1278 Commits

Author SHA1 Message Date
kubernetes-prow[bot]
af82d41a6c Merge pull request #137536 from aojea/nft_netlink
kube-proxy: Enable netlink support for nftables mode by default
2026-07-22 20:15:47 +00:00
Antonio Ojea
fba8b7408d use latest knftables library
Change-Id: I1a750980e883dbda7188dd231b13bcba6efd1f80
2026-07-22 17:31:13 +00:00
Hemant Kumar
893479ed7b Bump CSI again
bump vendor/module.txt
2026-07-22 08:44:08 -04:00
Hemant Kumar
804c51fdc5 Update vendor to new CSI spec 2026-07-22 08:37:57 -04:00
kubernetes-prow[bot]
2b9cc52cab Merge pull request #140772 from Choraden/remove-ca-gce-e2e
Remove Cluster-Autoscaler GCE E2E tests that were migrated
2026-07-22 12:13:49 +00:00
Patrick Ohly
15a0bbcc47 dependencies: cel-go v0.29.2
There may be some useful enhancements in
https://github.com/cel-expr/cel-go/releases/tag/v0.28.0 and
https://github.com/cel-expr/cel-go/releases/tag/v0.29.0, but primarily the goal
is to get https://github.com/cel-expr/cel-go/pull/1357 (included in v0.29.0)
because that is a relevant performance improvement for how DRA uses CEL.

Updating to >= v0.28.1 is safe, in contrast to v0.28.0, because v0.28.1 includes
https://github.com/cel-expr/cel-go/pull/1303 and therefore doesn't trigger
https://github.com/kubernetes/kubernetes/issues/138334.

As explained by Tristan
Swadell (https://github.com/kubernetes/kubernetes/pull/140205#issuecomment-4877100299),
startsWith now scales to the size of the substring rather than the target
string, which changes some of the cost estimates. In another case, the
substring has to be made larger to trip an expected cost budget error.
2026-07-22 10:53:08 +02:00
kubernetes-prow[bot]
9b711a4f97 Merge pull request #140429 from dgrisonnet/toggle-container-discovery
kubelet/cadvisor: disable container discovery when using CRI stats
2026-07-21 21:23:51 +00:00
Davanum Srinivas
0706a3bb89 Update k8s.io/kube-openapi to v0.0.0-20260721132016-d427ff9ee9ad
Picks up:
- kubernetes/kube-openapi#625: update the go-openapi/swag family to v0.27.1
- kubernetes/kube-openapi#622: propagate nullable field between SMD and OpenAPI schemas

Transitive dependency changes:
- github.com/go-openapi/swag (and submodules) v0.25.4 -> v0.27.1
- github.com/go-openapi/jsonpointer v0.22.4 -> v1.0.0
- github.com/go-openapi/jsonreference v0.21.4 -> v1.0.0
- github.com/go-openapi/swag/jsonname removed (package now provided by jsonpointer)
- github.com/go-openapi/swag/pools added

No changes to hack/unwanted-dependencies.json needed.
2026-07-21 09:56:05 -04:00
Bartek Plotka
8b3a2bd2aa Update prometheus/client_golang to 1.24.0
Signed-off-by: Bartek Plotka <bwplotka@gmail.com>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-07-21 06:59:31 -04:00
Hubert Grochowski
513b55b35a Remove Cluster-Autoscaler GCE E2E tests
These tests were migrated to live in kubernetes/autoscaler[1] some time
ago, where they are run as periodic job[2].

The remaining helper functions stayed as they are used in
dns_autoscaling tests.

Vendor files were regenerated with ./hack/update-vendor.sh

[1] https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler/e2e
[2] https://prow.k8s.io/job-history/gs/kubernetes-ci-logs/logs/ci-kubernetes-e2e-gci-gce-autoscaling
2026-07-21 09:41:43 +00:00
kubernetes-prow[bot]
2248808797 Merge pull request #140621 from dims/update-sig-node-deps
Update dependencies used by sig-node: containerd/api, filepath-securejoin, cgroups, and selinux
2026-07-20 13:42:20 +00:00
yashsingh74
5527c7ad0b bump coredns to v1.14.6
Signed-off-by: yashsingh74 <yashsingh1774@gmail.com>
2026-07-16 22:19:18 +05:30
Davanum Srinivas
4d8a83b428 Update dependencies used by sig-node
This change updates four dependencies:

- github.com/containerd/containerd/api from v1.11.0 to v1.11.1
- github.com/cyphar/filepath-securejoin from v0.6.1 to v0.7.0
- github.com/opencontainers/cgroups from v0.0.6 to v0.0.7
- github.com/opencontainers/selinux from v1.13.1 to v1.15.1

The new filepath-securejoin release requires a newer version of
cyphar.com/go-pathrs, so that module also moves from v0.2.2 to v0.2.5.
The file hack/unwanted-dependencies.json did not need any changes.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-07-16 08:14:43 +05:30
Damien Grisonnet
4f01955a87 kubelet/cadvisor: disable container discovery when using CRI stats
When the container runtime provides stats via CRI, cAdvisor only needs
to track the root container for node-level resource and filesystem
metrics. Set DisableContainerDiscovery on the cAdvisor manager to skip
plugin initialization, cgroup watchers, and subcontainer scanning in
that mode.

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2026-07-15 14:51:05 +02:00
kubernetes-prow[bot]
21bb34663a Merge pull request #140361 from squeed/vendor-update-ginkgo
vendor: bump github.com/onsi/ginkgo/v2 to v2.32.0
2026-07-10 12:45:51 +00:00
Davanum Srinivas
c2e122037d bump github.com/google/cadvisor/lib from v0.60.3 to v0.60.4
The new cadvisor version requires newer golang.org/x modules. Module
version selection raised crypto, mod, net, sync, sys, term, text, and
tools. golang.org/x/net moves from a pseudo-version to the v0.57.0
release, which includes the http2 fixes the pseudo-version pointed at.

cadvisor/lib no longer depends on github.com/gogo/protobuf. This change
removes cadvisor/lib from the gogo/protobuf dependants list in
hack/unwanted-dependencies.json.
2026-07-10 08:24:03 +05:30
Casey Callendrello
baed0ea45d vendor: bump github.com/onsi/ginkgo/v2 to v2.32.0
This update adds a a new command-line flag to tests, --sleep-on-failure,
which pauses execution at the first failed assertion. This gives time to
debug the state of the system before the After* hooks teardown any
state.

Signed-off-by: Casey Callendrello <c1@caseyc.net>
2026-07-09 14:19:52 +02:00
Jordan Liggitt
863777a6cf Bump github.com/containerd/ttrpc to v1.2.9 2026-07-08 16:23:51 -04:00
Davanum Srinivas
0e1f1daae1 kubelet: read OOM events in-tree and drop the cadvisor oomparser dependency
The kubelet used cadvisor's lib/utils/oomparser to watch the kernel log for
OOM kills and to produce the container_oom_events_total metric. That made the
kubelet depend on the cadvisor lib module for OOM handling.

This moves OOM handling in-tree:

- The OOM kill parser is forked from cadvisor into
  third_party/forked/cadvisor/oomparser. It reads /dev/kmsg and extracts OOM
  events, adapted to take a context.Context and log through klog.
- The kmsg reader is forked from github.com/euank/go-kmsg-parser into
  third_party/forked/go-kmsg-parser/kmsgparser.
- The kubelet OOM watcher reads OOM events through the forked parser and
  records the container_oom_events_total metric in-tree.
- cadvisor/lib is bumped to v0.60.3, which no longer ships the OOM parser.
  This removes the transitive github.com/euank/go-kmsg-parser
  v2.0.0+incompatible dependency and the vendored cadvisor lib/utils/oomparser
  package.

Behavior is unchanged. OOM events are still emitted and the metric still
reports the same counts.
2026-06-26 20:35:19 -04:00
kubernetes-prow[bot]
fbef17bc5f Merge pull request #139870 from dims/cadvisor-lib
kubelet: depend on github.com/google/cadvisor/lib
2026-06-25 16:46:29 +00:00
Davanum Srinivas
0c61430054 kubelet: adopt lib/model pointer sub-stats and restore the stats nil-checks
github.com/google/cadvisor/lib v0.60.2 models the per-subsystem container
stats (Cpu, Memory, Network, DiskIo, Processes) as pointers, so a nil
again distinguishes "not collected" from a collected zero. Restore the
kubelet's original nil-checks in helper.go and cadvisor_stats_provider.go
(now equivalent to the pre-lib code), adapt the test fixtures and winstats
to build pointer sub-stats, and bump the vendored lib to v0.60.2.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-06-24 13:46:45 -04:00
yashsingh74
fec87e7d74 bump coredns to v1.14.3
Signed-off-by: yashsingh74 <yashsingh1774@gmail.com>
2026-06-22 09:55:13 +05:30
Davanum Srinivas
f451aa0762 kubelet: depend on github.com/google/cadvisor/lib
Migrate the kubelet (and the kube-proxy conntrack helper) off the full github.com/google/cadvisor module onto the lean github.com/google/cadvisor/lib: repoint info/v1+info/v2 type usage to lib/model and the manager/fs/cache/etc. consumers to lib/*; regenerate the cadvisor.Interface mocks; keep the kubelet-pinned cAdvisor global flags via lib/cadvisorflags.

go.mod: require + replace github.com/google/cadvisor/lib (=> the dims/cadvisor/lib fork for now, until lib is tagged) and drop the full github.com/google/cadvisor module entirely; keep github.com/containerd/containerd/api at v1.11.0 (matching upstream master); add github.com/google/cadvisor to unwanted-dependencies.json unwantedModules so the full module cannot be re-vendored.

test/e2e_node: the one remaining consumer of the full module -- the node-e2e ResourceCollector, which used the v2 HTTP client (client/v2) + v2 API types (info/v2) -- now scrapes the standalone cAdvisor pod's /api/v2.1/stats directly over HTTP+JSON, so test/e2e_node depends on no cAdvisor package. No change to the kubelet's stats surfaces.
2026-06-20 17:27:16 -04:00
Kubernetes Prow Robot
1b85ff009e Merge pull request #137767 from princepereira/ppereira-kproxy-prometheus-metrics-master
Adding prometheues metrics for Kubeproxy failed loadbalancer operations.
2026-06-10 20:33:57 +05:30
Prince Pereira
62f1d9062c Add Prometheus metrics for KubeProxy failed loadbalancer operations 2026-06-09 20:30:36 +00:00
Jordan Liggitt
fc5828f588 Bump github.com/containerd/typeurl/v2 2026-06-09 11:10:21 -04:00
Jefftree
ec84379a64 Bump etcd to v3.7.0-rc.0 and update vendor 2026-06-01 21:37:41 +00:00
Stephen Kitt
8f971144d0 Bump cadvisor to 0.57.0
This adds container creation timestamps.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-05-19 11:42:44 +02:00
Patrick Ohly
8c924cbda4 dependencies: ginkgo v2.28.3, gomega v1.40.0 2026-05-08 11:17:55 +02:00
Davanum Srinivas
30a9e7d1b3 Update gRPC ecosystem dependencies
- google.golang.org/grpc: v1.80.0 -> v1.81.0
- github.com/grpc-ecosystem/grpc-gateway/v2: v2.28.0 -> v2.29.0
- github.com/containerd/containerd/api: v1.10.0 -> v1.11.0
- github.com/containerd/ttrpc: v1.2.7 -> v1.2.8
- google.golang.org/genproto/googleapis/rpc: v0.0.0-20260406210006 -> v0.0.0-20260414002931
- google.golang.org/genproto/googleapis/api: v0.0.0-20260401024825 -> v0.0.0-20260414002931

Also update hack/unwanted-dependencies.json: containerd/containerd/api v1.11.0
no longer depends on github.com/golang/protobuf.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-05-05 20:06:14 -04:00
ChengHao Yang
fc1726397e Revert "bump coredns to v1.14.3" 2026-04-30 22:24:50 +08:00
yashsingh74
548ace71c0 bump coredns to v1.14.3
Signed-off-by: yashsingh74 <yashsingh1774@gmail.com>
2026-04-29 11:51:52 +05:30
Kubernetes Prow Robot
446abd3e5f Merge pull request #138621 from pohly/dep-moby-term
dependencies: update github.com/moby/term v0.5.2
2026-04-28 02:00:47 +05:30
Patrick Ohly
a49b40cc92 dependencies: update github.com/moby/term v0.5.2
This will get pulled in eventually. Doing it now simplifies some upcoming PR.
2026-04-27 17:06:19 +02:00
Paco Xu
8730b0ebc9 bump github.com/stretchr/objx to v0.5.3 2026-04-27 14:59:42 +08:00
Kubernetes Prow Robot
e9b95827eb Merge pull request #138573 from dims/update-go-openapi-deps-rebase
Update go-openapi dependencies (jsonpointer, jsonreference, swag)
2026-04-26 05:42:46 +05:30
Humble Devassy Chirammal
15492a41ed etcd: bump etcd sdk to v3.6.10
Bump go.etcd.io/etcd/{api,client/pkg,client,pkg,server}/v3 from v3.6.8 to v3.6.10.
go.etcd.io/etcd/raft/v3 is intentionally left unchanged (separate release cadence).

Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
2026-04-25 09:08:49 +05:30
Benjamin Elder
686a126f69 hack/update-vendor.sh 2026-04-24 19:38:58 -07:00
Davanum Srinivas
693dc57f57 Update go-openapi dependencies (jsonpointer, jsonreference, swag)
Bump go-openapi dependencies to latest versions:
- github.com/go-openapi/jsonpointer v0.21.0 → v0.22.4
- github.com/go-openapi/jsonreference v0.20.2 → v0.21.4
- github.com/go-openapi/swag v0.23.0 → v0.25.4

The new swag version has been restructured into a multi-module monorepo
with submodules (cmdutils, conv, fileutils, jsonname, jsonutils, loading,
mangling, netutils, stringutils, typeutils, yamlutils). As a result:
- mailru/easyjson and josharian/intern are no longer transitive deps
  and have been removed from vendor
- go-openapi/jsonpointer and go-openapi/swag no longer reference
  unwanted deps davecgh/go-spew, mailru/easyjson, or gopkg.in/yaml.v3
- Updated hack/unwanted-dependencies.json accordingly

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-04-24 08:13:31 -04:00
Davanum Srinivas
dc29a934e4 Update github.com/fxamacker/cbor/v2 to v2.9.1
Parser hardening for the kube-apiserver CBOR deserializer (PRs #750,
#753, #757): fixes tag-1 epoch float64 overflow into time.Time fields
(directly reachable via DecTagOptional decode path), RawMessage clone
defense, and keyasint type-confusion fixes.
2026-04-23 21:43:02 -04:00
Kubernetes Prow Robot
5ed1fd971d Merge pull request #138192 from skitt/otel-1.42
Bump otel to 1.43.0 and contrib to 0.68.0
2026-04-23 20:00:53 +05:30
Kubernetes Prow Robot
326c31cdc0 Merge pull request #138344 from dims/update-cel-go-dep
Update github.com/google/cel-go v0.26.0 -> v0.27.0 AND avoid v0.28.0
2026-04-23 19:00:46 +05:30
Stephen Kitt
1a63916abe Bump otel to 1.43.0 and contrib to 0.68.0
See
https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.41.0
https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.42.0
https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0
and
https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.41.0
https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.42.0
https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.43.0
for details.

otelgrpc no longer produces "messages" span events so these are
removed from the tracing test.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-04-23 14:35:21 +02:00
Davanum Srinivas
f6209104d2 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
Kubernetes-commit: 7e9c2c8eef26f99aa2f94d8e09d6d32de86c7769
2026-04-13 13:57:52 -04:00
Davanum Srinivas
09fbff5735 Update github.com/google/cel-go v0.26.0 -> v0.27.0
Bump cel-go to v0.27.0 to pick up the fix for context cancellation
error reporting that's breaking CI (see #138334).

Changes worth noting:
- cel-go switched from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3,
  so removed it from the gopkg.in/yaml.v3 unwanted references
- Dropped transitive dep github.com/stoewer/go-strcase
- Updated transitive dep github.com/antlr4-go/antlr/v4
- Pinned cel-go at v0.27.0 in hack/unwanted-dependencies.json

Kubernetes-commit: <drop>
2026-04-13 08:53:35 -04:00
Paco Xu
a304826799 bump spf13/cobra to v1.10.2 2026-03-18 16:46:23 +08:00
Paco Xu
8f41f5014f bump github.com/coredns/corefile-migration to v1.0.32 2026-03-11 07:59:40 +08:00
Humble Devassy Chirammal
600d188f2b dependencies: bump gomega to v1.39.1 and ginkgo to v2.28.1 2026-02-27 18:44:36 +05:30
Davanum Srinivas
aa4159c2d2 Bump prometheus/common to v0.67.5 and prometheus/procfs to v0.19.2
prometheus/common v0.66.1 -> v0.67.5:
- Breaking: TextParser must now use NewTextParser() constructor
- Float/gauge histograms support in expfmt
- Fixed panic in tlsRoundTripper when CA file missing
- https://github.com/prometheus/common/compare/v0.66.1...v0.67.5

prometheus/procfs v0.16.1 -> v0.19.2:
- New: process shared memory, netfilter queue, hung_task metrics
- Enhanced meminfo (zswap, hugetlb fields)
- MD raid component devices exposed
- Fixed ZswappedBytes calculation
- https://github.com/prometheus/procfs/compare/v0.16.1...v0.19.2

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-02-03 21:25:04 -05:00
Kubernetes Prow Robot
4caf96e199 Merge pull request #136598 from dgrisonnet/update-go-systemd
Bump go-systemd to v22.7.0
2026-01-30 03:07:56 +05:30