meta-virtualization/recipes-containers/kubernetes
Bruce Ashfield 58a5300e7a kubernetes: update to 1.28.2
Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits:

    b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10
    1cd2ac99542 .: bump golang.org/x/net to v0.17.0
    cecc0e93916 Mark a volume as uncertain-attached after detach error
    15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec
    985ef265511 Add nil checks for hpa object target type values
    88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9
    63fcac91c42 Only configure swap if available on node
    07a74666cb2 Use local isCgroup2UnifiedMode consistently
    57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    8ea9b219c69 reintroduce resourcequota.NewMonitor
    794d56966e8 change rolling update logic to exclude sunsetting nodes
    a08ec1215fe vsphere: adapt to govmomi bump
    ef63f36ff82 .: bump govmomi to v0.30.6
    aba7c443072 Increase range of job_sync_duration_seconds
    bcaa53c9c10 sync Service API status rest storage
    a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2
    89a4ea3e1e4 Release commit for Kubernetes v1.28.2
    0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    47507f9f022 fix race on etcd client constructor for healthchecks
    7d33fba21a8 e2e pods: fix WaitForPodsResponding retry
    2480fce67f5 kmsv2: reload metrics bug fix backport
    110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins
    0aebbad4731 fix(queue_test): make sure the first bind failure via counter
    798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8
    62321a9201c scheduler: unit test case for concurrent event with other pod
    e5b981ebcd7 scheduler: fix tracking of concurrent events
    16298b54483 fix verify errors
    38904e5f2d1 remove used vars
    ce017591468 sort stability list of metrics in the shell command
    b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    958c30349fa Add an e2e test for the pod sandbox changed scenario
    ac67de196ff fix: concurrent map writes in e2e test
    19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319)
    dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints
    8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator
    526e25b685a Fix OpenAPI aggregation cleanup
    0bca3b0e4de apiextensions-apiserver: generate applyconfigurations
    8c7c4f3fc4d Revert to json-patch 4.12.0
    a4fdac21a98 update build cross image to the correct release branch image
    fc184558921 Mark Job onPodConditions as optional in pod failure policy
    955843efcf3 Incorporating feedback on 119341
    4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1
    8dc49c4b984 Release commit for Kubernetes v1.28.1
    ad60b95eb63 Add wait for cache sync
    175bbaa8894 check for overflow
    f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings
    90715527543 Use env varaibles for passing path
    53902ce5ede Use environment varaibles for parameters in Powershell
    e8abf3c441c e2e framework util subtle bug checking endpoints
    a1fdd1152d9 Pass Pinned field to kubecontainer.Image
    27e6c94259f prep for go1.21: use -e in go list
    04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed
    8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    cce3f6ffa79 Make gomaxprocs install optional, limit to tests
    20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits
    58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal
    e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family
    96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0
    855e7c48de7 Release commit for Kubernetes v1.28.0
    b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    b4fac632cd1 Remove release-notes for the PR#118895
    5f7b27f4ade Remove release-notes for the PR#118895
    87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1
    c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release
    add7e14df11 Release commit for Kubernetes v1.28.0-rc.1
    c6efaf16c1e apiserver/etcd3: fix segv during metric collection
    6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags
    0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860"
    1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery
    55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit
    050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent
    9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7
    38a81ca04f3 Bump distroless-iptables to 0.2.7
    ae86051ec5a Bump protoc
    ab26637eae4 Add test coverage of result size of string operations
    8e72718249e Bump cel-go to v0.16.1
    72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7
    2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices
    2f30fae0e8b scheduler: fix data race after binding failure
    1b90dff5276 .*: bump golang.org/x/net to v0.13.0
    73107c1b755 Update OWNERS
    53c8872cc18 Update OWNERS
    2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF
    294c7df3285 Avoid pulling node-problem-detector through CDN
    b4ef4015a29 Avoid pulling mounter.tar through the CDN
    cfcbce31a39 apiextensions: fix validation error for status.storedVersions
    936819c21bc docs: update release note for KMSv1 deprecation
    6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates
    a65d2075072 calculate the correct machine-type
    182a4f858a3 API warn non-ExternalName services w/ externalName
    7bd0a857e30 API warn ExternalName services with externalIPs
    dd8a64d7e15 publishing-bot rules for release-1.28 branch
    a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release
    7d13c9b096b set map to nil if an empty string is passed
    eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404)
    ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319)
    a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs
    45710678b30 Release commit for Kubernetes v1.28.0-rc.0
    67769438e1d kmsv2 test feature enablement disablement and restart
    18a7025383c update documentation with descriptions
    7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544)
    3b9af471185 add admission policy integration test all resources
    22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field
    a164005cc09 Fix non-test code relying on test-code
    e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from
    5e2e8c80647 bump validatingadmissionpolicy alpha->beta
    1c99f9591b0 add node-env and instance-type flags to node-e2e tests
    d6479587445 update codegen
    ef8670c946d refactor: replace usage of v1alpha1 with v1beta1
    294f5c9a42f make update
    ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV
    a9c3444a47b test: add coverage for pv status update and create strategy
    bf49c727ba1 kmsv2: KDF based nonce extension
    aa65bab4269 implement pv last phase transition time
    c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers
    76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release
    1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume
    5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate
    a31fee98f09 rename function for dropping disabled fields
    dbea2791129 Fix the flaky TestJobApiBackoffReset test
    8f35fceae37 update vendor to use containerd cgroups
    c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled
    74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller
    cb6d7fbe66c update documented metrics
    f50e74206e1 Address comment
    c46ffc2b422 Refactor jsonpath parser and add tests.
    b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy
    88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage
    b5e9e0168cf feature: add multiple params capability to VAP controller
    3f63a2d17d4 refactor: make scope of ParamKind available to vap controller
    6323c106e9b refactor: use the provided sharedInformerFactory for params
    9a595209bd2 update-codegen
    c8dbf4712cf add namespaceParamRef to v1alpha1 and internal
    03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics.
    e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec
    2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance"
    3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release
    51bfe417b81 CHANGELOG: Update directory for v1.25.12 release
    c575a1e31aa CHANGELOG: Update directory for v1.26.7 release
    ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release
    ce929520376 add podReplacementPolicy and terminating field to job api
    35d0af9243c Include ignored pods when computing backoff delay for Job pod failures
    ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test
    81abfca4078 Add a haveKeys() helper function to match multiple keys
    1000ed64e09 Use debian-base instead of distroless for conformance image
    d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041)
    b1d685a05fe apiextensions: validate status updates with status schema
    06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet
    c1aef65640b Add integration test
    cd5f3d9f9d5 Add impl for uvip
    2c8288ac873 feat: improves metric and logging
    0449cef8fd5 Increase timeout for DRA kubelet plugin client
    a15c27661e6 Job controller implementation of backoff limit per index (#118009)
    b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows
    bfb2c6a22a2 update go.mod
    668497e7550 use ratcheting schema validator when feature is enabled
    e0f9db42ace add ratcheting schema validator using new openapi hooks
    6f238334ab4 add CRDValidationRatcheting feature gate
    635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible
    9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates
    a8a2fb317c8 Add tracking and reporting of executing requests
    1351845133b Update cri-api change in v1.28.0
    59b4951c649 Expose commit memory used in WindowsMemoryUsage struct
    0ec99fb0b24 Kubelet DRA: fix failing test cases
    f6431c61386 DRA: don't query claims from API server
    cf0b74774f6 Extend the API for the Job job-index-failure-count annotation
    d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods.
    0372e4b6620 add unit test for dra/manager.go.
    fcbfdc17106 Extend the Job API for BackoffLimitPerIndex
    3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions
    056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511)
    89ab733760a Improve docs on framework.CycleState
    4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps
    ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation
    735be024cf9 Make CRDs built and aggregated lazily for oasv2
    ea23e13463f Update OpenAPI Aggregator
    850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs
    e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware
    a4a607198a1 hack/update-openapi-spec.sh
    961c1503b5b Bump kube-openapi
    4cb5547f934 Adjust summary API e2e test
    e429793db1e Unit tests: node swap usage resource metric
    1d368420b28 Add a node swap usage resource metric (/metrics/resource)
    7d187f967ba Unit tests: CRI swap stats
    59e3e3897e3 Add SwapStats to summary API through CRI
    87ff9c45256 Add swap statistics to CRI-API
    053d7ac61f5 Unit tests: cadvisor swap stats
    c74ee8045de Add SwapStats to summary API through cadvisor
    a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats
    d029f0ef060 Add restartable init container lifecycle hook e2e tests
    f17e9117776 Add restartable init container probe e2e tests
    9d6c1030db0 Generate containers ready condition including restartable init containers
    3bf282652f0 Allow restartable init containers to have lifecycle
    7ef2d674e24 Allow restartable init containers to have livenessProbe
    2c8b37498e5 Allow restartable init containers to have readinessProbe
    8b20dbd0d16 Add validateStartupProbe
    c7e7eee554a feature(scheduling_queue): track events per Pods (#118438)
    91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery
    94c8ad289bb Enable admissionWebhookMatchCondition by default
    4321d8c60f3 Graduate NodeSwap to Beta1
    f1e7386fbc4 Deprecate now-unused kubelet iptables flags
    d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code
    77cbd86b0b1 Add metrics for cloud-provider node sync, update.
    d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled
    7698fe76397 Add StatefulSet pod index as pod label (#119232)
    2e217e8cea1 Reduce duplication between helpers for checking featuregate
    7edd72f7805 Update generated documentation
    137474e2839 Fix validation options for old pvc
    d765fa6b747 Update generated stuff after changing comments
    f01a1faa8cb Update comments about allocatedResourceStatus
    c072e5b3a7e Update test generated data for 1.26 branch
    db8998265e9 Update 1.27 generated data
    6a780f57ce5 Update generated data
    e0111871149 Update code to use new generic allocatedResourceStatus field
    d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats
    9189c3d5599 fix tests
    aa788219f46 fix metric names
    d32aa62d844 promote beta metrics
    65ce7222ced All sig node approvers should be able to merge changes to CRI API
    9cb2c103107 Adding node feature owners
    00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead
    48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes
    0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta
    bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux
    6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe
    d0952686f68 CRI: add cavieats about cgroup driver field
    d7797fbc616 kubelet: get cgroup driver config from CRI
    fd434003f3f kubelet: initialization of runtime service earlier in the startup
    37330a13924 Add KubeletCgroupDriverFromCRI feature gate
    d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc
    0f05a92ce68 cri-api: add rpc for querying runtime configuration
    660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6
    be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA
    ff62cca47b8 Bump distroless-iptables to 0.2.6
    229eb93a834 DRA: report NodePrepareResource errors
    b57c7e2fe4b Add CDI devices to device plugin API
    b1850497b4b Integration tests for IP mode field
    7eab0d7a0de Proxy changes for IP mode field
    7c6e399b228 Generated code for IP mode field
    e6863757f4f Add IP mode field
    e38ab6d3671 Add PodGC changes for PodReplacementPolicy
    169abcc0398 openapi: reference shared parameters
    6c0ea702d43 Conditionally serialize flushFrequency as int
    19f61caabee aggregate kube-proxy metrics
    bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent
    6b3ce3004db Add integration tests for match conditions feature gate enablement
    b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration
    171b19d9fe1 fix histogram vec compare using ignore fields
    9b6af80a631 upgrade prometheus common to v0.44.0
    8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration
    22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration
    13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267)
    df0d51d3b35 add some detailed message for dup container ports(steal from thockin)
    1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric
    90ab7580aae add list of served versions to storage version
    9564bdc39de Ensure final diff is used for setting expectations for Job pod creation
    8a4a29d5917 remove todo/spelling
    bef43788fc0 update histogram
    01b9f4b6eb8 matchCondition metrics
    5f37c102cb5 revert changes in staging
    d9bd413f991 Proactively bump golang.org/x/net to v0.12.0
    883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer
    34640772ed4 implement SchedulerQueueingHints feature gate
    619be9c1537 Add a swap e2e test
    4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc
    a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods
    e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2
    f37aec6c57f Add LIMITED_SWAP env var to enable limited swap
    0ed7bdb057e Update vendor
    69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6
    2a907e60043 kubeadm: fix fuzzing for ResetConfiguration
    2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types
    037847066ce replace strings.Index  with strings.Contains instead
    3e2a1a7b9ce Regenerate
    b2613dd381b Add e2e to check that hostIPs and Downward API works
    14b09c414ac Add DownwardAPI validation for status.hostIPs
    335d905ce95 Downward API support for status.hostIPs
    bf030fd68ab Add validate HostIPs
    267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions
    c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel
    7a81ef6406c Add fuzzer for PodStatus
    e6bdd224c17 Add HostIPs for kubelet
    dacb6890027 Add dropDisabledStatusFields
    e061143de7f Add HostIPs field and update PodIPs field
    c2c001a243a Add FeatureGate PodHostIPs
    ce90eb2cc2f Fix validation to use field.Forbidden instead of Required
    7305c967101 QueueSet and controller part of borrowing by exempt PLs
    2069835094d Tolerate only the two allowed field changes
    3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl
    f8e4e8abac8 apf: add validation to exempt for borrowing
    f78d6062eb8 Update generated code for APF borrowing by exempt
    a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares
    3d3240c8b43 apf: add API changes for borrowing by exempt pl
    b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642)
    49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks
    037091284e2 fix unit test bug
    423f4dfc798 Add quantity library to CEL (#118803)
    a1a5f49bb9c remove statefulset label added to wrong branch
    1ae60c0ed16 use job completion index annotation as label
    131216fa8f2 chore: hashes keyID
    049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377)
    d25075f3424 update generated list of stable metrics
    c291e6355c4 feat: implements metrics for encryption config hot reload
    be2e5417ea2 allow api-approvers to approve directories touched by generation
    80ab8f0542f dra: handle scheduled pods in kube-controller-manager
    cffbb1f1b29 dra controller: enhance testing
    5cec6d798c3 dra: revamp event handlers in kube-controller-manager
    0bb419b1498 promote the following APF metrics to beta:
    39207dada25 Add integration test for node authorizer claim references
    4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses
    c688478a28b Fix lifecycle generator to check the version correctly (#119268)
    ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims
    052b06bdad3 Remove test Pods sharing a single local PV
    22d8ae1ba6e Enable NewVolumeManagerReconstruction
    9914909f5aa Define tcpProtocol in one place in the unit tests rather than many
    967ef293786 Remove/clarify two FIXME comments in the proxier unit test
    14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate
    7e3b53042b1 Pass Job context down to firstPendingIndexes
    4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests
    4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable
    c5147c91b88 controlplane: kubernetes.default controller stop polling
    9f5b6db8be8 test: azure: check error for cloud detection.
    1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects
    71ef0dafa72 add flag 'logging-format' to kube-proxy
    c550c17f7f0 accept int or string flush frequency
    148acc8632c enable arm64 support for GCE node configuration
    75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit
    c52911e59ad docs: add comment describing `LoadConfigFromFile`
    5c18810f357 chore: update license date for configfile tests
    72aeb961322 test: add tests for `LoadConfigFromFile`
    b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now)
    8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config
    0599b3caa0f  change the QueueingHintFn to pass a logger
    39bb8f4bb1d Implement ConsistentListFromCache feature gate
    0695853a306 Improve naming and code comments
    08d40f53a7a dra: test with and without immediate ReservedFor
    98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily
    28b6c906966 Move DeleteFunc logging to level 2
    761016482da Properly setup mutatingWebhookConfigurationManager{}
    747dbd9b6b7 run `./hack/verify-gofmt.sh`
    1eb60939fe5 Add smart reload for `MutatingWebhooks`
    aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc`
    a01a8cb07e7 Fix webhook accessors caching pattern
    7d3d44af776 Add webhookAccessors smart reloads unit tests
    c6f36e8702a Fix deadlock issue
    99875b3fb73 Webhook Accessors Smart Recompilation
    7d064812bb4 kube-controller-manager: finish conversion to contextual logging
    d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API
    7a63997c8a1 Improve apiserver storage size metric to allow it's graduation
    610509fedd9 Update standard app protocols
    f1f2fa9da8a kube-apiserver/corerest: split apart generic code
    01c3a51a780 node: podresources: getallocatable: move to GA
    c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes
    1b8ddf6b79a podgc controller: convert to contextual logging
    f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint
    c635a7e7d83 node: devicemgr: topomgr: add logs
    d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up
    5cf50105a2b e2e: node: devices: improve the node reboot test
    b926aba2689 e2e: node: devicemanager: update tests
    3bcf4220ece kubelet: devices: skip allocation for running pods
    ab3a0b78ea3 Match both old and new kubectl version for a while in e2e
    c143a875edb dra e2e: fix "reallocation works" flake
    6f1a29520fe scheduler/dra: reduce pod scheduling latency
    e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As
    ef48efc736c scheduler dynamicresources: minor logging improvements
    363874e9b56 setcap: update to debian bookworm v1.0.0
    19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging
    b81f07ac9a6 Add enj to apiserver options approver
    6d6595d0f6e Add jpbetz as approver of apiserver integration tests
    43b509de420 staging: Add endpointslice to publishing data.
    7c873327b67 Convert controller name to reconciler variable.
    29fad383dab move endpointslice reconciler to staging endpointslice repo
    c0030a4d27e Add support for watchlist to APF
    9759fc3c230 Fix the converts an empty string to nil.
    22c66784e03 staging: add endpointslice repo
    a34e06e74c7 kube-apiserver/corerest: structure Config
    75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair
    f22aa42aa81 bump go.mod cadvisor to v0.47.3
    f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta
    3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530)
    23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery
    998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default
    fec25785ee6 dra: store generated ResourceClaims in cache
    ba810871ada dra e2e: check that not generating a ResourceClaim works
    0fc62d5ded0 dra: generated files
    444d23bd2f1 dra: generated name for ResourceClaim from template
    98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh
    cd14e97ea80 Add a builder for ContainerAllocateResponse objects
    db2a1edbdd6 Generate empty cdi annotations
    f0e3c32fe56 Move CDI annotation code to utils package
    354b6c409f5 Rename updateReconstructedFromAPIServer
    1903f5aa2ad Rename volumesNeedDevicePath
    7cd60df4aa1 Update volumesInUse after attachability is confirmed
    0a2272dc68d Add uncertain state of volume attach-ability
    bf48165232f Remarks to syncJobCtx
    990339d4c3e Introduce syncJobContext to limit the number of function parameters
    94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5
    f443c458afe move non-graceful node shutdown to GA
    645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging
    98c6e25c371 update name of pod index label
    09849b09cf4 migrated pkg/controller/endpointslice to contextual logging
    de076430957 Document address family of listening INET sockets
    08dd657a71c Implement metrics agreed on the KEP
    9b1c4c7b57f Implement KEP-3836
    cca66011067 Add reason to force detach metric
    e655931274f expended type checking.
    8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook
    47ef977ddd5 Direct reference to the packages
    7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable`
    0a987079128 Sidecar: Update printPod to show restartable init container information
    ea1eb7f8f79 implement sidecar resource calculation
    03c22176877 Sidecar: Add e2e tests
    b94fa250c27 Sidecar: Implement lifecycle of the restartable init container
    c187b381173 Sidecar: Generated code
    5d26bcd468b Sidecar: API changes
    10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions
    f7a1fb76f4f Only declare job as finished after removing all finalizers
    3f07fc3acc9 Remove long/golang version information making short the default
    3a5268502f3 Remove deprecated scheduler CLI flags
    68ed020b2a3 Split IptablesRulesTotal metric into two different metrics
    bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map
    c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin
    d7708e79d32 Use cmp diff
    278a8376e17 Fix: fiterror in permit plugin not handled perfectly
    14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release
    2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137)
    1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
    02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated
    ecf0cee91ce update comment on feature flag
    3a02ecb3418 check test case param instead of feature flag in unit test code
    b10cc642b56 DRA controller: batch resource claims for Allocate
    be0db3f93d7 clean up the implementation around QueueingHintFn
    5175752df74 Issue 4230: remove readiness check for cache exclusion
    132d477cb7a use stopCh to avoid goroutine leak in tests
    20a25cbfcfb Add user specified image to CRI `ContainerConfig`
    65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric
    1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter
    dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging
    6c0387d0047 Migrated pkg/controller/endpoint to contextual logging
    3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging
    921b7e6e8f7 remove equalReady and replace with k8 util function
    a647f9febbf default enabled pod index for test cases, add test case disabling it
    322da7c1aae fix gc metrics
    02efe09abe3 component-base/logs: improve handling of re-applying a configuration
    1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number
    c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider
    65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller
    9dcc57ede62 Stop using deprecated API
    5e1777be529 Update debian-base to bookworm
    a514f40131c dra resourceclaim controller: delete generated claims when pod is done
    e8a0c42212d dra resourceclaim controller: remove reservation for completed pods
    7f5a02fc7e4 dra resourceclaim controller: enhance logging
    d1ba893ad8e dra resourceclaim controller: refactor isPodDone
    e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors
    7690c6e8121 Simplify getDualStackLocalDetectorTuple
    cefd50a753e Improve the single-stack LocalDetector behavior
    bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run
    16e9cc42c1a e2e node: remove unused test/e2e_node/gcp
    932d0337b82 e2e: detect unexpected command line arguments
    68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic
    443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache
    dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor
    31943cc3f44 kubeadm: check the GV after the config migration
    b4f479d1f29 bump npd to v0.8.13
    a556feb7cbe run hack/update-vendor.sh to fix verify master
    4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation
    616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns
    b36fdd68b72 Test consistent List
    01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3
    18f2e9055fc Add OIDC integration tests
    c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component
    80b035a116a kubeadm: Support custom env in control plane component
    6b01ece5806 scheduler-perf: fix perfdash display problem
    29e5771aa4d scheduler-perf: shorten "Name" label in metrics
    e08bd3bc263 Simplify DeleteCollection
    7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611)
    c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod
    19cb6d036ae kube-apiserver/corerest: remove redundant interface
    ede17eace45 test-e2e: Retrigger the RBD image post merge job
    a966d186083 Double-check the proxy configuration vs the available IP families
    36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane
    1cfb932111e kubectl: Allow parallelizing diffing
    bcbc12cd79c Fix `should be able to create and delete a critical pod` test
    4517d3004ad bump kube-dns to v1.22.23
    985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added.
    f6a86bb2030 fix indent error
    c143710ecf1 upgrade npd image version to v0.8.13 for kubemark
    96694514a75 Remove csiDriver Conformance test
    bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname
    59592ba4639 Add OIDC test server
    1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier
    8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there
    ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family
    a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs
    0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go
    b01a4145b2c Install ecr-credential-provider during node e2e tests
    4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints
    a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race
    ea34d039256 integration testing: configure gRPC logging during init
    1c48b7ec144 Add servedVersions info in StorageVersion API
    d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics
    e0af0a5a455 add test case param for feature flag
    d68f5f0d921 fix tests
    44f1c4dd94d fix duplicate metrics issue
    84b3d9b7b7e remove legacy NetworkPolicy tests
    0eeca0987a6 fix tests
    04ea1d506b4 promote sli metrics to beta
    f96d83af668 Copy container logs for easier debugging
    dfc150ca182 e2e: node: podresources: cooldown the rate limit
    f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo
    52ef833b6c2 Bump cadvisor version in tests to v0.47.2
    8266c4d934d Generalize watch storage tests
    d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn
    1b47e6433b8 dra delayed allocation: deallocate when a pod is done
    dbdd861ea36 chore: address review feedback
    72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/
    f269acd12b2 Make QueueSet support exempt behavior; use it
    931456a1427 Simplify the node name for metrics - just use localhost
    3e5fafd57ab Drop docker.log and add cloud-init-output.log
    1c7e87cff27 client-go: add DNS resolver latency metrics (#115357)
    150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver
    4a5a242a68d dra e2e: using logging for background activity
    f1700e4b95b Cache authz decisions within validating policy admission.
    60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests
    24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API
    16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket
    90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API
    fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test
    d616cf72a3b Add unit tests for parallel StatefulSet create & delete
    c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric
    ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions
    732775ee7d1 Paginate within DeleteCollection call.
    0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout
    cecebe8ea2f scheduler_perf: add TestScheduling integration test
    dfd646e0a89 scheduler_perf: fix namespace deletion
    d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload
    2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown
    812556365b6 kubeadm: backdate generated CAs by 5 minutes
    44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert()
    cfa2fa6d774 put feature gate in alphabetical order
    860aab842db fix a reference to the wrong variable name
    a75b00ea39d Better URL for scraping metrics from kubelet
    685b0c5efa1 Bump to latest node-problem-detector version with arm64
    cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3
    9e3b5b65838 update openapi
    ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3
    bb8766daaf6 feature flags should be ordered alphabetically
    7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method
    a9afaa1eee9 add feature gate
    dfce076c6cf Update the template.pot file with latest message IDs.
    a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716)
    9c7166ff639 wait for eventhandlers to sync before run scheduler
    bde66bfb55c kubelet dra: restore skipping of unused resource claims
    874daa8b52c kubelet dra: fix checking of second pod which uses a claim
    6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test
    56c5c8f7eef Revert "Make CA valid 1 hour in the past"
    ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805)
    bdbf07525fa test: remove exception comments in discovery tests
    6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck
    1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives
    f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty()
    e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse()
    8b33e8bdd1b e2e: fix gomega.Expect calls without assertions
    0ef1f2f2d89 Set AWS specific credential provider when running there
    b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal
    af1c9e49c49 Update schedule logic to properly calculate missed schedules
    0033f658085 increase the log level for the GetTargetNodeName error message
    08198fe22b5 Extend Large Create Timeout to 60 min
    9354e78289f no-op: split transformer interface
    21760534157 add completion index as pod label
    8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver
    764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
    1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
    3df92362abd fix openapi/v3 non local apiservices aggregation
    4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API
    6e079545c48 cmd/kube-apiserver: move options completion into options package
    f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands
    0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme
    38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature
    f7239e40959 Better back off delays and connection timeout to talk to containerd
    e4f93d8a82d ipallocator bug if ips has leading zeros
    89a9e480f9b fix: update deployment e2e tests
    41d961758ee update cri-api change in v1.27
    22258a263f4 Fix stable metric finder for NewDesc with custom import name
    13842746227 Update metric documentation
    45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path
    07f38a3ec18 add test
    6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events
    531d38e323c features: rename UserNamespacesStatelessPodsSupport
    556d713a4ad apis: drop check for volumes with user namespaces
    8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed
    17013d39604 Review remarks to improve HandlePodCleanups in kubelet
    e3ee9b9adc1 Fix the deletion of rejected pods
    c91c578795c scheduler_perf: skip expensive cleanup during benchmarks
    92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer
    902c711fb49 Unset gated pod info timestamp in addToActiveQ
    56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190)
    1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check().
    406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions
    e4cf103c9b9 Test all cases for LIST request cache bypass
    7f532891c9c e2e tests: set all PSa labels instead of just enforcing
    a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store
    1bd3f072fa7 stop ignoring storage class selection errors
    e5cbc51d29d e2e framework: allow setting all PSa labels at once
    edb59e9bc75 kubeadm: move token defaulting and related constants to token package
    ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container"
    fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7
    420fbd11e44 ignore Histogram for prometheus client v1.16.0
    c98e72841b1 Add a connection backoff to talk to CRI impls
    409bc8ccc05 deps: Bump to cAdvisor v0.47.2
    f72c2c2b7d2 add process start to prometheus handler opts
    bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release
    ab75e48494c storage: stop using deprecated io/ioutil
    687ca0e0bb2 fix(script): handle wait_for_success failed condition
    eecac058718 kubeadm: add v1beta4 API boilerplate
    63e5b6bdb24 Parallel StatefulSet pod create & delete
    2fb472c83cd Refactor StatefulSet controller update logic
    784a309b917 Do not error in Job controller sync when there are pod failures
    f2e3157df0a Remove AdvancedAuditing feature gate.
    bbae445d172 fix metrics test with 1.16.0 prometheus client
    180c2332bf8 [UT] increase coverage ut for kubeadm/app/features
    564c236ce28 Do NOT prepull images for e2e-node jobs
    c84b5b0a99f Cleanup unnecessary renames of variable t
    c9b01dd9778 Fix race in logging expectations
    3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests
    85d9339ef8f add KCM names into CCM cmd allowed import-restrictions
    3b55f20bd34 update vendor
    4e6a3fb9c10 deduplicate cloud provider controller names
    e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help
    cd56748ec57 reference controllers correctly from CLI help
    9fd8f568fe0 introduce CCM controller aliases and unify controller names
    94792d85dea simplify TestValidateControllersOptions test
    97309511366 introduce KCM controller aliases and unify controller names
    ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions
    2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests
    e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol
    958c8fb6950 Make use of `k8s.io/utils/pointer.Duration`
    ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support
    8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays
    f44029705f9 exit 1 if status are not as expected(order)
    a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI
    74c5ff97f18 Lower the constants for the rate limiter in Job controller
    f54c15d4e80 Change the fieldpath in the deprecated plugin response
    471fd1ae8a1 deprecate RBD plugin from available in-tree drivers
    c51a422d787 Cleanup job controller handling of backoff
    fff5b35023b Adding review changs to update
    889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true
    5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0
    5bde9404a09 Remove unused error return value from internal function
    8636f9353a8 CHANGELOG: Update directory for v1.27.3 release
    763555814b5 CHANGELOG: Update directory for v1.26.6 release
    3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop
    ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release
    a29be0cfb00 update container runtime flags to use containerd instead of docker
    89adbc6e5b5 check for AWS environment before running sudo
    7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release
    a83edd35c4a DRA Node E2E: relabel test suite to fix CI
    c27f9fdeb79 Add warnings for big number of completions and parallelism
    a86380c7813 Update CLI help text for grammar and consistency
    96e7d5f1f25 Bump iscsi test server image
    e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI
    e213448db12 Updated kubectl explain help output
    7bc449d7e0c add contextual logging to job-controller
    cfbc5dc54f8 mount-utils: fix linter warnings in tests
    8ced101db53 mount-utils: stop using ioutil in tests
    699d118d85f mount-utils: stop using ioutil
    b690450e846 mount-utils: don't reread mountinfo on newer kernels
    8c79a911331 mount-utils: isMountPointMatch: simplify and speedup
    404e844468b mount-utils: add isMountPointMatch test and benchmark
    4bb02392793 mount-utils: IsMountPoint: fix
    167252fb5e0 mount-utils: format with gofumpt
    55b690ee018 kmsv2: no-op refactor priming logic into its own function
    15003c609d0 kmsv2: refine probing logic to avoid slow starts
    d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid
    8c06ca68d7d Details added in kubectl explain help
    4960207b317 DRA Node E2E: test NodePrepareResource timeout
    5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API
    673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs
    a60314c47ef Make etcd component status consistent with health probes
    e1735b98637 Make CA valid 1 hour in the past
    5e048041e40 remove helper function for unused storage feature in pkg/proxy/util
    e1aef2ac917 Bump publishing bot rules for Go 1.19 branches
    9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test.
    4e20a8f52bc kill all processes in a container in the event of OOM
    0222e6d4ae3 Update kind details for DRA e2e
    75cf25c0e7f iscsi: use dbus from the host
    f7a5817bc65 e2e storage: terminate worker quietly on test completion
    22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables
    325205efb72 Migrated pkg/controller/endpoint to contextual logging
    be14b026e33 fix the integration test
    a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance
    587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption
    672614b57e8 apf: refactor bootstrap ensure strategy
    910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated
    5e6ae25a33b Updates chairs, tech leads for sig cloud provider
    34368884783 move luxas as an emeritus approver of test/e2e/lifecycle
    e97d9803f2f add SataQiu as a test/e2e/lifecycle approver
    4977189c1b0 Fix ginkgo noColor deprecation warning
    e6bc945a61b Add startup probe in integration test
    ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release
    7ccc2317839 add test for authorizer type checking.
    54cae706786 Pass the mandatory parameters to support testing on ARM64
    fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc
    151509fb74d Remove unreachable warning on volume name dup
    d73923c8ebf fix 'pod' in kubelet prober metrics
    0ddaa7f7c9f Fix warnings on "duplicate" env vars
    4820cc852a0 Minor fix on variable
    a6f5abfb81e Updating names from webhookconversion to conversionwebhook
    0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it
    8f3109da791 Refactor wsstream library from apiserver to apimachinery
    6d4abd7e7b6 bump distroless-iptables to v0.2.5
    04fa4184ed3 add support for authorizer to type checking.
    e5a15c87e9d Ensure timeout test handlers don't complete before timing out.
    f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job
    2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods
    ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
    b1da721bdd7 Update vendor with hack/update-vendor.sh
    88b69cdd0e6 Fix flaky persistent volumes e2e test
    d9e12db547e Bump images, versions and deps to use Go 1.20.5
    ea6495e8284 Remove StartupProbe on debug with pod copy
    ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks
    6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate
    97a81a59f62 test: correct validation test error message
    42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28
    7f87ec9406a storage: Add MadhavJivrajani as reviewer
    7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart
    77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane
    7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane
    43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package
    9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server
    e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs
    f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane
    087fbc9304f Remove invalid merge key
    4962e6eacb9 Squash detectNodeIP and nodeIPTuple together
    b5db644422d Add merge map key validation to StorageVersions
    58162ffd63b DRA: add node tests
    b69b34bec64 Move a kube-proxy unit test to the correct file
    4bee9b2b352 structured logging in proxy/ipvs/ipset
    26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR
    4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints
    dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests
    8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done
    4d0e25151db Fix SELinux contexts used in e2e tests
    010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1
    743e5525edb fix eviction failing test for nil feature gates assignment
    6d66fbc6b67 storage: Move cacher tests to reside with the cacher code
    70978e4af61 cacher: Move common testing utils to a single file
    bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...))
    7a80d7c839c add warning for duplicate  containers[*].ports with the same port, protocol, hostPort, and hostIP
    923db7bd8e0 chore: use strings.Contains instead
    e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions
    4d85a1f00cb storage: Implement TestWatchFromZero for cacher
    2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests
    ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests
    b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml
    5d4bf0b6f90 Promote CSIDriver e2e test to Conformance
    3085b57869a Do not copy bytes for cached serializations
    c009667c6c6 deprecate CephFS plugin from available in-tree drivers.
    1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes())
    9eaa50cc829 Rename scheduler queue variables for consistency
    6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264)
    410b6023d6f scheduler: fix code style issues for pkg/scheduler
    71ab7dc791f Remarks
    70d3bb43e56 Adjust the algorithm for computing the pod finish time
    b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test
    db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository
    da4a8d831b9 kubectl: use bytes.Buffer.String
    8e4228a8c1f remove CSI-migration gate
    a5c4fbe9791 chore(fix): test jsonpath condition parsing errors
    9d3e55ec431 Support JSONPath condition without value
    f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds
    b4dfae25dee fix terminationGracePeriod blocked by preStop
    fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes())
    20866b3f85a dryrun: Don't reuse current object for conversion
    f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly
    45c9e066164 Fix errant debugging code in codegen
    a51be9786ba remove enabled by default beta resources that have been removed
    f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint
    a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result
    322968e9b38 Update unwanted dependencies per CI instructions
    2111e79f56a Update gnostic references
    1993a4cb379 vendor
    0b4efddae01 verify: nicer failure message rendering in Prow
    dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message
    d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin
    70ff750c755 chore: io/ioutil deprecated
    1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin"
    daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate
    a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs
    d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version
    6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging
    db2389ba9c8 kube-proxy: remove log warning about not using config file
    15aa00fc836 Remove unused `getSeccompProfilePath` helper function
    d0a64739e2c e2e dra: collect and check GRPC calls
    68901de8981 Enable optionals and add tests
    5c0b59891d6 Bump cel-go to v0.16.0
    5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests
    c539c739161 Changes to buckets and comments
    35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler
    64269620597 Changes to histogram buckets
    c48c4c679ad Fix ginkgo deprecation warning
    5a14573258b clean: use info instead of error to log queue closed message when scheduler exit
    f2a5e247ebf add pacoxu to kubeadm approvers list
    705c6ff315b Review comments, added metric namespace, moved utility functions, and etc
    a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release
    369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test
    2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs
    85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"
    f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util
    b3111170f8e remove Ephemeral Containers form list
    64c9070f8d0 add pod containers[*].port duplicate warning
    f9ae3e774d0 testutil: use contextual logging
    534f5edb53c Cleanup boilerpate.py
    d9e2583af16 test/e2e: replace deprecated ioutil
    4b4b3b71b78 clean up dead code
    4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node
    074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging
    0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated
    c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning
    4e6d929580a deprecate csi migration for ceph rdb
    11a40406a1f Promote Ephemeral containers e2e test to Conformance
    bf116e85943 Optimize reflect checks further, save item type information
    12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList
    efc601302ad Extract List reflect optimization
    b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks
    4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs
    0535e742241 feature(schedule_one): use heap to find the highest score node
    532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers
    8df1a5e6dcb Webhook conversion metrics
    a045fedd025 Update google.golang.org/genproto
    455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated
    d76043958fb Follow up from dynamic retryAfter
    510287d3444 Fix the git-repo test error caused by the correct use of loop variables
    926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta
    7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout
    4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments
    15678e4a67e Optimize usage message of commands which have subcommands.
    6a867eacd85 kubeadm: warning only for deprecated FG
    4dfc684b342 Set kube-proxy memory request to 50Mi
    5d18f471494 Improve clarity and guidance in provisioner waiting message
    7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data
    e31b2080f5a e2e framework retry on Service unavailable errors
    a50549cc906 e2e rc: if the pods are running but not ready the test will fail
    133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha
    a6003ae1e11 fix unknown field error in rs e2e
    27057def059 Signature fix for registeropenapi
    4373ae05f34 Update vendor
    72e4c9a82ac kubeadm: add the "config validate" subcommand
    f4891842194 Delete CRDs created during field validation tests.
    2ea6896f90c Add warning log callback in client-go loading rules (#117233)
    485d1631cd3 Remove Azure file in-tree storage plugin
    2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector
    e2ed8f8c3ca style: correct the sentence
    08139044040 Fix: Restricted profile comply with PSS (#117543)
    c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman
    05b3beb7f02 Create e2e test for CSIDriver endpoints
    d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder
    931cc96b8d4 remote windows condition when #116693 is merged
    0bff705acd8 Preserve code blocks in templates.Normalizer (#118029)
    7470a94f5a9 add some log for debuging
    6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code
    08ce5805769 Add ProxyServer.platformSetup
    e0b7f31ce6e use standard base image in dra dev
    149f4878a70 Simplify DeferCleanup.
    dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node
    1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter
    1b206399f6a fix using stale binaries in local-up-cluster
    ece68cf8337 Fix update-vendor.sh logging
    cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor
    96d48de9b97 add OWNERS for cmd/prune-junit-xml
    86a258b13a2 kmsv2: ignore cache key expiration on reads
    89439b570fc test/e2e: use agnhost latest version in the manifest
    b30720fc9f0 Add test for starting kubelet with a CSI volume mounted
    ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers.
    048938f1d85 hpa: cleanup `currentReplicas` code
    0f5535ea259 registry/core/service: remove incorrect comments
    2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename
    0789bbe9f7a Update k8s.po
    b6364dddfe6 update webhook test to go 1.21
    d8db9640fab kubeadm: remove function pointer comparison in phase test
    2658a2b627f Make connection lost retryable in webhook
    ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins
    e21cf9a54e9 Setup e2e_node to support testing on ARM64
    ec8d94f2057 Grab logs from all the containers when DNS related tests fail
    182cd425d3b graduate LegacyServiceAccountTokenTracking to GA
    337728b0255 Improve backoff policy in reflector.
    0fe27a06f99 Cleanup the Job controller handling of terminating pods
    c74790e266a remove redundunt type conversion, unused variable...etc
    07c94553608 fix apiserver InstallAPIGroups slices out of range
    aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency
    19ae2de19cb kubeadm: speedup init by 0s or 20s
    e4102d5e300 Test APIService safe handling at startup
    3be3997193a Fix waiting for CRD sync at server start
    71ec9df5b61 update image tags in manifests to reflect the version listed in the source
    a10ff53d8e6 Reword the event message to read better for a single secret
    b2eae2f92e9 Support podman for building release images
    6b4251c0fdf Remove statefulset from logcheck.conf
    3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet
    d9b941b7827 Remove undesired verbose fields from log
    bea71a3e4ee remove unused pv informer from expand_controller
    4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed
    a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release
    bab8002fb38 CHANGELOG: Update directory for v1.24.14 release
    80b9c853613 belated cleanup of some kube-proxy stuff for old versions
    e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release
    c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release
    526d45416fb update err status code check in transformation metrics
    5a75a03a774 Improve warning message
    b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket
    fc4fb004cf6 add reviewers and labels to yamlfmt
    93462377120 Update docker/containerd/runc versions and capture more logs
    885f3d7a7df Sort and limit to the describers the return (string, error)
    9e9a6cde4b8 test/integration/scheduler: fix data races
    b035c373db8 build latest sample-api-server for test/e2e
    bafae5c0764 rename err to lookupErr
    8b9cbe62025 fix false positive kubectl plugin unit tests
    b9950b5192d Drop zeitgeist from tools go.mod
    36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions
    d83c3ce7ca8 make rbd and iscsi test images in parity with the test code
    9de2846c72c remove glusterdynamic provisioner images reference from tests
    763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment
    261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
    666be79d670 legacy names of volume plugins have been gone a LONG time
    8b4840aa374 clean up unsupport etcd version
    e0ebac6c9ca drop redundant NArg check when looping Args
    82c40e3697e drop redundant NArg check when looping Args
    829bcea7634 remove vestigial BUILD file
    0616d15712b Fix perf-test by increasing the error margin
    46ed70ecac5 Bump runc to v1.1.7
    51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect*
    1daf74d25c4 Initialize data if nil
    b81cfb9cb8c Update vendor
    15c5713015e managedfields: Remove gvk from SkipNonApplied
    b52e57c589a managedfields: Improve/strengthen version checking for Apply
    559d12fcce0 managedfields: Create NewFakeFieldManager
    45853e20ae5 openapi: Create client -> TypeConverter function
    45603efecb7 Create e2e test for PodEphemeralcontainers endpoints
    ebaf49dbd70 Export DefaultServerUrlFor utility function
    5519b89a28e Validate lock identity
    e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version
    c99cf53a108 e2e: deflake hpa e2e custom metrics tests
    247ea7fc780 use upstream etcd github path instead of redirecting one
    6616e1f2385 update etcd version in install.sh to 3.5.9
    0e456dcf866 Clarify localhost nodeport comments/errors
    a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP
    2ca215fd994 Add NodePortAddresses.MatchAll()
    d6e488b998e Changing annotate PrintFlags from annotate to annotated
    d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/*
    8c6c1e53194 plugin_evaluation_total metric support preScore/score
    3680a5230c3 Bump docker/distribution to 2.8.2
    3ac74973610 Chore: cleanup in interpodaffinity
    073b4cf66ad test/e2e/dra: fix kind cluster creation
    3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1
    19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class
    517c5b75c5d Update unwanted deps
    d6d1dbdd82a Update kube-openapi, drop mapstructure
    a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election
    7c554ea1d91 Regenerate discovery fixtures
    2ab6fd3590b Capture discovery API output in test fixtures
    3867569ae27 codegen
    0819d342040 using parsers in applyDefaultImageTag
    7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash
    f0f92853ad8 Add api-machinery TL owners permissions for jpbetz
    e4dd6f68dc8 remove CSIStorageCapacity featuregate
    9ac657bb94e Make NodePortAddresses explicitly IP-family-specific
    f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy
    1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported
    d85b91f343b scheduler-perf: measure workload runtime and relabel workloads
    aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors
    83fb5a50bc9 dependencies: bump k8s.io/utils
    daebf1c735d Simplify plugin resolution check function
    f562375c8a6 add changelog for kube-addon-manager v9.1.7
    be4c4a51ea2 Update pending_eligible_endpoints.yaml
    d34d4755ae2 Promote APIResources e2e test to Conformance
    6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter
    a0133b7cc47 proxy/ipvs: added daman1807 as reviewer
    dcefc42b35a update vendor dependencies for the change
    ae749238786 etcd depdencies are updated to v3.5.9
    13cef6a7549 cleanup unused variables for v1beta2 component config
    815578295ae Revert "support short name for flowschema and prioritylevelconfiguration"
    72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations"
    45836971f27 cli: replace intstr.FromInt with intstr.FromInt32
    8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket
    ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages
    ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner
    196e2f041b1 Update the cgroups v2 toleration in local-up-cluster
    7248b9263f0 Fix comments on InformerFor
    6ac1bae2815 test: Improve debug output of init container tests
    1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod
    166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept
    8bd94dfa762 kubelet: Organize and document kubelet pod-related members
    bb568844b67 kubelet: Separate the MirrorClient from the PodManager
    80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod
    e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods
    f8086f2dac1 kubelet: Convert IsMirrorOf to a function
    02960a8253e kubelet: Remove unused mirrorPodFunc in eviction
    1168b118750 Stabilize local-up-cluster in our CI
    3dc4eea8896 proxy/service_health: release read lock early
    655f2f74010 replace build to build.sh
    cc1251123ba use wait to avoid blocking the SIGTERM handler
    808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier
    4b50c4bb016 Update --image-gc-low-threshold option's description
    3da79e2850d OpenAPI V3 invalid document checks
    cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6
    feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual
    7681135f1b1 etcd: Build image 3.5.9-0
    7a4787ade10 openconsensus update to v0.24.0
    82d1e356de4 deps: go-gcfg update to the v1.2.3
    f03b5cdc083 update containerd/ttrpc to v1.2.2
    dd49af86b7b [UT] add ut for pkg/client/conditions
    f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager
    eb1483fe64d user --prune-allowlist in kube-addons.sh
    20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod
    2e2afc7fd27 Job: Use generic Set in validation
    1ffe3f467e8 lavalamp is taking a long break
    1ea17254bf0 hack/tools: bump logcheck to v0.5.0
    3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log
    8c82855467b When expecting pods count only active ones
    de882f5193b Job: Replace deprecated pointer utils with supported ones
    8f11f5bb2b5 DRA: use containerd 1.7 in kind image
    123845da886 Log a warning if a ImagePullSecrets does not exist
    3f3e1d507d0 add new metrics for the internal client-go transport generator
    e7c679c362c cidrset, multicidrset: directly use getIndexForIP method
    fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging
    b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging
    bfb4f8b7071 etcd version monitor build go version update to 1.19.9
    0ae902fca4c update golang version of etcd build to 1.19.9
    3b634de6ffc test/e2e/dra: update README
    5fdeaa8e42c update for feedback
    6f23c774085 QueryParamVerifier falls back on invalid v3 document
    d5f4b9634c6 DRA: fix image build on Mac
    569695b0226 e2e/network: setting --max-time for curl
    5fd5768ef32 kubeadm: Make etcd member removal idempotent
    164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log
    a5575425b03 add no resources found message to rollout-status command (#117884)
    c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions
    11f1d241654 unit tests: Fixes kubelet util unit tests for Windows
    3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error
    4634073d0b9 Use getter function for plugin subcommand resolution
    2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil
    e3d5feb76c4 fix HPA plain metric calculate
    6607834207a Use the same report files as before
    9150e6b55a1 s/of referencedFrom/from referenceFrom/
    4bbf611773d Retool validation for pod HostNetwork ports
    ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults
    ef796dca9bb Simpler openapi gen - subprojects do themselves
    93b2845bec7 Codegen: subprojects openapi
    4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh
    c3971002c9d MinimizeIPTablesRestore to GA
    8f229057484 [refactor] refactoring flags and options in Expose cmd
    82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd
    5289a7b029f fix fd leaks and failed file removing for test directory
    b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission
    982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver
    73aeed8766c fix fd leaks and failed file removing for pkg client-go
    f49cc5eb113 add remove_file in client-go util directory
    c8737346db4 Export GOMAXPROCS environment variable
    e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791)
    308ab380d7c Add unit testcases of refMap.
    23ac0fdaa52 APF: Dynamically compute retry-after based on history
    99ebc8d9f82 Tweak annotating kubemark nodes on startup
    aab02d52f4d Fix make etcd image failed
    91570a36614 promote ServiceNodePortStaticSubrange to beta
    e79daae6823 Chore: clearify need update test cases
    fb4d0150b96 Convert apiextensions-apiserver to new codegen
    29913a89735 Convert code-generator/examples to new codegen
    643bf1b0362 Convert kube-aggregator to new codegen
    1e0b7aab756 Convert metrics to new codegen
    e368f1b25bf Convert sample-controller to new codegen
    d0e5adb58bc Add a new way for subprojects to do codegen
    05b3449346e kubeadm: Add etcd client unit tests
    fc1b2287798 kubeadm: Use internal etcd client through an interface
    e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
    235c261196e Job: Fix a misspelling
    b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
    f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible
    bbf5c03dd80 Add NodeLogQuery e2e tests
    ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag
    16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter
    d3237b72587 unittests: Fixes unit tests for Windows (part 7)
    ccb4ca89549 record podUID in refMap in watchBasedManager
    e4340f0d9bd Job: Use generic Set in controller
    22d0aa1d04a remove DevicePlugins featuregate
    27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name
    2ebc0cc0257 remove unwantedReferences
    57969c1b52c Fix etcd3 config changed
    4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable
    e560df770e3 respect local GOPROXY setting in build/common.sh
    c56839c0a1e etcd: Update version to 3.5.8
    64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r
    936265e8707 Add podUID in AddReference and DeleteReference
    cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy
    a862a5f2d24 Use the right executable ss/netstat in log message
    ae08fe1e199 ProbeTerminationGracePeriod promote to GA
    2cb215e1091 Add all describers to the exported DefaultObjectDescriber
    5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check
    3e57a0bd138 Add go.work and go.work.sum to .gitignore
    008576da073 Improve and simplify maintenance of APF bootstrap objects
    194ac957ad3 make resize of hollow objects more verbose in start-kubemark
    c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta
    4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2
    1c45bacfb0e mount-utils: fix flaky test 'TestFormat'
    6a5cf99aad1 pkg/proxy: human-readable messages
    c2c8b8d1783 pkg/proxy: using generic sets
    359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc
    edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
    e807a6aec57 Disable NewVolumeManagerReconstruction feature gate
    0c9f55588c5 Simplify creation of default KubeProxyConfiguration
    ec2cc36404e e2e: disable jig.ExternalIPs
    b849ff57b85 e2e reasonable grace termination period timeout
    791573ddb60 promote ProxyTerminatingEndpoints to GA
    b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage
    5aca41af50f [local-up-cluster] Use the kubectl we built
    8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level
    034528a9f04 scheduler perf: add DynamicResourceAllocation test cases
    1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9
    19f7cb23c8c e2e agnhost functionality to RST TCP connections
    63b69dd50ce Add support for CRI `ErrSignatureValidationFailed`
    859359ad6ae Fix strict linting
    a7035f54595 Pass Context to StartTestServer
    2d866ec2fc8 Teardown only scheduler in integration tests
    8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
    cede96336a8 Depend on k8s.io/utils cpuset
    9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749
    10a869fc752 Remove duplicated config fields from ProxyServer
    1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    a3848714f55 dependencies: update gh/Azure/go-autorest to latest version
    17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go
    c53cc4fe0db Update distroless-iptables to v0.2.4
    c4575c34382 Fix up detect-local-mode validation
    3734fe7ab1d Remove some useless error checks
    19885264f3d [go] Bump images, dependencies and versions to go 1.20.4
    d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified
    d22b9310e6e Allow override of prerelease/buildID portions of version at runtime
    36b760a9317 upgrade etcd deps to v3.5.8
    7c5573d326d Fix cmd, integration, and conformance tests
    69eccd41b89 endpointslice: reduce visibility of vars/funcs
    933b665c18c Upgrades spf13/cobra to 1.7.0
    3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section.
    9d19c207d22 fix: fixes flake in TestKMSv2Healthz
    561548e86c4 unit tests: Fixes kuberuntime unittests for Windows
    5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers
    a40810a2d9d Add comment about removing the feature gate
    e51e5962d5a Use early return pattern to avoid nested conditions
    e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod
    7be3f8e43f7 Remove old metric scheduler_goroutines
    e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind
    d96f83f02f9 windows-tests: Update connectivity check util function
    e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
    d257d5dfdc4 Trigger re-sync on any change to providerID
    40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA
    d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669)
    5fff8cae749 dependencies: klog v2.100.1
    d55b67b3490 Clean up brace whitespace in **/validation_test.go
    2ad2c15c9ca Update copyright year to 2023
    b464d084278 Remove custom fake svc lister in favor of regular indexer
    b899ae48477 remove genericfeatures.DryRun in 1.28
    c6bdde8051c Create e2e test for APIResources endpoints
    ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate
    077cc20f8af fixup patcher test to include field manager
    ad5cda4d219 remove checks for fieldmanager from handlers
    4721ec7519c include apiextensions types in apiextensions generated openapi
    08e756342c2 fix scale not being given gvk in CRD openapi schemas
    ffb9c076d77 add OpenAPIV3 config to tests and server options
    c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter
    94909af68ae supply deduced typeconverter to apiserver tests
    302daa889c5 Throw error if OpenAPIV3 config is not provided
    1b766839677 filter out directives before taking patch value as-is
    6de6cd0a658 add integration test for nested $patch in SMP
    e00a9c3a0b1 add subtests
    ffeec1f4d44 Update compatibility data test
    ec997d5433a Generated files for NetworkPolicyStatus removal
    bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus
    0fcf42f3211 Move test double queue to test file and unexport
    208af2d1d83 Localize SpyWorkQueue to cloud-provider for now
    a15013ec8b1 Document RetryError properly
    73bc9861d25 Improve error logging in processNextServiceItem
    18e978a89df Improve RetryError GoDocs
    de34540248a Update kube-openapi to fix race
    d0677f528c0 Add json tag
    69bc6855568 node: podresources: graduate to GA
    04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields
    aaa30439bdd reduce util pkg for testing in tempdir.
    4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32
    026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32
    0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32
    1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32
    5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32
    94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32
    4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32
    79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI
    14952cef5b7 kubelet: Move Linux stats to a Linux specific file
    fc8b4657c18 Add tests
    ea4ce5dc28e Alias api/errors instead of stdlib errors
    a179203bdba Support specifying custom LB retry period from cloud provider
    da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs
    e28f3de6568 Revert "proxy startup-time config handling cleanup"
    d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495)
    34d3c7520be update Deps gopkg.in/warnings.v0	v0.1.1 to v0.1.2
    944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs
    671a3f43fdf Correct the changelog for GlusterFS removal in 1.26.
    859690d72a4 Added support for image credential provider for windows and arm64 on gce
    28c573358b0 test for init container restarts
    d727df1741e node: device-plugin: e2e: Additional test cases
    3dbb741c976 node: device-plugin: add node reboot test scenario
    a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure
    96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring
    282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
    d509e79837d node: device-mgr: e2e: Implement End to end test
    dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist
    53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests
    2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints
    f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs
    48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
    c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane
    4d9261c7567 Fix LocationOfOrigin shows up unexpectedly
    76fe41a996e chore: update cgroups and ttrpc versions
    0dbeff4b6e6 remove GA feature gates in 1.28 about network
    4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate
    fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR
    258c4c4251e Remove duplicated config fields from ProxyServer
    9d4f10f5d28 Fix up detect-local-mode validation
    5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device
    5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function
    f24d1d2c950 use go 1.19.x for etcd version monitor compilation
    91ee58050f8 wait: fix PollUntilContextTimeout godoc comment
    b3e0bc88640 scheduler_perf: let the test decide which informers are needed
    969d28b12b7 scheduler_perf: refactor common code
    91df71be549 correct etcd base image reference in the doc
    6b40cd8cd37 update test/conformance/image version to v1.4.2
    6c8be35fa86 update the etcd base image to v1.4.2
    1eca720dcc7 Refactor some watchcache tests
    7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging
    54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging
    152c1a02723 Chore: Replace re-initialized variables with create new ones
    37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging
    eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging
    550d4c00746 scheduler_perf: support test case selection via labels
    79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers
    217196c59fa Add ROX storage tests (#114628)
    6a4cf352b8b remove tracking annotation from validation and webhooks
    2af662b05fe Refactors discovery content-type and helper functions
    170d5ef9fa0 code cleanup for kubeadm
    902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver
    0a582431593 node: device-plugin: e2e: Add test case for kubelet restart
    09100804722 node: device-plugin: e2e: Provide sleep intervals via constants
    4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit
    fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario
    5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message
    5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
    0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error
    8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter
    28519e240ed Fix scheduler performance regression after adding plugin metrics
    c96188a38b5 remove seccomp profile path
    96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner
    0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version
    4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable`
    6da128bdb3e dependencies: go.uber.org/atomic v1.10.0
    87230578802 dependencies: update go.uber.org/multierr v1.11.0
    f7ce6f834a1 Chore: add ipfamilies tweak functions
    78b8af9fed3 scheduler_perf: update throughputCollector
    a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1
    da3e7e37816 stop watcher when error occurs
    018564b8cfc change the seccompProfile field description to match the imlpementation
    6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag
    3c45b61b643 [KCCM]:  have providerID trigger re-sync, but not be required for nodes
    a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
    e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error
    3229deda37b register missing metrics
    24e68b3c6ac use client-go metrics not only rest_client
    2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election
    3f247e59edf Refactor cacher.ListerWatcher code structure
    892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937)
    73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig'
    e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded
    78e6cb1cccb intstr: add FromInt32, deprecate FromInt
    88e2c344390 Enable a bunch of generic storage tests for watchcache.
    860329c04b5 drop v1.25.0 API testdata
    440d5910f7d Chore: add app protocol tweak function
    06993afdd6a Chore: cleanup whitespaces
    3d8f7233da9 Chore: remove impossible and redunant cases
    4a6bc66e40f updating microsft/go-winio package to latest version
    60d25c3ed77 improve remotecommand testing fuzzing the data stream
    d76f5dae67c Add a comment to roleRef to document that it is immutable
    959c90c1d9a Chore: add deletion timestamp tweak function
    4169d7d0283 golangci-lint: allow exceptions for Go naming convention
    4f8eba2a0be Chore: add finalizers tweak function
    28db34a231f Chore: add load balancer tweak function
    1c465c51e80 Chore: add service port tweak function
    0cc7369196b Chore: add LBIngress tweak function
    23c242770fe Chore: add etp tweak function
    2f6bc661dc3 Chore: rewrite newService function
    f9bab9a60b0 add --concurrent-cron-job-syncs flag
    bc00f5c071f Update cri-tools to v1.27.0
    c3384191ea6 remove validation GCE-ism
    28ac914bc54 Remove repeated info
    e0d5c4aa93e Move info where its most relevant
    0a508ad8067 Update `kubectl edit` documentation
    d0412928961 Add v1.27.0 API testdata
    7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations
    95fea2f2bff add test case for merging a patch against empty list
    3469bb05db7 kubeadm: fix unit test panic for TestNewResetData
    ed37e6986b6 uncomment exit trap to cleanup tmpdir
    63d44fdde58 retain KUBE_GOPATH on recursive kube::golang
    4d736a0435e cleanup update-mocks.sh
    726992f9db9 call kube::golang::setup_env before setting up worktree
    17db22d0558 Fix potential mutex usage bug
    39e52449f9f remove nodes resource from CoreDNS RBAC manifest
    7a14c5ad6dd ensure we can remove _output
    11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes
    104c208d0fb add Authentication tracking request/error counts and latency metrics
    65f3454c1d9 fix undefined convertion
    8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0
    6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0
    5c584269a79 avoid volume copy in checkAttachableInlineVolume
    2bbd07c0192 remove defunct interactive tutorial
    1d15354ccb5 update gofuzz dependency
    2cd23c8b17c Update go-logr dependencies
    062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory
    be6709044ad  etcd: Build image 3.5.8-0
    6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event
    eab66a687b2 cacher avoid double locking (#117410)
    a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer'
    0c54d9af6f2 Fix stomping os env in kubectl e2e tests
    766f6c3ad41 Include stderr in cred provider plugin errors
    eaba1703b1b enhancemanet: reduce calculation calls
    a8b808ee6ca Replace the deprecated ioutil methods in the test directory
    a959785f964 dependencies: udpate coredns/caddy to v1.1.1
    0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache
    45e836a968a Generalize few watch tests from cacher
    f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests
    7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv
    d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests
    e8d3a4a105c Cleanup environment in tests that call os.Unsetenv
    2181eea4843 Replace os.Setenv with testing.T.Setenv in tests
    cf125a35611 Replace os.Setenv with testing.T.Setenv in tests
    b9ef1603223 Cleanup environment in tests that call os.Unsetenv
    240fccd7668 Replace os.Setenv with testing.T.Setenv in tests
    89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests
    fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests
    29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1
    0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual()
    d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole
    e340325024d Fix nil pointer in test AfterEach for volumeperf.go
    453f81d1cae kubelet: pass context to VolumeManager.WaitFor*
    4de0d2c6f8f use generic set in storage/validation
    3ac77335303 Add `saschagrunert` to `sig-node-reviewers`
    7fb88eec73c support fieldSelector spec.hostNetwork
    4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8  to v0.3.0
    ff9ebfa90de e2e framework: control k/k/pkg imports
    ee99ca25ee6 Remove unnecessary if judgments
    1359ebcc5b0 fix doc mismatch
    a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers
    399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries
    efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack
    37ea51fd567 Improve the performance of map usage
    9c0153aef9e KCCM: add providerID predicate to service controller
    d3c103edce7 Re-work logic in shouldSyncUpdatedNode
    dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util
    40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet
    030debc1990 changelog: fix formatting issue with v1.27 change log
    4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release
    1b93abb9bac Move kubelet config API to e2e_node
    4e928c96b5e skip checks when topologyPolicyName is PolicyNone
    71a989e5e9c Fix CHANGELOG-1.27 correct
    06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature
    8d19c0002bb Add node check to vSphere cloud provider
    3b7c14e8cfb Remove unnecessary int type conversion
    36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0
    5bce18c98ec dependencies: update go-semver to v0.3.1
    d7270f4ba72 dependencies: update go-oidc to v2.2.1
    b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0
    1595d7f52d7 dependencies: update go-systemd to v22.5.0
    9cfdf989eda dependencies: update gh/fvbommel/v1.1.0
    6b70710b0d1 dependencies: xlab/treeprint v1.2.0
    6320b6843a2 dependencies: update netns to v0.0.4
    9e2bb40e158 fix typo annotation key notes.
    becf73a82b1 add invaild scope test case
    c4e1b01416e replace spew methods with dump methods
    a96358ac0fa Remove some useless error checks
    867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency
    2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints
    6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation}
    432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
    9c5a66e2080 Revert "CR conversion: protect from converter input edits"
    ed0124855aa add log includes pod preemption details
    0979d554435 unit tests: Skip flaky tests on Windows (part 2)
    2d06fad5163 dependencies: azure-sdk-for-go to v55->v68
    625c3025057 change pv recycler scrub cmd to find -delete
    c042837a761 truncate the precision at a millisecond for image pull event message
    804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer
    db5d74935ee optimize evict sandbox logic
    ccf7ddacfce replace ioutil with os, update doc
    5668399a87c Codegen: use openapi-gen via k8s.io/code-generator
    b23ab389b4f Add SIG ownership to controller/nodelifecycle
    375e3cf869b CHANGELOG: Update directory for v1.24.13 release
    f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release
    d567d61aa56 Fix a data race in TopologyCache
    a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation
    83a1774df2b CHANGELOG: Update directory for v1.26.4 release
    a7a8cd6e5de Codegen: subprojects: nuke existing files
    bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff
    9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff
    29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff
    dd7af241c11 Replace diff.ObjectDiff with cmp.Equal
    97bab44cae3 Replace apimachinery diff.StringDiff with cmp
    4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222)
    d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687)
    be101a748dd Remove some unused winkernel arguments/fields/functions
    8a790ac2e1b Remove unused ProxyServer.EventClient field
    9754386c764 Remove write-only ProxyServer fields
    b4c384ebfb2 vendor: bump runc to 1.1.6
    c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager
    4438208511e api: encode NamespacedName with lower case in JSON
    476e407ffd2 cacher: prevent a potential deadlock
    7cdffe37c1d update container storage interface spec to v1.8.0
    10a8ec5b2cc use case-insensitive header keys for http probes
    a6173fad88a Delete duplicate code in schedule.go
    5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception
    277c03fc799 remove these unrelated openapi files (#117051)
    9a468563070 remove reuse buf todo (#117033)
    5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002)
    0eec63fd687 fix the mistake in the release note
    02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note
    75f17eb38fc optimize watch-cache getlist (#116327)
    9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471)
    2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
    73eb7c09309 Codegen: easier to read logs for subproject output
    bbbb695060a Codegen: subproject: chdir to the project dir
    893ec0ca453 Codegen: simpler k8s.io/code-generator/examples
    af29cca6ced Codegen: new tools will not become part of 'all'
    5f7345deaac Codegen subprojects: consolidate generate-*groups
    95e614b3717 Codegen subprojects: deprecate "all" in scripts
    a94ed5b8ac8 Codegen metrics: include v1beta2
    8b68e063e14 Codegen subprojects: regen defaulters when needed
    5200f4b0d36 Codegen subprojects: reify 'all' into explicit
    201653aa870 Trivial change to reduce diffs
    901dea73073 Fix azure disk e2e after migration
    d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs
    ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release
    464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label
    9204e6b286e remove unused constant `expansionFailed` in expansion test.
    4491ba89171 rename variable delete to avoid collision to builtin variable
    d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker
    0020631985e test: Add node e2e to restart kubelet while pod is terminating
    aa73f06e569 scheduler perf: allow creating 0 items
    49bbf7c2681 scheduler_perf: fix race condition
    a869a898257 scheduler perf: remove cleanup func
    b039a2ff2c7 Add new contribex leads to sig-contribex-approvers
    9363afc6502 Fixing broken tests
    d102a6fea51 HPA Controller - Update Owners
    8d18ae6fc24 Use the generic Set in scheduler
    b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits.
    1dec97436c8 Fix typo at job_test.go
    046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0
    f138d29bf2d watchcache: currentCapacity acquires read lock
    c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota)
    ea74a2d877d cpumanager: fix typo in godoc
    1cce3b3e2f5 wait: fix incorrect suggested method
    d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work
    d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one
    26b35ce36ae Remove endpoint related RBAC from scheduler cluster role
    7fa3d54ea5b unittests: Fixes server journal unit test on Windows
    08a324bf512 cluster/addons: set metrics-resolution to 15s
    eba18d503cc cluster/addons: bump metrics-server to v0.6.3
    88e055059cd component-base: avoid data race in log format registry
    a2fb32870f3 test/integration/auth: fix data race
    1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2
    f91518b81a5 Add genericiooptions in allowed list of genericclioptions
    b4e4db336f6 More migrations from genericclioptions to genericiooptions
    5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create
    934516791c6 Swap assert.Equal parameters oders to follow convention
    2d06601b81c RBD:  e2e containers base image has been udpated to F38
    0518dffd259 iscsi: e2e containers base image has been udpated to F38
    8d9386fc402 Remove genericclioptions.IOStreams struct
    c3497b30aca More migrations from genericclioptions to genericiooptions
    00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions
    51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams
    e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
    3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined
    e1bcfd47da9 Sort unmounted volumes message in volume manager
    79b3126f00a skip clear quota if FSQuotaMonitoring is disabled
    0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()`
    731068288e1 correct storage class selection message
    cc8cd88a94d remove duplicate validation for csi
    978da1e8f13 remove GA feature-gates
    bda73bd1129 Refactor remote runners
    e389d140ae6 fix as suggested
    457bb58ebbf kubectl events: Support fully qualified names for --for flag
    1893f639d03 test: Fix flake in node e2e mirror pod tests
    ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread
    70369bfe299 remove GAed KubeletCredentialProviders
    5662566e03a Set GOMAXPROCS explicitly
    56755b8ffdb fix doc mismatch
    8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
    dac85fe2d3f [KMSv2] cleanup comments in v2 proto api
    feba08a6947 Create local copy to avoid potential race condition
    29503fd8d45 openapi: Make file client more easy to re-use
    ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate
    db92cc13880 ftr(etcd): add benchmarks
    05f4e497f1d Deflake TestGetListNonRecursive
    906f0607efc Clean up kms test
    d3f6cb717f7 update conformance yaml
    7bfcfc4d5de docs: fix storage e2e test README
    f7765eb0d42 Add damemi to emeritus SIG scheduling approvers
    bbbd366cf39 Move damemi to sig-scheduling reviewers
    397cc73dc9b delete unused functions in pkg/controller directory
    47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads
    449f847630e [KMSv2] update ci script and add readme
    86e1f4b9d10 e2e node: bump all nodes ready timeout
    beb329f4bfa Do not look at VPC-related resources outside the cluster's network
    8d92cfb1316 Added conversions to/from NamespacedName
    df0a2538205 generate ReportingInstance and ReportingController in Event
    e9b384f5a75 fix typo
    f638e2849fb replaced spew.Sprintf with a util pretty print function
    838ed7feb53 Improve the performance of map usage
    f6fa250e304 Add API approvers
    03be789851d Fix sample-controller docs after moving to context-based cancellation
    99ad88a2611 Remove unnecessary int type conversion
    f2fe1fff655 [KMSv2] add tests for generate transformer
    479fcf0b13f kmsv2: validate encrypt response at DEK generation time
    8d644fbc725 return skip in volumerestrictions
    ade63dd7647 cronjob: add ut for namespace terminating cause no extra log
    9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError
    1031977b7d8 kubelet PodResources API: follow-up review comments
    ec9515a828e Add structured alternatives to strings in client-go/tools/cache
    2b01f63b115 move check for noop managed field timestamp updates
    07ebb22db92 added known issue for 1.27 release
    80480f8e215 combine conditional checks
    7a6d58001b7 handle event errors caused due to terminating namespaces
    af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE
    daa1d287e4d fix GetPodVolumeClaims in comments
    c14068c2023 deflake: Add retry with timeout to wait for final conditions
    fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods
    27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging
    ddc13e983b5 Chore: add selector labels tweak function
    4cab11f26f0 Chore: add persistent volume claim retention policy tweak function
    ba9dfe686fd Chore: add persistent volume claim template tweak function
    f97d3cf7486 Chore: add rolling update max unavailable type tweak function
    1b17b4fa799 Chore: add rolling update partition type tweak function
    f3ffeae426f Chore: add update strategy type tweak function
    5e0161b3de8 Chore: add labels tweak function
    ec34891782c Chore: add annotation tweak function
    b907d5af49f Chore: add finalizers tweak function
    18ba7c0e433 Chore: add ordinal start tweak function
    3eb34d8b6ce Chore: add min ready seconds tweak function
    2161d095fa1 Chore: add template restart policy tweak function
    4418a9f5906 Chore: add replicas tweak function
    7fc08e0ce70 Chore: add pod management policy tweak function
    77c7d6efcf6 Chore: add basic make function for stateful set
    4a667a1026c fix: remove case sensitive checking of probe headers
    81a0ea3da3c return name when error occurred in csi-translation
    a2cf4e73459 use describe node to print node events as well
    e5674903178 fix: remove last ip when apiserver was shut down
    f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration.
    db5590a194b Remove sig-network-driver-approvers alias
    fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS
    2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network
    10b36075df6 Cleanup: use Set instead of map in endpointSlice utils
    eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting
    94f2d351644 Wire bootstrap token authn secret lister only when it is enabled
    d71aea434e5 docs(readme): add go report and latest release badges
    a780544f58c add log for kubemark start
    d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods
    41ed0e12341 Add an image for kubectl
    1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark
    8d3a498c879 don't ignore UID impersonation in webhook clients
    364b66ddd65 admission ApplyTo: take in clients
    630af564be3 Update cri-tools to v1.26.1
    1aeec10efb7 DRA: get rid of unneeded loops over pod containers
    017bb93887f certificate controller: use contextual logging
    c94a9a14d8d update gofmt
    8cbe9fe543e trigger update event when service ipFamilies changes.
    b430464df06 gce: podresources:  don't disable on windows
    6b4ffdb9f75 node: re-implement Localendpoint on windows
    195fc2f5162 kubelet: podresources: rename variable
    d6d19a290de Simplify statefulset fuzzer
    376bda41c74 undeprecate kubelet --provider-id flag
    8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings
    c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos
    31e1df9ae6c Bump Konnectivity to 0.1.2
    aadb87bdcdb kubelet: Do not mutate pods in the pod manager
    13192176002 Remove vestigal err check from CEL admission controller.
    a6ffbb41f8e Squashed commit of the following:
    bbf2b968c89 skip pod resource check when request is zero
    64ecb161d47 Codegen: git grep returns non-zero if no match
    241d46d1dd5 Codegen: deepcopy needs to run before swagger
    3405853e6d0 Codegen: clean up stray ls-files use
    3dd0c416639 support short name for flowschema and prioritylevelconfiguration
    e2b10505162 add some buff for pod initial restart count that is not zero
    efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests
    b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted
    4d3f92d5f75 Update toplogy keyset initialization
    a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating
    37aff025ff8 cleanup: remove Clear for fake job controller
    b7cdbca2374 Add more tests that should exist but don't for some reason
    67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver
    5dca1be0160 Add tests
    bab2c18c246 Add jsonpath support for explain
    77692f1b1c5 fix linting
    fabf1cba947 Add warning about TLS 1.3 cipher suites
    6ad156d80ee Cleanup: modify some sentences about statefulset
    13354d3da4d Add note about TLS 1.3 cipher suites
    c50c19d13af remove unused not api functions in the pkg/apis directory
    b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring
    a3b44b574fb cluster/gce: Fetch image from image family
    26f0325734c fix typo in volume util
    0311a4e8e6d Fixed typo
    9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e
    6f19e8656f5 Apply suggestions from code review
    1134134e727 kubelet/cm/containermap: Improving test coverage
    87f094c5e88 Replaces path.Operation with filepath.Operation (part 2)
    5111bced373 fix test cases that may be incorrect
    9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy
    bd778449f4d versioning of CRI API
    34d980e7709 i18n: Fix bug where package-level variables are not translated.
    ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go
    fd4adba9acd add sig/storage label for pkg/controller/volume package PR
    2557b35202f controller: add non-exist node test case
    95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug
    76c8765bda5 ensure etc-host file permission is 644 whatever umask is
    73883c71574 Remove default annotations from copied storage class
    f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver
    583ea17efd6 Add parameter to set SecurityContext for containers in tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
..
kubernetes k3s, kubernetes, nagios-nrpe: fix Upstream-Status formatting 2023-05-08 18:41:38 -04:00
kubernetes_git.bb kubernetes: update to 1.28.2 2023-11-06 16:21:12 +00:00
README.md kubernetes: add README 2021-12-15 12:55:28 -05:00

k8s: Kubernetes

meta-virtualization provides the recipes and packages suitable for a k8s cluster instance.

For a kubernetes controller:

  • packagegroup-k8s-host

For a kubernetes worker/node:

  • packagegroup-k8s-node

If kernel issues or missing features are detected, consider adding the "kernel-modules" package to your image (Since the configuration and RDEPENDS may not be correct for your kernel + k8s version).

CNI

The CNI base packages provide core support and are installed by default as dependencies of the kubernetes packages. Minimal configuration and startup are provided, but you will need to apply the CNI configuration of your choice after boot (see below fo an example)

Configure and initialize the host

A convenience script "k8s-init" is provided to do basic setup on the controller node. After the contoller boots, run it for kubeadm setup and other basic configuration.

Once the node is ready ('kubectl get nodes' to check), follow the instructions for copying the token to your home directory, and apply the networking configuration of choice (flannel in the example):

  % mkdir -p $HOME/.kube
  % cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  % chown $(id -u):$(id -g) $HOME/.kube/config

  % kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

Configuration and initialize the node/worker

Once the kubernetes node has booted, it is ready to join the cluster. Some basica configuration is done via the packages and a systctl.d configuration snippet.

Join the cluster (substitute your controller ip and token information):

kubeadm join <controller ip>:6443 --token cq8ngi.6m6mgqi9zf08ypc4 --discovery-token-ca-cert-hash sha256:6064ae531c8dad824f9eadff030f83ec84d00796fac75f1adbd343255eb34fd2

Notes:

Memory:

if running under qemu, the default of 256M of memory is not enough, k3s will OOM and exit.

Boot with qemuparams="-m 2048" to boot with 2G of memory (or choose the appropriate amount for your configuration)

CPUs:

Kubernetes needs at least two cpus, so ensure your qemuboot is smp of at least 2, and/or that your hardware has the required capabilties.

Disk:

if using qemu and core-image* you'll need to add extra space in your disks to ensure containers can start. The following in your image recipe, or local.conf would add 2G of extra space to the rootfs:

IMAGE_ROOTFS_EXTRA_SPACE = "2097152"

Example qemux86-64 boot line:

runqemu qemux86-64 nographic kvm slirp qemuparams="-m 2048"

k8s logs can be seen via:

% journalctl -u kubelet

or

% journalctl -xe

Example output from qemux86-64:

If you've lost the join token, you can create a new one, or list existing ones:

root@qemux86-64-7b:~# kubeadm token create --print-join-command
kubeadm join 10.10.10.117:6443 --token dr71zq.y5vi3s2n2antvcej --discovery-token-ca-cert-hash sha256:6064ae531c8dad824f9eadff030f83ec84d00796fac75f1adbd343255eb34fd2

root@qemux86-64-7b:~# kubeadm token list
TOKEN                     TTL         EXPIRES                USAGES                   DESCRIPTION                                                EXTRA GROUPS
cq8ngi.6m6mgqi9zf08ypc4   23h         2021-12-16T16:58:02Z   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token
dr71zq.y5vi3s2n2antvcej   23h         2021-12-16T17:46:28Z   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token
root@qemux86-64:~# kubectl get nodes
NAME            STATUS   ROLES                  AGE   VERSION
qemux86-64-7b   Ready    control-plane,master   51m   v1.23.1-rc.0.1+dd1b0a12471310-dirty
qemux86-64-9d   Ready    <none>                 49m   v1.23.1-rc.0.1+dd1b0a12471310-dirty