cb1 ci: move cgroup unmounting to run-ci-tests.sh
516ebc4f5 ci: Do not fail if latest epel repository definition is already installed
2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy
07d538cef zdtm: Check threads are restored into correct threaded controllers
20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers
17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process
ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved
d7e874659 zdtm: Add write_value/read_value helpers into zdtm library
167cfd366 cgroup-v2: Checkpoint and restore some global properties
8a336ab22 Switch aarch64 builds to Cirrus CI
840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach
3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements
1cba559da non-root: add non-root test case to cirrus runs
6743d608c non-root: extend zdtm.py to be able to run tests as non-root
251939992 Documentation: add details about --unprivileged
47b07d011 non-root: Introduce unprivileged mode to kerndat
6a30c7d1e non-root: enable non-root checkpoint/restore
ce01f70d9 non-root: add functions to work with capabilities
4b4bf0421 non-root: add infrastructure to run as non-root
4c7f91aff ci: enable EPEL for CentOS 7
a39d41656 compel: Fix ppc64le parasite stack layout
17ec53913 compel: Add test to check parasite stack setup
556ab0dea compel: Fix infect test to not override failures
461fa7271 compel: Add APIs to facilitate testing
debc9c16c seize: do not overwrite exit code from failpath
16f1c147c test/others/crit/test.sh: use bash array
0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings
75b859f23 scripts/ci: rm shellcheck disable annotations
aeb6961f3 scripts/ci/run-ci-tests: use bash arrays
b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings
9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning
968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning
86ac0f05e ci/gha/lint: install a recent shellcheck
2039d7320 files-reg: skip failed mount lookup for shell-job's tty
9e91e62a7 criu-ns: capture controlling tty
40e1aaf56 mount: add definition for FSOPEN_CLOEXEC
7bc24688d ci: Clean up and improve Java testing
0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu
39b3de60b ci: Rename openj9 Dockerfiles to hotspot
f78d3d821 gitignore: Ignore top-evel build dir only
aeaff6445 test/unix: check C/R of unix listen queues
83c606e02 zdtm: return 1 from pr_err, pr_perror, fail
dca55d281 criu: fail migration if data was sent to an in-flight socket
dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64
bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform
b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform
719fea2fc compel: clear a breakpoint right after it's been triggered
d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls
c089159a4 ci/cirrus: centos 8 job nits
a202ec271 ci/cirrus: add CentOS Stream 9
2642b657d docker-test: handle race condition error
49319cd57 Add Alexander Mikhalitsyn to maintainers
f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback
cacddf19d cr-restore: rseq: dynamically handle *libc with rseq
1f9bd82a5 cr-check: optimize check for apparmor stacking
a1262f55f cr-check: fix check for apparmor stacking
f9bc0a750 docker-test: use containerd installed from package
750acec25 Revert "ci: Switch to non overlaysfs tests"
e8a6765d1 criu: fix conflicting headers
eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman
da4803bea MAINTAINERS: Add Radostin (myself) to maintainers
e62d541bd zdtm: add two tests for large ghost sparse file
2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test
fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files
01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns
d12e2364c zdtm: make root mount private in criu mntns
70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso
b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma
c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS
e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux
ad58553d9 Add --skip-file-rwx-check opt test
18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore
6cef6e726 zdtm: add tests for SIGTSTP
c7858ba42 infect: add SIGTSTP support
49caf85b2 config: fail on --track-mem option if dirty tracking is not available
91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach
dd0217976 amdgpu: Add gitignore
b117b211a zdtm/scm: add scm09 test with closed sender fd
5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for
28358db13 Fix the check for mnt namespace in criu-ns
295dc85ca github: use git-clang-format instead of make indent
ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported
c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump"
b26e1fdbf mem: Skip pre-dumping on hugetlb mappings
9066f8741 cr-dump: do not report success to logs if post-dump script failed
d46f40f4f criu: Version 3.17.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
417cfa77c5 |
kubernetes: fix build with go 1.21+
go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
e11497bda2 |
kubernetes: allow go 1.20 building
Although k8s checks for, and demands, golang 1.21.x, runtime tests show that golang 1.20.x is properly building and providing enough for core functionality. In an effort to see what else may be lurking, we patch out the check to allow builds with our 1.20.x toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
17eeea68a5 |
kubernetes: update to 1.29.1
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:
a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
bc401b91f27 Release commit for Kubernetes v1.29.1
5350f0829f5 Revert "Graduate Evented PLEG to Beta"
5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
0da29848c53 Make OpenAPIGetter tolerant of nil
865f214fe53 use context for lazy evaluation.
cde050c4d0b Initialize default attach func regardless of the value of flag
b055126537b .*: bump golang.org/x/tools to v0.16.1
05937cba41d add ut
00045c3c9d6 fix
b10ad75ab1d fix
4b8554018c1 fix: 119921
a5f64b743e4 Address comment
ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
40d8e405b8e Use a separate function for checking if device was reconstructed
d30fda3c68c Add tests for checking of uncertain device paths
910fa603a25 Fix device uncertain errors on reboot
62d0bd7260f Fix CSI migration for vSphere volumes
ce513803ca9 Wire in field dropping for CRDs
9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
3f7a50f3868 Release commit for Kubernetes v1.29.0
3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
0ca3089bee6 Bump distroless-iptables to v0.4.2
1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
4e5321c92e0 add beta comment for pod replacement policy
233949e05df Add an integration test to verify root path cleanup
c769c2db6ed Revert conformance test addition of root paths
ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
f730dc39f9d Fix verify target to not update env var if already set
51daa8cbd5e api: run hack/update-api-spec.sh
f042994cb03 releng: update publishing bot rules for 1.29
bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
af34f62170c code-generator: fix invalid replace of klog
d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
64f8c6939f8 Replace -E with --setenv for systemd-run parameter
dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
59c63185457 CHANGELOG: Update directory for v1.26.11 release
bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
34e620d18c0 Support score extension function in preemption.
99f7df3e1c1 improve default_servicecidr_controller startup
c99b5a208de Check error from gomega
49e8c196c34 use framework gomega
8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
6aa3002ad24 add kubeup label instead of a feature label
27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
20853ef1200 Bump distroless-iptables to v0.4.2
4b1b9a198a6 Fix issue with client rate limiter when polling
7c5dfceff8a add false matchCondition benchmark
f9ab24bf485 Refine test case
617f2132fed e2e: avoid redundant labels in JUnit file
172f680326a fix: smb file share unavailable issue when it's deleted
2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
11cdb8fd011 split compile and eval
fe53db0dbdc authz: add benchmark for webhook authorizer
475bfa4a633 set LimitedSwap
819d1903a27 Add support for authorization-config to local-up-cluster
b53134f129f Test anonymous and RBAC handling via config file
264cd648246 Run RBAC hook correctly when running from authz config file
1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
76277f693d0 create a new KubeUp feature label for tests marked for removal
9e5b8402bb9 update go.mod
88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
f3dad977040 self nominate aroradaman as sig- proxy-reviewer
2645b22003d Self nominate Kevin Hannon for reviewer for job controller
b12db6d9b55 fix test store delete collection function failed
9d5b2a44762 Fix API comment for the Job ready field
1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
bb315d13392 bump runc to v1.1.10
f77a4543d13 Unregister events in schedulingGates plugin
70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
42a70cdbd16 codegen
bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
5edb27aa382 ratcheting-cel: add optionalOldSelf field
6b6be38896b test: Fix NodeLogQuery tests
ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
bd6431323a5 ClusterTrustBundle projection: e2e test
96e610ac188 ClusterTrustBundle: Enforce max size during validation
1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
e5bba37f20a apiserver: promote flowcontrol tests to conformance
9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
60338c79d77 KCCM: fix slow node sync + service update
a8673fa5b4a KCCM: add test validating slow node sync issue
b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
2259ac2444f pause: add --provenance=false during etcd multi-arch build
50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
5bf63036c7f Make EnablePodSchedulingReadiness public
0112d91a056 Add multi-webhook integration test
b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
34b2c4e1ed0 framework: add SSH support for Azure
44d89c8cf8c Include empty string attributes for CEL authz evaluation
2e2f51a4417 Plumb failure policy from config to webhook construction
0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
a000af25ff3 Require match condition version only if matchConditions are specified
baebc376ff8 missed a few summary upper limits for major page faults
3c268b75244 etcd: Update to version 3.5.10
4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
2d9128116b6 Use golang library instead of mklink
85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
cda349cda49 Make service-cidrs-controller role feature-gated
26923b91e8c implementation of split disk kep
003e4886c6f Fix parameter passing error
18adc309337 refactor: rename TransitionRule to UsesOldSelf
b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
338fe7ad55c e2e framework: validate test definitions
f2cfbf44b1f e2e: use framework labels
248100ce6df golangci-lint: tone down comment checking
ecb32a3e29c increase bounded limits for major page faults
ceaacc88f0d add --provenance=false during etcd multi-arch build
833156b77e2 e2e: define environment
4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
878d037d3ba dependencies: klog v2.110.1
bc1df9e7dab bump to newest etcd: v3.5.10
38905462656 Update APIs and adjust tests
77f4178c98a Promote CSINodeExpandSecret to GA
252e1d2dfee Imagepull per runtime class alpha release changes
0993bb78efe Redo service dispatch with maps
9d71513ac1e Redo no-endpoint handling with maps
4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
edaa1d735b8 Redo --nodeport-addresses handling with a set
ef1347b06db Port NAT rules to nftables (and backend is now functional)
0c5c620b4f2 Port filter rules to nftables
6cff4153057 Port service/endpoint chain creation/cleanup to nftables
2735ad541e2 Port table setup/cleanup code to nftables
bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
abb1a458a95 Create an nftables.Interface in nftables proxier
1a530457f90 Drop unit tests of iptables-specific unit test helpers
958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
cac26737cd4 apiserver: add conformance tests for flowcontrol API
a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
ce5a22d54c1 hack/update-codegen
3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
fee07ad6080 make update with the new API with arrays
9917c727a1e test e2e: use new ServiceCIDR API
5d90d07f2d2 test integration: use new ServiceCIDR API
271900a0f05 integration etcd data: use new ServiceCIDR API
3edcce52e3c service cidr controller manager: use new ServiceCIDR API
016c3c9e363 repairip controller: use new ServiceCIDR API
881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
513fdb54229 describer: use new ServiceCIDR API
5123a93b342 printers: use new ServiceCIDR API
c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
599597ca65a fix race on ServiceCIDR deletion
e3a0df26a86 remove flag cidr max size validation if gate enable
8182c4d9ec8 make update
cb509b01f31 e2e for ServiceCIDRs
46b13d48e20 etcd data
ccbcadb0324 add integration test
4ff80864e1c service cidr controller manager
164276175fb plumb the new multicidr clusterip allocator
65e69389463 make repair loop multi service cidr aware
63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
d3386e171a2 add iptree radix tree util
3b450378e07 bootstrap controller for default ServiceCIDR
55a35bebee9 API printers
7e77e8b21d1 kubectl describe
2feb1503e29 Add ServiceCIDR to the REST Registry
391b25197b8 add apis to apiserver storage
632081a9078 add ServiceCIDR APIs
16363b6fb4a fix IPAddress.Name validation message
df80775693f Include managed field comparison in test
cc190e0ace1 add integration tests
26e3a03d12d Implement CEL and wire it with OIDC authenticator
e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
8b9fc325e28 Update to new cadvisor v0.48.1
e4776e0f85b avoid infinite recursion for type resolvers.
fba2d2fadc1 Move invocation to not to cause ginkgo panic
eb32969ab8f Lazy load OpenAPIV2
f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
e7216c66230 use OpenAPIV3 for kubectl diff
4f3b0b15182 Use OpenAPI V3 for client side SMP
6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
168e016947c Benchmark job with backoff limit per index
6ac7da1da87 encryptionconfig/controller: run unit tests faster
c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
98a2f22e740 Revert "Make the decode function respect the timeout context"
c7fcef18756 apiserver: set APF featuregate to ga
8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
31c76e9abb2 authz: add cel expression to webhook matchconditions
56ab6c59421 generated changes
ae90a696772 volumeattributesclass and core api changes
c4aab1036f6 Add sig OWNERS to registry packages
1daf1b0705f test that controller descriptors should not be feature gated
fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
5b268e6daf5 apply: Add test for duplicates in associative lists
9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
b8cd792b368 rename the roundtrip annotation, forbid it in v1
76463e21d4d KEP-4193: bound service account token improvements
a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
70c1f2143fc Bump cel-go to v0.17.7
d3de47ceeed chore: updates api doc
2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
080fe8346da Fix typos in interface comments
e95b7c6d8b8 feat: updates encryption config file watch logic to polling
6d59480a70f Try a single gcloud command for scp-ing all files
bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
f78b367db63 Make the decode function respect the timeout context
79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
233bc2449d9 apiserver: fix apf enablement with runtime-config
acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
25447b95ad2 apiserver: add testdata for flowcontrol v1
730d10a8fb9 apiserver: add generated files for flowcontrol api change
9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
03a9ad200d7 apiserver: remove copied generated files
b24dd44904e apiserver: enable apf v1 API
5cb03064d95 apiserver: update copy, rename v1beta3 to v1
dc723080939 apiserver: copy apf v1beta3 to v1
05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
5a20ff16173 fix wrong controller name for ephemeralController
afc6c03ba74 Pass through static overrides in addtion to cgo overrides
feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
3a308140cd5 Fix e2e
2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
070e7a38cb6 generic set
36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
9a8ccdebc5a use sysctl utils to do pod spec validation
11de9543ee7 move sysctl namespace and some funcs to component helpers util
4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
04b21126e58 Add cel new validator into Kubernetes.
9ae77364e95 pkg/proxy: configure tcp-be-liberal
a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
4bb7dc224c5 metrics: publish metrics from ratcheting across a request
e50cc47a068 Improve execution time for job e2e tests
8c72be3b74e ratcheting: add benchmark
7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
3f8e6d6f77f etcd: Build image 3.5.10
a73725d7999 Promote SidecarContainers feature to beta
1591a0e132c add unit tests for NewControllerDescriptors
44cac266673 move start controller pre- and post- checks/actions out of StartControllers
b7689672802 move aliases into each registrable controller
a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
27a77e0ef3c Encapsulate KCM controllers with their metadata
77dfd63d1db fix volume conformance e2e test break other test
77e0adeb31d KEP-127: Update PSS based on feature gate
b0491d71bd5 Support skipping pulling addons image.
760abc2a821 bump gomega to 1.29.0
5925dc07758 LegacyServiceAccountTokenCleanUp beta
69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
9f06eb4ca2a don't run these tests on aws
e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
af14f97cba7 sample device plugin: fix incorrect Errorf invocation
fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
fd132665a8a extend VAP status controller for extensions type checking.
3f73cdcf2ad extend SchemaResolver for more types of schemas.
38fecc8319d opportunistically attempt to refresh RESTMapper
05cd3e66ef5 simplified e2e test for CRD typechecking.
60a602f1701 gce: fix test for non-existing instance in cloud
4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
84faaf4427f Prevent sampledeviceplugin binary commit
7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
110ffa13b7d Delete binary file
e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
27f6fb2fa7e hack/tools: golangci-lint v1.55.1
6302f011211 e2e node: fix broken assertion
d0a5cd16da8 e2e upgrades: fix broken assertion
fb872e86384 test: fix storage status update test
53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
071a67d8c29 export time function
9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
c6b42c8a72f Make e2e node image ID test more flexible
517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
837090135f8 kubeadm: make super-admin.conf changes to app/cmd
30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
d0328df04e0 add time tracking to CorrelatedObject
1165609036c Add metric for e2e pod startup latency including image pull
702d911e226 working-config-otel
e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
f71040f620e Remove the usage of feature gate
0ac35fe44f4 Update security contacts for sig-cli
8d3a25c7c98 [KMSv2] Add tracing
c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
2a8982b27b8 Remove problematic Dbus restart test
39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
3738111337e Add unit tests
08b942028f9 DRA: call plugins for claims even if exist in cache
69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
e511edf11f7 Fix SELinux unit tests
2f5903b4cf4 Move SELinux warning metric to be counted once per pod
d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
a92c1269e25 test: fixes hot reload flake
71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
8e0be64b8ff remove data race on the devicemanager client plugin
aeceec72bbd add integration tests
97e72d792cc Remove independent tests for metrics
84cd6dbb0aa use the latest semver version for the badge
b3525946d5e ratcheting: provide a shared correlated object
dfeab6eca8c fetch a shared correlated object off the validation options if it exists
0a19b5ab6e2 fix usage
432e8937cfb add variadic options to ValidateUpdate
9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
055e926a924 e2e: Increases the memory limit for downward API tests
88c0a8be1bd feat: add job_pods_creation_total metric
b1ce529b2ac Remove unnecessary GetIndexer
1224e0e881d Add PodHostIPs test
f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
12a972cc1e6 Promote KEP-2681 to beta in 1.29
2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
bd8ac8c7fac kube-scheduler: checked err for golangci-lint
b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
16b3acc27a1 cleanup UnknownCRISocket for unit tests
71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
b06675724d6 Add e2e test for backoffLimitPerIndex
4b59d2b05c0 kube-proxy: Optionally do privileged configs only
35f4d29d735 Fix unit test
b052c7b7cdf Update npd version to 0.8.13 in configure.sh
a6f5246565b integration test for empty & unstructured.
168998e87bf StreamTranslator and FallbackExecutor for WebSockets
c6b3a2f477c allow empty object to be CEL value.
8ae0d390d77 add container filesystem to CRI api
93951bc00d3 Add stability tests for CEL cost estimation.
d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
27afb7d75d2 e2e storage: use framework to tag tests
8a42be978bf Add CDI support to the sample device plugin
d9131d5b390 [KMSv2] Drop the apimachinery
6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
fb6b10997a7 cleanup: remove useless test
3f4d3b67682 Cleanup paging parameters in etcd3 store
2dbd4055834 Graduate ReadWriteOncePod to GA
42945ea6dc8 update suspend test to match other test cases
49c947ba15a metrics: add and use ImageGarbageCollectedTotal
d8a5cd59c08 kubelet/images: add unit test for MaxAge
914aa746c18 kubelet/images: add and use freeOldImages function
76e623098c8 kubelet config validation: add validation for image max gc age
d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
34294cd67f2 locking feature-gate for ready pods job status
b386120da23 Remove storageConfig.Paging parameter
106f58686d5 Remove disablePaging param
b0d04d933be Introduce the job_finished_indexes_total metric
6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
a913abe191b e2e test for checking ready of job status
fb0ffb07a76 kubeadm coredns use drop ALL instead of all
81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
4f5bc7e8d76 fix based on reviews
82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
eb3a11ea142 registry/core: wire NotFound getter instead of nil
cbe3d897629 Promote CRD validation rule to stable
fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
32fdb551920 Use Patch instead of SSA for Pod Disruption condition
a7adde53be4 bump golang.org/grpc to v1.56.3
a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
441d2b40dfd Undeprecated kubelet cloud-provider flag
4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
cf836309dc2 Add validation for --storage-media-type option.
8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
1a41ed394d6 convert pointer to ptr for sig-apps integration tests
27bb40a9d83 Remove GAed feature gates OpenAPIV3
c5e25637c64 fix typo
a25b87d84a3 e2e apimachinery: use feature gate
ceba3be6b58 e2e: add more feature definitions
9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
aee73352853 add new test cases
220d5c2e543 remove dead code in test
79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
0a6d9531f40 update generated code and openapi
4d21a23be35 pin openapi
31a1c00e49c cleanup: move unstructured check earlier in status update
d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
ced56a6adab Restrict supported media types for new apiservers.
f5cb2ada944 k8s.io/kms: drop direct dependency on klog
db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
6c4f71b31ce Fix spelling
02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
b7477c31b03 update versioned types
4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
d7556769e7f Job: Replace deprecated wait functions with supported one
1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
2508f468a8f kubelet/userns: Add more unit tests
0dd495e6dc2 Address review comments
7ff866463af Refactor watch event serialization to allow caching
0cda42af7ab Unregister group path from apiserver when the group no longer exists
a50d83c669e Add basic authz config integration test
22e5a806a73 Add --authorization-config flag to apiserver
75f20ee64da update pretty param description
e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
7bcc98c46b9 sidecars: terminate sidecars after main containers
c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
7a1ac18bc84 Fix panic if there are more terminating pods than active pods
fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
007ef653ad0 add feature gates for authorization config
2ccf7e8e49b fix: minor lint issues and redundant check
056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
bf32f87d00e skip CEL validations for enum violation.
e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
72e67e0ef0d kubeapiserver/options: fix cloud provider validation
911700e64e3 Fix typos in markdown
2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
b500c3d6930 Correct the label selector used in TestSampleAPIServer
c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
7d077f9271e e2e: move AllNodesReady check to DeferCleanup
ca6fda05ce5 Restart containers in right order after the podSandboxChanged
75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
6714e678d33 node: sample-dp: register by default and re-register on restarts
465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
d2b803246af Don't reuse the device allocated to the restartable init container
a45a813d5e3 kubeadm: fix "eliptic" typo in API package
fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
1715fc0ca06 Fix issue in enabling evented pleg feature gate
defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
5d5958e3389 fix ImageLocality plugin score is inconsistent
76059738a4f update standard protocols to match KEP3726
4ae7150f05d remove pc pvc status endpoints
757597fabfa track unmaintained repo - mailru/easyjson
2e8f66afb39 Promote PV/PVC status e2e test to Conformance
28f335a3397 kubelet/images: refactor image gc unit tests
e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
56023e00cbc cri-api: compress OWNERS files
f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
e3098225eaf bump kube-openapi
b30c6bdff81 Fix v3 spec
d1a6c0ae7df Update cri-api change in v1.29.0
2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
5d0f8530f6b fix Huge Pages failing test
7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
dd9c3358f5e Revert "podresources: e2e: force eager connection"
27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
5c0618b848d codegen
011c65e17e2 configure npd to run as daemonset on cos
39dcad8a19e Populate CRI filesystem info error
bfda244e54e pkg/proxy: dual stack health checker
73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
f69e1fed82f Remove GAed feature gates TopologyManager
957adfac498 fix invalid log calls
8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
fed4f16a7ad Remove GAed feature gates SeccompDefault
33f2d487e2d Promote KEP-2681 to beta in 1.29
18c3b6fce43 Register metrics for apiserver handlers
56836608303 remove deprecated framework.ExpectNotEqual for node
b548bbb8cf8 When reading pvc status allow bound to be a valid value
11b0eed9e7f Work around bug in gcloud when downloading logs
1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
332779a3b29 add a simple e2e test
3a96afdfefd implementation
fa01dfdb0a4 validation
0f46033dca2 fixed miscalled function
9327f3a1734 api changes
c2d473f0d43 remove ClusterCIDR
32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
fb1fc8b4a72 ratcheting: disable correlation by index
d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
60c90fc0854 cleanup: consistently support nil receiver and document
abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
ddcbae734af Add a 0 × 0 case
fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
e1fa1df3ae8 cleanup: consistent interface{} and any
0495616230a cleanup: add godoc
4de3e73b8ac Add test cases for mostPositive and mostNegative
685ae024332 Add more unit tests
79325b6178d Multiply by a scalar
4381eb7237e quantity: Add multiplication methods
1ae54296291 add potential fixes for flakiness in eviction tests
db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
b0c7956a869 Bump distroless-iptables to v0.4.1
a34d2f3b134 fix limitrange flaky test
10151a5e38f kubelet/sysctl: update log level
cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
4dedabf2a65 test: fix boilerplate
80e378181ea add rundir folder to gitignore
800a8eaba7f Prevent rapid reset http2 DOS on API server
968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
78ffa882be2 chore: updates api doc
de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
c94240e2e2e move kubelet constant for podreadytostart to staging
1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
de01788deaa Switch to newer cos-gpu-installer - v2.1.9
adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
7b1d87383ec add kubelet policy skew test for kubeadm
5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
0149c1f8b31 test: few more correlatedobject test cases
ba9347230e6 test: add correlatedobject test cases
15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
c08a9321eed cleanup: add header and fix spelling
27cb869e559 refactor: move correlatedObject to its own file
b321e8bf0db refactor: make CachedDeepEqual independent of validation
921c0d01800 cleanup: add defaulting for job manual selector (#120206)
c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
555c1b8091c bump kube-openapi
83760ae56c8 update openapi with required requestBody
5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
7989400bef5 Fix concurrent write when filling PVC labels
54714686bc6 Modify test PVC to detect concurrent map write bug
d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
2c1836bc245 remove deprecated framework.ExpectEqual
990a46f9bde Update QueueingHInt's KEP
b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
4acaf9ebed7 Add service name tests
438c0daab75 add rest of accessors to common.Schema
0f989046d06 kube-apiserver: move cloud provider validation into options
5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
80269d5d349 fix missing http.target trace attribute
dc334b953d9 dependencies: update otel-go dependencies
e76aad1813b refactor: use common.Schema in CorrelatedObject
83a1dbf885d refactor: export correlated fields
e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
471e3ab8281 refactor: factor out object correlation
30cf9ed5677 refactor: directly implement ValueValidator
4fb5f1a6119 refactor: remove unnecessary lambda (noop)
19ecf93ec3d e2e: define features and node features
f2d34426f86 e2e: enhance SIGDescribe
39b6916cbcc e2e: add wrapper functions to annotate tests
535ab743461 e2e framework: track and report internal bugs
3afdcc03ea5 e2e framework: list specs and labels
aa4d2fc5edf e2e storage: remove useless info message
581af9ba6da kube-apiserver: use only one client in apiserver controllers
215c4627ef9 Update SECURITY_CONTACTS
e9957d79aae make update
0eacff0baf9 compatibility (adapt testdata)
b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
f538be659c7 hack: fix update of golangci-lint verify scripts
6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
00ae26cda8f Create e2e test for PV/PVC status endpoints
b190ea0c966 hack: update golangci-lint verify scripts
302d350e88e set maxLength to longest enum.
d4a5a085a84 Improve error message in cpu assignment logic
79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
52c58d970e5 fix data race in apf unit test
a6b0a6c484d Bump distroless-iptables to v0.3.3
f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
0be5fdb5ced Add volume plugin label to SELinux metrics
137ad9bf2b5 clean up deprecated funcs in e2e framework
d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
122ff5a212a Move grpc rate limitter from podresource folder
9cca527c4b3 Migrated `pkg/scheduler/framework/plugins/examples/` to use contextual logging
62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
7cba35f6519 nodeports: scheduler queueing hints
20db4ef3d64 kubeadm: fix wrong ut for util/etcd
4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
3c4512c6ccc hpa: always update status metrics when updating the replica count
89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
3ee2f27e5bb kubelet: cloud-provider external addresses
619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
8b5f30ef096 Don't reuse CPU set of a restartable init container
e8e22f645d0 kubeadm: Optimize the logic to override the arguments
8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
a888fef242f Use timeout function to detect transient errors
1b489963c8d Add nil checks for hpa object target type values
0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
a213edae2a6 Add package-level godoc to pkg/kubelet/cm
b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
b96a074bcdf convert pointer to ptr for job controller
1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
914210ee9a6 revert back to IsUnexpectedCloseError check
e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
c03579bfa40 typed variables support.
4d157bb1427 add single boolean to composition e2e test.
69a3e3d1089 Add --extra-peer in conversion in kube_codegen
3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
4b391501795 reflector: fallback to the previous mode on any error
11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
c65fe450d8a Generated files
26f113be2fc reflector: close an established watcher when the StopCh was closed
f17468ff060 Fixs a validation error in teh admission registration API
6d759aac910 delete addon-manager test
e7b2aeee930 Fix API docs for audit APIs
38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
243ba5fb6b6 remove an e2e test specific to kubeup clusters
98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
566fad5eda3 add metrics to the ipallocator repair loop
4eff70dcf9f add metrics to the nodeport allocator repair loop
6c9ddf300cf update generated
9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
44cb330aa00 Improve kube-proxy config / CLI documentation
0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
d2a3184c47c remove pkg/encrypt and pkg/value in kms
e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
74180aaf661 Fix scalability concerns in test runs
5ebde41efb5 Refactoring variable declaration and value setting
0e8a1f18163 e2e: remove redundant spaces in test names
6200eb04aff use generic sets in scheduler
e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
d9002176649 fix missed branch - targets when building using arm64
61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
7437ad2617a Add/update prechecks to verify-govulncheck.sh
59ad81a6157 controller/clusterauthenticationtrust: complete event filter
a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
63950491764 controlplane: make option structs uniformly optional
a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
27a68aee3a4 k8s.io/client-go/tools: support context for event recording
772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
394bcaf1820 Only configure swap if available on node
2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
ff5f5bc1613 Merge several NodePort tests into TestNodePorts
f38231d5687 Merge all the "reject when no endpoints" tests together
2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
2172ea60836 Fix typos: update Enpoint to Endpoint
6297067ff1a apf: request ejected from queue should use reason 'time-out'
11ef9514dad apf: remove RequestWaitLimit from queueset config
da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
f39213a7e44 apf: use context for queue wait
52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
9b32d2f67d4 Default clientset_pkg and clientset_name variables
36146ad686a e2e dra: enhance test driver
46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
2ce4f85a465 update verify script to check deprecated fields
e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
ca562fd280a storage/etcd: the watcher supports the API streaming
84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
b71d7f9305c use generic Set in scheduler
7c5219438df Remove an old compatibility check/warning
5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
1b602ffd9a4 Bump Konnectivity to 0.28.0
06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
0910fe4b983 Extend iptables packet tracer to check the protocol
a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
9345da51ac4 fix comment mistake, run "make update"
45a776d5ff4 update rules to switch from deprecated dir field
9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
b489beb365f Remove an old compatibility check/warning
eb109e39480 e2e: bootstrap vsphere tests earlier
d3d1827c054 Use local isCgroup2UnifiedMode consistently
8a31bb6786c workqueue unit tests to assert collapsing behaviors
dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
0786fcc941b kubeadm: Remove the support of configurable component configs
3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
e00551fe5d4 Allow storage migration of CTB without attest authorization
c816601d834 reintroduce resourcequota.NewMonitor
7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
41584bde233 fix code style
de244b2678f Promote StorageClass e2e test to Conformance
b23575d0fcf remove storageclass endpoints
a62eb45ae2b Rename job reasons to JobReasons as part of api review
301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
5341890c96f add missing labels to kube-dns deployment
9e060590e6f skip kube-dns tests if kube-dns is missing
2a827767458 change rolling update logic to exclude sunsetting nodes
04668c00432 cache/reflector: check the value of the initial-events-end annotation
83c37acb21f e2e framework: adapt unit test to Go 1.22
5c28fd28478 vsphere: adapt to govmomi bump
4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
26a395ecc28 Trigger CI
12c0c08e658 fix data race in test
9533cfe2eed fix: add unit test
bad0593a686 fix kubelet image gc
91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
272b23cc7ad kubelet: fix log when using --reserved-cpus
42356bfbb3e move common logic of highestSupportedVersion to util package
fc6b19a4ba6 .: bump govmomi to v0.30.6
afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
3a96baf3fa8 storage/testing/utils: add helper functions
c8b9d64d81f scheduler test: unify util to fake pod.
b953708fa93 Update 1.29 Release Notes team
a919079ff31 Check --show-events in kubectl describe pvc (#120380)
1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
52c582ca77c Bootstrap API Types for Structured Authorization Configuration
bbb905c794c remove gce healthcheck interval e2e lb test
b59d4afd14e fix typo exeucting => executing
62275e3cc8c fix typo dervied => derived
79a7833ade0 fix typo Mininum => Minimum
6e3ebdc68e7 fix typo Conext => Context
409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
b4e5b868a8e Don't reuse memory of a restartable init container
10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
6c59e8be5e2 hack/update-vendor.sh
dad1b2a4306 Fixup kube-openapi/pkg/cached changes
e1ffbacb7ae go.mod
7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
39af594f312 storage/testing: a simple refactor
40618b765cc add loging and bump timers to avoid races
3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
79d0dde4a83 replace hardcode string with exists variable
9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
62267518b83 Fix systemd unit string matchs
c6e9fba79b8 move reasons to api package for job controller
e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
0288367db80 test-e2e: Retrigger the RBD image post merge job
28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
309876b5d78 CHANGELOG: Update directory for v1.28.2 release
710dceded51 Look for pods in ownerReferences of PVC (#120427)
80c8074e3be service controller: limit logging node names to 50.
349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
21e26486ac3 sync Service API status rest storage
239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
7fc11f47ff4 Mark a volume as uncertain-attached after detach error
99903071469 kube-scheduler: drop deprecated pointer package
9e34aa306cd Update hack/verify-govulncheck.sh
5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
af151eeba2c specifically check that the pod was successful
7710128636a kms: remove livez check
15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
4f20a72ea00 variable name should not conflit with import package, replace the variable name
084deb7a7cf clarify the description of the metric apiserver_storage_objects
9da533ced6f API Chunking conformance metadata
3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
6b4ab616a2c Increase range of job_sync_duration_seconds
d765e40a988 pass GOTOOLCHAIN to build containers
7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
43b434f66a8 sig-node: add rphillips to reviewers
d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
09d64ed7d4f promote sli metrics to stable
0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
e6435e98eda promote component SLIs to GA; remove feature gates for component slis
e2c1c0d34a6 kubeadm: drop deprecated pointer package
357d7804b8f kube-proxy: drop deprecated pointer package
678b958567e use universal decoder and add a check on default dns Policy of static pod for test
1fb4eee94e0 Use container log instead of termination log
190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
6f9140e421c DRA scheduler: stop allocating before deallocation
2dd7db306a6 Update modules.txt
61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
d3eb082568c Create a node startup latency tracker
2d86c333f57 add test case for generating etcd manifests
912041ce41b kubeadm: fix diff order and add test for new default value manifest
41b62c4dd71 Promote PV/PVC e2e test to Conformance
0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
f4467457776 Improve logging on kube-proxy exit
df5c1bb1ea1 added documentation about the format of certificateKey
43ccf6c4e8f kmsv2: add apiserver identity to metrics
c1a0aa08e31 Add cni plugin auto Arch and OS selection
b443a841e30 kubeadm: add log for static pod manifest diff
f135eed37b9 update codegen
d7264d0af03 Make StatefulSet restart pods with phase Succeeded
4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
7e4b5d0d49a Final Fix
f499b4f8918 Bump distroless-iptables to v0.3.2
18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
93e3b07e11c [cluster/gce] Add KCM specific args
48f453d6498 cloud-provider: Log additional options
aa89e6dc978 Use ptr.To to retrieve intstr addresses
9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
a0a8765027a fix: update thirdpartyresources refs
5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
a69f56e1375 fix: check if initsystem service exists
7dea3d6c3bf New mock test framework for windows kubeproxy.
975da2fb239 fix typo in client-go package
3a1a67e33d7 add aojea as controplane reviewer
cc77b97c5e9 add aojea as client-go approver
7a13b11af0e update e2e import restrictions
6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
08006c842fd apiserver: rename request body size metric
8451c80b601 pin gengo
93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
dbd3eb54191 remove logcheck.yaml
f365cae9ee6 Fix typo in api.proto
2d1877c97b6 fix breaking pv creation when the validation webhook exists
f33265cf5d0 HandleRetry has already called in the GetObject
fc51a27c036 fix typecast missing
2ea47038b90 podresources: e2e: force eager connection
6cd446a2064 Add cloud library to unwanted deps
9f76d8d45a0 Track vendor status of unwanted deps
87d49a51bed fix(queue_test): make sure the first bind failure via counter
94afd6e3a4d skip the reason check for OOM tests if it will fail
f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
9c1df5ff0af move back to bullseye
67858e1ff06 Bump images, dependencies and versions to go 1.21.0
0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
c682d2b8c59 scheduler: add ResourceClass events
2ad4304e8f2 Add Windows support for IPPVS
15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
43fc6b5bdb0 Added suggests changes
355ae44a3ca Revert "bump npd to v0.8.14"
e7ee3ae3d94 Create e2e test for StorageClass endpoints
418af0f4dcb register API types only once for encryption config
2144852f7c9 Commits merged
657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
c131c92b9f3 scheduler: unit test case for concurrent event with other pod
a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
0024c7e1668 Changed the generator codes for kubernetes metrics table
cd943dd95e3 scheduler: fix tracking of concurrent events
933bcc123b4 only drop invalid cstate packets if non liberal
7c75b018d57 cmd/kube-apiserver: add .import-restrictions
43783aeb18c drop release-1.24 rules from publishing-bot
e190e179b3c Document `cluster/gce/gci/mounter` as static binary
059e8353b76 check labels/annotations in the beginning
6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
e8564d6c5bc KEP-3895: Promote interactive delete to beta
14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
b35357b6c08 cleanup: omit comparison with bool constants
622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
7c33b78418c remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
e6dfdb240fd Output the error message for better analylsis
ff3cb43c300 remove labeld-deployment.yaml
cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
c74d045c4b7 scheduler_perf: show name of one pending pod in error message
3c2cfd9a4fd resource claim controller: separate generated suffix from base
2c5a11a55bf Match on cri-o socket suffix only
214772c1104 dependencies: update opencontainers/selinux to v1.11.0
95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
3f8f14397e1 Set external credential provider to true by default in kube-up.sh
410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
45b9b0df41f Add namespace to apiserver tracing
c83eb6dcaaa Add subresource to apiserver tracing
bcb59a03ebb Add name to apiserver tracing
646053d73db Add api-version to apiserver tracing
8c34208a62f Add group to apiserver tracing
6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
2e5f17166b9 pkg/proxy: fix stale detection logic
95121fe846f kmsv2: add legacy data integration test
42e8cfa28ac fix failing metadata test
cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
0fb1f59a881 Improve service unit test failure report
39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
3e252857c1c Add unwanted cloud deps to track
875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
6058540f3d0 storage: document ProgressNotify from storage.ListOptions
f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
936d67f6888 Update distroless-iptables image version to v0.3.1
bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
bfc3c2110fc e2e-node: fix TopologyManager test jobs.
3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
f1051f34a79 Remove deprecated framework
062c57ae92f dra controller helper: make allocation error message more readable
f96e23e477d dra controller helper: merge log entries for informer events
78f3b76390b scheduler_perf: use different log names for different DRA drivers
d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
fcff9969095 adjust error message a bit
889c8e919bd New repo who dis? distribution/reference
741f1461571 Revert to json-patch 4.12.0
b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
8f6a79b29fa use external cloud provider by default with gce
903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
a46bab69308 Fix a job quota related deadlock (#119776)
696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
63177db32c2 Add an e2e test for the pod sandbox changed scenario
e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
3c5a58c5f89 Refactor checkErr func
f22d8540723 unwanted-dependendencies: updating references, and `jq`
0323fe42e23 adding more callbacks in kubedrain helper
e01bd641447 Avoid creating local variables that don't change
10553a19668 Flatten switch case
1f4f2a5d601 Refactor common WithRange case
ede524e1a6a fix a pidpressure test flake
3bc6ee6fef7 unwanted-dependencies: sort this list
eb5695b0c5c unwanted-dependencies: adding archived repos
15c02f2a034 add integration tests
9e1ff1e5120 add loading config and wire feature flag
57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
160589a0edb Refactor transformers for watch to implement Encoder interface
04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
bf41b0462cc Fix OpenAPI aggregation cleanup
16a7b536022 Fix typos in comments
2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
be4692864bb Remove duplicated returnRV variable
2e174a029f5 Add timeout to listContainerStats context
2825519da2c apf: remove v1alpha1 API
a926f594da9 Bump runc to v1.1.9
7b44d73f73f bump npd to v0.8.14
879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
41adc93ca3a remove GAed FG DownwardAPIHugePages
e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
7e7b67f2ccd remove GAed FG GRPCContainerProbe
af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
5dbec5c715b local debugging should utilize the same defaults as prod
d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
f5d6c65186d paginate initial list inside the storage watcher
8d9517318a4 Extend npd e2e timeout to fix npd e2e error
618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
b2c0d80c37f Test watch converter encoder
03126c54658 add comment
651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
3fcc045bce9 Minor cleanup tranformers interface
172a41192c6 Cleanup setting non-nil Items field
5269e769902 scheduler: properly skip DRA events
1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
580f83ab4a5 Avoid duplicated dots in pod condition
855b445d28d Remove deprecated selectorSpread
c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
0ea6522807d apiextensions-apiserver: generate applyconfigurations
dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
94d03ccc83b Squashed commit of the following:
030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
3d583398fe2 Avoid to build the error msg for twice
484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
eb0afbc7d01 kubeadm: update swap warning for v1.28 change
fa37bebcd4b Add comment about why AttachFunc be overridable
d680bc540b5 fix(test): fix error handling condition in test
01df59a73b9 pkg/proxy: remove equal method from endpoint interface
6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
e9be1d7438b Test now has coverage!
628bbb9ef8a kubeadm: add supported etcd version for v1.29
dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
1bf90f9484c add StructuredAuthenticationConfiguration feature flag
1bad3cbbf59 wiring existing oidc flags with internal API struct
f909eb630ca add AuthenticationConfiguration v1alpha1 api
ff56d3b6914 Refactor WatchServer to prepare for using encoders
a4ce32769ff fix pod delete log in deployment controller
0bc0256093b Update job_controller_test.go
ff10df107a4 remove fake deployment
13a8ad12b82 apiserver: fix data race in etcd metrics
dec1c361255 add kubectl rollout e2e test
22f4b1c56ad Static check fix
70e2deb32f9 Fixing lint problem
6ded53ce4dc Added back test changes
5fb049ff473 Added create job & cleanup
ff1659cb798 Added syncjob
f87cc43cdb0 Review Changes
d08fc3a4d01 Another one creeped in
ef6a0eb6d85 Final Lint Fix
aa9f38c36d8 More Lint Fixes
601679446ae Lint fixes
cf32ae9453b Initial Commit
297f04b74ae Added function to remove finalizers as backup
1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
13b52a18483 fix crd finalizer validation
ab018481342 Make sure skip score plugins alwarys returned
6805632abb8 CHANGELOG: Update directory for v1.26.8 release
f847565c081 Move mount warnings to info logs for normal expected paths
63df8a5821a CHANGELOG: Update directory for v1.25.13 release
52e85074042 CHANGELOG: Update directory for v1.24.17 release
980fa6a2b9e Add CEL library lifecycle linter
3fb14cf4e7a Bump cel string lib to v2, add tests
640a2ec3327 Update k8s code to handle cel-go changes
1a850a00630 Bump cel-go to v0.17.6
24877f96fbb Incorporating feedback on 119341
2bede058f92 Use environment varaibles for parameters in Powershell
c761c165627 Use env varaibles for passing path
1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
9ee94b0204a Remove duplicate codes in framework RemovePod
f752ca2dc84 Make API chunking conformance test deterministic
28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
6a16c076e76 hack: move common "verify generated" shell code into function
9c83c380e0c Add wait for cache sync
b1223e0d1ac check for overflow
87cf890632c Fix CEL cost handling of zero length replacement strings
b0e249f657a Handle edge cases in seat demand stats
037640af8c8 Apply suggestions from code review
bd06c26d580 fix: concurrent map writes in e2e test
826f3a130ae promote to conformance Service multiprotocol tests
98d772ca3c4 Support multiarch/platfrom in find-release-tars
c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
93832de6246 stop using deprecated framework.ExpectNotEqual
145dbb6accf stop using deprecated framework.ExpectNotEqual
d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
0039f24d74d apf: refactor promise to use a context
3e9a4c15a85 Restrict what imports get into code within test/e2e_node
c1eb18c00ca generated files
039859b9b72 e2e network test for udp services with hostNetwork clients
2472291790e api: introduce separate VolumeResourceRequirements struct
a5600b69251 storage/etcd: simplify passing the transformer
6161752ecbe storage/etcd: remove newWatcher function
3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
b8512cfe247 expect the new resource_scape_error metric
905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
f93bd699aaf Trim managedFields in pod informer
2f576969eee reducae function calling to once
093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
c112a34642d add unit test for kube-proxy service cache with ipMode
7f805dc9354 fix test name
30ff937aaf9 add a fake load balancer class to fix e2e test failure
3cbecf218df kmsv2: add metric for DEK cache filled
d86e72202c4 kmsv2 test feature enablement unit test
bd6f5487463 mark the OOM killer as serial to reduce flakes
afe9045e466 Add v1.28.0 API testdata
a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
8163d244ede Update ccm flag help to describe disabling webhook serving
8291b847d58 Allow disabling both webhook ports in cloud-provider
f407b31d42a kubeadm: Fix typo where API group is not correct
72af21e1a13 kubeadm: Cleanup the unused input parameters
1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
48260b4a77b kubernetes mutual (2-way) x509 comment
ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
6c2cfac0a97 Revert testgrid url changes from CHANGELOG
577197559ae remove the legacy test dependency
af26ebd0fa3 translate beta label to ga in volume_zone
4712025ea84 Graduate kubelet resource metrics to GA
6ef90979720 Update the URL of testgrid
af9bf7b41e0 Prefer non-alpha storage versions when available
09fa21ab879 Store validating admission policies and bindings as v1beta1
a422d11c772 prep for go1.21: use -e in go list
ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
5567f288e74 api: change list type for node lists in PodSchedulingContext
79333684600 Update CNI plugins to v1.3.0
f07a3a3f263 calculate sidecar container resource in pod autoscaler
427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
5bbc4f76055 Pass Pinned field to kubecontainer.Image
a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
b75c5d33e5c bump the busybox test version to resolve test failures
bd36be02188 Make gomaxprocs install optional, limit to tests
9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
5752cbd8c76 chore: add pod UID in event log
7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
8314122382c e2e framework util subtle bug checking endpoints
9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
1e961af858b scheduler_perf: test case for DRA with multiple claims
0331e98957f scheduler_perf: fix installing DRA test driver multiple times
092897f061f drop v1.26.0 API testdata
4950521ad88 kubeadm: increase ut for certs/certlist
224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
3edae95e5ae Add unit tests for subdomain match in keyring
8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
a161fa8017b pull Host from kubeconfig when needed
03415ebc1da Integration tests for IP mode field
86b1f095ca7 Proxy changes for IP mode field
47fec59a31a parse node selector in prefilter
4fb0ce28377 Fix broken link to testgrid
34a89f039b8 Update cri-tools to v1.28.0
29a6705dabc Generated code for IP mode field
3ac2899d2b5 Add IP mode field
cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
947c9376f6a change struct methods receiver to pointer
e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
717c149a734 fix mirror pod nfs test failure due to differing NFS versions
279a663f948 Update README.md
6f27733af8d Job: Replace deprecated workqueue library with supported one
dd7b7073c38 e2e: add test for verification of timestamp for new PVs
8e661498702 e2e: remove extra spaces
b9cf6991e63 Use tracing semconv types instead of own defines
765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
1863a808b20 fix: add code comments
9646ae5a9ef Fix: null jsonpath serialization
8ab6bee676a Make seccomp status checks in e2e tests more robust
509ffe2938f Fix receiver names in legacyProvider
80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
f73c253accf fix typos for pod replacement policy
5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
62b063b74b5 wsstream: use a single approach to detect connection upgrade
74053e21519 Create e2e test for PV/PVC endpoints
49e00e8bdee Move adding GroupVersion log until after an update is confirmed
77b3bb0f69b fix race on etcd client constructor for healthchecks
a6329ac4536 Fix to honor PDB with an empty selector `{}`
0e238409290 dra test: enhance performance of test driver controller
40b604e3741 Update pkg/apis/core/helper/qos/qos.go
f355b22f5f7 implement Stringer for podActions
e4d16f34c15 Add test coverage of result size of string operations
10fe3da87db Delete PSP API types and generated clients
69a5a528967 Bump cel-go to v0.16.1
6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
37730c07dd6 apiserver/httplog: pretty up impersonation output
3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
0944c00778a Fix some typo in kubelet component source code
3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
074d5b53299 Rewrite the tests to be table driven
391c1a3eccd dra: cleanup manager unit tests
a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
85c385d4101 Update the container images used in cloudbuild to their latest version
c4f4e3bc43b pkg/proxy: unit test refactoring
4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
b6ae858e01f Drop AvailableResources from controller context
d5d90b7b228 add support for ExponentialBucketsRange
90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
a215b29d7cf remove makefile:generated_files in v1.29.
f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
c23cee1be3c fix OOM killer
4b6abf10c6e Handle errors when preparing lease for update
ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
109cf6820d2 Update base image and add utilities to kubectl image
2a767c9916a update the busybox test image to 1.36.1
133696725ae implement secret empty string value integration test
7f53f7649e1 Use intstr.Parse instead of reimplementing it
1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
18c46b2487a add validation for static pods to have a name
66aa2af0979 CEL lazy map: add test for boolean short-circuiting
307b0630aa6 cri-api: add CRI implementation maintainers as approvers
c4739313b7f Track manually created secret-based tokens
df89045b53c dependencies: update github.com/ishidawataru/sctp
2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait(). This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
fb9646fd60d apiserver: add flow control metric current_inqueue_seats
4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
fdea6ad17d7 kubectl debug: Remove legacy server support
baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
3964f71fe02 e2e:podresources: verify count for terminal pods
6d244728b9e adjust order and fix typo for kube upgrade
479b2d03a43 kubectl: fix describe node output when sidecars are present
4e2e059c7b2 Graduate RemainingItemCount to GA
6acfa3cb4ac Graduate APIListChunking to GA
e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
7ffd3063cef dynamic resource allocation: reuse gRPC connection
dbaa9fe6b46 added podgc orphaned pod unit tests
173b5a75b96 Trim managedFields in controller-manager
c86f562f29b Run hack/update-codegen.sh informers subprojects
9c4651bd047 Add 'WithTransform' SharedInformerOption
d1946392528 Cleanup kubectl legacy server fallback
106a931c299 fix intergration test
d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
a35608cc614 Update debian-base for test images and others
43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
b8336f399bf KEP-2305: add metric to track unbounded label values
1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
654e98e0a2e add endpointslice repo to staging README
b7cbebcd034 Added oomkill test for init container and fix typos
d8c145d20da fixes the issue in the documentation of kubectl events
12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
3bae26ae58b Check dbus error on container runtime start/stop
70f979c8da3 Alert message improved according to standards
a6554b9d5d1 Make kubelet label types public
f2fa6d5f6b3 Document PVLabeler as deprecated
7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
fc36d2fee83 chore: improve error message for unstructured helper method
b60a3a58df2 api-machinery: stop using deprecated io/ioutil
0da37d8c544 chore: omit comparison to bool constant
17e6c5cb9f0 Error Typofix
9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
01c2c4f35f3 Error test cases added
a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
c1cced24aa9 WIP: don't exclude .git from rsync
396c8a67832 test: TestPodDeletionEvent
975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
ba49ccdbc9b Gracefully handle empty config error when local flag is used
96ab232f5f7 Remove reasons from PodConditionType
1d9eed9f950 chore: slice replace loop
9378e580cf4 chore: loop optimization
fc1b8a823d4 cli: stop using deprecated io/ioutil
b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
72f89b63757 kubelet: fix comment typo
12f8eeaf9b1 fixed typo in get-kube.sh
3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
887654160f9 Improve the performance of schedulinggates
0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
847df6d9153 kubelet: output log even file is rotated
05f04f866eb Keep PLEG interruptions in a separate interface
b109a585398 Improve the performance of isPodStatusCacheTerminal
84c14c65c6b Remove unnecessary type conversion
55d471601b1 [ut] increase covrage for kubelet/prober/results
e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
08a69d63413 Improve performance of method PodRequests
337f4e524aa Do not error log CRI stats for not cached partitions
f2aeb3b0d91 Improve lock performance
fb6fd36384e Add endpoint to skip topology aware log when missing zone hint
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a5fee65b68 |
skopeo: update to v1.14.2
Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits:
c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev
b673eb60 [release-1.14] Bump Skopeo to v1.14.2
18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a906b81ca6 |
podman-tui: upate to v0.17.0
Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits:
b4350927 Bump to v0.17.0
db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2
49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4
c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1
00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3
bbba9ec9 go version update to 1.20
5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0
4d0b84f5 Bump to v0.17.0-dev
cacf1b90 Bump to v0.16.0
67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2
be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0
2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11
9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3
519ed36f Bump to v0.16.0-dev
f7f47149 Bump to v0.15.0
9ba724c1 gh action update
1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0
fb1886ea github action use golang 1.21.4 for golangci-lint
6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0
54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2
bbb8c9a9 Bump to v0.15.0-dev
c545dbd7 Bump to v0.14.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a9f0f00637 |
podman: update to 5.0.0-rc
Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits:
fc4e16366 Bump to v5.0.0-dev
cfc5b8e0f Bump to v5.0.0-RC4
0898b338b Use stop timeout of zero for system reset
542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0
99bb2bfce CI: must-add-tests check: use GH label, not text
c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2
3abc488c8 Vendor in containers/(buildah, common)
4a03da22a Run codespell on code
03f6589f3 Fix events by fully adding the new PullError event
52fd284fd Update dependency pytest to v7.4.4
2b86ab5a1 Change image-path to image for tests
527b3793b Use machine image as specified in containers.conf
4c1c4c082 Vendor latest c/common and fix tests
c50826cea test: fix manifest e2e test assumption
f168b3c11 podman manifest add: support creating artifact manifest on the fly
2bbed8f20 Add man page content for artifacts
d8bb63705 pkg/env.Join(): don't modify passed-in maps
66d60384f add --retry --retry-delay to podman run/create
c3c0c4ab9 Add support for podman push --retry --retry-delay
e5ee0bb5f pullImage does not need to be exported
2c9c7273c Vendor in latest containers/common
99b2f369d test/system: fix mount external container test
35133c842 Move locks to shim layer
6957c7819 CI: run logformatter on mac
fd1d95126 Move ignition functions into Containerfiles
b58f20bdb machine/ociartifact: Include image name in error
064258b49 Reenable boltdb upgrade tests
77bcf233e fix: split string Entrypoint by space
90e6478cf refacto: unknown signal return signal number without prefix
1de94dceb ci: fix module not found
585af039d feat: allow compatibility with podman v4 machine
facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44
23d6377ac chore: rename var host hostIP
2cd72c272 tests: add docker api compatibility test
de845a5b4 feat: make inspect compatible with docker v1.44
950f612b5 logging: new mode -l passthrough-tty
5952486df podman network inspect: include running containers
8f02822c1 Remove xz unit tests as they are flaky
f8abd7ff7 machine config: make write atomic
26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist
dfae51a4b Clean up gvproxy if machine start fails
ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED
7e374a52a Vendor in latest containers/(image,storage)
698219cf9 Expose as-tested Mac/Windows repository state
9f5c20f9b macos installer: Add vfkit entitlement
15734f8c5 macos-installer: Remove hvf.entitlements
74b87874b macos installer: Default to using ad-hoc signing
c2a2113bb new vms, with rc6 rawhide kernel
7b6d9a586 Fixup: avoid overriding io.Copy error
59704665a Avoid overriding io.Copy error
24a33a538 Move code for sparse optimized copy to a dedicated method
50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set
e32c9bb5e Makefile: add machine policy.json to podman-remote.zip
1e5b5a889 macos installer: install default policy.json file
bed61806c pkg/machine/ocipull: add default policy.json file
f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option
a02aa8f6a pkg/machine/ocipull: add custom policy.json location
a210a4d7c test/compose: add test for default connection
d9aff9b41 podman compose: only trim path suffix when ssh protocol
3cada0409 podman compose: correctly accept --connection/--url
6d3571dcf podman compose: build for all arches
7d5a68c9c CI: e2e: use distinct ports, not just 5000
5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date
8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3
cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment
5b28a2b4a Fix podman stop -t -1 CID
656bf7b76 Change QEMU netdev to Unix domain socket
19b676f85 Enable lint for Darwin and fix identified issues
1b068b79f Fix nightly cron checks
83671ac34 systests: enable ipv6 tests
188404366 Update github.com/containers/libhvee digest to c1bda9d
f099250be Better file close and err handling
ea4553d59 integrating changes from #21768
fa99b9be9 renamed testfiles as testdata
0b3f3f0ef Use faster gzip reader
2245cf8dc Remove duplication and make consistent usage of the progress bar
c42d3a74e Add a comment to explain why we look at file name for zip files
95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go
88af8852d Refactor machine decompress.go
ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9
53b5fc781 Update module golang.org/x/tools to v0.18.0
608976902 Update module github.com/openshift/imagebuilder to v1.2.6
3b127286a Adds example for secret creation from environment variable
b68d3c7a0 Fix race conditions in hyperv readiness checking
127a8060a Ignore docker's end point config when the final network mode isn't bridge.
5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly
c5434bf71 Expand sparseWriter tests
a9ee31b92 Bump to v5.0.0-dev
54795efeb Bump to v5.0.0-RC3
3e76e594b Fix assumptions in 'push with --add-compression and --force-compression'
8e99c697f Fix assumptions in 'push test --force-compression"'
7acb49875 Update module golang.org/x/net to v0.21.0
f601a446b Bump VMs. New pasta, gvisor
d85a71b4d Update module github.com/klauspost/compress to v1.17.7
d7f7f07c9 Stop using rm'd inspect format templates in tests
be9aba7cc Remove image provenance from `machine inspect`
d68240b15 Update machine files rm order and add QEMU rm
4078a4405 libpod/events: remove duplicated Details ID field
6f6925cca pkg/machine: ignore gvproxy pidfile not exists error
8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable()
a3a1b44c3 libpod/events: Update event time format and add timeNano
f218f8430 machine: implement http proxy logic for all providers
c4e68bdae Cirrus: Reuse shared clone script on Mac
2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1
f7d1726f9 Rearrange CI tasks for safety + efficiency
89b415ba3 Comply to Kubernetes specifications for annotation size.
a31e8d2a2 zstd now default compression for podman machine
1c61f766d CI: fix search-test flakes
0b861350c machine: add sparse file writer
7746e2a3f systests: auto-update: minor cleanup
09095acf2 machine: Add `ConnectionInfo` to `MachineConfig`
5effdcca3 Fix up example description of podman-system commands
ec68f07c0 Fix Lint on Windows and enable the job
66fd41ff1 cirrus logcollector: update package list
5327ddfdf Build with CNI support on FreeBSD
c5a71c4fd Apply suggestions from code review
67ead5cb5 Apply suggestions from code review
408772d34 Apply suggestions from code review
1612ff69c Fix up example description of podman-inspect.1.md.in
62148bf61 Apply suggestions from code review
b8c1a8e79 Apply suggestions from code review
66f39eee5 machine: Remove unnecessary TODOs
5b5343b38 Apply suggestions from code review
9d73dc6ed Apply suggestions from code review
f7659b12e Apply suggestions from code review
4f13b836b Codespell code
fc7140151 Fix up example description of podman-mount.1.md.in
ee078a7e6 Update docs/source/markdown/podman-cp.1.md
606865a47 Fix up example description of podman-container commands
22effe8d4 Fix up example description of podman-stats.1.md.in
3fd09dd18 System tests: enable debugging for parallel-rm test
49400ecce Extract waitForGvProxy into shared utility function
a0109caa7 Fix up example description of podman-volume commands
803410f1a Fix up example description of podman-kill.1.md.in
bc5a4fbb2 Fix up example description of podman-pod commands
93a0c242c [skip-ci] Packit: Update downstream task targets
8ed6d4fe5 Fix up example description of podman-build.1.md.in
433efc1f5 Fix up example description of podman-commit.1.md
fe910ae96 Fix up example description of podman-logout.1.md.in
12af4f36b Fix up example description of podman-images.1.md.in
66ed46987 Apply suggestions from code review
de7cb639c Fix up example description of podman-export/export commands
f59a5f135 Fix running container from docker client with rootful in rootless podman.
10d748f58 Introduce Podman machine reset
d4b3ab521 Fix up example description of podman-create.1.md.in
717c00569 Fix up example description of podman-diff.1.md.in
4e268c667 Fix up example description of podman-events.1.md
537490cb9 Fix up example description of podman-farm commands
aad195ca3 Fix up example description of podman-network commands
777b258a7 Fix up example description of podman-image commands
664d4ed28 Fix up example description of podman-port.1.md.in
1116e68dd Fix up example description of podman-push.1.md.in
79a10419c Fix up example description of podman-unshare.1.md
63d9bf128 Fix up example description of podman-pause.1.md.in
4b6ca1687 Fix up example description of podman-start.1.md.in
f5c666d07 Fix up example description of podman-rm.1.md.in
6c8123325 Fix up example description of podman-info.1.md
8cbbd631d Fix up example description of podman-history.1.md
1a06ec802 Fix up example description of podman-healthcheck-run.1.md
10af44854 Fix up example description of podman-exec.1.md.in
7e611f60b Fix up example description of podman-cp.1.md
47d0aa1bc Fix up example description of podman-manifest commands
7ba23cd6f Allow podman pull to specify --retry and --retry-delay
f036476cf fix usermode test
24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
2846027dc machine init: validate machine name and username
8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
30a18fc02 pkg/machine: make only one AddConnection() call
7f2a6c735 Bump to v5.0.0-dev
f620aa0fb Bump to v5.0.0-rc2
d60757cca pkg/machine: cleanup MakeSSHURL
e0a766854 Improve cross platform support in QEMU machine sources
bd0a9e903 Fix remove docker.sock symlink
1f64ae10f Prune FCOS related code
4fffa78ee Manually discover wsl.exe location
889454104 Turn WSL machine tests back on
a9401dead Build tag out QEMU for Darwin
c7537d193 man-page xref: make nested-structure warnings fatal
d221e0b00 Remove log-level from runSystemCommand since wsl does not support it
9ee17d422 machine/qemu: use extra gvproxy socket
3ca221360 Add a helper for stopping pods and containers in E2E
bcec7e627 machine: ocipull do not error if downloaddir exists
e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning
144e420bb Add testcase for WSL dist conflicts
d23dd35dc Correct VM existance check on WSL
db34827bb Test PR, add a inconsequential period to docs
9abc04232 Fix small bug in ocipull
42a78c714 Add volumes-from support using annotation in kube yaml
068d4e81c Allow CI user to cleanup own files
41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22
3de467d9f machine: Re-enable USBs check for wsl machine set
0e9d86755 machine: `machine set` only when machine's stopped
92d6194f0 Fix freebsd indentation + enable release-testing tasks
f9bc9a85b Replace panic with no-op
45b701b12 chore(deps): update dependency setuptools to ~=69.1.0
464638cc8 Enable windows and PM windows testing
001824b9f Windows uses USERPROFILE not HOME
4c0d05718 Readme updates for Podman
87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU
7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
66e292ebb Fix build on Main
c29fde265 libpod: correctly map UID/GID for existing dirs
2430fc71a Allow podman machine to download from oci registry
ad55ba6eb Handle DOCKER_HOST environment for podman-docker package
36853c0d0 Consistant handling DESTDIR variable expansion
5eb801a56 Bump CI VMs to ones with netavark 1.10.3
f7f4d1064 Fix the build on main
eb8428df5 podman-image-scp: Load images without the use of a temporary file.
f8847ea04 Improve comments on waitOnProcess
d3328d4f3 Don't panic on podman4 machine configs
00180bd5b Enforce podman-machine mac CI results
667311c7d Use persist dir for oom file
1f8a69bc9 docs: clarify when a URL is treated as a git repo
bb7d8fdc4 Workaround connection hangups in start/stop racing
09b86e26d Improve robustness of pipe checks
487219d80 Complete WSL implementation, refactor a few areas
d7cb66492 wsl - wip
e74d268bf Minor cleanup from podman 4
2a61998f0 Fail if vm exists in hyperv already
477cb90a3 Update .cirrus.yml
325d7f489 Re-enable mac testing
7ecc41467 Vendor crc CopySparse
69163af2a Remove gitleaks scanning
5b6b68976 Remove disused Containerfile and docs
d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible
4413e75f0 [CI:BUILD] rpm: bump podman module version
1ca608ea9 fix "podman run port forward range" flake
41cd90a8e image scp: don't require port for ssh URL
dbfa201c9 new testimage and systemd-image
a2c086c78 [CI:DOCS] fix userns.pod.md mapping table
3495aae42 docs: resole hierarchical issues with userns parameters
7be6cd4b0 machine: USB passthrough
02eb907db machine: change getDefaultDevices signature
dc0d07c71 document new connection/farm storage location
ef8e63cb2 update c/common to latest main
10265661e Fix Quadlet Options=key=value documentation/example
9f38b2215 pkg/machine: make it build for freebsd
bcd48a6a7 Bump to v5.0.0-dev
dc218a3c6 Bump to v5.0.0-rc1
7e73bb341 Add v4.8, v4.9 to release notes
30fb5de71 Restore Cirrus DEST_BRANCH to main
72f1617fa Bump Go module to v5
c023b789f Re-enable passing a logfile to gvproxy
69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3
e20b70c2e Upgrade tests: reenable, but revamped
d47979761 Quadlet - do not look for line continuation in comment lines
90c938737 Add functionality for `podman machine set --rootful`
f23b144c6 Podman Machine AppleHV CI fixes
d5eb8f3b7 AppleHV - make gz ops sparse
85d828148 create machine dirs at discovery
b1ce6ef9a podman machine 5 - hyperv
6b02c4894 Podman 5 machine refactor - applehv
e8501ca99 Implement generic providers
9bb191df5 [CI:MACHINE]Podman5 QEMU refactor
b9bcfa474 podman5 machine reconfig 1
c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume
3cf2f8ccf Handle more states during refresh
77847bd67 docs: make --seccomp=profile.json clearer
6ca6184ed gomod: Update containers/psgo to 1.9.0
a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks
6e0decbe0 Send container stats over API on a per-interface basis
9983e8744 Remove leftover autoremove containers during refresh
43a01d7dc Temporarily ignore windows-linting failures
defbf4237 Lint before windows-cross build
d44bafc3c Reimplement lint with improved compatibility
c7910e75e Show network name network events with podman -remote events
46fe7ef3b use pkg/strongunits from c/common
5de4bd5d1 vendor: update c/common + libhvee to latest main
a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests
7d15bc2ef fix userns + restart policy with slirp4netns
fcae70220 Reuse timezone code from containers/common
85904e01f Vendor in containers/common
01a8539ef Warn if cgroups-v1
d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume
2eee3cd81 Corrected markdown documentation for `--stars`
35d1f1221 make podman pod inspect output a json array
26cd01ee5 Do not test CNI in CI
ee923358c Vendor c/common
249474a84 drop support for "pasta" as a network name
a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation
d217de642 [skip-ci] Update github/issue-labeler action to v3.4
9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible
39f22c382 Include machine-tests in cirrus-cron jobs
7de64b47f Vendor c/storage main
9fb57d346 Cease using deprecated runc userlookup
91b8f208a Bump to runc main
6a727fdbe Fix updated runc dep breaking pod devices cgroup
2818abf84 Update to runc main, removing pin to an older version
0da405453 Verify the empty mounts.conf does not generate warnings.
1ab55defb Test new CI VMs
c5c079932 Scan-secrets: Fix PR forcepush detection condition
0a4beea6d Scanning-secrets: Support new-branch/renovate link
0e9b07a02 Secret-scanning: Fix newly-opened PR conditional
3f3d1e4de Temporarily ignore mac-linting failures
d9ad7cbc9 Run lint for mac builds
90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
a06685a54 Farm build should read server registries.conf
28856b6c1 Make leak-detection readable by humans
b028f6aa7 add new libpod/images/$name/resolve endpoint
f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21
74454bf59 rework system connection and farm storage
a1c47f029 Return nil health when inspecting containers without healthchecks
6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0
76791a21c pkginstaller: bump Qemu version to 8.2.1
d202acd86 Bump containers/common to latest main
174631f72 Convert SpecGen values to be nullable where possible
f8e1ea414 Fix SSH Host argument in tag command during scp.
3136f0fca Don't require engine connection for farm
0ec84b8ec Revert "Enable win podman-machine test failure"
39e53e6dc chore: extract duplicate codes
8d14d4155 Run codespell on code
d5bed05df docs: fix podman-manifest-rm header
3592b56c3 docs: fix unclosed code block
6678260eb man: Minor wording tweak for host/connection
cd5982e98 quadlet: Add tests for templates
dc94a10d6 quadlet: Add documentation about template use to manpage
01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@.
bb6dec46f quadlet: Support [Install] for templated units
7e1942ed4 systemd.parser: Add GetTemplateParts()
2df994ba0 quadlet: Don't put @ in container names for templated units
b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+
7dcbc75aa [CI:DOCS] minor man page cleanup
202cab612 Fix inspect test that rely on digest
ffd7a8998 Update module github.com/google/uuid to v1.6.0
848078c93 Fix auto-update digest comparison
93510a299 bindings: suggest using -tags remote to reduce file size
f18ebad1e bindings: pods uses entities/types
668d517af bindings: volumes uses entities/types
df6cc8550 bindings: secrets uses entities/types
aee733c58 bindings: network uses entities/types
c736a8e20 bindings: manifests uses entities/types
34cc55741 bindings: play uses entities/types
528414970 bindings: generate uses entities/types
5ddc82f7a bindings: images uses entities/types
08cd7ce41 specgen: use storageTypes instead of storage package
7aede410d bindings: containers/update uses entities/types
40cc962a5 bindings: containers/exec uses directly Docker type
88fb291a3 bindings: containers/create uses entities/types
6c5704a09 bindings: containers/containers uses entities/types
2d8231efe bindings: containers/commit uses directly Docker type
9f0ea0dc8 bindings: containers/checkpoint uses entities/types
b304ac1ea bindings: containers/archive uses entities/types
923123420 domain: move system structs to types sub-package
48a99c651 domain: move Event to types sub-package
ee61b130a [CI:DOCS] Update farm docs
90867d987 Fix image filters parsing
7c8c94549 Vendor in latest c/common
27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20
505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10
56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible
3e6bfb6e9 Update module github.com/docker/docker to v25
269149a9f Kube Play - allow creating image based volumes
cf0b436b9 Deprecate BoltDB, preventing creation of new databases.
d3a49fded Add information about --latest support on man pages
d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files
5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint
f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED]
2e38b9816 Restrict building the pkg/fileserver implementation to windows
17613cc96 podman farm is no longer hidden. Enable doc checks.
0e64e107b Fix Mount Unit Option
660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0
8d733b6d0 Update module github.com/onsi/gomega to v1.31.1
a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6
a0c914c6d [CI:DOCS]Remove final references to varlink
70c3accf7 Update module golang.org/x/tools to v0.17.0
75790b42b Label host volume mounted content in machine as nfs_t
7472bdb16 Ensure podman temp directory is created on Start as well.
a5612bc54 Quadlet: ensure all keys are documented
0c3b5e433 quadlet.go: clean up keys
77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer.
6226b5669 Update module github.com/onsi/gomega to v1.31.0
4c583e7a1 Update module golang.org/x/net to v0.20.0
e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0
728e842db Update module github.com/docker/go-connections to v0.5.0
f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2
c566551e9 gvproxy: Update to 0.7.2 release
1964dbd40 Set up podman machine remote user correctly
1c88b1220 rm pod with podman run if ctr creation failed
79fad91db Add a net health recovery service to Qemu machines
e66413b51 CI: reenable tests that are working again
3fef531d9 applehv: return socket path from setupAPIForwarding
90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment
ab1316551 fix mongo-driver dependency
971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect
dbe0e6789 Man pages: tighter documenting of --format fields
d95710a89 farm build: push built images to registry
992e83d20 machine: Enable console autologin by default
f374e07fb AppleHV: update LastUp time
b94be90a1 Remove Libpod special-init conditions
46cfc9858 Make --gpus work with nvidia gpus
0e09527bd systests: kube with policies test: fix race
f6107f631 Assign separate ports for each appleHV machine
eeff3d2de Fix machine inspect test config
7bd5dd42c Fix `podman machine set --rootful` for applehv
585fbe373 Run mac jobs on labeled hosts
a60fe34fd Fix `podman system reset` with external containers
522934d5c Replace strings.SplitN with strings.Cut
3714ae342 quadlet: fix quoting of example option values in container unit file documentation
4e4c3e3db cmd: support --config option to locate authentication file
83fa4843f Fix podman machine ssh command
780733415 System tests: fixes for RHEL8 gating failures
380fa1c83 Remove redundant code in generateSpec()
a8c2b84c2 docs: update mariadb example
d7760b23c labeler: Use `machine` label
bccfda505 [CI:DOCS]Periodic update to OWNERS file
3b881d4ec feat: disable pid max in the podman machine
c90e9dad7 e2e: reenable warning checks on Debian
e3f167f77 Add API forwarding support for HyperV
a0a541351 consolidate ignition ready socket unit
8341ca0e7 Remove --latest from podman CMD --help output
06064150e machine: use GlobalDataDir helper
8bdf77aa2 Refactor: replace StringInSlice with slices.Contains
25602a03a fix(deps): update module golang.org/x/sys to v0.16.0
3bfdd7915 Fix init teardown on bad ignition path
b01a330d3 Use single persistent ssh key for all machines
260f814bd test/system: add test for mounting issue in the init container
f0319d5b7 Error messages not being reported unless more then one error present
49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0
450862054 xref-manpages script: more regression tests
e63513542 Vendor latest c/image
98f332d48 Use parser.UnitFile
c728eeb39 Create `pkg/machine/ignition` package
560455cbd docs: fix typos
2a2d0b0e1 chore: delete obsolete // +build lines
92f3bacc6 machine/qemu: A few debugging prints
876b2207e ci/labeler: Add area/machine label
f5a986f4e Set applehv as default darwin provider
689d97a1d Quadlet - add StopTimeout key for .container file
ac0353aec chore: remove unused link
8c546cf7e CI: bump VMs
f9de9809e docs/build_osx.md: Describe external gvproxy
5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12
70a53cb76 Quadlet - fix trailing whitespaces handling
c315c8e74 Makefile - make sure gitvalidation is installed before calling it
55b08d3ba applehv - fix vm lookup
ec5422af5 e2e: Skip journalctl if journald is unavailable
4f94c96b9 remote: fix podman-remote kube play --publish-all
4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing
f10a7bfd4 Add mmap cache option to QEMU mount
2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
f90b4e79a Tests for xref-helpmsgs-manpages
1322f3193 abi: drop check for IsRootless()
9d0da9d0f Strip key/values of external quotes
4dd58f226 Move golang requirement from 1.18 to 1.20
f169fc76a Allow PublishPorts to be used with [Pod] entry
6a96c8b5f quadlet container support multiple Ulimit options
ccc3eb774 Improve compose tests
e51bab3c9 Remove duplicated content in docs
d76bb978b docs: oci-dir does not support compress as suggested
f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1
5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19
db68764d8 Fix Docker API compatibility with network alias (#17167)
7c72d8c2f Fix path to example files
5cc5b4347 Error on HyperV VM start when gvproxy has failed to start
58edd06ff [skip-ci] Update actions/upload-artifact action to v4
d026ccf9a Kube Play - pass arguments to build
e4ecd7cca doc cleanup
1c59a9ced CI: safer podman-stop tests
8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0
3a842027a CheckExclusiveArch should use local JSON too
c290a561b Update gitleaks baseline w/ harmless findings
446df4379 machine e2e : set default disk size to 11
126670d5d Fix push endpoint stream
232c32bd3 CI: systests: safer isolation in registry & tests
f51ff7764 Support podman ps --format '{{ .Label label }}'
36e04599a fix(deps): update module golang.org/x/tools to v0.16.1
5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0
5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld
e5c726daf Make hyperv pass
e5a4f00b7 Podman 5 machine config file - Step 1
95eb22c71 Support a machine-test only mode
0f02e43ce cli: podman manifest annotate --annotation use StringArray()
d8c3e5b3c cli: podman manifest add --annotation use StringArray()
3e10a6832 cli: podman kube play --configmap use StringArray()
2be4b007b cli: podman kube play --log-opt use StringArray()
48ab4aec3 podman kube play: fix broken annotation parsing
e916f49f0 cli: podman kube play --annotation use StringArray()
47b65086e cli: podman image trust set --pubkeysfile use StringArray()
cdb178e95 cli: podman push --encryption-key use StringArray()
3e1b9146f cli: podman pull --decryption-key use StringArray()
36e29a843 Fix WSL machine test regressions
6415471dc EMERGENCY: fix broken CI
952c70890 added system test
23f6c4851 Add test for relative idmap mount
e7eb97b84 fix checking of relative idmapped mount
c823d49fd CI: unskip tests
4590b663a add test for podman exec --env-file
06cee546a cli: podman exec --env-file use StringArray()
7866f6c6e cli: podman run/create --blkio-weight-device use StringArray()
432be1330 cli: podman run/create --device-{read,write}-bps use StringArray()
8de13271c cli: podman run/create --device-{read,write}-iops use StringArray()
e763cc62b cli: podman run/create --device use StringArray()
833163ff3 add podman create --label-file test
19571f750 cli: podman run/create --label-file use StringArray()
24d08a94d cli: podman run/create --decryption-key use StringArray()
f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build
6c2a0196a machine: usb: Fix 'passtrough' typo
201920f6a cli: podman run/create --chrootdirs use StringArray()
dbbec9936 cli: podman run/create --log-opt use StringArray()
b011aa443 cli: podman run/create --env-file use StringArray()
ef10073b5 cli: podman run/create --annotation use StringArray()
c5258d463 cli: podman --hooks-dir use StringArray()
12c39ffda cli: podman --module use StringArray()
c97560841 cli: add docs for StringArray vs StringSlice options
1ebd507fb Fix regression in e2e machine test suite
95145d957 buildah treadmill: cleaner YAML, uglier script
0d1b90d36 CI: systests: fix flaking --since test
9a963221b [CI:DOCS]use nginx in podman tutorial
a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax
cac4aa3b4 [skip-ci] Update actions/stale action to v9
19457f382 system service: split out cgroups call into linux specific file
03d411abc libpod: split out cgroups call into linux specific file
32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd
a687c3886 use rootless netns from c/common
3d740674b Improve error handling in win-lib.ps1
d78212a00 Update vendor of containers/storage
98df5b397 Fix user-mode net init flag on first time install
10db6442d [skip-ci] Update actions/setup-go action to v5
8d8fb726f fix broken labeler.yml config
4d2125baf systests: cp: add wait_for_ready
7cc6501cf Add e2e tests for quadlet Entrypoint option
01d397a65 podman: new option --preserve-fd
a943be7e8 Kube Play - set ReportWriter when building an image
972ffaca4 Add support for Entrypoint in quadlet
94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
1f42aff93 systests: debug systemd failures
7f4b0f208 apiv2 tests: fix race
f1dc126bf Do not aggregate failing mac test status
2d46d0537 Implement bare-metal Mac M1 podman-machine testing
b7a81c1ce Fix command failure not resulting in task failure
ca66a90b8 [skip-ci] Update actions/labeler action to v5
b1eccedf5 [CI:DOCS] Update health-start-periods docs
bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254
07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement
0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95
7e2a8d58a Quadlet .pod - add support for the Volume Key
212b4c9e9 Quadlet .pod - add support for the Network Key
0d260bdc1 Quadlet - fix pod service file name
04519234e Add support for the userns annotation in kube play
f384bdf66 Handle symlinks when checking DB vs runtime configs
e14aa09bb Update podman-systemd.unit.5.md
6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94
4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11
45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD
00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
b1acb43d7 CI: fix system_test_aarch64 dependencies
f9e8585c5 Enable win podman-machine test failure
269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
c1eea91a0 fix(deps): update common, image, and storage deps
31df9c237 Move the --farm flag to farm build command
fa0aa9113 @@option volume.image: be specific that -v only affects RUN
426db6fcc Accept a config blob alongside the "changes" slice when committing
e197cf57d container create: use ParseUserNamespace to parse a user namespace setting
f95dd21d5 deferred test failures: handle a corner case
42ea21121 Fix locking error in WSL machine rm -f
d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto
5b3d82f9b sqlite: set busy timeout to 100s
d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD
55373dcce Vendor c/common
3e7041508 Gating test fixes
86296ff8d pkg/bindings: add new APIVersionError error type
a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers
f35d1c1c2 Don't update health check status during initialDelaySeconds
8ee262202 quadlet: Support systemd style dropin files
93bcd2a25 fix podman-remote exec regression with v4.8
cf1ad300b utils: close a couple of ReadClosers
4314b1c34 Fix transferring data using tar
7b4d6a295 [CI:DOCS] Fix markdown bugs
a2bf8c6d5 refactor(machine): improve machine marker value
572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr
d7b970a4c sqlite: fix issue in ValidateDBConfig()
e26f677b1 sqlite: fix missing Commit() in RemovePodContainers()
248cbc6f6 docs: drop default for tmpfs-mode
6b2f48129 Quadlet - Add support for .pod units
c664cfe88 [systests] podman mount no-dereference: complete rewrite
13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs
b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1
07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0
c8f262fec Use idtools.SafeChown and SafeLchown everywhere
29d18079c [systests] new defer-assertion-failure
f07b15105 fix(deps): update module golang.org/x/net to v0.19.0
8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled
d280e481a test/compose: remove debug leftovers
ac3d57016 [CI:BUILD] rpm: remove dnsname
386c8d6bf swagger: document play kube annotations param
f6b2a1378 Clean up farm-build miscommit
c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0
41a6b992a system: enhance check for re-exec into rootless userns
e82465773 Fix Ulimit syntax.
fe65f059a libpod: drop dead code
cd21973f4 pkg/util: use code from c/storage
98c525cf9 Remove unnencessary pregenerated doc
3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0
da9349ce4 podman machine image from oci updates
75638a72a If API calls for kube play --replace, then replace pod
414642efd [CI:DOCS] Add podman farm build doc
ddd6cdfd7 Ignore SELinux relabel on unsupported file systems
e85cedf43 Use configured timeout in list_test.go
478afa728 vendor: update containers/{common,storage,image,buildah}
48cf44f23 machine applehv: create better error on start failure
6cb2f9b12 quadlet: Support `healthy` for `Notify` directives
2b95700bc No longer support deprecated legacy QEMU machine structures
e40d70cec new 'no-dereference' mount option
be2463330 Bump to v5.0.0-dev
e75fbe54e Update dependency setuptools to v69
ae9b63fbf Check for imageID, not imageName
ff80e40ad Use NewStoreReference instead of ParseStoreReference
e9587f5e3 Don't re-assign imageID
c85068220 Remove clearly dead code
87cef3654 Update release notes from v4.7 branch
8b2667ef6 More rootless-tutorial fixes
62060f323 Get masked paths and readonly masked patchs from containers/common
4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
1a813b0e6f |
netavark: update to 1.10.3
Updated via:
bitbake -c update_crates netavark
Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits:
d9f9fdc v1.10.3
a88dc00 fix netavark update to not start a new aardvark-dns
664637b Release v1.10.2
8e53052 Release notes for v1.10.2
c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling
8a7422e Do not perform network namespace detection on AV update
a78cfa8 Release v1.10.1
187e0a6 Updated release notes for v1.10.1
851ac90 update to nftables release 0.3 from crates.io
1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL
3328784 Bump to 1.11.0-dev
799c1ae Release 1.10.0
2965880 Release notes for 1.10.0
f20eeeb RPM: update .cargo/config before building
fddc681 Add support for isolation to the nftables driver
04538cd build(deps): bump h2 from 0.3.22 to 0.3.24
020cdd2 chore(deps): update rust crate chrono to 0.4.32
b953314 fix(deps): update rust crate env_logger to 0.11.0
|
||
|
Bruce Ashfield
|
8824967159 |
nerdctl: update to v2.0.0-beta
Updated via:
oe-go-mod-autogen.py --repo https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1
One patch refresh, no other modifications.
Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits:
4420aa67 update BuildKit (0.13.0-rc1)
4acb599e CI: test compilation with Go 1.22
6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1
07dc8a58 build(deps): bump github.com/opencontainers/image-spec
72a9737d platform: support loongarch64
1b05ff3e Remove the support for the old CNI isolation plugin
4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config`
1eada1af build(deps): bump github.com/opencontainers/runtime-spec
fdf7968b Fix soci image push with multi-platforms flags
09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0
6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1
679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0
cfc063cc update slirp4netns (1.2.3)
2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2
5733be85 update RootlessKit (2.0.1)
ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
6a229537 `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services
9ae613b3 support build attest
741d06e5 Add support to run systemd in containers (with --systemd flag)
b452c64b Support --ipc=container:<id> option
3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter
5df53e5f update BuildKit (0.13.0-beta3)
37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1
a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13
dc7bbed8 update Kubo (0.26.0)
ad02e192 update bypass4netns (0.4.0)
02dc9b44 update runc (1.1.12)
3ab02f69 update containerd (1.7.13)
4892364c [Carry 2535] rootless: support detach-netns mode
328497a8 update RootlessKit (2.0.0)
58cc30c7 update BuildKit (0.13.0-beta2)
5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml
76199746 build(deps): bump github.com/containerd/nydus-snapshotter
bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter
1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
8df3f8a9 containerd/containerd/platforms -> containerd/platforms
0ac36b66 Retag images when tag is already present in nerdctl build
2863b6c7 CI: use standard GHA runner for Windows too
3149671e build(deps): bump github.com/opencontainers/image-spec
3a7948b3 CI: use standard GHA runners
7f88313c build(deps): bump actions/cache from 3 to 4
77234f5a update gpu image to 12.3
2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12
4af27bd1 go.mod: module github.com/containerd/nerdctl/v2
5ee55f28 add allow option in build
410d5915 Document that profiles are supported
05059400 build(deps): bump github.com/rootless-containers/bypass4netns
3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env
8e09af1e shfmt containerd-rootless-setuptool.sh
a71209f8 fix: return error if volume create failed
d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0
3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0
ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0
b0458662 logging: respect ctx
9afd9e3e update runc (v1.1.10)
695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go`
c44427fb nerdctl rm: fix printing `error="<nil>"` on warning
df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
f59c2bed Add docs for trouble shooting nvidia gpu operator
970fed9f Remove "soci image rpull" from testing suite
843d8600 fix typo in filename
e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows.
392daca1 go.mod: clean up
c2d71273 fix groupadd in compose
ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter
ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0
ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0
255716ea docs: Fix typo in command-reference.md
b6436017 fix etchosts in host network
990d7eca implement persistent logging for contaiers running in foreground
ae004af5 fix deadlinks in the notation doc
e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1
24aa6e27 update BuildKit (0.12.4)
de985457 update containerd (1.7.11)
139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11
8567678e Dedup mounts for /etc/hosts /etc/resolv.conf
a56dcfac build(deps): bump actions/setup-go from 4 to 5
a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter
06628f63 nerdctl run: reset the default value of limits.
f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0
f2030d29 update CNI plugins (1.4.0)
722040c4 build(deps): bump github.com/containernetworking/plugins
f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4
198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0
0e73e3ed update containerd (1.7.10)
21dc100a fix typo
ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10
71bf53b3 update golangci-lint (1.55.2)
a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0
d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0
aeeb338b update Nydus (2.2.4)
e0808016 update Kubo (0.24.0)
ec728349 update containerd (1.7.9)
6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image
2d508151 Fix nerdctl system info : sort problem.
afe990db remove incompatible in TestComposeExecTTY
8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
30eaca09 build(deps): bump github.com/compose-spec/compose-go
76c57d20 fix: typo
51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3
9b62e889 Add SOCI index digest flag
d7676628 docs: read-only (RRO) bind-mount have been support by docker
77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9
ca8c1180 build(deps): bump github.com/compose-spec/compose-go
c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0
0d934074 Deflake TestContainerListWithFilter
33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0
a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0
6c560bcf [build][iidfile] Setthe same permissions as docker
d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0
d9d684bf chore(test): remove some incompatible in compose test
a78b50ef Add diff command to docs & fix usage message
3d1a5f11 Use prepared Stdout
d03a5993 Fix wrong comment of completion
00c0d3b7 Fix missing error handling
cc52ea45 Support diff command's autocompletion
da85b403 Remove diff test from windows
2fcd3c4c Add comment to diff test
d96ad3b4 Add `diff` command
0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4
a9e5ea43 update containerd-fuse-overlayfs (1.0.8)
ae12819e Fix unstable sort of container list in compose
0e643d2b update imgcrypt (1.1.9)
2c57b5ca update BuildKit (0.12.3)
9c1ee066 update runc (1.1.10)
2c3cb4a4 update containerd (1.7.8)
2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}`
3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1
b5da5ea3 fix add-host overwritten
9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs
147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9
e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter
1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary
ac0ceb5a nerdctl-full: compile containerd as static binaries
a6a2d917 Support IPv6 for nerdctl network
55987ae9 Add support to CernVM-FS Snapshotter
fff98e35 build(deps): bump github.com/docker/cli
792a0cb1 support running container with network id
63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8
59640025 build(deps): bump github.com/docker/docker
161bf205 compose_config_test: workaround for Docker Compose v2.23.0
0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2
ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3
caea0f91 fix ps format names
35966845 support ip-masq option
5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2
1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput()
10854249 docs: minor soci push fix
a97162ed build(deps): bump github.com/containerd/nydus-snapshotter
8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3
0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0
f51e06d2 build(deps): bump github.com/compose-spec/compose-go
35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2
8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20
6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1
41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1
63d446f1 Use https://github.com/containerd/log for logging
04a35f82 build(deps): bump github.com/containerd/accelerated-container-image
bc62b220 fix: typo
5d4f0325 nerdctl compose: fix --env-file
5a874813 build(deps): bump github.com/containerd/nydus-snapshotter
ff0fa841 chore: unnecessary code
a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
3b09b4cb fix: call client close
3b6cf701 go.mod: github.com/containerd/containerd v1.7.7
b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http"
e590756c update gotestsum (1.10.0)
98d5724e update Kubo (0.23.0)
02a59fc5 update containerd-fuse-overlayfs (1.0.7)
869dec83 update slirp4netns (1.2.2)
ea86ea87 update containerd (1.7.7)
abec5ef0 containerd/containerd/log -> containerd/log
93cb4802 chore: Comment should with an optional leading article
d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
3006f23e release.yml: migrate from `hub` to `gh`
6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
34f73335 build(deps): bump github.com/containerd/nydus-snapshotter
c1fd6782 Fix port allocate iptables regex
6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni`
e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter
88188be6 docs: minor fixes to soci documentation
72665a07 update toml to v2
8ce38135 fix: client close connection
004a05a8 Support zstd (non-chunked) conversion
7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0
3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0
a9fb4c56 chore: Comment should with an optional leading article
4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1
1b5a9867 add missing flags for compose ps
20f929d1 add featrue network filter
c407ceb5 build(deps): bump github.com/compose-spec/compose-go
357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running
42cfd144 docs: add SOCI snapshotter guideline in README.md
65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0
98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
6db2c459 update containerd (1.7.6)
4c82cde7 feat: support push with soci
dd03ebea nerdctl compose cp: support rootless
69a1833e compose: silence "build.config should be relative path" warning
1605587b Implement `nerdctl compose exec -T`
a08e668f docs: fix docs for supported quiet flag of push command
76dd7065 build(deps): bump github.com/opencontainers/image-spec
78c855e0 add feature nerdctl compose cp
ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter
9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23
be2acea7 update golangci-lint (1.54.2)
ba3c6b91 update soci-snapshotter (0.4.0)
b5b1f2a1 update Nydus (2.2.3)
c5794dd6 update Kubo (0.22.0)
ee1ac8f0 update fuse-overlayfs (1.13)
bdb2c006 update slirp4netns (1.2.1)
70b1ba31 update RootlessKit (1.1.1)
822f1154 update imgcrypt (1.1.8)
bcface07 update BuildKit (0.12.2)
e4a2ceb7 update containerd (1.7.6)
1e0b0bbf image: dedup same platform entry
6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6
c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0
81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3
765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0
ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3
03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0
68b58d8a build(deps): bump github.com/compose-spec/compose-go
248b2b3a remove useless option from containerd-rootless-setuptool
fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1
bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER
a976067c fix bash completion of volume rm
2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin
e1bad09d adjust writers fmt
a80e0eb1 fix container_create_windows_test
b598b583 add missing zero-length list check
cdc917eb build(deps): bump github.com/docker/cli
84309f24 build(deps): bump github.com/docker/docker
1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0
c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0
2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts
1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter
6e542c3a Makefile: install docs
da05f926 Makefile: fix overriding GO command
fa9e4edb Makefile: add GO_BUILD_FLAGS variable
4dbe249e Makefile: derive BINDIR from PREFIX
d30f0788 fix: grammatical errors
79a15782 fix: succeeded typo
c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5
9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0
a0aac07a Support copying out of volumes in stopped containers
31d5d4ad Fix typo
4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo`
1e5baaaf Fix usage of `errors.Join`
91295033 build(deps): bump github.com/compose-spec/compose-go
6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8
ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
0844a51e support test integration docker 23 compatibility
42c312a8 support volume create anonymous
89bb5bc3 update runc (1.1.9)
5130ccbf Remove dependency on github.com/hashicorp/go-multierror
b98ce6a6 build(deps): bump github.com/compose-spec/compose-go
3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0
56b0a7cb Update to Go 1.21 in CI
ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0
424bf4ed FreeBSD: Linux Container Support and BuildKit Integration
0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
569fe4e3 CI: Windows: enable Hyper-V containers
3df165d0 fix attach help is messed up
dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
2888c388 CI: move Windows tests to GHA
855da424 CI: move FreeBSD tests to GHA
65934e92 test-integration-docker-compatibility: install Docker 20.10
cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
b8a8100e .cirrus.yml: fix FreeBSD CI failure
be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
f0140a5c feat: add 'nerdctl container attach'
35296268 Bump containerd to 1.7.3
7f5bca18 Remove special case for Windows when mounting view
f57cb241 Add lease to prevent containerd GC
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5dfa9cf125 |
k3s: update to v1.28.7
Generated with:
./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1
plus one manual modification to relocation.inc:
- sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force
+ sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force
Bumping k3s to version v1.28.7+k3s1, which comprises the following commits:
051b14b248 Fix netpol startup when flannel is disabled
4c1b91e3f9 Use 3/2/1 cluster for split role test
16ad3bc39c Change default number of etcd nodes in E2E splitserver test
9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity
80baec697f Restore original order of agent startup functions
f19db855bf remove e2e logs drone step (#9516)
25e12bc10c [Release-1.28] Fix drone publish for arm (#9508)
9f78e474d7 Update Kubernetes to v1.28.7 (#9492)
1ca64a81be [Release-1.28] Support PR testing installs (#9469)
45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440)
78543f4850 [Release-1.28] Enable longer http timeout requests (#9444)
3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects
a3770d21e2 Expose rootless containerd socket directories for external access
0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless
865b454a05 Don't verify the node password if the local host is not running an agent
493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots
cd7c557754 Fix issue with coredns node hosts controller
3d46c7da70 Bump CNI plugins to v1.4.0
b620348998 Add check for etcd-snapshot-dir and fix panic in Walk
6b2c1ecb0f Retry startup snapshot reconcile
c2c9a265bf Fix excessive retry on snapshot reconcile
dda9780f23 Update Kube-router to v2.0.1
a922a0e340 allow executors to define containerd and docker behavior
034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075)
6ff57ab749 Bump flannel version
25c7208b7e Changed how lastHeartBeatTime works in the etcd condition
f3b4effb32 Runtimes refactor using exec.LookPath
5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419)
190864259e Consistently handle component exit on shutdown
5857584463 Bump cri-dockerd
35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426)
c9f49a3b06 Bump helm-controller to fix issue with ChartContent
2f9788ab55 Bump runc and helm-controller versions
14fdacb85b gofmt config_test.go
aebdccfae5 Fix issues with certs.d template generation
39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984)
c236c9ff77 Update to v1.28.6 (#9260)
6224ea62af Error getting node in setEtcdStatusCondition
470bcd1bff Move proxy dialer out of init() and fix crash
04ce0ac0a9 Rebase & Squash (#9070)
4724315b8c Pin opa version for missing dependency chain (#9216)
2858f89a5b Bump quic-go for CVE-2023-49295
b04e18c4a0 Enable network policy controller metrics
bda4b73493 Add e2e test for embedded registry mirror
f3c6250b28 Add embedded registry implementation
ef4e7ae143 Add server CLI flag and config fields for embedded registry
ece564ec93 Add ADR for embedded registry
ea66fe65b4 Propagate errors up from config.Get
a62ee4fd0d Move registries.yaml load into agent config
ace1714e0c Pin images instead of locking layers with lease
3b863906e0 Fix OS PRETTY_NAME on tagged releases
ee85990a83 Add runtime checking of golang version
3be858a878 Add more paths to crun runtime detection (#9086)
fa798ba272 Add support for containerd cri registry config_path
f95ab7aaf9 Fix nil map in full snapshot configmap reconcile
fe19faaf9a Handle logging flags when parsing kube-proxy args
fc3136f54f Fix the OTHER log message that prints the wrong variable
9d5950741e Dockerfile.dapper: set $HOME properly
3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate
a503d13591 Remove GA feature-gates (#8970)
53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd
3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller
90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125)
5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083)
19b361f30b Update to v1.28.5-k3s1 (#9081)
71a3c35fb7 Bump containerd to v1.7.11
08509a2a90 Allow setting default-runtime on servers
b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10
03532f7c0b Added runtime classes for crun/wasm/nvidia
9c6ba42ca0 Nov 2023 stable channel update (#9022)
79438cecaa Modify CONTRIBUTING.md guide
d34550fb2f Fix overlapping address range
6ba6c1b65f remove s390x from manifest (#8998)
022cf6d51f remove s390x steps temporarily since runners are disabled
3f23723035 Update to v1.28.4 (#8920)
6d3a92a658 Print key instead of file path in snapshot metadata log message
b23e70d519 Don't apply s3 retention if S3 client failed to initialize
a92c4a0f17 Don't request metadata when listing objects
96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test
611ac0894c Revert e2e pipeline depends_on change
3a6284e2b9 Bump dynamiclistener to fix secret sync race
1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup
e53c189587 Handle nil pointer when runtime core is not ready in etcd
6c544a4679 Add jitter to client config retry
fa4c180637 Update install.sh sha256sum (#8885)
da0593bcf9 More improves for K3s patch release docs (#8800)
abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702)
07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711)
7ecd5874d2 Skip initial datastore reconcile during cluster-reset
2088218c5f Fix issue with snapshot metadata configmap
fd8db56d5a Fix wrong warning from restorecon in install script (#8871)
78ea593780 General updates to README (#8786)
19fd7e38f6 enh: Force umount for NFS mount (like with longhorn)
b47cbbfd42 add agent flag disable-apiserver-lb (#8717)
30c8ad926d QoS-class resource configuration
32a1efa408 Bump kine to fix multiple issues
a26441613b add: timezone info in image
0011eb5ead optimize: Simplify and clean up Dockerfile (#8244)
8f7a8b23b7 Improve dualStack log
f5920d7864 Add warning for multiclustercidr flag (#8758)
ba5fcf13fc Wasm shims and runtimes detection
875a9d19c6 Added ADR for etcd status
c5cd7b3d65 Added etcd status condition
022c49242d update channels latest to v1.27.7+k3s2 (#8799)
bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules
9e13aad4a8 Update traefik to fix registry value (#8792)
1ae053d944 Upgrade traefik chart to v25.0.0 (#8771)
f575a05be2 fix: Access outer scope .SystemdCgroup (#8761)
c7c339f0b7 chore: Bump Trivy version (#8739)
1e99a46256 chore: Update sonobuoy image versions (#8710)
9377accd9e update stable to v1.27.7+k3s1 (#8753)
112e1339b7 Restore selinux context systemd unit file (#8593)
49411e7084 Don't try to read token hash and cluster id during cluster-reset
6aef26e94b Update to v1.28.3 (#8682)
5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots
3db1d33282 Re-enable etcd endpoint auto-sync
b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency
0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259)
aaf8409096 Use version.Program not K3s in log (#8653)
9597ea1183 Start etcd client before ensuring self removal
2291d6d079 Add etcd-only/control-plane-only server test
7bb4a826af Update kube-router package in build script
3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc
1ffb4603cd Use IPv6 in case is the first configured IP with dualstack
3d25e9f66c Switch build target from main.go to a package. (#8342)
7c5b69ca1d Fix etcd snapshot integration tests
d885162967 Add server token hash to CR and S3
550ab36ab7 Switch to managing ETCDSnapshotFile resources
5cd4f69bfa Move snapshot delete into local/s3 functions
a15b804e00 Sort snapshots by time and key in tabwriter output
7464007037 Store extra metadata and cluster ID for snapshots
80f909d0ca Move s3 snapshot list functionality to s3.go
8d47645312 Consistently set snapshotFile timestamp
f1afe153a3 Tidy s3 upload functions
2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge
676b00aa0e Move etcd snapshot code into separate file
500744bb94 Add new CRD for etcd snapshots
64107b54e4 Minor updates as per design review discussion
22065affa2 Add ADR for etcd snapshot CRD migration
9bb1ce1253 Bump busybox to v1.36.1
5fe4f6709a Bump containerd to v1.7.7-k3s1
7d38b4a3db E2E Domain Drone Cleanup (#8579)
dface01de8 Server Token Rotation (#8265)
ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node
ba750e28b7 [v1.28] System agent push tags fix (#8568)
e33359d375 Update install.sh.sha256sum
a6acdd0d75 Fix slemicro check for selinux (#8526)
e82b37640a Network defaults are duplicated, remove one
d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap)
f2c7117374 Take IPFamily precedence based on order
0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server
021c5b291b Improve release docs - updated (#8414)
0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options
1e38b5d904 Don't ignore assets in home dir if system assets exist
fe18b1fce9 Add --image-service-endpoint flag (#8279)
79b44cee29 Create and validate install.sh signatures (#8312)
ad206310d1 Update kube-router
b6ab24c4fd Added error when cluster reset while using server flag
b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433)
d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test
d0ab4ef26b Added advertise address integration test
172a7f1d1a Fix gofmt error
8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster
002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls
890645924f Don't export functions not needed outside the etcd package
a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context
391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI
bd9dad87d5 Typo fix
5c5d957e73 Set server-token adr to accepted
6398c38690 Server token rotation ADR
8c73fd670b Disable HTTP on main etcd client port
12459fca97 Add extraArgs to tailscale
8c197bdce4 Include the interface name in the error message
56abe7055f add link to drone in documentation (#8295)
e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397)
66cb1064d1 Add context to flannel errors
d3f7632463 Fix error reporting
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
13c66b0983 |
cri-tools: update to v1.29.0
Bumping cri-tools to version v1.26.0-489-g17b4dd65, which comprises the following commits:
949545e1 Readd the logPath to the list
5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern
09b9303e Applying comment
64e373b2 Changing option to keep-logs and inverting default
67679ee3 1197: adding rm --dl (--deletelog) option
edccf499 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dee3de0a Bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0
af4707c2 Don't remove pinned images on image prune
fd867e1c A bunch of changes: * handle regexp error * better usage info * better documentation
98843b15 Implemented the `--filter` flag for `images` command.
196f9421 Update Kubernetes to v1.30.0-alpha.2
376d9251 Don't skip windows tests
2529cea9 Don't fail-fast containerd test matrix
58cfa5b3 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
3afa43ab Bump golang.org/x/net from 0.20.0 to 0.21.0
f6e57a25 Add support for OTEL tracing
9d1a1a1d Bump golang.org/x/term from 0.16.0 to 0.17.0
e9842e43 Bump golang.org/x/sys from 0.16.0 to 0.17.0
325307a6 Bump github.com/docker/docker
16c59bdc Bump github.com/docker/docker
32452408 Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12
971120b9 Replace dockershim with containerd
c4276c46 Bump github.com/google/uuid from 1.5.0 to 1.6.0
44e8b572 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1
4c9f5e69 Bump github.com/docker/docker
0d805e78 Add corresponding man page
8e04084e docs: state that crictl is GA
ade93e9f Bump actions/cache from 3 to 4
8badaef0 Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0
1f0b5766 Bump golang.org/x/net from 0.19.0 to 0.20.0
4cf8a2d2 Update Snyk configuration file to exclude vendor directory with a prefix
2522d997 Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0
f43276b7 Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1
7f90228b Bump golang.org/x/term from 0.15.0 to 0.16.0
8010f920 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11
a7b83b1c Provide precompiled manpage version
43f44445 Bump actions/upload-artifact from 3 to 4
746fa3dc Update vendored Kubernetes to v1.29.0
51e7735f Add a .snyk file to configure the Snyk security scanner
ddb95e1f Bump github.com/google/uuid from 1.4.0 to 1.5.0
b0129e72 Vendor Kubernetes v1.29.0-rc.2
87e7961e Bump google-github-actions/setup-gcloud from 1 to 2
ed48a82e more detailed output for split filesystem
b12bab01 Drop support for `linux/arm` platform
7e24e264 Bump actions/setup-go from 4 to 5
34721f47 Add darwin/arm64 to release binaries
8643906d add support container runtime use systemd cgroups
c5e443ae adding imagefsinfo endpoint for both container and image filesystems
310528b8 Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0
83fc34e9 Update golangci-lint to v1.55.2
f409932e Update vendored Kubernetes to v1.29.0-rc.1
58d450ce Bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2
31cda1d3 Bump golang.org/x/net from 0.18.0 to 0.19.0
6245bad2 Bump golang.org/x/term from 0.14.0 to 0.15.0
950fb1b6 add cases.NoLower to cases.Title function
c98c5ba4 add unit tests CI for crictl
e992c1d4 add container_test.go
8cf5fc4c ci: Switch to ubuntu 22.04 and go 1.21
01dc72dd Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1
16fb7a3f Bump golang.org/x/net from 0.17.0 to 0.18.0
a6344e02 Bump golang.org/x/term from 0.13.0 to 0.14.0
135c8ad0 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0
5933733c Bump golang.org/x/sys from 0.13.0 to 0.14.0
5d34c252 Bump golang.org/x/text from 0.13.0 to 0.14.0
f3aaa5c0 Update to Ubuntu 22.04
445aa46f Bump github.com/opencontainers/runc from 1.1.9 to 1.1.10
b45f7c09 Bump github.com/google/uuid from 1.3.1 to 1.4.0
320ad0eb Bump github.com/docker/docker
9a3c60e9 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0
28556ddd Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0
935d5c3e Fix CRI-O get script location
63ff0e12 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1
f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
29ec8e5cea |
docker-compose: update to v2.24.6
Bumping compose to version v2.21.0-154-gce1ddb6c, which comprises the following commits:
c665c53c bump buildx to v0.12.0 and adapt code to changes
a39cf75e build(deps): bump github.com/compose-spec/compose-go
46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
5c5d30c6 build(deps): bump github.com/docker/cli
36fa8d4e build(deps): bump github.com/docker/docker
2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
5e77ae92 avoir use of []types.ServiceConfig
f5572201 identify services to build and don't display 'building' if none
8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
cb01186c push also consider build.tags
9c4efbdd Strip project prefix from docker-compose up output
8ea7c9e0 Make it context aware and add test skipping options
c1694360 render quiet after filtering applied
254a94b0 bump golang to version 1.21.4
cf608fa9 bump compose-go to v1.20.1
426377a4 reject compose file using `secrets|configs.driver or template_driver`
493f6c80 skips flaky e2e tests on watch and attach
646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
2945532f fix --pull documentation
e5cd265a improve watch configuration logging Add action associated to each managed path
d646d757 lint
71237ef6 do not resolve cache dir until remote resource is in use
0d905a89 add a copyright notice with original author
b847c7f5 implement runtime file selection
5e3d8f67 re-implement cache folder detection
67279088 introduce --resolve-image-digests for publish to seal service images by digest
4cd61957 fix build
0d4cbbdb fix
9631a49d ENGDOCS-1764
328ca3f2 add docs upstream validation workflow
e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
616bba0a linter errors fixed
ee6e3c2a NetworkList to NetworkInspect for ID search
c7e31a3c Squashing feature branch commits in order to add signoff message.
704a9fd3 Use project.ServiceNames() if no service specified in hash
d9e0e42d Add branch configuration for pull_request trigger
c48e3c4a Initial codeql.yml commit
dd0803db fix SIGTERM support to stop/kill stack
39008c53 align with OCI artifact best practices
6c345b37 refactor(cmd/compose/run): remove redundant `len` check
1ffa194e fail start if depependency is missing
b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
3d0207eb remove uncessary return value of pullComposeFiles function
16a7c209 enable profile when down is ran with explicit service names
818bc3c3 add sync+restart action to watch attribute
38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
9b4d577c remove refrecence docs generation
14b43c1a remove cucumber tests as we haven't added new ones for a while
9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
2c0b0232 add dry-run support for publish command
599e4b24 extract method to reduce cyclomatic complexity
fe8c2780 warn user remote resource is disabled
a345515f Don't delete dependent services
8967df7a Apply platform before hashing
4f694919 deps: remove deprecated github.com/pkg/errors
6ecab957 Include image name in error message
12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
991901f2 pkg/remote/oci: refer to the manifest as manifest
2d971fc9 update the watch warning message when no services with a develop section
78f33619 ci: enable verbose output for e2e tests (#11045)
44d21280 truncate command by default, introduce --no-trunc flag to get the full command
ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
ab81db5b config --xx don't need `env_file` being parsed
61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
6be5f300 move watch from alpha to main command
c34c306c TestWatch to use new `develop` section
5ca35c88 implement publish
805541be watch: use official `develop` section (#11026)
8f489d6d build(deps): bump github.com/opencontainers/image-spec
9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
a697a069 introduce pull --missing flag to only pull images not present in cache
8af49ff3 resolve service reference into container based on observed state
f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
6d5eb6fd update to go1.21.1
9d7e0ad6 correct scale error messages formatting
1a98a70b add scale command
19bbb12f ci: tweak restricted imports in linter (#10992)
7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
13115468 cli: fix `--build` flag for `create` (#10982)
e1aa4f77 otel: add args & flags to cli traces (#10974)
d7b0b2bd watch: build & launch the project at start (#10957)
e0f39ebb pull OCI remote resource
c9d54f09 introduce publish (alpha) command
52e54ef9 doc: updated README.md to remove broken link
f4f2e934 migrate to github.com/distribution/reference
32c3d0a3 Enable service explicitly requested to be restarted
1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
407a0d5b up: fix various race/deadlock conditions on exit (#10934)
8caa6f1f pkg/api: replace uuid for basic random id
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4ec4055f38 |
crun: update to v1.14.3
Bumping crun to version 1.14.3-8-g89d4446, which comprises the following commits:
5884fd4 linux: fix mount of file with recursive flags
b9e87e7 tests: test bind mounts of files
e81086b rpm: Use relative, not absolute, symbolic links
9079a6d release: enable parallel builds
1961d21 NEWS: tag 1.14.3
0860c0f crun: really drop version check
32b139f NEWS: tag 1.14.2
4532a38 crun: drop check for OCI version
de537a7 NEWS: tag 1.14.1
fdb41c3 linux: initialize options variable
31b08fc container: do not leak capabilities buffer
1716fde container: do not leak version_string
e72f3bc container: fix leak of mount_options_list
242bb34 cgroup: do not leak dirfd
deffa39 cgroup: fix leak of cpus/mems string buffer
3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
b883e6c Make function arguments valid Python identifiers
e0027bc Add no_new_keyring argument to make_context() Python function
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7a5bf9f670 |
conmon: update to 2.1.10
Bumping conmon to version v2.1.3-138-gaffab49, which comprises the following commits:
9ce7b1a Add support for s390x
3e103d6 Remove checks for (long)deprecated libsystemd-journal in favor of libsystemd
f2be46f update packit config, enable downstream tasks
59c6de4 fix(deps): update module github.com/onsi/gomega to v1.31.1
1e0d24b [skip-ci] Update actions/setup-go action to v5
bc27f79 [skip-ci] Update actions/cache action to v4
386bb80 fix(deps): update github.com/opencontainers/runtime-tools digest to 408c51e
14a34a8 chore(deps): update dependency containers/automation_images to v20240102
8c6e47f drop --tty on exec
3e425d1 chore(deps): update dependency containers/automation_images to v20231208
90432cc docs/Makefile: softcode GOMD2MAN
2dcd736 bump to 2.1.10
5fec3c0 fix(deps): update module github.com/onsi/gomega to v1.30.0
8babb44 chore(deps): update module github.com/docker/docker to v24 [security]
2bc8747 chore(deps): update module golang.org/x/net to v0.17.0 [security]
8557c11 Fix incorrect free in conn_sock
116675e logging: Respect log-size-max immediately after open
fad6bac fix some issues flagged by SAST scan
91092aa version: bump to 2.1.9
521f585 README.md: update the correct Nix channel
26053bd Fix podman tests
20ce441 Forward more messages on the sd-notify socket
57eedf0 ci: skip broken cri-o tests
03b64fa logging: -l passthrough accepts TTYs
3605a36 src: fix write after end of buffer
f269c2f src: open all files with O_CLOEXEC
633ac6b oom-score: restore oom score before running exit command
f0eb924 src/seccomp_notify.c: fix static build
a58206d CI: Update Fedora names
f5eeb6a chore(deps): update dependency containers/automation_images to v20231004
6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e3d1163c54 |
buildah: update to 1.34
Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits:
30a9cd1c0 [release-1.34] Bump to v1.34.2-dev
a2bab63fd [release-1.34] Bump to v1.34.1
b7a4562ad [release-1.34] Vendor bumps
83a136866 manifest: addCompression use default from containers.conf
ae557ac9c Build with CNI support on FreeBSD
cd59f7c16 tests: retrofit test for heredoc summary
2a399d67b build, heredoc: show heredoc summary in build output
be6b9c3f0 docs: correct default authfile path
6a8e296ea Make buildah match podman for handling of ulimits
70fd07877 imagebuildah: fix crash with empty RUN
aa729810a docs: move footnotes to where they're applicable
58820ffd1 Run codespell on code
638a825b1 Fix FreeBSD version parsing
78599048e Allow users to specify no-dereference
029063b9f Fix a build break on FreeBSD
bb70cfc50 Remove a bad FROM line
6fe37a59b commit: force omitHistory if the parent has layers but no history
b0fb0cacb docs: fix a couple of typos
6cacd1478 stage_executor,heredoc: honor interpreter in heredoc
b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed
702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense
f818763f3 Replace strings.SplitN with strings.Cut
47ecb727f Document use of containers-transports values in buildah
d49e48412 commit: add a --add-file flag
27018aef5 mkcw: populate the rootfs using an overlay
413a35959 Ignore errors if label.Relabel returns ENOSUP
1b00f9e63 manifest: addCompression use default from containers.conf
21ec7aceb Bump to v1.34.0
6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11
b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7
ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
669f19f6c fix(deps): update github.com/containers/common digest to 630c929
bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4
ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines
b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10
1f9103562 run.bats: use --quiet --pull=false when using a prefetched image
3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch
7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9
76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0
d10b1e35b Integration tests: make skip_if_no_unshare check --map-users
028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0
3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0
d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2
c174e9162 vendor: update c/{common,image,storage}
a23927ab5 run: Allow using just one jail per container on FreeBSD
12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
eae2d31c7b |
aardvark-dns: update to v1.10.0
Bumping aardvark-dns to version v1.10.0-14-g526260a, which comprises the following commits:
875c717 Release 1.10.0
09cf01b Release notes for 1.10.0
be398c4 chore(deps): update rust crate chrono to 0.4.32
9330e9c chore(deps): update dependency containers/automation_images to v20240102
0f509bb fix(deps): update rust crate futures-util to 0.3.30
74b3618 fix(deps): update rust crate anyhow to 1.0.79
c706497 fix(deps): update rust crate tokio to 1.35.1
b70e31b chore(deps): update dependency containers/automation_images to v20231208
d2a7877 fix(deps): update rust crate tokio to 1.35.0
26e2439 fix duplicated IP CI flake
1525a69 server: remove unused kill switch
faf66df fix(deps): update rust crate clap to ~4.4.10
ffb59da Bump working version to v1.10.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2961677b6a |
devtools: depreciate the go source-only packages
We are now using vendoring from the upstream repos, or creating our own vendor directory. We no longer need these source only recipes. Add an inherit to each recipe to warn that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
799c5a90b7 |
crun: remove unneeded deps
These two deps do not affect the build result and are not used, remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |