CNTRLPLANE-1: Update to Kubernetes v1.32.1#2147

Open

bertinatto wants to merge 2840 commits intoopenshift:masterfrom bertinatto:rebase-1.32

+318,097-352,670

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 8, 2024

Commits on Nov 9, 2024

Commits on Nov 11, 2024

Commits on Nov 12, 2024

Commits on Nov 13, 2024

Equate CPU limits below the minimum effective limit (10m)
tallclair
committed
Min cpu limit resize e2e test
tallclair
committed
Now that sleep is shorter, only expect to reach 3 within 30s
lauralorenz
committed
Merge pull request kubernetes#128764 from pohly/dra-kubelet-grpc-api-package-name
k8s-ci-robot
authored
Merge pull request kubernetes#128761 from ah8ad3/revert-126533
k8s-ci-robot
authored
Merge pull request kubernetes#128771 from tallclair/min-quota
k8s-ci-robot
authored
kubeadm: fix a bug where upgrade dryrun can not select the network interface correctly
SataQiu
committed
Merge pull request kubernetes#128777 from SataQiu/fix-upgrade-dryrun-20241113
k8s-ci-robot
authored
Merge pull request kubernetes#128559 from lauralorenz/crashloopbackoff-refactorimagepullbackoff-e2enodecriproxytest
k8s-ci-robot
authored
Fixed failing test by removing privilege check and some refactor
srivastav-abhishek
committed
fix: split TestCoreResourceEnqueue to deal with the timeout issue
sanposhiho
committed
Merge pull request kubernetes#128763 from srivastav-abhishek/fix-err-string
k8s-ci-robot
authored

Commits on Nov 14, 2024

Merge pull request kubernetes#128765 from sanposhiho/split-tests
k8s-ci-robot
authored

Commits on Nov 15, 2024

Commits on Nov 20, 2024

Commits on Nov 21, 2024

Commits on Nov 22, 2024

Commits on Nov 24, 2024

fix(e2e): retry on conflict when deleting extended resource
sanposhiho
committed

Commits on Nov 25, 2024

Commits on Nov 26, 2024

Commits on Nov 28, 2024

Commits on Dec 6, 2024

Commits on Dec 7, 2024

Commits on Dec 10, 2024

Commits on Dec 11, 2024

Commits on Dec 12, 2024

Commits on Dec 16, 2024

Fix volume expansion offline
gnufied
committed

Commits on Dec 18, 2024

fetch cni plugins from GitHub releases

upodroid
authored and
ameukam
committed

Commits on Dec 20, 2024

Commits on Dec 30, 2024

Commits on Jan 2, 2025

kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfiguration is not respected by 'kubeadm upgrade node'

SataQiu
authored and
neolit123
committed

Commits on Jan 6, 2025

Commits on Jan 7, 2025

Merge pull request kubernetes#129178 from liggitt/automated-cherry-pick-of-#129059-upstream-release-1.32
k8s-ci-robot
authored

Commits on Jan 8, 2025

Commits on Jan 9, 2025

Commits on Jan 13, 2025

kubelet: use env vars in node log query PS command
aravindhp
committed

Commits on Jan 14, 2025

Merge pull request kubernetes#129598 from aravindhp/automated-cherry-pick-of-#129595-upstream-release-1.32
k8s-ci-robot
authored

Commits on Jan 15, 2025

Release commit for Kubernetes v1.32.1
k8s-release-robot
committed

Commits on Jan 16, 2025

Merge remote-tracking branch 'ocp/master' into ocp-next
bertinatto
committed
UPSTREAM: 74956: apiserver: switch authorization to use protobuf client

mfojtik
authored and
bertinatto
committed
UPSTREAM: 93286: wait for apiservices on startup

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: filter out CustomResourceQuota paths from OpenAPI

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: patch aggregator to allow delegating resources

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: remove apiservice from sync in CRD registration when it exists

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: hardcoded restmapper with a few entries to rebootstrap SDN when SDN is down

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Extend NodeLogQuery feature

aravindhp
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: add service serving cert signer to token controller

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: exclude some origin resources from quota

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: add our immortal namespaces directly to admission plugin

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add openshift-kube-apiserver code

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: priorize some CRD groups over others

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: create termination events

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: bootstrap-rbac-policy: move over .well-known rules

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: warn only about unknown feature gates

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: disable AES24, not supported by FIPS

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: Remove excessive e2e logging

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: conditionally fill the UserAgent from the currently running test

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: export HandleFlags

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to allowed node labels

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: use hardcoded metrics scraping authorizer for delegated apiservers

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: add management support to kubelet

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KCM to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Ensure service ca is mounted for projected tokens

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: emit event when readyz goes true

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column

sttts
authored and
bertinatto
committed
UPSTREAM: 103612: tolerate additional, but congruent, events for integration test

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-ca.crt for migration compatibility

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Revert "Remove Endpoints write access from aggregated edit role"

danwinship
authored and
bertinatto
committed
UPSTREAM: <carry>: skip posting failures to aggregated APIs to avoid getting false positives until the server becomes ready

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: add max_housekeeping_interval

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Release lock on KCM and KS termination

tnozicka
authored and
bertinatto
committed
UPSTREAM: <carry>: use console-public config map for console redirect

atiratree
authored and
bertinatto
committed
UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: make the PSA workload admission warnings honor the changes that SCC will eventually make to the pod

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies

stlaz
authored and
bertinatto
committed
UPSTREAM: 115328: annotate early and late requests

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: disable load balancing on created cgroups when managed is enabled

haircommander
authored and
bertinatto
committed
UPSTREAM: <carry>: APISelfSubjectReview: only test v1beta1 API
bertinatto
committed
UPSTREAM: <carry>: Export internal code from k8s.io/apimachinery/pkg/util/managedfields
bertinatto
committed
UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kubernetes.default.svc, don't wait for aggregated availability

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups

atiratree
authored and
bertinatto
committed
UPSTREAM: <carry>: selfsubjectaccessreview: grant user:full scope to self-SARs that have user:check-access

liouk
authored and
bertinatto
committed
UPSTREAM: <carry>: retry etcd Unavailable errors

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Export cpu stats of ovs.slice via prometheus

MarSik
authored and
bertinatto
committed
UPSTREAM: <carry>: advertise shared cpus for mixed cpus feature

Tal-or
authored and
bertinatto
committed
UPSTREAM: <carry>: temporarily disable reporting e2e text bugs and enforce 2nd labeling to make tests work

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: add new admission for handling shared cpus

Tal-or
authored and
bertinatto
committed
UPSTREAM: <carry>: Add openshift feature gates to kube-apiserver - inject openshift feature gates into pkg/features

swghosh
authored and
bertinatto
committed
UPSTREAM: <carry>: allow type mutation for specific secrets

tkashem
authored and
bertinatto
committed
UPSTREAM: 126213: add test about container metrics from cadvisor

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: annotate audit events for requests during unready phase and graceful termination phase

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: add etcd3RetryingProberMonitor for retrying etcd Unavailable errors for the etcd health checker client

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Prefer local endpoint for cluster DNS service

Miciah
authored and
bertinatto
committed
UPSTREAM: <carry>: Remove ValidateHostExternalCertificate from route admission

chiragkyal
authored and
bertinatto
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs
bertinatto
committed
UPSTREAM: 129052: test/e2e/apimachinery/watchlist: select only wellknown secrets
bertinatto
committed
UPSTREAM: 129151: kubelet: only emit one reboot event
bertinatto
committed
UPSTREAM: <carry>: require configuration file enablement

ffromani
authored and
bertinatto
committed
UPSTREAM: <drop>: disable ResilientWatchCacheInitialization feature
bertinatto
committed
UPSTREAM: <drop>: hack/update-vendor.sh
bertinatto
committed
UPSTREAM: <drop>: make update
bertinatto
committed
UPSTREAM: <drop>: hack/update-vendor.sh
bertinatto
committed