143206 Commits
Author SHA1 Message Date
Kubernetes Release Robot 671745e4ff CHANGELOG: Update directory for v1.38.0-beta.0 release 2026-11-06 04:34:10 +00:00
kubernetes-prow[bot] 8444f2ac34 Merge pull request #143747 from romanbaron/opportunistic-batching-test-typo
scheduler: fixed a small typo in batch_test.go
2026-11-06 02:52:33 +00:00
kubernetes-prow[bot] 5d4de34f9e Merge pull request #143406 from mengqiy/objcompress1
Add a storage compression value transformer and its configuration
2026-11-06 02:52:24 +00:00
kubernetes-prow[bot] 1ca7499c9a Merge pull request #142397 from everettraven/upstream/mldsa/sa-token-gen
ML-DSA support for tokens
v1.38.0-beta.0
2026-11-06 00:02:25 +00:00
kubernetes-prow[bot] e405cba3cd Merge pull request #143823 from SEPURI-SAI-KRISHNA/fix-kubeadm-windows-socket-probe-leak
kubeadm: close the probe connection in isExistingSocket on Windows
2026-11-05 23:15:22 +00:00
kubernetes-prow[bot] ce80978422 Merge pull request #143778 from tallclair/remove_inplace_pod_scaling
Remove InPlacePodVerticalScaling feature gate
2026-11-05 23:15:13 +00:00
kubernetes-prow[bot] d9229a7cd1 Merge pull request #143776 from jpbetz/rbac-bootstrap-list-reconcile
Skip up-to-date bootstrap RBAC objects using the initial Lists
2026-11-05 21:49:24 +00:00
kubernetes-prow[bot] 5897b3ac79 Merge pull request #139079 from carlory/remove-fg-RecoverVolumeExpansionFailure
Remove feature gate RecoverVolumeExpansionFailure
2026-11-05 21:49:14 +00:00
David Yu 6b009f670d Trim compression duration buckets and split unframed read outcomes
compression_duration_seconds now tops out near 82ms instead of 2.6s.
Unframed reads outside the size limits get the same outcome as writes.
2026-11-05 21:10:48 +00:00
kubernetes-prow[bot] fa28c7a73b Merge pull request #143855 from serathius/optimistic-concurrency-whitebox-test
Prepare whilebox test for consistent get
2026-11-05 21:03:30 +00:00
kubernetes-prow[bot] 21152c8524 Merge pull request #143847 from serathius/watchcache-test-watch-stall
Test resync of stalled watchers
2026-11-05 21:03:21 +00:00
kubernetes-prow[bot] 59caf3e183 Merge pull request #143463 from jdzikowski/podgrouppostfilter-warning
KEP-5710: Log error when PostFilter plugin does not implement PodGroupPostFilterPlugin
2026-11-05 21:03:12 +00:00
Bryce Palmer 0bf39fd171 feat: add mldsa token support
Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
2026-11-05 15:51:57 -05:00
kubernetes-prow[bot] 49e17e24dc Merge pull request #142823 from bodapatisaikrishna/fix/141528-fake-tracker-lost-delete
client-go testing: deliver deletions between List and Watch
2026-11-05 19:33:34 +00:00
Joe Betz 4ffa763ad2 Skip up-to-date bootstrap RBAC objects using the initial Lists
EnsureRBACPolicy already lists all ClusterRoles and ClusterRoleBindings
before reconciling bootstrap RBAC policy, but discarded both lists and
then issued 132 sequential Get calls (ResourceVersion="") for the
bootstrap ClusterRoles and ClusterRoleBindings, including the priming
checks.

Use the lists only to skip work. A dry run (Confirm: false) against each
object's listed copy skips the object when nothing would change, and
priming skips entries the lists show need no migration. Everything else
is reconciled exactly as before, starting from a live Get, so a stale
list result can delay a repair until the next start but never drives a
write. The 14 kube-system and kube-public Roles and RoleBindings are
still read with per-object Gets.
2026-11-05 14:27:12 -05:00
Tim Allclair be90f569f3 Remove InPlacePodVerticalScaling feature gate
The InPlacePodVerticalScaling feature gate has been GA and locked to
true since v1.35, and is now removed. Code paths that handled the
disabled state are removed, along with gate overrides in tests.

The node version skew check in pod resize validation is also removed:
the oldest kubelet supported by a v1.38 apiserver is v1.35, where the
feature is always enabled.
2026-11-05 19:26:45 +00:00
Bryce Palmer fa16fcb9e9 features: add ServiceAccountTokenMLDSA feature gate
Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
2026-11-05 13:52:08 -05:00
Bryce Palmer af0bcbeb8e deps: bump go-jose/go-jose for ML-DSA support
Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
2026-11-05 13:52:02 -05:00
Marek Siarkowicz 61c480cfdd Prepare whilebox test for consistent get 2026-11-05 19:03:05 +01:00
kubernetes-prow[bot] a6f04b605a Merge pull request #143587 from antcybersec/remove-gate-nodeswap
pkg/features: remove GA feature gate NodeSwap
2026-11-05 18:01:25 +00:00
kubernetes-prow[bot] 2f96539e69 Merge pull request #143478 from pacoxu/dra-partition-ga
Promote DRAPartitionableDevices to GA
2026-11-05 18:01:14 +00:00
kubernetes-prow[bot] 0d89050dd0 Merge pull request #143810 from benluddy/tabular-serializer-benchmark
KEP-4222: Add table-based Serializer benchmarks.
2026-11-05 16:57:38 +00:00
kubernetes-prow[bot] 830030fc39 Merge pull request #142956 from galal-hussein/kep_3541_beta
KEP-3541 beta (StatefulSetRecreateStrategy)
2026-11-05 16:57:28 +00:00
SEPURI-SAI-KRISHNA 6b49701ed8 kubeadm: close the probe connection in isExistingSocket on Windows
isExistingSocket dials a socket to decide whether it exists. The Windows
implementation assigned the connection from winio.DialPipe to _ and
never closed it, and go-winio sets no finalizer on the handle, so every
socket that answered the probe left a named pipe instance open until
kubeadm exited. DetectCRISocket probes each of the known CRI sockets in
turn, so one instance leaked per socket that answered.

Defer Close on the connection, after the error check since DialPipe
returns a nil connection together with its error. The unix
implementation already closes its connection once the dial succeeds.
2026-11-05 22:17:25 +05:30
kubernetes-prow[bot] dd676c8680 Merge pull request #143841 from serathius/measure-request-allocations-benchtime
Support arbitrary benchtime by overriding formatItems
2026-11-05 16:10:03 +00:00
kubernetes-prow[bot] c87af0b818 Merge pull request #143657 from H3xKatana/bump-go-jose-v4.1.7
Bump go-jose to v4.1.7 for CVE-2026-116587
2026-11-05 16:09:51 +00:00
kubernetes-prow[bot] 6db0d5aa20 Merge pull request #142789 from stlaz/ctb_automount
KEP-6283: use kubernetes.io/kube-apiserver-serving CTB to mount kube-apiserver trust
2026-11-05 16:09:29 +00:00
kubernetes-prow[bot] 1f793e1740 Merge pull request #143604 from asvw/upgrade-diff-dry-run-etcd
kubeadm: include the etcd manifest in 'upgrade diff' and the dry run
2026-11-05 14:55:38 +00:00
kubernetes-prow[bot] be0e3ebb21 Merge pull request #143495 from jdzikowski/validate-basic-disruption-all-api
Disallow "all" disruption mode for non-"gang" scheduling policy in API validation
2026-11-05 14:55:30 +00:00
Jarosław Dzikowski f3ece885b2 scheduler: log error when PostFilter plugin does not implement PodGroupPostFilterPlugin 2026-11-05 14:13:20 +00:00
Marek Siarkowicz 9a91e4bd80 Test resync of stalled watchers 2026-11-05 14:53:11 +01:00
kubernetes-prow[bot] f7765bd1e8 Merge pull request #143696 from serathius/watchcache-consistent-txn-from-cache
Implement ConsistentGetFromCache feature
2026-11-05 13:15:08 +00:00
Marek Siarkowicz e40a1126cd Support arbitrary benchtime by overriding formatItems 2026-11-05 13:46:27 +01:00
kubernetes-prow[bot] c41caeaf11 Merge pull request #143734 from mborsz/client-go-connection-pool-kubeconfig
client-go: add min-connection-pool-size to kubeconfig
2026-11-05 12:29:23 +00:00
kubernetes-prow[bot] 79821ed676 Merge pull request #143226 from GFilipek/queue-gated-podgroup-requeue-skip
scheduler: only evaluate gated pods when requeuing a gated pod group
2026-11-05 12:29:14 +00:00
Marek Siarkowicz 4abc414e9c Implement ConsistentGetFromCache feature 2026-11-05 12:06:14 +01:00
Marek Siarkowicz 8802b3fcf3 Extract cachedSuggestion 2026-11-05 12:06:14 +01:00
kubernetes-prow[bot] 0098d32d67 Merge pull request #143765 from ndixita/noderesourcesfit-scorer-fg-fix
scheduler: honor pod-level and resize feature gates in NodeResourcesFit scorer
2026-11-05 10:55:24 +00:00
kubernetes-prow[bot] 23e0ce831e Merge pull request #142534 from ArangoGutierrez/fix/cache-newsnapshot-node-order
scheduler: make NewSnapshot node order deterministic
2026-11-05 10:55:14 +00:00
kubernetes-prow[bot] 86dd58411d Merge pull request #143825 from serathius/watchcache-freshness-benchmark
Benchmark freshness waiter
2026-11-05 10:09:32 +00:00
kubernetes-prow[bot] ac968f40de Merge pull request #143261 from bolubo/fix/namespace-selector-queueing-hint-v2
InterPodAffinity: handle namespaceSelector in assigned-pod queueing hints
2026-11-05 10:09:23 +00:00
Stanislav Láznička 84b164d768 make it possible to mount ServiceAccount-mounted CA cert from ClusterTrustBundle
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
2026-11-05 10:44:35 +01:00
David Yu 911dcabafa Run the selector checks in the loader, not in validation hooks
The +k8s:customValidation tags and v1alpha1/validation_compression.go
are gone. newCompressionConfiguration calls validateConfig, which runs
the generated validation, then ValidateSelectors and ValidateMasking.
2026-11-05 09:20:56 +00:00
kubernetes-prow[bot] b3b65799be Merge pull request #143784 from muskan-creates352/fix-alias-error-reporting
Report alias name instead of binary name on alias flag error
2026-11-05 09:19:43 +00:00
kubernetes-prow[bot] ef6adad97c Merge pull request #142777 from rithwik-01/fix-podgroup-scheduled-condition-regression
scheduler: don't regress PodGroup Scheduled condition from stale cache
2026-11-05 09:19:33 +00:00
Marek Siarkowicz 889967f1fc Benchmark freshness waiter 2026-11-05 09:15:46 +01:00
kubernetes-prow[bot] 79858c2bb4 Merge pull request #142763 from emanolios-stripe/fix-watch-termination-pacing
apiserver: rate limit all active watches during shutdown
2026-11-05 07:49:13 +00:00
kubernetes-prow[bot] 00ca73359f Merge pull request #143793 from Shaurya55555/perf/precompile-wildcard-dns-regexp
apimachinery: compile the wildcard DNS-1123 subdomain regexp once
2026-11-05 03:43:20 +00:00
kubernetes-prow[bot] 0cd31d52e5 Merge pull request #142467 from gavinkflam/5936-move-to-beta
KEP-5936: Beta support of atomic write volume user fields behind a feature gate AtomicWriteVolumeUserFields
2026-11-05 03:43:12 +00:00
kubernetes-prow[bot] 84f391eda9 Merge pull request #143646 from yongruilin/dv-static-manifest
Run declarative validation on kubelet static pods
2026-11-05 02:43:18 +00:00