CNTRLPLANE-371: Update to Kubernetes v1.33.1#2314

Open

bertinatto wants to merge 2404 commits intoopenshift:masterfrom

bertinatto:bump-v1.33

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 21, 2025

Commits on Mar 22, 2025

Fix container_spec_memory_swap_limit_bytes in ci-cos-cgroupv1-containerd-node-e2e CI jobs
dims
committed
Use established pattern for kubelet metrics url
dims
committed
Merge pull request #130990 from BenTheElder/inotify-watches-kube-up
k8s-ci-robot
authored

Commits on Mar 23, 2025

Commits on Mar 24, 2025

Commits on Mar 25, 2025

Commits on Mar 28, 2025

Commits on Mar 31, 2025

Build etcd 3.5.21 image
joshjms
committed
Merge pull request #131105 from joshjms/bump-image-3.5.21
k8s-ci-robot
authored
cleanup etcd v3.6.0
joshjms
committed
bump etcd 3.5.21 sdk
ahrtr
committed
fix narrow spaces of %e for x/net bump
ahrtr
committed
Ensure that cacher is terminated in TestGetListRecursivePrefix

serathius
authored and
ahrtr
committed
Fix flake, non-consistent list doesn't give any guarantees about staleness

serathius
authored and
ahrtr
committed
Stop cacher in TestWatchStreamSeparation to speed up shutdown

serathius
authored and
ahrtr
committed
Don't start etcd for skipped test

serathius
authored and
ahrtr
committed
Parallelize cacher list tests

liggitt
authored and
ahrtr
committed

Commits on Apr 3, 2025

Merge pull request #131144 from joshjms/update-etcd-3.5.21
k8s-ci-robot
authored

Commits on Apr 8, 2025

Commits on Apr 10, 2025

Commits on Apr 16, 2025

Commits on Apr 19, 2025

Commits on Apr 20, 2025

Merge remote-tracking branch 'origin/master' into release-1.33
k8s-release-robot
committed

Commits on Apr 21, 2025

Merge pull request #131369 from ameukam/update-1242-master
k8s-ci-robot
authored

Commits on Apr 22, 2025

Commits on Apr 29, 2025

Handle unsupported node expansion for RWX volumes

carlory
and
gnufied
committed

Commits on May 6, 2025

Commits on May 7, 2025

Merge pull request #131427 from princepereira/automated-cherry-pick-of-#131138-upstream-release-1.33
k8s-ci-robot
authored

Commits on May 8, 2025

DRA: Fix failure to allocate large number of devices
mortent
committed

Commits on May 9, 2025

fix: fixes a possible panic in `NewYAMLToJSONDecoder`
tigrato
committed

Commits on May 13, 2025

Commits on May 15, 2025

Release commit for Kubernetes v1.33.1
k8s-release-robot
committed

Commits on May 29, 2025

Merge remote-tracking branch 'ocp/master' into ocp-next
bertinatto
committed
UPSTREAM: 74956: apiserver: switch authorization to use protobuf client

mfojtik
authored and
bertinatto
committed
UPSTREAM: 93286: wait for apiservices on startup

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: filter out CustomResourceQuota paths from OpenAPI

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: patch aggregator to allow delegating resources

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: remove apiservice from sync in CRD registration when it exists

mfojtik
authored and
bertinatto
committed
UPSTREAM: <carry>: hardcoded restmapper with a few entries to rebootstrap SDN when SDN is down

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Extend NodeLogQuery feature

aravindhp
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: add service serving cert signer to token controller

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-controller-manager: exclude some origin resources from quota

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: add our immortal namespaces directly to admission plugin

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add openshift-kube-apiserver code

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: priorize some CRD groups over others

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: create termination events

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: bootstrap-rbac-policy: move over .well-known rules

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: warn only about unknown feature gates

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: disable AES24, not supported by FIPS

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: Remove excessive e2e logging

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: conditionally fill the UserAgent from the currently running test

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: export HandleFlags

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to allowed node labels

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: use hardcoded metrics scraping authorizer for delegated apiservers

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: add management support to kubelet

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: allows for switching KCM to talk to Kube API over localhost

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Ensure service ca is mounted for projected tokens

marun
authored and
bertinatto
committed
UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total

sttts
authored and
bertinatto
committed
UPSTREAM: <carry>: emit event when readyz goes true

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column

sttts
authored and
bertinatto
committed
UPSTREAM: 103612: tolerate additional, but congruent, events for integration test

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-ca.crt for migration compatibility

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: Revert "Remove Endpoints write access from aggregated edit role"

danwinship
authored and
bertinatto
committed
UPSTREAM: <carry>: skip posting failures to aggregated APIs to avoid getting false positives until the server becomes ready

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: add max_housekeeping_interval

rphillips
authored and
bertinatto
committed
UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Release lock on KCM and KS termination

tnozicka
authored and
bertinatto
committed
UPSTREAM: <carry>: use console-public config map for console redirect

atiratree
authored and
bertinatto
committed
UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: make the PSA workload admission warnings honor the changes that SCC will eventually make to the pod

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies

stlaz
authored and
bertinatto
committed
UPSTREAM: 115328: annotate early and late requests

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: disable load balancing on created cgroups when managed is enabled

haircommander
authored and
bertinatto
committed
UPSTREAM: <carry>: APISelfSubjectReview: only test v1beta1 API
bertinatto
committed
UPSTREAM: <carry>: Export internal code from k8s.io/apimachinery/pkg/util/managedfields
bertinatto
committed
UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kubernetes.default.svc, don't wait for aggregated availability

deads2k
authored and
bertinatto
committed
UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups

atiratree
authored and
bertinatto
committed
UPSTREAM: <carry>: selfsubjectaccessreview: grant user:full scope to self-SARs that have user:check-access

liouk
authored and
bertinatto
committed
UPSTREAM: <carry>: retry etcd Unavailable errors

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Export cpu stats of ovs.slice via prometheus

MarSik
authored and
bertinatto
committed
UPSTREAM: <carry>: advertise shared cpus for mixed cpus feature

Tal-or
authored and
bertinatto
committed
UPSTREAM: <carry>: temporarily disable reporting e2e text bugs and enforce 2nd labeling to make tests work

soltysh
authored and
bertinatto
committed
UPSTREAM: <carry>: add new admission for handling shared cpus

Tal-or
authored and
bertinatto
committed
UPSTREAM: <carry>: Add openshift feature gates to kube-apiserver - inject openshift feature gates into pkg/features

swghosh
authored and
bertinatto
committed
UPSTREAM: <carry>: allow type mutation for specific secrets

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: annotate audit events for requests during unready phase and graceful termination phase

tkashem
authored and
bertinatto
committed
UPSTREAM: <carry>: add etcd3RetryingProberMonitor for retrying etcd Unavailable errors for the etcd health checker client

p0lyn0mial
authored and
bertinatto
committed
UPSTREAM: <carry>: Prefer local endpoint for cluster DNS service

Miciah
authored and
bertinatto
committed
UPSTREAM: <carry>: Remove ValidateHostExternalCertificate from route admission

chiragkyal
authored and
bertinatto
committed
UPSTREAM: <carry>: require configuration file enablement

ffromani
authored and
bertinatto
committed
UPSTREAM: <carry>: add arbiter node role to known labels

eggfoobar
authored and
bertinatto
committed
UPSTREAM: <carry>: disable etcd readiness checks by default

ingvagabund
authored and
bertinatto
committed
UPSTREAM: <carry>: log only deprecated api requests

sanchezl
authored and
bertinatto
committed
UPSTREAM: <carry>: Don't retry storage calls with side effects.

benluddy
authored and
bertinatto
committed
UPSTREAM: <carry>: admission: validate minimumKubeletVersion

haircommander
authored and
bertinatto
committed
UPSTREAM: <carry>: Add volume group snapshot test driver

jsafrane
authored and
bertinatto
committed
UPSTREAM: <carry>: allow TLS1.3 or modern profile to be specified

authored and
bertinatto
committed
UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated."

benluddy
authored and
bertinatto
committed
UPSTREAM: 131187: Update PodSecurityLevel used during Service CIDRs tests
bertinatto
committed
UPSTREAM: 131217: Shorten long directory names with e2e pod logs
bertinatto
committed
UPSTREAM: 131236: RWX tests should create RWX volumes

jsafrane
authored and
bertinatto
committed
UPSTREAM: 131249: Kubelet: Randomize ClusterRole name in e2e
bertinatto
committed
UPSTREAM: 131361: Wait for resource quota status to be populated
bertinatto
committed
UPSTREAM: 131409: test/e2e/node/kubelet_authz.go: fix SAR to include SA groups
bertinatto
committed
UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes

gnufied
authored and
bertinatto
committed
UPSTREAM: 131518: Don't reinitialize test framework during each test case
bertinatto
committed
UPSTREAM: 131742: [sig-scheduling] SchedulerPreemption [Serial] validates various priority Pods preempt expectedly with the async preemption: replace finalizers with preStop hook and TerminationGra…
bertinatto
committed
UPSTREAM: 131852: test/e2e/apimachinery/namespace.go: make OrderedNamespaceDeletion test serial
bertinatto
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs
bertinatto
committed
UPSTREAM: <drop>: hack/update-vendor.sh
bertinatto
committed
UPSTREAM: <drop>: make update
bertinatto
committed
UPSTREAM: <drop>: hack/update-vendor.sh
bertinatto
committed