File kubernetes1.27.changes of Package kubernetes1.27.35091
-------------------------------------------------------------------
Wed Sep 20 17:49:17 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- fixes for bsc#1214406
- update `Wants` directive in [Unit] section of `kubelet.service`:
* add: `containerd.service`
* remove: `docker.service`
- updating container runtime prerequisites:
(Refer: k8s.io/docs/setup/production-environment/container-runtimes/#install-and-configure-prerequisites)
* update `90-kubeadm.conf` to add below iptables rules:
- net.bridge.bridge-nf-call-iptables = 1
- net.bridge.bridge-nf-call-ip6tables = 1
* update `kubeadm.conf` to add `overlay` kernel module
* update .spec file to:
- add post-installation scriptlet for `kubeadm` package to enable iptables rules defined in `90-kubeadm.conf` using sysctl
- add conditional checks to load kernel modules (br_netfilter, overlay) in `kubelet-common` package post-installation scriptlet
- update `kubelet-common` post scriptlet to correctly update `KUBELET_VER` var in `/etc/sysconfig/kubelet` file based on fillup template
- add below to `kubelet` subpackage to recommend installing correct version of package providing `kubernetes-kubelet-common` :
* `Recommends: kubernetes-kubelet-common = %{version}`
- add below to `kubeadm` subpackage to recommend installing correct version of `kubelet` and `kubelet-common` packages:
* `Recommends: kubernetes%{baseversion}-kubelet`
-------------------------------------------------------------------
Wed Sep 20 09:26:45 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.20.8`
- Update to version 1.27.6:
* Release commit for Kubernetes v1.27.6
* [go] Bump images, versions and deps to use Go 1.20.8
* fix: concurrent map writes in e2e test
* Automated cherry pick of #119776: Fix a job quota related deadlock (#120320)
* Fix OpenAPI aggregation cleanup
* Fallback to legacy discovery on a wider range of conditions in aggregator
* apiextensions-apiserver: generate applyconfigurations
* TopologyAwareHints: Take lock in HasPopulatedHints
* Mark Job onPodConditions as optional in pod failure policy
* Update CHANGELOG/CHANGELOG-1.27.md for v1.27.5
* Incorporating feedback on 119341
* check for overflow
* Fix CEL cost handling of zero length replacement strings
* generate ReportingInstance and ReportingController in Event
* Pass Pinned field to kubecontainer.Image
* prep for go1.21: use -e in go list
* Skip apiserver_admission_webhook_request_total during context-canceled
* Ignore context canceled from validate and mutate webhook failopen metric
* kubeadm: fix nil pointer when etcd member is already removed
* update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
* fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
* Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
* Issue 4230: remove readiness check for cache exclusion
* add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3
* update openapi
* expose apiregistration.k8s.io into OpenAPIV3
* fix openapi/v3 non local apiservices aggregation
* node: devicemgr: topomgr: add logs
* e2e: node: add test to check device-requiring pods are cleaned up
* e2e: node: devices: improve the node reboot test
* e2e: node: devicemanager: update tests
* kubelet: devices: skip allocation for running pods
* Add test coverage of result size of string operations
* Bump cel-go to v0.12.7
-------------------------------------------------------------------
Tue Sep 12 12:53:12 UTC 2023 - priyanka.saggu@suse.com
- Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.20.7`
- Update to version 1.27.5:
* Use environment varaibles for parameters in Powershell
* Use env varaibles for passing path
* Avoid returning nil responseKind in v1beta1 aggregated discovery
* [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.7
* e2e_node: move getSampleDevicePluginPod to device_plugin_test.go
* fix 'pod' in kubelet prober metrics
* priority & fairness: support dynamically configuring work estimator max seats
* Add mininumKubelet tag into ReadWriteOncePod test
* Include ignored pods when computing backoff delay for Job pod failures
* Adjust the algorithm for computing the pod finish time
* Rename updateReconstructedFromAPIServer
* Rename volumesNeedDevicePath
* Update volumesInUse after attachability is confirmed
* Add uncertain state of volume attach-ability
* Refactor FindAttachablePluginBySpec out of CSI code path
* kubeadm: backdate generated CAs by 5 minutes
* client-go: allow to set NotBefore in NewSelfSignedCACert()
* e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer'
* Fix a data race in TopologyCache
* Fix TopologyAwareHint not working when zone label is added after Node creation
-------------------------------------------------------------------
Tue Aug 1 12:55:16 UTC 2023 - Egbert Eich <eich@suse.com>
- Restore the correct content of the kublet wrapper script (boo#1213829).
-------------------------------------------------------------------
Wed Jul 26 11:03:03 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update: `BuildRequires: go >= 1.20.6`
- Update to version 1.27.4:
* [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.6
* Fix the converts an empty string to nil.
* Add unit tests for parallel StatefulSet create & delete
* Parallel StatefulSet pod create & delete
* Refactor StatefulSet controller update logic
* Only declare job as finished after removing all finalizers
* Automated cherry pick of #118716 upstream release 1.27 (#118911)
* Hide numberOfMissedSchedules as an algorithm internal number
* Update schedule logic to properly calculate missed schedules
* Automated cherry pick of #118805: test comment should match the code in podgc (#118913)
* call ./hack/update-vendor.sh
* kubeadm: remove function pointer comparison in phase test
* CHANGELOG-1.27: Add note for AWS in-tree provider removal
* Updating the nodeAffinity of gated pods having nil affinity should be allowed
* fix the existing problem (0 SerialNumber in all certificate) as part of this PR in a separate commit
* update serial number to a valid non-zero number in ca certificate
* Delete CRDs created during field validation tests.
* kubectl explain should work for both cluster and namespace resources and without a GET method
* always execute condition for wait.PollUntilContextTimeout with immediate=true
* Review remarks to improve HandlePodCleanups in kubelet
* Fix the deletion of rejected pods
* Unset gated pod info timestamp in addToActiveQ
* deps: Bump to cAdvisor v0.47.2
* Make etcd component status consistent with health probes
* e2e storage: terminate worker quietly on test completion
* Fix flaky persistent volumes e2e test
* Set the node-ips annotation correctly with CloudDualStackNodeIPs
* Fix the git-repo test error caused by the correct use of loop variables
* dra scheduler plugin test: fix loopvar bug and "reserve" expected data
* Add node check to vSphere cloud provider
* Adding additional validations to queried endpoint list iteration.
-------------------------------------------------------------------
Wed Jun 21 05:02:05 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update: `BuildRequires: go >= 1.20.5`
- Update to version 1.27.3:
* Release commit for Kubernetes v1.27.3
* update-vendor: update vendored go.sums
* releng/go: Update images, dependencies and version to Go 1.20.5
* kube-proxy avoid race condition using LocalModeNodeCIDR
* Add ephemeralcontainer to imagepolicy securityaccount admission plugin
* supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0
* e2e framework retry on Service unavailable errors
* e2e: apply timeout for CSI Storage Capacity test only to node
* Add DisruptionTarget condition when preempting for critical pod
* update webhook test to go 1.21
* Test APIService safe handling at startup
* Fix waiting for CRD sync at server start
* kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
* kubeadm: Make etcd member removal idempotent
* kubeadm: Add etcd client unit tests
* kubeadm: Use internal etcd client through an interface
-------------------------------------------------------------------
Mon Jun 12 05:12:03 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update: `BuildRequires: go >= 1.20.4`
- Update to version 1.27.2:
* Release commit for Kubernetes v1.27.2
* OpenAPI V3 invalid document checks
* QueryParamVerifier falls back on invalid v3 document
* QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
* kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
* benchmark test to evaluate the overhead of podMatchesScopeFunc
* Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
* Update podFailurePolicy comments from alpha-level to beta
* Disable NewVolumeManagerReconstruction feature gate
* releng/go: Update images, dependencies and version to Go 1.20.4
* Bump konnectivity-client to v0.1.2
* Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
* node: device-plugin: e2e: Additional test cases
* node: device-plugin: add node reboot test scenario
* node: device-plugin: e2e: Capture pod admission failure
* node: device-mgr: e2e: adapt to sample device plugin refactoring
* node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
* node: device-mgr: e2e: Implement End to end test
* node: device-mgr: Handle recovery by checking if healthy devices exist
* node: device-plugin: e2e: Add test case for kubelet restart
* node: device-plugin: e2e: Provide sleep intervals via constants
* node: device-plugin: e2e: Update test description to make it explicit
* node: device-plugin: e2e: Isolate test to pod restart scenario
* node: device-plugin: e2e: Annotate device check with error message
* node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
* node: device-plugins: e2e: Refactor parse log to return string and error
* Update kube-openapi to fix race
* Use absolute path instead requestURI in openapiv3 discovery
* proxy/ipvs: don't bind nodeips to the dummy device
* proxy/ipvs: add a GetAllLocalAddressesExcept() function
* Refactors discovery content-type and helper functions
* Fix scheduler performance regression after adding plugin metrics
* Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
* Fix bug where CEL listOfString.join() results in unexpected error
* Fix directory mismatch for `volume.SetVolumeOwnership()`
* Fix stomping os env in kubectl e2e tests
* KCCM: add providerID predicate to service controller
* Re-work logic in shouldSyncUpdatedNode
* add log includes pod preemption details
* verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
* deflake: Add retry with timeout to wait for final conditions
* kubelet: Mark new terminal pods as non-finished in pod worker
* test: Add node e2e to restart kubelet while pod is terminating
* kubelet: Ensure pods that have not started track a pendingUpdate
* changelog: fix formatting issue with v1.27 change log
* Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1
* use case-insensitive header keys for http probes
* kube-aggregator: correctly use client-go TLS cache with custom dialer
* api: encode NamespacedName with lower case in JSON
* Do not look at VPC-related resources outside the cluster's network
* Fix azure disk e2e after migration
* vendor: bump runc to 1.1.6
* CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
* fix: the volume is not detached after the pod and PVC objects are deleted
* Return error for localhost seccomp type with no localhost profile defined
-------------------------------------------------------------------
Fri Apr 28 05:03:52 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update `Requires` in the "kubernetes1.27-client" pkg to:
* Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.27-client-common" pkg:
* Obsoletes: kubernetes%{baseversionminus1}-client-common
-------------------------------------------------------------------
Fri Apr 28 04:58:58 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 1.27.1:
* Release commit for Kubernetes v1.27.1
* fix: add the bug as a known issue o on the v1.26 release note
* Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
* Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
* Revert "CR conversion: protect from converter input edits"
* kubelet: Do not mutate pods in the pod manager
* Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0
-------------------------------------------------------------------
Wed Apr 12 10:01:00 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- update patches:
* kubeadm-opensuse-registry.patch
* revert-coredns-image-renaming.patch
-------------------------------------------------------------------
Wed Apr 12 09:42:32 UTC 2023 - Priyanka Saggu <priyanka.saggu@suse.com>
- initial package for Kubernetes v1.27.0
