Back to index
4.8.0-0.ci-2023-07-15-003738 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.8.0-0.ci-2023-07-15-003738 Tests:
Blocking jobs Informing jobsupgrade-minor Failed periodic-ci-openshift-release-master-ci-4.8-upgrade-from-stable-4.7-e2e-aws-upgrade Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-07-15 00:37:45 +0000 UTC
Image Digest: sha256:1aedaeb3b17a4600fe5e9f5201a75e0d20409113b1dad51ac01f8a54f7963ebf
Components
New images
Rebuilt images without code change
OCPBUGS-19235 : Updating ose-cluster-bootstrap images to be consistent with ART #100 OCPBUGS-16504 : bump(*): vendor update #99 Updating ose-cluster-bootstrap images to be consistent with ART #88
Updating ose-cluster-bootstrap images to be consistent with ART #82
OCPBUGS-3505 : Waiting for 2 masters in HA mode case #71 OCPBUGS-6234 : Bump dependencies and image #74 Add API team to reviewers #75
Add API team to the OWNERS #73
Bug 2006945 : extend hardcoded restmapper for cluster-bootstrap to avoid crashlooping bootstrap kube-apiserver #64 update golang version #65
Full changelog
SDN-4308 : Update status merge for APBRoute and EgressFirewall. #2132 OCPBUGS-22710 : Add apbroute/status patch rights for ovnkube-node to update status #2139 NETOBSERV-1047 : Add a cluster monitoring dashboard for ovn #1871 OCPBUGS-21924 : Bump library-go #2082 SDN-4101 : Remove HyperShift API dependency, Bump kubernetes dependencies #2128 NO ISSUE: add ownership of the proxy-ca #2111
OCPBUGS-22869 : hypershift, hosted clusters: enable multi-homing and multi-net features #2113 OCPBUGS-23082 : set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2100 OCPBUGS-21924 : Bump golang.org/x/net to v0.17.0 #2068 OCPBUGS-18088 , OCPBUGS-18089 : ovnkube: container scripts cleanup [v2] #2060 OCPBUGS-11179 : change CNO to use custom ServiceAccount #2084 two replicas for CM instead of 3 #2052
OCPBUGS-15817 : Egress router: request at least 100 milliCPU #2077 OCPBUGS-18785 : SDN controller manifest: add node name from downward kapi to sdn controller #2047 OCPBUGS-19370 : Added HCP label to CNO pods #2048 OCPBUGS-15220 : Add zone node preference to multus-admission-controller #1795 multinetworkpolicy: allow Neighbor Discovery Protocol traffic #2010
OCPBUGS-18569 : hypershift: adjust backoff on infrastructure name retry #1986 OCPBUGS-20533 : Revisit cipher suits for multus-admission-controller’s rbac-proxy #2074 OCPBUGS-10652 : ovnkube: disable conntrack on hybrid overlay VXLAN ports #1819 Make APB External Route namespace selector mandatory for a dynamic hop #1929
OCPBUGS-20519 : hosted cluster upgrade failure from 4.13 stable to 4.14 #2065 Revert “Merge pull request #2037 from dcbw/db-script-cleanup” #2058
OCPBUGS-18392 : notify when /etc/openvswitch path changes #1989 OCPBUGS-18088 , OCPBUGS-18089 : ovnkube: container scripts cleanup #2037 Remove ability to deploy with Kuryr #2056
OCPBUGS-20104 : Don’t run network node identity as root #2051 OCPBUGS-20076 : Multus should determine kubeconfig path #2049 Revert Kuryr MTU fixes #2038
Fix MTU miscalculation #1778
OCPBUGS-19918 : get ipsecStatus from host daemonset #2042 Network metrics daemon: change priority class to openshift-user-critical #2044
OCPBUGS-14819 : HyperShift: Use the local konnectivity proxy when checking proxy readiness #1985 OCPBUGS-19861 : Multus per-node certificates should have 24h duration #2039 OCPBUGS-19418 : Relax conditions to get IC upgrade started #2018 OCPBUGS-18396 : Fix config status MTU migration not being updated #2021 OCPBUGS-19705 : Use port 9108 for ovnkube-control-plane metrics #2031 OCPBUGS-19715 : Do not enable node admission webhook if the CNI is not OVN-Kubernetes #2030 OCPBUGS-17391 : remove prestop hooks for northd, sbdbd and nbdb #1978 OCPBUGS-19625 : Multus per-node certificate request #2009 OCPBUGS-19377 : Kuryr: Fix deriving MTU from previous config #2007 OCPBUGS-19648 : Network identity: node-specific certificate in ovnkube-node, admission webhook #1983 OCPBUGS-19550 : multus: set MULTUS_NODE_NAME to filter pods to local node #2020 OCPBUGS-19018 : use $CPE_NAME to find the OS major version #2003 OCPBUGS-19494 : ipsec: remove preStop from host #2015 OCPBUGS-18114 : Update node selector in various YAMLs #1845 Limit OVN-Kubernetes permissions #1982
OCPBUGS-18892 : make ipsec.service required #1999 OCPBUGS-19236 : Updating cluster-network-operator images to be consistent with ART #2006 separate libovsdblogs from main ovnkube-master logs #1938
OCPBUGS-15201 : Disable weak SSH cipher suites #1981 OCPBUGS-18676 : ovnkube: set northd backoff-interval and use a single thread to save CPU #1990 OCPBUGS-17380 : ipsec: fix oopsy from 2e3fc8e7a0 #1996 OCPBUGS-18517 : Kuryr: Set MTU on Bootstrap, not Render phase #1988 OCPBUGS-18135 : IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1955 move IPsec to host #1849
OCPBUGS-17916 : Fix IC configmap lookup in pod_status.go #1954 OCPBUGS-17677 : [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster #1980 OCPBUGS-18363 : Add ‘/etc/cni/multus/net.d’ into volumemount in multus pod #1979 OCPBUGS-18175 : Fix bond-cni’s default directory in multus manifest #1953 OCPBUGS-17782 , SDN-3664 : Join ovnkube-controller and ovnkube-node container for multizone setup #1971 OCPBUGS-16051 , OCPBUGS-3176 : Enables IP Forwarding config in CNO #1952 OCPBUGS-17257 : CVE-2023-3978: golang.org/x/net/html: Cross site scripting #1935 OCPBUGS-17677 : [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. #1949 OCPBUGS-17964 : ovn-k, managed: Align join subnet configuration #1962 SDN-4024 : Add ANP Feature Gate #1859 SDN-4057 : hypershift: Allow ovnkube-master and ovnkube-node to have different images #1942 Remove certificatesigningrequests/update permission from ovnkubenode #1934
Add rolling update for managed ovnkube-control-plane #1944
IC & openshift + hypershift #1874
OCPBUGS-16019 : prevent creation of multiple cni-sysctl-allowlist-ds pods #1904 OCPBUGS-10765 : make MAXLOGFILES a real variable and work for self-hosted #1931 Multus thick plugin support #1915
OVN-Kubernetes ipsec: create the CSR with a random name #1928
CCO-294 : Switch azure credentials request to use explicit permissions #1922 OVN-Kubernetes: Add status subresource permissions for setting labels and annotations #1896
SDN-3223 : Use encapsulation=true for IBM Cloud #1800 Bug 16136 : change whereabouts ip reconciler exec #1890 Add OpenStack platform to list of allowed dual-stack clusters #1697
OCPBUGS-15945 : Stop using utilruntime.PanicHandlers to handle reconciliation panics #1893 HOSTEDCP-1063 : allow webhooks in hosted clusters to reach multus-admission-controller service #1879 OCPBUGS-15961 : FIPS related CNO changes #1901 OCPBUGS-10765 : Revert “Revert “OCPBUGS-10765: Remove oldest ovn acl log files when f… #1876 ovn-k: Configure dns service namespace and name #1912
OCPBUGS-15544 : Enable multi-external-gateway feature by default for managed and hosted clusters #1887 OCPBUGS-15918 : Skip rendering 0.0.0.0/0 for cluster proxy status #1903 Change rhel7/8 to rhel8/9 #1870
Enable EgressService controller #1848
Edited multus-admission-controller deployment config to not add autom… #1767
OCPBUGS-15794 : fix: add missing annotation for workload partitioning #1866 OCPBUGS-15544 : Add adminpolicybasedexternalroutes rights for ovnkube-node. #1867 Revert “Remove oldest ovn acl log files when file limit exceeded” #1873 #1873
OCPBUGS-10765 : Remove oldest ovn acl log files when file limit exceeded #1868 kube-proxy config overriding updates #1831
OCPBUGS-15282 : Add release version annotation to whereabouts-reconciler #1851 CCO-356 : Add Infrastructures permission to CNCC cluster role #1843 Add multi-networkpolicies support for OVN #1796
Add support for AdminPolicyBasedExternalRoute CRD and controller’s RBAC #1765
OCPBUGS-15138 : Add kubernetes.io/os nodeSelector to wherebouts reconciler DS #1841 OCPBUGS-14988 , SDN-3901 : Rebase to kube 1.27 #1826 CCO-358 : Manifest changes necessary to support Azure Workload Identity #1755 OCPBUGS-14714 : Do not rely on ControlPlaneTopology do determine if running in HyperShift #1835 OCPBUGS-11882 : Added another volume to safe-to-evict-local-volume annotation #1830 OCPBUGS-14833 : Fixes lint issues #1834 OCPBUGS-14384 : Remove nodeSelector for architecture in whereabouts daemonset #1828 OCPBUGS-11882 : Added safe-to-evict annotation to ovnkube-master and multus admission controller components #1822 OCPBUGS-13922 : Revert “Do not set the operator as available before updating the network config” #1818 OCPBUGS-11448 : add Hypershift release-image annotation to multus #1770 OCPBUGS-10937 : multus-admission-controller mounts secret with mode 0640 #1752 OCPBUGS-13219 : Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1803 OCPBUGS-5027 : Make the operator degraded on panic #1786 OCPBUGS-12856 : Support Device Plugin Resources For Smart NIC and DPU Hosts #1721 Updating cluster-network-operator images to be consistent with ART #1790
OCPBUGS-11565 : High API requests due to allowlist and operconfig reconcilers running too often #1788 OCPBUGS-8070 : Depreciate legacy field manager #1763 OCPBUGS-11550 : AUTH: update cluster-reader to include k8s.ovn.org #1791 OCPBUGS-10009 : HyperShift: Support HostedControlPlane node selector #1736 OCPBUGS-11046 : fix reconciliation process of the allowlist controller #1792 OCPBUGS-1341 : Enhance check controller to remove old check objects #1649 OCPBUGS-11046 : Fix allowlist ds template #1773 OCPBUGS-10647 : multus-admission-controller should not run as root under Hypershift #1745 OCPBUGS-9174 : The cluster-readers group should be able to get net-attach-defs #1343 Updating cluster-network-operator images to be consistent with ART #1768
OCPBUGS-9964 : Split out konnectivity certs #1734 SDN-3444 : Add runbook url for SBDB connectivity alert #1553 OCPBUGS-7777 : use –template instead of -a for ‘oc observe’ #1760 Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler #1735
OCPBUGS-10433 : Hypershift: Add RollingUpdate parameters to multus-admission-controller #1740 ovn-kube: move back to unsuffixed RHEL9 images #1747
Updating cluster-network-operator images to be consistent with ART #1732
OCPBUGS-10649 : HyperShift: Add POD_NAME env to ovnkube-node #1748 OCPBUGS-10031 : operConfig reconcile can return nil error on failure #1744 Set OVN-K north/south bound stale alerts severity to critical #1668
OCPBUGS-8707 : Point libreswan to proper nss location #1727 Whereabouts should implement the reconciliation controller #1693
add/update some UTs around clusternetwork change #1725
OCPBUGS-9931 : Enable configuration of node healthz server on ovnkube #1715 OCPBUGS-8692 : HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1728 Cno 4.13 kubernetes 1.26 #1708
use annotation on the daemonset to update hybrid overlay #1709
Remove the ovn-kind-cno.sh script #1710
SDN-3597 : OVN-K alerts: add OVS overflow alerts #1630 SDN-3730 : OVN IC: migrate master alerts to cluster manager #1716 Allow cidr expansion #1707
Enables nodeSelector to be used in egress firewall rule #1720
Add ovnk alert for resource retry failure #1674
OCPBUGS-6730 , SDN-3221 : ovn-kubernetes: use RHEL9-based images #1712 OCPBUGS-4343 : update apf configuration to use v1beta3 #1633 Jira OCPBUGS-7774: Print RawCNIConfig in its string representation #1718
OCPBUGS-6235 : Updating cluster-network-operator images to be consistent with ART #1656 Allow updates to pods #1717
OCPBUGS-5559 : add default noProxy config for Azure #1672 always create env.sh when run_vs_existing_cluster #1711
OCPBUGS-7354 : Revert “Revert “OCPBUGS-5842: Use pods oc vs host”” #1714 ovn-k, multi-homing: enable the feature #1699
Revert “OCPBUGS-5842: Use pods oc vs host” #1713
OCPBUGS-5842 : Use pods oc vs host #1681 OCPBUGS-4417 : Added missing API field podref to OverlappingRangeIPReservation CRD #1677 OCPBUGS-6651 : HyperShift: Add .hypershift.local to no proxy list #1692 OCPBUGS-6651 : HyperShift: Do not use proxy for internal routes #1694 remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher #1680
ovn-kubernetes: Allow node_mgmt_port_netdev_flags for non-DPU modes #1676
OCPBUGS-3272 : Unhealthy Readiness Probe failing ci #1665 OCPBUGS-5306 : ovn-kubernetes: ignore NB/SB readiness checks and dbchecker when not RAFT member #1673 OCPBUGS-5802 : Update github.com/Masterminds/sprig to v3 #1679 OCPBUGS-5306 : OVN-Kubernetes: Stop sorting master node addresses #1675 Allow SDN migration from Kuryr to OVNKubernetes #1639
update ‘make install.tools’ for golangci-lint #1670
Fix CNO crashing when Kuryr without MTU is set #1669
OCPBUGS-2947 : Disable the drop-icmp container ‘oc’ pprof webserver on Azure #1607 OCPBUGS-4350 : Fix handling of deployment and statefulset updates #1648 OCPBUGS-2532 : Fix default disable-udp-aggregation value on s390x #1655 Fix info log formatting #1650
Support RHOBS monitoring for HyperShift #1644
OCPBUGS-3916 : SDN alerts: Add $labels.node to SDNPodNotRady metric #1637 The allowlist daemonset should set a priority class. #1647
Bug OCPBUGS-736: Kuryr: If set use MTU from Config for svc net #1586
OCPBUGS-3883 : HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1627 OCPBUGS-2532 : Disable UDP aggregation on s390x #1629 Jira OCPBUGS-3777: IPsec: Fix broken counter++ expression #1623
OCPBUGS-3114 : HyperShift: Do not accept empty infrastructure name #1611 HyperShift: Fix typo in control-plane-component label value #1626
Remove references to the hosts kubeconfig #1612
OCPBUGS-3744 : SDN: /var/run mount cleanup #1625 OCPBUGS-3460 : CNI binary copy should account for the possibility of symlinks #1614 OCPBUGS-2598 : ipsec: Run ovs-monitor-ipsec in the foreground and change probes #1606 SDN-3508 : HyperShift: Render cncc with proxy settings of the management cluster #1577 NP-607 : update microshift ovnk manifests #1589 Bug 1896533 : moved SetDegraded call out of object loop to process all items first #1600 OCPBUGS-2362 : Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info #1579 fixed typo in comment #1597
Jira OCPBUGS-1736: Always set PROXY variables for CNCC #1576
Remove the allow_ra sysctl for ipv4 from default systl whitelist #1590
SDN-2591 : allow hybrid overlay to be enabled post install #1584 SDN-3515 : HyperShift: multus admission controller: expose metrics over HTTPs #1583 rebase to k8s v1.25.0 #1571
Bug OCPBUGS-2328: Fix for index out of range error #1588
Add sysctl whitelist controller #1573
Kuryr: Add missing keystoneauth options #1581
OCPBUGS-1341 : Set owner reference for pod network connectivity check #1566 ovn-k, managed: pass join-subnet to control-plane #1582
OCPBUGS-1083 : Move OVNK alert level to info #1564 Pass enable-udp-aggregation=true to ovn-kubernetes #1533
OCPBUGS-1038 : Multus IPAM detection should honor conflists #1570 egress_ip: remove redundant config #1568
OCPBUGS-1515 : Use custom uint128 type when validating v6InternalSubnet #1561 SDN-3283 : HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks #1539 Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net #1545
Migrate Egress IP configuration during SDN migration and rollback #1536
Allow empty vSphere status field in VIP sync #1558
microshift: update ovnk manifests #1552
Add ovn-kubernetes-microshift to image-stream #1556
Migrate Multicast configuration during SDN migration and rollback #1543
OVN-K: add patch/update service permissions to controller #1554
Add controller to synchronize the API and Ingress VIP fields #1519
Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager #1541
OVN-K alerts: first tranche #1526
SDN-3432 : Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase #1548 Add vSphere platform to allow dual-stack cluster #1518
OKD-49 : Adds support for scos to multus #1544 Bug 1894268 : Allow users to specify ovnkube join subnet #1508 Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation #1492
Multus admission controller: Wait for token in Hypershift #1546
Use fixed name for creating EgressFirewall CRs #1540
Migrate Egress Firewall Configuration during SDN migration and Rollback #1534
hypershift: set multus controller priority appropriate for hosted clusters #1538
Bug 2094068 : Add northboundstale alert runbook #1482 microshift: compact ovn databases periodically #1537
Hypershift: Allow configuring hostname and labels on the route #1531
Multus admission controller changes for hypershift #1516
HyperShift: Move CNCC to the controll-plane namespace #1525
Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe #1528
Add missing runbook links for OVN-kubernetes alerts #1523
Bug 2103680 : avoid overrriding disableNetworkDiagnostics on reconciliation #1527 Render CRDs for both OSDN and OVNK during migration #1521
Configure ignored namespaces into multus-admission-controller #1515
Add microshift ovnk manifests #1517
Bug 2116982 : multus-admission-controller SNO number of replicas #1524 Enable the cloud-network-config-controller for OpenStack #1505
multi-networkpolicy: Enable on SR-IOV networks #1443
Updating cluster-network-operator images to be consistent with ART #1507
Add configmap list/watch rights to cloud-network-config-controller #1511
The Multus admission controller should run as a deployment #1514
Bug 2108232 : Revert “Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes” #1510 Bug 2100601 : Update CNO to config EgressIP timeout for ovnk #1498 Bug 2060079 : Enhance sensitivity of SDN alert NodeProxyApplySlow #1491 Bug 2103590 : Add init container to ensure that Status.podIP is set before postStart hooks run #1503 remove @squeed from owners #1497
Bug 2085089 : Pass enable-udp-aggregation=true to ovn-kubernetes #1489 Bug 2089681 : Disable EgressIP reachability check in hypershift deployments #1485 Bug 2084062 : Make northd probe interval default to 10 seconds #1494 Bug 2100079 : Update sdn-controller perms for “configmapsleases” leaderelection #1496 Bug 2099357 : k8s 1.24 bump: add RBAC coordination leases for ovn-k master #1490 Bug 2094071 : Add southboundStale alert runbook #1481 Bug 2095772 : bindata: managed: reduce memory requests to align with observed usage #1479 Bug 2095756 : client: register types during init, not later #1483 Bug 2090336 : Multus should log at a verbose log level (without a logfile) #1474 Bug 2092047 : cncc: add RBAC coordination.k8s.io leases #1461 Bug 2089805 : Enable config duration for OVN-Kubernetes #1455 Bug 2090437 : Bump CNO to k8s 1.24 #1459 Bug 2073452 : Copying CNI binaries should be an atomic operation. #1472 Bug 2092495 : ovn: use up to 4 northd threads in non-SNO clusters #1471 Bug 2091167 : incorrectly setting rbac role for certificatesigningrequests #1463 Revert “Copying CNI binaries should be an atomic operation.” #1466
Bug 2073452 : Copying CNI binaries should be an atomic operation. #1462 Bug 2076776 : remove patch permissions from ovnkube-node service account #1450 Bug 2089968 : ensures type: Directory for multus host paths #1453 Bug 2090343 : [temporary] Adds multus debug logging #1456 Bug 2087942 : bump to go 1.18, lint improvements #1451 Bug 2086461 : Hypershift: Also add default for Azure mtu #1454 Bug 2086461 : AWS: Use hardcoded MTU to speed up cluster creation #1441 Bug 2087556 : Fix rendering DPU manifests #1448 Bug 2086506 : hypershift: respect statefulset when upgrading ovnk #1447 Bug 2087135 : Fixing Hypershift nodeport flow #1440 Bug 2086544 : Stop passing hosted cluster token as a parameter to ovnkube-master #1446 Bug 2086437 : Enable EgressQoS controller #1430 Bug 2086143 : Status controller: use a label, rather than watching all objects #1431 Bug 2082235 : manifests: Add in service, service-cert, and ServiceMonitor #1433 Bug 2023295 : Cleanup CNO relatedObjects #1432 Bug 2079422 : Bump PodDisruptionBudget to v1 #1427 Re-reconcile network on configmap, stop watching all configmaps in proxy controllers #1416
hypershift: add ovnkube-node-proxy container in ovnkube-node ds #1408
Hypershift: enable TLS for ovnkube-master metrics #1423
Add gm metric record to use for telemetry exposure #1425
Revert “ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds” #1428
Bug 2082611 : Limit Kuryr pods permissions #1367 Bug 2076877 : Bump FlowScema apiVersion to v1beta2 #1419 bindata/network-diagnostics, cloud-network-config-controller: comply to restricted pod security level #1406
Remove ObjectMeta.ClusterName usage #1421
Hypershift: Fix ovnkube-master priority class and set resource requests on token-minter #1420
add more sysctls to the multus allowlist #1411
ovn: fix northd preStop command handling #1414
Add control-plane-component label to ovnkube-master for hypershift #1422
Add link to runbook urls #1417
Hypershift: Copy all CNO conditions to HostedControlPlane status #1415
ovn: reduce SB<->ovn-controller inactivity probe to 30 seconds #1412
Bug 2075475 : Add default-route field to egress-router k8s.v1.cni.cncf.io/networks #1390 OCPVE-106 Customize rollout strategy to fix SNO upgrade #1392
Bug 2080255 : SDN: Re-add list/watch/get permissions for nodes needed for EgressIP #1409 Bug 2071859 : Switch dnsPolicy to Default for OVN hostNetwork pods #1395 Revert “Revert ipsec: Allow enablement/disablement at runtime” #1384
ovnkube: export OVS metrics along with OVN metrics #1393
Bug 2078910 : Correct runbook_url field location within schema #1396 Adds dougbtv to owners as approver and reviewer #1397
Bug 2072215 : Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage #1369 ovn-kube hypershift: fix pipefailure that prevents HA startup #1394
Bug 2063123 : Drop Node update permission for sdn-node #1350 OVN-K alert: Increase severity and add runbook_url for NoRunningOvnMa… #1327
Remove Kuryr mutating DNS webhook #1363
raise the alert NoOvnMasterLeader to critical and add the runbook url #1328
Bug 2072710 : Make northd probe interval default to 10 seconds #1386 hypershift: get control plane replicas from hcp #1385
Bug 2072766 : Reserve port TCP/9104 for cluster-network-operator #1378 Multus: split pod/status rbac #1340
add runbook link for NodeWithoutOVNKubeNodePodRunning and V4SubnetAll… #1366
OVN: remove detecing db_ip via kapi #1368
Hypershift: Respect publishing strategy of OVN southbound database service #1349
Proxyconfig: Add a knob for Hypershift to enable proxying internal apiserver address #1381
Bug 1983056 : Kuryr: Update CRD from upstream #1360 hypershift: disable TLS for ovnk master metrics #1382
hypershift: enable publishNotReadyAddress explicitly for ovnk-master service #1372
Bug 2070047 : Bump max value of hist quantile for kuryr_cni_request_duration #1359 Don’t return err with empty relatedClusterObject annotation #1379
hypershift: enable ovnk-master metrics in management cluster #1374
Use (un)setProgressing for pod status update #1376
Use the hosted cluster token explicitly #1370
HyperShift: Watch StatefulSets in the management cluster #1364
Exclude openshift-kube-apiserver and openshift-apiserver service/endpoints from connectivity checks in hypershift #1375
Run ovnkube-master statefulset pods in parallel #1361
Add ibm-cloud-managed annotations to 02-cncc-credentials.yaml, this is required in HyperShift #1358
Add ipsec daemonset for hypershift managed cluster #1356
Add statefulset in status manager #1345
hypershift ovnk route status #1341
Add tuning cni sysctl allowlist to nodes #1347
Bug 2058368 : move enable memory trimming to readiness prob #1365 Add ovnkube-node initContainer to make sure sbdb is up before running other containers #1354
Vendor: pull in hypershift #1346
Hypershift: Use token minter instead of a kubeconfig in ovn-kubernetes master #1344
Add an option to define the client name for in-cluster config #1342
Add ovnkube manifests for hypershift #1329
network, bootstrap: don’t get apiserver from the environment #1339
Fix MTU detection for multi path default routes #1338
Multi cluster support in CNO #1319
Fix golang image version in Dockerfile #1330
Remove empty selector from the mtu prober job. #1331
Switch to server-side apply #1304
Probe MTU from a Job, rather than directly in the CNO #1313
Bug 2058368 : Move memory-trimming-on-compaction out of dbchecker to nbdb/sbdb #1320 Fix group for CVO override used for running CNO locally #1314
Bug 2058671 : ip reconciler: auto clean failed jobs #1318 Bug 2037721 : Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters #1307 ovn: stop spawning the ovn-nbctl daemon #1315
Bug 1944264 : ovnkube: gracefully terminate databases from preStop #1312 Bug 2044227 : Add rolling update strategy for Kuryr-CNI. #1311 Bug 2032559 : Block DualStack migration for unsupported cluster types #1257 Bug 2010361 : SDN alerts: conform to monitoring team style guide #1248 Update project owners #1309
Bug 2048575 : The Whereabouts ip-reconciler should use api-int load balancer #1302 Bug 2048793 : Kuryr: Decrease vif_annotation_timeout #1293 Bug 2049613 : Use a separate configmap for mtu migration config to avoid pod restart #1299 Fix bond cni source directory path #1295
Updating cluster-network-operator images to be consistent with ART #1294
Bug 2041546 : ovn-kubernetes: set RAFT election timer at RAFT cluster creation time #1282 Bug 2034484 : Upgrade library-go version #1247 Bug 2042796 : whereabouts, reconciler: disable retries on failure #1290 Bug 2039345 : Verify against mininimal IPv6 MTU value for clusters with IPv6 networks #1276 Bug 2034155 : Adds back –disable-snat-multiple-gws #1254 Bug 2039321 : SDN: Expose controller metrics for collection #1250 clean up OWNERS #1287
Bug 2041989 : no CredentialsRequests in ibm-cloud-managed #1280 Bug 2035459 : modify cluster-network-features for OpenshiftSDN #1251 Bug 1896533 : Nonexistent Namespaces Degradation logging message #1128 Bug 2038732 : Add egress* patch credentials for ovnkube-master #1285 Bug 2041329 : cncc: add serviceAccountNames to CredentialsRequests #1283 Bug 2010663 : OVN-K alerts: conform to monitoring team style guide #1246 Bug 2021191 : Project admins should be able to list net-attach-defs in their namespaces #1226 BUG 2034413: cncc: create Cloud CredentialsRequest in /manifests #1277
Bug 2034460 : cncc: handle advanced AWS and Azure configurations #1275 Bug 2034153 : Fix MTU migration verification for OpenShiftSDN #1259 Bug 1943363 : ovn: try to gracefully terminate ovn-northd #1221 Bug 2018093 : Kuryr: Add resource requests for pods #1269 Bug 2036861 : multitenant - Add openshift-kube-apiserver-operator to global namespaces #1272 Bug 2035093 : Cloud network config controller: Fix for Hypershift #1268 Bug 2034398 : Whereabouts CRD should include a “podref” field. #1262 Bug 2034517 : watch and apply changes of the ovs-flows-config configmap #1231 Bug 2034322 : Move infrastructure bootstrap to its own package #1261 Bug 2033422 : bootstrapOVNGatewayConfig should only be called once #1258 Add MTU migration support for OVNKubernetes and OpenshiftSDN #1241
Cloud network config controller - CNO deployment #1112
Bug 2022144 : sbdb and nbdb containers leave pid around if they restarted or crashed #1256 OVN-K alerts: Fix incorrect metric name reference #1237
Pod networking on DPU host in Infra and Tenant clusters #1249
OVN-K: Enable OVN metrics to be consumed by ServiceMonitor #1236
Bump openshift/build-machinery-go #1253
SDN 2316: Use GatewayConfig in OVN-K to set gateway modes #1209
Add CNI to DPU and enable Kube-Proxy on DPU #1220
NETOBSERV-31 : Expose CNI type features as a config-map #1204 Bump openshift/api module #1242
The ip-reconciler should not restart on failures. #1238
SDN: Do not tolerate a controller failure during upgrade #1213
Set upgrade strategy on kube-proxy #1214
openshift-sdn/daemonset: Mount /host/opt/cni/bin at /host-cni-bin #1172
Specific SDN controller alert #1206
update for ART #1233
bindata/network: specify pod-security levels via labels not annotations #1224
Add bond-cni #1205
Bug 1961509 : DHCP Daemon should have memory and CPU limits set #1218 Add ip6tables NOTRACK rules for udp/6081 #1222
Bug 1962206 : DHCP daemon should have maxunavailable for upgrade strategy #1219 Bug 1976399 : Raft election timer: move the logic to ovndbchecker #1161 Bug 2009078 : Remove NetworkPodsCrashLooping alert for ovn-kubernetes #1212 Bug 1914053 : whereabouts: add ip-reconciler cronjob #1207 Add Kuryr to be able to create events objects. #1210
fix a typo in a field name #1208
podsecurity: enforce privileged for network namespaces #1203
Bug 1988483 : OVN drop icmp frag from other nodes on Azure cluster #1132 Bug 1985486 : Use proxy to connect to OSP cloud #1173 Updating cluster-network-operator images to be consistent with ART #1198
Bug 2003676 : Restrict serving SDN metrics to loopback only #1197 Bug 2002713 : Add millisecond resolution to OVN logs #1196 Bug 1939435 : proxyconfig - accept IPv6 address literals for noProxy #1191 Bug 1986061 : Monitor openshift-network-diagnostics namespace #1190 Bug 1960101 : Fix update-codegen hack, pull in changes from openshift/api, bump k8.io deps to v0.22.1 #1140 Bug 1997050 : Fix panic with unknown networks #1188 Bug 1998508 : Fix the install-time “waiting for other operators” statuses #1192 Bug 1990631 : ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues #1182 Bug 1914398 : Changed pod user to non-root #1124 Bug 1991551 : allow sdn (and others) to use new events.k8s.io API #1177 Bug 1989246 : use new default leader election values to handle apiserver rollout on SNO #1175 Bug 1992507 : Use prometheus rule annotations comply with the OpenShift alerting guidelines #1181 Bug 1989734 : Whereabouts should have RBAC for leases #1174 Bug 1984049 : Slow OVN Recovery on SNO #1159 Bug 1990725 : Add missing node name into KuryrSDNPodNotReady Alert #1176 Bug 1987019 : Support external control plane topology #1158 Docs: add architecture overview, remove outdated HACKING guide. #1078
Remove valadas from owners #1081
Bug 1989122 : let openshift-sdn use EndpointSliceProxying #1166 Updating cluster-network-operator images to be consistent with ART #1136
Bug 1981055 : ovnkube-master handle 60 seconds downtime of API server gracefully in SNO #1154 Bug 1985033 : Make inactivity_probe configurable #1165 Bug 1984449 : Change to use mountPath: /host #1160 Bug 1961757 : ovnkube: set ovn-controller lflow cache limit to 1GB #1147 Revert: Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level #1163
Bug 1981975 : Update service network status to reflect dual stack entries #1155 Bug 1970985 : SDN-1955: Add pre-puller ds to reduce upgrade downtime #1141 Bug 1961811 : Add a newline between user CAs and system CAs #1156 OVNKube: check if br-ex1 is available and pass it as a parameter #1152
Make egress IP and ICNI mutually exclusive when bootstrapping OVN-kube #1145
Bug 1970129 : Add env variable OVS_SYS_LOG_LEVEL for ovn nodes to setup ovs syslog level #1142 Add alerts for issues with load balancers/ports. #1148
Include alerts for critical lbs #1146
Removing old kuryr-kubernetes CRDs #989
Bug 1962951 : enable ovs column diffs feature #1101 Bug 1975016 : Kuryr: Store OpenStack credentials in a secret #1139 Add JacobTanenbaum to list of approvers #1099
Updating .ci-operator.yaml build_root_image from openshift/release #1130
Full changelog
Revert PAO and later changes #330
Bug 2017427 : tuned: add timeout and restarts #282 Makefile cleanup, replace yq with yaml-patch from openshift/build-machinery-go #274
Bug 2016988 : openshift profile: fix malformed patch #283 Bug 2013321 : TuneD: workaround for high CPU utilization of [scheduler] plug-in. #278 RBAC: tighten the rules and remove unnecessary listers. #276
podsecurity: enforce privileged for openshift-cluster-node-tuning-operator namespace #275
Updating cluster-node-tuning-operator images to be consistent with ART #273
Bug 2004508 : TuneD: Revert the ConfigParser changes. #271 Updating cluster-node-tuning-operator images to be consistent with ART #270
OWNERS: updating based on team changes. #269
e2e tests: s/plugin/plug-in/ and TuneD renaming #253
Bug 1998247 : Reload when deps of recommended profile change. #267 Bug 1997486 : Ship the latest TuneD and stalld. #265 Bug 1994891 : Fix e2e tests after the recent 1.22.0 bump #264 Bug 1992560 : monitoring: comply with OpenShift alerting guidelines #263 Bug 1994891 : Bump vendor dependencies to k8s 1.22.0 #261 Bug 1985739 : Move OpenShift profile to TuneD. #258 Bug 1986477 : Handle kube-apiserver disruption more gracefully. #256 scheduler: new option cgroup_ps_blacklist #250
Address a race in the stalld e2e test. #249
IBM Cloud manifest profile patch for operator deployment #252
Ship the latest TuneD, adjust default Tuned CR. #245
Updating to the latest stalld v1.13.0. #246
openshift-tuned event-driven change processing #243
Adjusting the OWNERS file due to team changes. #244
Updating to the latest stalld v1.12.0. #242
Bug 1974277 : Fix conditional order for setting net device param. #239 Bug 1973154 : Switch back to NTO-shipped stalld. #236 Updating cluster-node-tuning-operator images to be consistent with ART #235
More precise description of MCP matching. #219
Updating .ci-operator.yaml build_root_image from openshift/release #234
Full changelog
SO-118 : Bumping the K8s to 28.2 and golang to 1.20 #524 SO-117 : Library Sync for OCP release 4.15 #522 OCPBUGS-22225 : Sync library to remove invalid dockerhub references for OKD #519 Use latest tag for network-tools imagestream #518
OCPBUGS-18857 : Updating ose-cluster-samples-operator images to be consistent with ART #517 manifests: Drop explicit runlevel from CRD manifest #515
OCPBUGS-16435 : Bump k8 to v0.27.2 for ocp 4.14 #514 OCPBUGS-16403 : Update Cluster Sample Operator dependencies and libraries for OCP 4.14 #511 reconcile status when clusteroperator changes #510
OCPBUGS-15754 : Update Jenkins and Jenkins Agent Base image versions #504 OCPBUGS-14491 : Updating to use Jenkins 4.13 images #502 OCPBUGS-12775 : Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 #500 Updating ose-cluster-samples-operator images to be consistent with ART #499
OCPBUGS-10910 : Add network tools imagestreams #495 Updating ose-cluster-samples-operator images to be consistent with ART #493
Fix jira component #494
update Jenkins to use v4.12 imagestreams #491
OCPBUGS-855 : When setting allowedRegistries urls the openshift-samples operator is degraded #487 OCPBUGS-6811 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #485 Change importMode to preserveOriginal for Openshift imagestreams #482
OCPBUGS-6579 : update sample imagestreams with latest 4.11 image using specific image tag reference #483 OCPBUGS-4357 : Bump k8s master #476 OCPBUGS-4166 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #474 OCPBUGS-3426 : Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #471 Updating ose-cluster-samples-operator images to be consistent with ART #470
Updating ose-cluster-samples-operator images to be consistent with ART #465
Add client certificate and key to service monitor #464
Updating ose-cluster-samples-operator images to be consistent with ART #435
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #433 update jenkins CPaaS image refs prior to 4.11 GA #432
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #431 Bug 2095256 : Samples Owner needs to be Updated #429 Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #428 AUTH-133 : manifests/deployment: comply to restricted pod security level #425 Updating ose-cluster-samples-operator images to be consistent with ART #426
JNKS-289 : pull in jenkins imagestream updates (add back maven/nodejs streams) #422 Jira SO-19: Make sure template and imagestream api version is groupified #420
JNKS-287 : remove imagestream manifest refs; remove override of jenkins images with payload images #416 Bug 2010364 : OpenShift Alerting Rules Style-Guide Compliance #419 Bug 2067823 : Taking care of CVE-2022-21698 #418 Bug 2064610 : Remove duplicate v1 from cakephp-mysql templates #417 manifests: Add capability.openshift.io/name #414
Updating ose-cluster-samples-operator images to be consistent with ART #412
Bug 2027745 : Allowing ImageStream creation when config registry empty #406 Bug 2033720 : Synching SSO library #411 upd rhel7 Dockerfile in case still used for rhel7 worker nodes #410
Bug 2033720 : Bump k8 dependencies to v0.23.1 #409 Bug 2033720 : Library synchronization for OCP 4.10 #408 Bug 2027745 : Move openshift build-machinery-go dependency #407 Update OWNERS #402
Remove single node prod cluster profile annotation as it is not used #405
Bug 2007757 : Including Template in must-gather related objects. #399 Bug 2006947 : fix proxy portion of tbr inaccessible check #397 Updating ose-cluster-samples-operator images to be consistent with ART #396
Bug 2002368 : acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #394 Bug 2003683 : fix recently introduced panic when conflict errors occur #395 Bug 1993840 : more avoiding immediate degraded on intermittent API errors #391 Updating ose-cluster-samples-operator images to be consistent with ART #390
add david peraza as approver, clean up reviewers #389
BUILD-298 : Bump k8s to 1.22.1 #388 Bug 1993840 : avoid immediate degraded on intermittent API errors; set reason/message when Available=false #387 Bug 1995386 : don’t return err in wait.Poll on net.DialTimeout err; tweak time intervals #386 Bug 1990140 : add connection with timeout in TBR accessibility check to expedite ‘disconnected’ mode #384 Bug 1990988 : Refreshing samples for OCP 4.9 #381 Bug 1975539 : delete hello-openshift in payload imagestream via CVO annotation #380 Updating ose-cluster-samples-operator images to be consistent with ART #378
Updating .ci-operator.yaml build_root_image from openshift/release #377
Full changelog
CNF-8326 : advertise shared cpus for mixed cpus feature #1795 OCPBUGS-23565 : Update to kubernetes 1.28.4 #1806 Automated cherry pick of #121881: Use golang library instead of mklink #121882
Automated cherry pick of #120948: Fixing attempt to deploy past allocatable memory limits test #121656
Bump images, dependencies and versions to go 1.20.11 #121812
Automated cherry pick of #121364: bump golang.org/grpc to v1.56.3 #121545
Automated cherry pick of #121327: Fix next schedule time duration #121536
Automated cherry pick of #120492: service controller: improve node lifecycle updates - update #120943
Automated cherry pick of #120834: Fix panic testing intree vSphere dynamic PV. #120949
Automated cherry pick of #119794: implement Stringer for podActions #120660
Automated cherry pick of #120731: Fixing CurrentReplicas and CurrentRevision in #121395
Automated cherry pick of #121103: Use Patch instead of SSA for Pod Disruption condition #121379
Automated cherry pick of #120330: Retry operations if CSI Driver Isn’t Found by Treating this #120643
Automated cherry pick of #121116: KCCM: fix GCP ILB by reintroducing readiness predicate for #121326
OCPBUGS-23073 : .spec.numberOfUsersToReport is not correctly applied in some circumstances #1794 OCPBUGS-22724 : UPSTREAM: 121881: Use golang library instead of mklink #1800 OCPBUGS-16922 : Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions #1790 Update REBASE.openshift.md #1788
STOR-1278 : Fixes for SELinux mount context metrics #1771 Update to Kubernetes v1.28.3 #1776
Automated cherry pick of #121142: Modify test PVC to detect concurrent map write bug #121184
Automated cherry pick of #119732: Fix to honor PDB with an empty selector {} #121131
Automated cherry pick of #121224: Register UnauthenticatedHTTP2DOSMitigation into kube #121225
Automated cherry pick of #121203: Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 #121204
Prevent rapid reset http2 DOS on API server (disabled by default) #121196
Automated cherry pick of #120814: Fix 120758 - prevent cache Load on uninitialized spec #121040
Bump images, dependencies and versions to go 1.20.10 #121153
Automated cherry pick of #120595: Mark a volume as uncertain-attached after detach error #121079
.: bump golang.org/x/net to v0.17.0 #121128
Automated cherry pick of #121015: Add nil checks for hpa object target type values #121038
Automated cherry pick of #121008: Make a certain ipv4-vs-ipv6 config error non-fatal, for #121029
Bump images, versions and deps to use Go 1.20.9 #121025
Automated cherry pick of #120784: Use local isCgroup2UnifiedMode consistently #120924
Automated cherry pick of #120649: cronjob controller: ensure already existing jobs are added to #120809
kmsv2: reload metrics bug fix backport #120544
Automated cherry pick of #119317: change rolling update logic to exclude sunsetting nodes #120785
Automated cherry pick of #120777: reintroduce resourcequota.NewMonitor #120795
Automated cherry pick of #120577: Increase range of job_sync_duration_seconds #120667
Automated cherry pick of #120623: sync Service API status rest storage #120654
Automated cherry pick of #120334: scheduler: start scheduling attempt with clean #120535
.: bump govmomi to v0.30.6 #120768
Automated cherry pick of #120561: kubeadm: remove reference of #120605
Automated cherry pick of #119824: fix race on etcd client constructor for healthchecks #120587
Automated cherry pick of #120559: e2e pods: fix WaitForPodsResponding retry #120572
openshift-hack: Fix sporadic 141 errors in build-rpms #1769
UPSTREAM: <carry>: support for both icsp and idms objects #1685
OCPBUGS-21584 : UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1757 Do not allow nodes to set forbidden openshift labels #1735
OCPBUGS-20096 : bump pause image to RHEL9 #1734 Revert #1731 “Revert #1703 “Update builder & base images”” #1732
Revert #1703 “Update builder & base images” #1731
Update builder & base images #1703
UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) #1726
OCPBUGS-19666 : kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1724 OCPBUGS-17534 : UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 #1711 UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier #1714
OCPBUGS-19452 : UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes #1716 Update to new openshift/* dependencies #1704
STOR-1425 : Update to Kubernetes 1.28.1 #1646 OCPBUGS-16080 : UPSTREAM: <carry>: watch-termination: termination.log file #1638 UPSTREAM: <carry>: disable test removed in 1.28 #1698
<carry>: Export cpu stats of ovs.slice via prometheus #1686
OCPBUGS-17654 : cm: reorder setting of sched_load_balance for sandbox slice #1665 OCPBUGS-18608 : UPSTREAM: <carry>: Force using host go always and use host libriaries #1688 OCPBUGS-18149 : UPSTREAM: <carry>: retry etcd Unavailable errors #1681 OCPBUGS-18149 : UPSTREAM: <carry>: retry etcd Unavailable errors #1676 OCPBUGS-14301 : UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation #1673 OCPBUGS-14301 : UPSTREAM: 117249,118189: fix TopologyCache crashes #1668 OCPBUGS-7415 : grant user:full scope to self-SARs #1493 UPSTREAM: 118280: Set all PSa labels in tests #1663
OCPBUGS-17119 : UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors #1661 OCPBUGS-15726 : UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups #1654 OCPBUGS-16166 : Update to Kubernetes 1.27.4 #1660 Update to Kubernetes 1.27.4 #1653
OCPBUGS-15726 : UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… #1630 OCPBUGS-16166 : Update to Kubernetes 1.27.4 #1645 releng/go: Bump images, versions and deps to use Go 1.20.6 #119366
Automated cherry pick of #119229: Fix the converts an empty string to nil. #119262
Automated cherry pick of #118237: Delete CRDs created during field validation tests. #118947
Automated cherry pick of #117865: Parallel StatefulSet pod create & delete #119096
Automated cherry pick of #116749: Adding additional validations to queried endpoint #117226
Automated cherry pick of #119159: Only declare job as finished after removing all finalizers #119160
Automated cherry pick of #118899: CHANGELOG-1.27: Add note for AWS in-tree provider removal #119065
Automated cherry pick of #118460: Make etcd component status consistent with health probes #118683
Update schedule logic to properly calculate missed schedules #119139
Automated cherry pick of #118177: Fix the git-repo test error caused by the correct use of loop #118290
Automated cherry pick of #118686: always execute condition for wait.PollUntilContextTimeout #118855
Automated cherry pick of #117243: Add node check to vSphere cloud provider #117936
Automated cherry pick of #118053: Updating the nodeAffinity of gated pods having nil affinity #118199
Automated cherry pick of #118876: kubectl explain should work for both cluster and namespace #118930
Automated cherry pick of #117791: update serial number to a valid non-zero number in ca #118969
Automated cherry pick of #118150 origin release 1.27 #119086
Automated cherry pick of #118329: Set the node-ips annotation correctly with #118662
Automated cherry pick of #118497: Fix the deletion of rejected pods #118841
Automated cherry pick of #118524: Fix flaky persistent volumes e2e test #118664
Automated cherry pick of #118257: dra scheduler plugin test: fix loopvar bug and “reserve” #118283
deps: Bump to cAdvisor v0.47.2 #118797
Automated cherry pick of #118049: Unset gated pod info timestamp in addToActiveQ #118821
OCPBUGS-15726 : UPSTREAM: 118881: fix openapi/v3 non local apiservices aggregation #1629 UPSTREAM: <drop>: hack/update-vendor.sh #1634
UPSTREAM: 119107: Stop using deprecated API #1624
OCPBUGS-13392 : UPSTREAM: 118915: remove legacy NetworkPolicy tests #1623 UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go #1621
UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… #1616
Update to Kubernetes 1.27.3 #1609
releng/go: Update images, deps and ver to Go 1.20.5 #118553
Automated cherry pick of #117169: supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 #118307
Automated cherry pick of #118499: kube-proxy avoid race condition using LocalModeNodeCIDR #118515
Automated cherry pick of #118356: Add ephemeralcontainer to imagepolicy securityaccount #118471
Automated cherry pick of #117792: kubeadm: Use internal etcd client through an interface #117948
Automated cherry pick of #118256: e2e framework retry on Service unavailable errors #118281
Automated cherry pick of #117586: Add DisruptionTarget condition when preempting for critical #118219
Automated cherry pick of #118200: e2e: apply timeout for CSI Storage Capacity test only to node #118279
Automated cherry pick of #118156: update webhook test to go 1.21 #118178
Automated cherry pick of #118069: kubeadm: fix a bug where the static pod changes detection #118105
Automated cherry pick of #118104: Fix waiting for CRD sync at server start #118111
UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io #1550
OCPBUGS-7181 : UPSTREAM: <drop>: bump apiserver-library-go #1605 STOR-1263 : Add csimock tests #1595 OCPBUGS-4053 : UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1594 Update test wrapper to match new k8s #1584
STOR-1263 : Bump to k8s 1.27.2 #1583 Automated cherry pick of #117954: OpenAPI V3 invalid document checks #117980
Automated cherry pick of #117768: QueryParamVerifierV3 resilient to minimal OpenAPI V3 #117918
Automated cherry pick of #117802: Update podFailurePolicy comments from alpha-level to beta #117815
node: device-mgr: Fix recovery flow by ensuring healthy devices exist and pre-allocated devices are healthy #117719
Automated cherry pick of #117677: Fix incorrect calculation for ResourceQuota with #117825
Bump konnectivity-client to 0.1.2 #117271
Automated cherry pick of #117861: kubeadm: fix a bug where file copy(backup) could not be #117905
automated-cherry-pick-of-#117354-upstream-release-1.27 #117860
changelog: fix formatting issue with v1.27 change log #117365
Automated cherry pick of #117751: Disable NewVolumeManagerReconstruction / SELinuxMountReadWriteOncePod feature gates #117752
Automated cherry pick of #116675 upstream release 1.27 #117438
Automated cherry pick of #116138: fix: the volume is not detached after the pod and PVC objects #117236
releng/go: Update images, dependencies and version to Go 1.20.4 #117773
Automated cherry pick of #117388: Re-work logic in shouldSyncUpdatedNode #117450
Automated cherry pick of #117214: add log includes pod preemption details #117445
Automated cherry pick of #117238: api: encode NamespacedName with lower case in JSON #117298
Automated cherry pick of #117723: Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP #117755
Automated cherry pick of #117216: Fix azure disk e2e after migration #117246
Automated cherry pick of #117022: Fix directory mismatch for volume.SetVolumeOwnership() #117574
Automated cherry pick of #116950: Do not look at VPC-related resources outside the cluster’s #117289
Automated cherry pick of #116995: kubelet: Ensure pods that have not started track a #117369
Automated cherry pick of #117705: Update kube-openapi to fix race #117708
Automated cherry pick of #117019: kubelet: Mark new terminal pods as non-finished in pod worker #117433
Automated cherry pick of #115019: proxy/ipvs: add a GetAllLocalAddressesExcept() function #117684
Automated cherry pick of #117495: Use absolute path instead requestURI in openapiv3 discovery #117685
Automated cherry pick of #117594: Fix scheduler performance regression after adding plugin #117617
Automated cherry pick of #117258: kube-aggregator: correctly use client-go TLS cache with #117310
Automated cherry pick of #117571: Refactors discovery content-type and helper functions #117637
Automated cherry pick of #117593: Fix bug where CEL listOfString.join() results in unexpected #117596
Automated cherry pick of #117453: Fix stomping os env in kubectl e2e tests #117459
Bump runc to 1.1.6 #117242
Automated cherry pick of #117182: use case-insensitive header keys for http probes #117324
Automated cherry pick of #117020: Return error for localhost seccomp type with no localhost #117147
cherry-pick: #117785 from k/k - disable external IPs on e2e net tests #1581 UPSTREAM: 117893: When expecting pods count only active ones #1577
OCPBUGS-13854 : UPSTREAM: 117371: kubelet: Don’t reference the pod manager interface directly from components #1578 OCPBUGS-11652 : UPSTREAM: <carry>: Extend NodeLogQuery feature #1579 OCPBUGS-13148 : kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1573 UPSTREAM: <carry>: move test rules from origin #1574
OCPBUGS-11143 : Azure: move to kube-proxy LB probes, don’t detach masters when unready #1569 OCPBUGS-10048 : UPSTREAM: <carry>: add conditional shutdown response header #1555 OCPBUGS-2474 : UPSTREAM: 116995: kubelet: Ensure pods that have not started track pendingUpdate #1561 STOR-1263 : Update to Kubernetes 1.27.1 #1558 OCPBUGS-10829 : UPSTREAM: 117310: kube-aggregator: correctly use client-go TLS cache with custom dialer #1548 UPSTREAM: <carry>: add shutdown annotation to response header #1537
UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled #1518
Add wrapper which will allow running o/k tests as external binary in origin #1485
OCPBUGS-7267 : More fixes to SCC PSa extractor #1482 OCPBUGS-10048 : UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests #1456 OCPBUGS-8220 : CSI Inline Volume admission plugin does not log object name correctly #1499 OCPBUGS-8092 : Fix mounted volume expansion tests #1498 UPSTREAM: <carry>: update rebase doc #1464
Bump to k8s 1.26.2 #1494
releng: Update images, dependencies and version to Go 1.19.6 #115833
Update golang.org/x/net to v0.7.0 #115787
Automated cherry pick of #115569: Enforce nodeName cannot be set along with non-empty schedulingGates #115636
apiserver cluster egress metrics: backport to release-1.26 #115369
Automated cherry pick of #115315: kubelet/client: collapse transport wiring onto standard #115566
Automated cherry pick of #114680: k8s.io/component-base/logs: fix usage through Go flag #115229
Automated cherry pick of #114351: Ignore container events with nil PodSandboxStatus #115552
Automated cherry pick of #115349: update prev succeeded indexes for indexed jobs #115462
Automated cherry pick of #115354: dynamic resource allocation: avoid apiserver complaint about #115400
Pin golang.org/x/net to v0.4.0 in 1.26 #115642
Automated cherry pick of #115179: Fix nil pointer error in nodevolumelimits csi logging #115347
[Cherrypick #115537][1.26]*: Bump golangci-lint version and adapt to new linters #115611
Automated cherry pick of #114886: kubectl: use v2 for hpa #115337
Automated cherry pick of #115341: apiserver: remove 34s from DELETECOLLECTION rest handler #115479
Automated cherry pick of #115147: fix bug with param controllers being removed if used by more #115185
Automated cherry pick of #115382: Avoid typechecking stdlib #115386
Automated cherry pick of #115143: add custom dialer optimized for probes #115278
Automated cherry pick of #115056: PodGC should not add DisruptionTarget condition for pods #115104
Automated cherry pick of #115322: Fix panic on ClusterIP allocation for /28 subnets #115333
Automated cherry pick of #115129: bump honnef.co/go/tools to support go1.20 #115169
Automated cherry pick of #114940: Fixes the issue #114145 #115152
AUTH-336 : UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… #1489 Bump to k8s 1.26.1 #1479
pkg/controller/job: re-honor exponential backoff #115027
Automated cherry pick of #114602: Removed the reverted changes from Changelogv1.26.md #114838
Automated cherry pick of #114078: Explicitly call rand.Seed() method #115005
Automated cherry pick of #114923: Do not leak cross namespace pod metadata in preemption events #114946
Automated cherry pick of #114914: Adjust DisruptionTarget condition message to do not include #114945
releng: Update images, dependencies and version to Go 1.19.5 #115014
Cherry pick 114857 to release-1.26 #114861
Automated cherry pick of #114782: Licensing: skip modules with fewer subdirs than mods #114812
Automated cherry pick of #113283: Fix SPDY proxy authentication with special chars #114521
Automated cherry pick of #114326: Add pod to dsw if termination is not completed during #114730
Automated cherry pick of #114952: Improve vendor verification works for each staging repo #114960
Automated cherry pick of #113787: Update daemonSet status even if syncDaemonSet fails #114819
Automated cherry pick of #114937: Exports WarningPrinter field in DeleteOptions #114968
Bump Konnectivity to v0.0.35 in release-1.26 #114927
Automated cherry pick of #114217: Fix issues in volumesnapshot test for ephemeral storage #114791
Automated cherry pick of #114770: Fix clearing rate limiter in disruption controller #114780
Automated cherry pick of #114350: Deflake a preemption test that may patch Node incorrectly #114429
Automated cherry pick of #114585: Resource claims should be a map type #114617
Automated cherry pick of #114660: Add .go-version file containing build go version #114662
Automated cherry pick of #114518: Fix a regression that scheduler always go through all Filter #114524
Automated cherry pick of #114261: Reduce load of Job integration test #114457
Automated cherry pick of #114407: Windows Kube-Proxy implementation for internal traffic #114468
Automated cherry pick of #113742: Introducing LoadbalancerPortMapping flags for VipExternalIP #114038
Automated cherry pick of #113776: Creating Ingress IP loadbalancer alone when all the endpoints #114453
Automated cherry pick of #114459: fix double lock and excercise its codepath in tests #114462
Automated cherry pick of #114404: Check the correct error in d.downloadAPIs #114415
Automated cherry pick of #113933: Limit request retrying to []byte request bodies #113988
OCPBUGS-7267 : add SeccompProfile to Pod and Container accessors/mutators #1490 UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller #1488
CNF-5901 : admission hook change for workload partition on all clusters #1312 UPSTREAM: 113799: tests: network: Prefer internal IPs first #1446
UPSTREAM: 115863: Remove global framework variable #1480
UPSTREAM: <carry>: add new approvers #1458
OCPBUGS-7555 : UPSTREAM: <carry>: add default kubelet sysctls within rpm #1475 AUTH-336 : UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies #1454 add icsp validation: reject one of icsp idms.itms resources #1310
UPSTREAM: 114027: make GetSubnetPrefix IP family agnostic #1469
disable tests dependent on StackDriver #1466
UPSTREAM: 115484: Don’t explicitly set image version in tests #1465
UPSTREAM: 114994: kubelet: fix readiness probes with pod termination #1450
OCPBUGS-6030 : Rebase onto kube v1.26 #1432 Fix the mutated PodSpec extractor for warns if no SCC matches #1453
OCPBUGS-4900 : remove in-tree volume limits test now that CSIMigration is GA #1448 OCPBUGS-4658 : Apply shared defaulters to CRD-based routes. #1440 OCPBUGS-4657 : Bump library-go. #1431 UPSTREAM: <carry>: make the PSA workload admission warnings honor the… #1393
UPSTREAM: <carry>: Ensure balanced brackets in annotated test names #1410
STOR-829 : Add CSIInlineVolumeSecurity admission plugin #1384 OCPBUGS-3501 : UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. #1419 UPSTREAM: <drop>: Bump openshift/api. #1424
OCPBUGS-3499 : UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. #1416 Bug 2117374 : UPSTREAM: <drop>: update apiserver-library-go to add message about wo… #1395 Bug OCPBUGS-2991: Disable expansion in SC, if driver does not support it #1402
OCPBUGS-3093 : Tag AWS security groups at creation #1411 UPSTREAM: <drop>: Bump library-go. #1406
OCPBUGS-2946 : Revert: 1340: tag AWS security group at creation #1401 OCPBUGS-3084 : UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines #1404 OCPBUGS-2774 : UPSTREAM: 112807 Fix Load balancer services with xTP local #1400 UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones #1396
UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation #1340
UPSTREAM: 113135: Wait for pod not running or gone in storage tests #1394
Bump to k8s 1.25.2 #1380
Automated cherry pick of #112299: Reduce default gzip compression level from 4 to 1 in #112398
Automated cherry pick of #112507: Fix calculating error when adding nominated pods in #112531
Automated cherry pick of #112427: Add zone field to vsphere test cloudconfig #112478
Automated cherry pick of #112526: Limit redirect proxy handling to redirected responses #112527
Automated cherry pick of #112508: kubeadm: allow RSA and ECDSA format keys in preflight check #112534
Automated cherry pick of #112355: Fix the TestRoundTripTypes by adding default to the fuzzer #112366
Automated cherry pick of #111205: Fix problem in updating VolumeAttached in node status #112305
Automated cherry pick of #112193: Add an option for aggregator #112330
Automated cherry pick of #112129: dependencies: update to ginkgo v2.1.6 and gomega v1.20.1 #112161
Automated cherry pick of #112017: exec auth: support TLS config caching #112336
Update images, dependencies and version to Go 1.19.1 #112320
Automated cherry pick of #112159: Update to use GA PodSecurity webhook image #112162
Automated cherry pick of #110951: fix nestedPendingOperations mount and umount parallel bug #112079
Automated cherry pick of #111964: Fix of #111769 for 1.25 release branch #112107
Automated cherry pick of #111912: regression test for exponential recursion bug on CRDs #112099
Automated cherry pick of #112157: Avoid propagating search . into containers /etc/resolv.conf #112204
Automated cherry pick of #111999: fix error type #112138
Automated cherry pick of #111752: Revert “client-go: remove no longer used #112055
Automated cherry pick of #112243: Revert “Remove unused flags from kubectl run” #112249
Automated cherry pick of #112183: Tolerate sub-microsecond eventTime changes on update #112186
Automated cherry pick of #112150: Improve kubectl display of invalid errors #112154
Automated cherry pick of #112076: Revert “promote #112078
Bug 2041317 : Fix replica calculation at start of HPA scaling policy period #1391 UPSTREAM: <carry>: allow annotating with a specific suite #1388
k8s 1.25.0 #1360
UPSTREAM: <carry>: Dockerfile: use centos:stream9 #1366
OCPBUGS-718 : UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule #1358 UPSTREAM: <carry>: optionally enable retry after until apiserver is ready #1346
UPSTREAM: 110639: endpointslices: node missing on Pod scenario #1359
UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess #1350
UPSTREAM: 110039: Add readinessProbe to aggregated api service test #1307
Bug 2118318 : UPSTREAM: 110939: don’t quota events.k8s.io events by default #1344 UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… #1349
UPSTREAM: <carry>: Skip session affinity timeout tests #1339
Bug 2117569 : UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller #1338 Add kubensenter to the openshift RPM #1327
UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods #1333
trt-393: add plugin name to caches not synchronized error #1330
Bug 2102383 : UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() #1315 Bug 2088606 : Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin #1247 Bug 2081194 : UPSTREAM: <carry>: update list of deprecated apis #1091 Bug 2082773 : Fix resizing of ephemeral volumes #1296 UPSTREAM: <carry>: Remove reserved CPUs from default set #1295
Bug 2094012 : UPSTREAM: 110652: fix: –chunk-size with selector returns missing result #1303 Bug 2063414 : UPSTREAM: 109441: kubelet: parseResolvConf: Handle “search .” #1283 Bug 2086519 : get SCC admission default securityContext.runAsNonRoot to true on positive UIDs #1290 Bug 2078778 : UPSTREAM: 110408: apiserver: printers should use int64 #1288 Bug 2089933 : Backport 110191 Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker #1285 Bug 2087685 : Worker Latency Profiles: Config node object validation for extreme profile transition #1287 Bug 2065749 : UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1229 Bug 2094954 : UPSTREAM: 110258: Fix pod eviction ip #1282 UPSTREAM: <carry>: provide unique reason for pod probe event during t… #1281
Bug 2086092 : UPSTREAM: 108284: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1261 Fixes probe readiness shutdowns #1269
Bug 2086092 : update kube to v1.24.0 #1252 Bug 2086519 : UPSTREAM: <carry>: e2e-framework: don’t autosync PodSecurity labels #1268 Bug 2062459 : Identify if there are multiple schedulers running #1251 Bug 2075621 : UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved bug #1243 Bug 1999325 : Backport 107821 and 107831 #1225 UPSTREAM: 109283: test/e2e/*: use restricted policy by default, default existing tests to privileged #1238
Bug 2051985 : UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic #1172 Bug 2066865 : Skip azure topology tests #1230 UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1227
Revert “UPSTREAM: <carry>: Unskip OCP SDN related tests” #1228
bump apiserver-library-go #1218
UPSTREAM: <carry>: update list of deprecated apis #1204
UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1226
Bug 1957668 : UPSTREAM: <carry>: use console-public config map for console redirect #1110 UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy #1212
Bug 2022507 : Backport 108366: OutofCpu Fixes #1199 Bug 1945329 : enable should drop INVALID conntrack entries test #897 Bug 2063938 : UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1215 Bug 2062459 : Generate event when cache update is failed #1210 UPSTREAM:<carry>:Unskip OCP SDN related tests #1201
Bug 2034958 : enable “Conntrack should be able to preserve UDP traffic when initial… #1197 UPSTREAM: 106454: SQUASH: test/e2e: let e2e tests specify pod security admiss… #1128
Bug 2040715 : UPSTREAM: 108284: fix: exclude non-ready nodes from azure load balancer #1190 UPSTREAM: <drop>: zero-diff to pick up tags for versions #1193
Bug 2040715 : upstream 108149: do not return early in the node informer when there is no change #1184 Bug 2040533 : UPSTREAM: <drop>: Ignore container notfound error while getPodstatuses #1176 Bug 2040533 : UPSTREAM: 107900: Pods that have terminated before starting should not block startup #1157 UPSTREAM: 107847: service REST: Call Decorator(old) on update path #1156
Bug 1979671 : UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled #977 Bug 2044824 : UPSTREAM: 107786: Ensure the execHostnameTest() compares hostnames #1153 Bug 2044347 : bump to k8s 1.23.3 #1145 Automated cherry pick of #106853: When volume is not marked in-use, do not backoff #107390
Automated cherry pick of #107686: Fix bug with node restriction blocking #107699
Automated cherry pick of #107406: fix: delete non existing disk issue #107576
Automated cherry pick of #106164: fix: remove outdated ipv4 route when the corresponding node #107579
Update k/utils to v0.0.0-20211116205334-6203023598ed #107638
Automated cherry pick of #107312: Execute sync before taking the snapshot #107566
Automated cherry pick of #107688: Fix regression pruning array fields with #107689
update to Go 1.17.6 #107613
Automated cherry pick of #107565: upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 #107567
Revert “Automated cherry pick of #107554: Correct the feature gate string for RBD migration.” #107571
Automated cherry pick of #106581: Enabling kube-proxy metrics on windows kernel mode #107075
Automated cherry pick of #107554: Correct the feature gate string for RBD migration. #107555
Automated cherry pick of #107429: fix: azuredisk parameter lowercase translation issue #107518
Automated cherry pick of #107044: cli: avoid logging command line errors in more cases #107475
Automated cherry pick of #107427: removed unnecessary log line #107484
Automated cherry pick of #107452: Fix header mutation race in timeout filter #107458
Automated cherry pick of #107200: flake fix: remove the error handler for cronjob integration #107357
Automated cherry pick of #106816: clear pod’s .status.nominatedNodeName when necessary #107109
Cherry pick of #107033: Remove JSON logging performance regression #107052
Automated cherry pick of #107337: Fix the leak of vSphere client sessions #107353
Automated cherry pick of #107327: kubeadm: remove the restriction that the ca.crt can only #107364
Automated cherry pick of #107311: client-go: Clear the ResourceVersionMatch on paged list calls #107334
Automated cherry pick of #106936: Skip creating HNS loadbalancer with empty endpoints #106967
Automated cherry pick of #106906: mount-utils: Detect potential stale file handle #106988
Automated cherry pick of #107173: Fix order of commands in the snapshot tests for persistent #107341
cherry pick of knp 0.0.27 #107037
Automated cherry pick of #107221: fix nil pointer in create secret commands #107347
Automated cherry pick of #106683: add gce elb rbs opt-in annotation #107072
Automated cherry pick of #107091: Improving performance of EndpointSlice controller metrics #107167
Automated cherry pick of #106827: apf: ensure exempt request notes the classification #107081
Automated cherry pick of #107084: Update CHANGELOG to add missing release notes. #107092
Automated cherry pick of #104799: fix the error when cleaning up jobs for cronjob #107140
Changelog: mention kube-scheduler bits deprecation #106910
Automated cherry pick of #107004: Point flowcontrol users at v1beta2 #107005
Automated cherry pick of #106667: updated deprecation messages from 1.23 to 1.24 #106933
Automated cherry pick of #106887: Direct v2betaX users to migrate to HPA v2 #106888
Automated cherry pick of #107003: Re-introduce removed kubectl –dry-run values. #107021
Update to go1.17.5 and golang.org/x/net to v0.0.0-20211209124913-491a49abca63 #106835
Automated cherry pick of #106599: Fix Bugs in CPUManager distribute NUMA policy option #106953
Automated cherry pick of #106878: rbd: initialize ceph monitors slice with an empty value. #106898
Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig #106931
Automated cherry pick of #106891: kubeadm: validate local etcd certficates during #106926
Automated cherry pick of #106641: DelegateFSGroupToCSIDriver e2e: skip tests with chgrp #106867
kubelet: set failed phase during graceful shutdown #106900
Bug 2039539 : Revert “UPSTREAM: <drop>: revert upstream PR 106306” #1143 Bug 2041583 : UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1136 Bug 2040533 : UPSTREAM: 107695: kubelet: fix podstatus not containing pod full name #1140 Bug 2039539 : UPSTREAM: <drop>: revert upstream PR 106306 #1130 Bug 2022824 : Fix the leak of vSphere client sessions #1104 Bug 2042169 : UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1123 Bug 2040793 : Fix ordering issues with snapshot e2e #1119 Bug 2038968 : Restore upstream feature gates #1112 Bug 2004542 : UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1099 Bug 2041641 : Backport k8s.io/utils fix for a memory leak within the inotify utilities #1122 Bug 2042493 : UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1124 Bug 2039414 : UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost-squash to other #1121 Bug 2042493 : UPSTREAM: <carry>: Fix conformance and serial tests by stopping node cordoning #1129 Bug 1933144 : hardens the aggregated API e2e tests in an HA setup #1114 Bug 2001442 : empty termination.log file for the kube-apiserver has too permissive mode #1096 Bug 2034705 : UPSTREAM 107136: Don’t log vSphere configuration data in storage e2e tests #1098 Bug 2033751 : fix -rt builds and copy extensions into resulting image #1106 Bug 2033751 : Kube 1.23.0 rebase #1087 Switch to go1.17 #1080
Bug 2021629 : UPSTREAM: <carry>: api request counts for current hour are incorrect #1037 UPSTREAM: 105910: retry PV create in e2e-test on API quota failure #1078
UPSTREAM: <drop>: revert to go1.16 #1079
Updating openshift-enterprise-hyperkube images to be consistent with ART #934
UPSTREAM: <drop>: remove creation of openshift-infra ns and recycler SA #1039
Bug 2008532 : Fix subpath sources check #1065 Bug 2017276 : UPSTREAM: 105934: Don’t guess SELinux support on error #1052 Rebase Automation Script #1040
Updating openshift-enterprise-pod images to be consistent with ART #933
UPSTREAM: <carry>: delay queuing deletion for PV to allow nodes some time to unmount #1062
Bug 1978528 : UPSTREAM: <carry>: bump cadvisor for 2957, 2999 and 2979 upstream patches #1049 Bug 2023779 : Fix patch 104847 #1059 Bug 2022811 : UPSTREAM: 106382: defer close the rotated log open #1051 Bug 2007495 : UPSTREAM: 105213: remove StartedPodsErrorsTotal metrice message #988 Bug 2021936 : Read k8s version from hyperkube Dockerfile #1038 Bug 2002759 : UPSTREAM: <carry>: verify required http2 cipher suites #1022 UPSTREAM: <carry>: update rebase doc #1031
Bug 2000216 : Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1014 Bug 1970331 : UPSTREAM: <drop>: bump apiserver-library-go #1017 Bug 1990190 : Remove Error Message Check Dynamic PV Tests #1011 Bug 2011513 : kubelet: do not arbitrarily create a podSyncStatus for finished pods #1007 UPSTREAM: <drop>: bump apiserver-library-go #1008
Bug 1997478 : Ensure terminal pods maintain terminal status #999 Bug 2010348 : UPSTREAM: 105352: revert pie build mode #993 UPSTREAM: <carry>: allow SCC to be disabled on a per-namespace basis #984
Bug 2000754 : UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps #980 Bug 1965368 : UPSTREAM: <drop>: bump(apiserver-library-go) #971 Remove Error Message for Unsupported Volume Test #905
Add CSI migration feature gates for vSphere and Azure File #961
etcd-client starts retrying transient errors from the etcd cluster #959
UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #963
Bug 2005182 : UPSTREAM: <carry>: update list of deprecated apis to be removed #965 Bug 1999133 : kubelet: Handle UID reuse in pod worker #938 UPSTREAM: <carry>: add control plane to allowed roles #957
UPSTREAM: <drop>: bump openshift, k8s to 1.22.1 #950
Bug 2003269 : UPSTREAM: 104817: kubelet: Rejected pods should be filtered from admission #948 Bugzilla 2001763: UPSTREAM: <carry>: 104437: run etcd healthcheck in the background and… #893
UPSTREAM: 104314: legacy-cloud-providers: aws: Add support for consuming web identity credentials #927
Bug 1996689 : Tighten up RestrictedEndpointsAdmission #899 Bug 1996779 : Fix bug with goroutine capturing loop variable #904 Bug 2000451 : UPSTREAM: <drop>: Disable broken sig-storage test #925 Bug 1994643 : UPSTREAM: 104630: remove server option startup-send-retry-after-until… #922 Bug 1992016 : UPSTREAM: <carry>: add OPENSHIFT_MAX_HOUSEKEEPING_INTERVAL_DURATION and OPENSHIFT_EVICTION_MONITORING_PERIOD_DURATION #909 Bug 1994927 : Revert “Remove Endpoints write access from aggregated edit role” #908 Bug 1997657 : UPSTREAM: 104577: kubelet: Admission must exclude completed pods and avoid races #920 Bug 1948089 : openshift-apiserver should not set Available=False APIServicesAvailable on update #915 Bug 1986003 : Rebase 1.22.1 #916 Automated cherry pick of #103958: Set idle and readheader timeouts #103988
Automated cherry pick of #103979: cpu manager: do not clean admitted pods from the state #104267
Automated cherry pick of #103750: Pass unknown labels in allowedTopologies during CSI #104198
Automated cherry pick of #104061: replace e2e WaitForPodsReady by #104154
Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs #104149
Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in #104346
Automated cherry pick of #104182: Avoid spurious calls to update/delete validation #104206
Update to go1.16.7 #104200
Automated cherry pick of #104135: Update configure-helper.sh #104178
Automated cherry pick of #104161 upstream release 1.22 #104188
Automated cherry pick of #104146: Remove duplicate dependencies from 1.22 changelog #104166
Automated cherry pick of #103982: Mark failing node serial tests as flaky #104084
Automated cherry pick of #103842: Use pointer gomega comparison for UsageNanoCores #104082
[cherry pick to 1.22] Start the informerFactory in the ControllerContext #104081
Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer #104051
Automated cherry pick of #104047: Log e2e-node kubelet output directly to file #104079
Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in #104066
Automated cherry pick of #104033: Revert “Add a namespace label to admission metrics and expand #104037
Automated cherry pick of #103827: Remove conformance status from a sysctl test and relabel #103984
Automated cherry pick of #103937: Fix disruptive subPath test failures #103983
Automated cherry pick of #103439: fix azure disk translation issue #103968
Automated cherry pick of #103865: Add e2e testing manifest bundle to e2e_node test suite #103977
Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 #103930
Automated cherry pick of #103831: disable aufs module #103926
Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid #103947
Automated cherry pick of #103815: Fix SIG Node SSH e2e test #103824
Automated cherry pick of #103743: vendor: bump runc to 1.0.1 #103882
Do not try to create an audit log file named “-” #103878
Automated cherry pick of #103713: cluster: fix CI metrics-server deployment #103873
Automated cherry pick of #103806: Fetch metrics from controller manager & scheduler no run once #103854
Bug 1994643 : UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers #907 Bug 1994643 : UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in #906 Bug 1993980 : UPSTREAM: 104529: [1.22] vendor: bump runc to 1.0.2 #910 Bug 1948089 : openshift-apiserver should not set Available=False APIServicesAvailable on update #903 Bug 1986307 : UPSTREAM: <carry>: re-enable networking tests #885 Bug 1995804 : UPSTREAM: <carry>: rename termination events to use lifecycleSignals #896 Bug 1950993 : UPSTREAM: <drop>: bump cadvisor for 2868 and 2925 upstream patches #892 Bug 1997465 : UPSTREAM: 104466: bump k8s.io/util to get fix for LRU cache #898 Bug 1994643 : UPSTREAM: 104281: send retry-after until the apiserver is ready #889 Bug 1982868 : UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #877 Bug 1986306 : Kubectl client kubectl wait should ignore not found error with –for=delete #891 Bug 1994643 : UPSTREAM: <carry>: use lifeCycleSignals for isTerminating #887 Bug 1980118 : UPSTREAM: <carry>: drop the warning to use –keep-annotations #860 Bug 1992900 : Fix build with multiple GOFLAGS #886 Bug 1986003 : Bump k8s.io to 1.22.0-rc.0 #862 UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure #853
Bug 1981477 : Do not throw error when we can’t get canonical path #817 UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… #852
produce events for readyz going true #807
UPSTREAM: <drop>: remove the openshift authenticator from the apiserver #822
UPSTREAM: <drop>: bump(apiserver-library-go) #846
UPSTREAM: <carry>: add CSI migration feature gates for GCE PD and Azure Disk #831
UPSTREAM: 103385: Fix Multi-AZ test #837
Bug 1977920 : Ensure scc compatibility with BoundServiceAccountTokenVolume #841 UPSTREAM: 103050: Bug 1975325: Fix NodeAuthenticator tests in dual stack #823
Updating openshift-enterprise-hyperkube images to be consistent with ART #814
Bug 1976379 : UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type #832 Updating openshift-enterprise-pod images to be consistent with ART #812
UPSTREAM: <carry>: update rebase doc #824
Bug 1975283 : update Multi-AZ Cluster Volumes test name #825 UPSTREAM: <carry>: update rebase doc #818
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column #810
Bug 1971745 : only chown if non-windows machine with projected volumes #804 Automated cherry pick of #106716: bump TestHTTP1DoNotReuseRequestAfterTimeout timeout #106782
Automated cherry pick of #106728: Add enj to sig-auth-authenticators-approvers #106783
Automated cherry pick of #106803: Revert dockershim CRI v1 changes #106808
Grpc field name cherry pick: 1.23 #106776
Automated cherry pick of #106660: Revert sigs.k8s.io/structured-merge-diff/v4 to v4.1.2 #106661
Automated cherry pick of #106657: Unversion and normalize openapi v3 fixtures #106659
Automated cherry pick of #109658: Bump cAdvisor to v0.44.1 #109675
Automated cherry pick of #109592: windows GCE: Bumps containerd version to 1.6.2 #109620
Automated cherry pick of #109541: Disable Intree GCE PD tests by default #109615
Automated cherry pick of #117194: Revert “Optimization on running prePreEnqueuePlugins #117308
Automated cherry pick of #117301: Revert “CR conversion: protect from converter input #117305
Automated cherry pick of #116482: kubelet: Do not mutate pods in the pod manager #117254
Automated cherry pick of #120472: fix(queue_test): make sure the first bind failure via counter #120528
Bump images, versions and deps to use Go 1.20.8 #120495
Automated cherry pick of #118189: TopologyAwareHints: Take lock in HasPopulatedHints #120372
Automated cherry pick of #120177: apiextensions-apiserver: generate applyconfigurations #120356
Automated cherry pick of #120108: Fix OpenAPI aggregation cleanup #120358
Automated cherry pick of #120413: scheduler: fix tracking of concurrent events #120445
Automated cherry pick of #120197: sort stability list of metrics in the shell command #120442
Automated cherry pick of #120281: Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime #120440
Automated cherry pick of #119860: update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 #119999
Automated cherry pick of #119778: fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap #119951
Automated cherry pick of #119769: Fix a bug that PostFilter plugin may not function if previous #119942
Automated cherry pick of #119800: Fixes CEL estimated cost to propagate result sizes correctly #119807
Automated cherry pick of #119027: prep for go1.21: use -e in go list #120037
Automated cherry pick of #119753: kubeadm: fix nil pointer when etcd member is already removed #120010
Automated cherry pick of #120101: fix: concurrent map writes in e2e test #120435
Automated cherry pick of #119761: Statefulset should wait for new replicas when removing #119970
Automated cherry pick of #119928: e2e WaitForServiceEndpointsNum take into account the address #119964
Automated cherry pick of #120109: Add wait for cache sync #120141
Automated cherry pick of #119870: Fallback to legacy discovery on a wider range of conditions #120359
Automated cherry pick of #120327: Revert to json-patch 4.12.0 #120329
update build cross image to the correct release branch image #120260
Automated cherry pick of #119986: Pass Pinned field to kubecontainer.Image #120053
Automated cherry pick of #120204: Mark Job onPodConditions as optional in pod failure policy #120208
Automated cherry pick of #120087: Incorporating feedback on 119341 #120155
Cherry pick of #120128 Use environment variables for parameters in Powershell #120134
Cherry pick of #120127 Use env variables for passing path and subpath to Powershell #120129
Automated cherry pick of #119977: Make gomaxprocs install optional, limit to tests #119982
Remove release-notes for the reverted PR#118895 #119899
Fix segfault during storage size metric collection #119888
kube-proxy: fix combination of –config and logging command line flags #119867
Remove matchConditions flaky test #119869
Revert “Merge pull request #118895 from RyanAoh/kep-1860” #119876
Avoid returning nil responseKind in v1beta1 aggregated discovery #119835
fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent #119784
Update publishing-bot rules for release branches to Go 1.20.7 #119847
Bump distroless-iptables to 0.2.7 #119818
Fix flaky test depending on EndpointSlices to be ready #119798
Bump images, versions and deps to use Go 1.20.7 #119804
.*: bump golang.org/x/net to v0.13.0 #119725
Issue 4230: remove readiness check for cache exclusion #119128
scheduler: fix data race after binding failure #119729
Update CHANGELOG-1.28.md for KMSv2KDF #119693
Update CHANGELOG OWNERS to reflect 1.28 Release Notes team #119696
API warnings for services with bad combos of ExternalIPs and ExternalName #119310
docs: update release note for KMSv1 deprecation #119634
apiextensions: fix validation error for status.storedVersions #119653
DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates #119624
Avoid pulling node-problem-detector through CDN #119671
Avoid pulling mounter.tar through the CDN #119663
Calculate the correct machine-type #119603
fix ‘pod’ in kubelet prober metrics #118549
publishing-bot rules for release-1.28 branch #119597
Set node-env map parser to nil if an empty string is passed #119587
test: fix NodeLogQuery tests to query the correct node for logs #119571
kmsv2 test feature enablement disablement and restart #119531
update documentation with descriptions #119564
Add test cases for ValidatingAdmissionPolicy #119409
Treat empty string as nil in fuzzer for CEL Reason field #119543
Fix non-test code relying on test-code #119542
do not touch swap for cgroup v1 if not available #119486
Add node-env and instance-type flags to node-e2e tests #119513
KEP-3488 : Promote ValidatingAdmissionPolicy to Beta #118644 kmsv2: KDF based nonce extension #118828
PersistentVolume last phase transition time #116469
Fix XValidations deepcopy to copy contents of nested pointers #119510
Refactor jsonpath parser and add tests #119453
Fix the flaky TestJobApiBackoffReset test #119506
Job: create replacement pods only after terminated #117015
update documented metrics #119484
node_e2e: Fix createStaticSystemNodeCriticalPod’s invalid spec #119473
Fix the semantic meaning of etcd server within component statuses and metrics. #119437
KEP-3488 : Per namespace policy params #119215 Use debian-base instead of distroless for conformance image #119422
Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows #119412
revert “refactor: simplify RunScorePlugins for readability + performance” #119444
Add pod_swap_usage_bytes as an expected metric in resource metric e2e test #119421
Include ignored pods when computing backoff delay for Job pod failures #119434
add podReplacementPolicy and terminating field to job api #119301
apiextensions: validate status updates with status schema #119340
feat: improves metric and logging #119166
Fix making OpenAPI V2 aggregator lazy #118212
cronjob: return immediately when failed to create job for the namespace is terminating #115952
cmd/kubelet: implement drop-in configuration directory for kubelet #119390
Unknown Version Interoperability Proxy Impl #117740
KEP-3939 : pod gc changes for pod replacement policy kep #118772 Increase timeout for DRA kubelet plugin client #119414
CRD Validation Ratcheting alpha implementation #118990
Track executing requests #119009
node authorizer: limit kubelet access to ResourceClaim objects #116254
Expose commit memory used in WindowsMemoryUsage struct #119238
Fix lazy OpenAPI V2 CRD Controller #118808
DRA: don’t query claims from API server #119307
kubelet: Implement support for Windows podAndContainerStatsFromCRI #116968
Extend the Job API for BackoffLimitPerIndex #119294
Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods #119256
Remove ability to re-enable serving deprecated policyv1beta1 APIs #117666
addons/metrics-server: fix nanny rbac permissions #119386
Improve docs on framework.CycleState #119318
add unit test for dra/manager.go #118711
Bump distroless-iptables to 0.2.6 #119365
Update debian-base to bookworm #119095
priority & fairness: support dynamic max seats #118601
replace strings.Index with strings.Contains #119321
openapi: reference shared parameters #118204
Add swap to stats to Summary API and Prometheus endpoints (/stats/summary and /metrics/resource) #118865
Add full cgroup v2 swap support with automatically calculated swap limit for LimitedSwap and Burstable QoS Pods #118764
Replace lavalamp with jpbetz as feature-approver for api-machinery #119388
Allow all probes and lifecycle for restartable init containers #119168
Fix e2e tests for overriding timoutGracePeriodSeconds when probe is set #119381
Graduate AdmissionWebhookMatchCondition to beta #119380
move KEP-3178 IPTablesOwnershipCleanup to GA #119374
Ignore context canceled from validate and mutate webhook failopen metric #119341
upgrade prometheus common to v0.44.0 #119312
Add metrics for cloud controller manager initial node sync #119241
kubelet: get cgroup driver config from CRI #118770
Update api recovery apis #116335
All sig node approvers should be able to merge changes to CRI API #119383
Adding node feature owners #119382
Never drop the terminationGracePeriodSeconds of a probe #119354
promote beta metrics #119264
node: podresources: getallocatable: move to GA #118973
Fix, deprecate apiserver_flowcontrol_request_concurrency_limit #118959
DRA: report NodePrepareResource errors #118578
Add integration tests for MatchConditions feature gate enablement #119342
aggregate kube-proxy metrics #119353
Make Kubernetes aware of the LoadBalancer behaviour #118895
Promote kube-apiserver flowcontrol metrics to Beta #119110
Update publishing-bot rules for release branches to Go 1.20.6 #119371
Add CDI devices to device plugin API #118254
kubeadm: remove the limitation that the ‘ignorePreflightErrors’ field can not be set to ‘all’ in kubeadm config file #119351
kubeadm: Support kubeadm config validate for ResetConfiguration #119319
Conditionally serialize flushFrequency as int #119333
kubelet: devices: skip allocation for running pods #118635
: Implement KEP-3836 #116470
Bump images, versions and deps to use Go 1.20.6 #119324
Enable arm64 support for GCE node configuration #119277
kubeadm: Support kubeadm config migrate for ResetConfiguration #119313
add warning for dup ports in containers[*].ports and service.ports #113245
Field status.hostIPs added for Pod #109616
kubeadm: add kubeadm config print reset-defaults command for ResetConfiguration #119345
matchCondition metrics for beta graduation #119311
topologymanager: Promote support for improved multi-numa alignment in Topology Manager to beta #118816
Ensure final diff is used for setting expectations for Job pod creation #119335
Enable NewVolumeManagerReconstruction #119281
add list of served versions to storage version #119272
implement SchedulerQueueingHints feature gate #119328
Add completion index as pod label for indexed jobs #118883
Proactively bump golang.org/x/net to v0.12.0 #119330
Exempt borrowing implementation #118782
support WebhookAccessors smart reload #118051
fix sync_proxy_rules_iptables_total metric #119140
deprecate csi migration for ceph rbd #118303
refactor: export loadConfigFile as a public function LoadConfigFile #119057
kubeadm: implementation of ResetConfiguration API types #113583
feat: implements metrics for encryption config hot reload #119008
Add support for watchlist to APF #118933
Convert EndpointSlice Reconciler to a library in staging. #118953
chore: hashes keyID being logged #118988
move non-graceful node shutdown to GA #118228
allow api-approvers to approve directories touched by generation #119305
Add merge map key validation to StorageVersions #118520
dra: pre-scheduled pods #118209
Remove test Pods sharing a single local PV #119295
minor proxy unit testing cleanups #119288
ProbeTerminationGracePeriod promote to GA #114307
dra API: ensure that pod status contains no duplicate resource claims #119296
CEL lib: Expose errors on authz decisions instead of raising them from check() #118804
Pass Job context down to firstPendingIndexes #119291
Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable #119286
Replaces path.Operation with filepath.Operation (part 2) #110863
Update publishing-bot rules for release branches to Go 1.20.5 #119219
Add ‘–logging-format’ flag to kube-proxy #117800
podgc metrics should count all pod deletion behaviors #118480
controlplane: kubernetes.default controller stop polling #119271
test: azure: check error for cloud detection. #119278
kube-controller-manager: finish conversion to contextual logging #119250
Use early return pattern to avoid nested conditions #117731
Improve the performance of map usage #116922
change the QueueingHintFn to pass a logger #119242
fix: Add “metav1.CauseType” to “field.ErrorType” map #119154
Update standard app protocols #119243
Add enj to apiserver options approver #119226
kube-apiserver/corerest: split apart generic code #119108
kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API #119012
Improve apiserver storage size metric #118812
Fix reconstruction of CSI volumes #117804
Implement Alpha state for KEP #2340 #118508
Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes #119252
dynamic resource allocation: Improve code coverage of state checkpoint #119058
dra e2e: fix “reallocation works” flake #119195
dra: scheduler queueing hints #119078
Match both old and new kubectl version for a while in e2e #119251
Migrate /pkg/controller/disruption to structured and contextual logging #119147
cmd/kube-apiserver: turn core (legacy) rest storage into standard RESTStorageProvider #119042
setcap: update to debian bookworm v1.0.0 #119247
Fix the converts an empty string to nil. #119229
kube-proxy local traffic detector single-vs-dual-stack cleanup #118408
Add jpbetz as approver of apiserver integration tests #119237
Add e2e tests for feature NodeLogQuery #117011
Bump cadvisor version to v0.47.3 #119225
ValidatingAdmissionPolicy: expended type checking to messageExpression #119209
add support for authorizer to type checking. #118540
Cache authz decisions within the scope of validating policy admission. #116443
Introduce syncJobContext to limit the number of function parameters #119193
node-e2e: Add container lifecycle e2e tests for preStop hook #119179
DRA: generated resource claim names #117351
Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh #119207
kubelet pod-resources: add e2e for KubeletPodResourcesGet feature #116846
When TopologyManagerPolicy is None, skip checks in NewManager. #116738
Document address family of listening INET sockets #119198
Migrated pkg/controller/endpointslice and pkg/controller/endpointslicemirroring to contextual logging #115295
add integration tests for OIDC authenticator #115122
Add reason to force detach metric #119185
Remove deprecated scheduler CLI flags #119130
Return Skip in PodTopologySpread#PreScore under specific conditions #118608
Migrated pkg/controller/endpoint to contextual logging #116755
Use cmp diff in controller_util_test.go #119146
Remove long/golang version information making short the default #116720
feat(NodePorts): return Skip status in PreFilter #118271
scheduler-perf: metrics for perfdash #119048
scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache #118926
Only declare job as finished after removing all finalizers #119159
Remove indirect reference to the util packages #119170
Remove gcp cloud-provider checks for kubelet version >= 1.7.2 #117806
Fix generateAPIPodStatus() of kubelet handling Secondary IP #116879
Add SidecarContainers feature #116429
kube-proxy service health: add new header with number of local endpoints #118999
Skip GracefulNodeShutdown on older systemd versions #119158
Record failed plugins in Reserver Plugin #118529
kubelet dra: lock before getting claimInfo CDIDevices and annotations fields #116739
e2e: detect unexpected command line arguments #119103
Fix fitError in Permit plugin not handled perfectly #119046
use stopCh to avoid goroutine leak in tests #119127
make apiservices.apiregistration.k8s.io discoverable in openapi/v3 #118879
clean up the implementation around QueueingHintFn #119077
DRA controller: batch resource claims for Allocate #118862
DRA: improve handling of completed pods #118817
Add user specified image to CRI ContainerConfig #118652
remove equalReady and replace with k8 util function #119111
cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash #118010
contextual logging cleanup #116930
fix: kubectl expose fails for apps with same-port, different-protocol #114909
Fix should be able to create and delete a critical pod test #119035
Introduce apiserver_flowcontrol_current_executing_seats metric #118960
component-base/logs: improve handling of re-applying a configuration #117108
Add servedVersions info in StorageVersion API #118386
Remove conformance test for StorageV1CSIDriver Endpoints #119025
Hide numberOfMissedSchedules as an algorithm internal number #118940
fix openapi/v3 non local apiservices aggregation #118881
Stop using deprecated API #119107
e2e: node: podresources: cooldown the rate limit #118981
e2e node: remove unused test/e2e_node/gcp #119104
replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags #118537
e2e: support admissionapi.LevelRestricted in test/e2e/framework/pod #118134
testutil: use contextual logging #114061
run hack/update-vendor.sh to fix verify master #119083
kube-apiserver/corerest: normalize service IP range plumbing #119082
feature(scheduler): plugin_evaluation_total metric support preScore/score #118025
integration testing: configure gRPC logging during init #118994
kubeadm: check the GV after the config migration #119075
bump npd to v0.8.13 #119054
kubeadm: increase ut coverage kubeadm/app/phases/dns #118874
kube-apiserver: move “public IP matches IP family” check to option validation #119081
cmd/kube-apiserver: move back master count variable from generic controlplane #119041
update the unwanted-dependencies order #118707
pkg/controlplane: move bootstrap controller to controllers/kubernetesservice #119064
kubeadm: fix “migrate config –allow-experimental-api” to print v1beta4 kubeadm configurations instead of v1beta3 #119059
scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/ #118965
Make QueueSet support exempt behavior; use it #118955
Test consistent list #119045
do a better job of validating IP family of kube-proxy config #119003
Support JSONPath condition without value #118160
kubeadm: Support custom env in control plane component #118867
Update template.pot with latest message IDs #118905
Paginate within DeleteCollection call. #117971
Parallel StatefulSet pod create & delete #117865
remove legacy NetworkPolicy tests #118915
test-e2e: Retrigger the RBD image post merge job #119044
upgrade npd image version to v0.8.13 for kubemark #118967
kubectl: Allow parallelizing diffing #118810
bump kube-dns to v1.22.23 #119033
refactoring flags and options in Expose cmd #117817
move an apiserver helper function out of pkg/proxy #118680
hpa: cleanup currentReplicas code #118173
DRA: for delayed allocation, deallocate when no longer used #118936
update cri-api change in v1.27 #118845
fix kubelet podWorkers.SyncKnownPods() typo #118976
kubeadm: restore and generalize the TestMigrateOldConfig test #118941
flowcontrol: copy object before passing it to client-go Create to avoid data race #118995
Install ecr-credential-provider during node e2e tests #119001
style: correct the sentence #118232
fix HPA plain metric calculate #117845
fix(script): handle wait_for_success failed condition #118767
test: Use table-driven test for TestPerPodSchedulingMetrics #118842
apis: drop check for volumes with user namespaces #118691
clean endpoint controller typo logs #117554
promote sli metrics to beta #118986
Copy container logs for easier debugging #118977
Generalize watch storage tests #118931
docs: fix storage e2e test README #116977
Bump cadvisor version in tests to v0.47.2 #118975
wire request context to claim resolver #118948
Exclude terminal pods from Daemonset e2e tests #118935
Remove unnecessary comment on pkg/scheduler/framework.QueueingHintFn #118971
Drop docker.log and add cloud init output.log #118951
Introduce larger buckets for request_filter_duration_seconds and request_wait_duration_seconds #118945
kubeadm: remove unused Kind and Resource functions from output API #118946
scheduler: add test name and remove redundant test tables to improve cache_test.go #118312
Simplify the node name for metrics - just use localhost #118949
kubeadm: backdate generated CAs #118922
Refactor wsstream library from apiserver to apimachinery #118182
Set all PSa labels in tests #118280
Log a warning if a ImagePullSecrets does not exist #117927
kubeadm: remove unused Kind and Resource functions from kubeadm internal API #118943
scheduler-perf: run as integration tests #118202
remove CSI-migration gate #117055
Make sure handlers have synced before scheduling #116729
increase the log level for the GetTargetNodeName error message #118917
graduate RetroactiveDefaultStorageClass feature to GA in 1.28 #118102
Better URL for scraping metrics from kubelet in node e2e tests #118910
kubectl explain should work for both cluster and namespace resources and without a GET method #118876
Bump to latest node-problem-detector version with arm64 #118909
Cleanup pods at the end in Pod conditions e2e node test #118904
Order feature gates alphabetically #118908
dra: kubelet must skip NodePrepareResource if not used by any container #118786
Revert “Make CA valid 1 hour in the past” #118903
Set AWS specific credential provider when running there #118901
kubeadm: add v1beta4 to scheme; add –allow-experimental-api flag #118866
Cleanup staticcheck workarounds, improve gomega calls, update to golangci-lint 1.53.3 #118902
CHANGELOG-1.27: Add note for AWS in-tree provider removal #118899
Update schedule logic to properly calculate missed schedules #118724
Extend Large Create Timeout to 60 min #118889
chore: io/ioutil deprecated #118392
kmsv2: no-op: split transformer interface #118888
Write process start time to prometheus options so that scraping clients can parse it first #118820
kube-apiserver: split apart generic control plane options #118633
kubeadm: remove unused Kind and Resource functions from v1beta4 API #118870
cmd/kube-apiserver: move options completion into options package #118868
feature(scheduler): implement ClusterEventWithHint to filter out useless events #118551
fix: update deployment e2e tests #118840
kubeadm: add v1beta4 API boilerplate #118762
Better back off delays and connection timeout to talk to containerd #118857
ipallocator bug if ips has leading zeros #118722
Details added in kubectl explain help #118637
Proceed with deletion of rejected pods after Kubelet restart #118497
Fix stable metric finder for NewDesc with custom import name #118827
always execute condition for wait.PollUntilContextTimeout with #118686
Update metric documentation #118825
storage class assignment should not ignore errors #117064
Do not set jm.syncJobBatchPeriod=0 if not needed #118765
Introduce controller aliases for KCM and CCM #115813
Use generics to simplify pkg/registry/flowcontrol/ensurer #118485
fix metrics test with 1.16.0 prometheus client #118754
Unset gated podinfo InitialAttemptTimestamp in addToActiveQ #118049
upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7 #118781
storage: stop using deprecated io/ioutil #118403
Test all cases for LIST request cache bypass #118793
Refactor shouldDelegateList/shouldListFromStorage to better explain d… #118792
certificate controller: use contextual logging #113994
deps: Bump to cAdvisor v0.47.2 #118774
Refactor WithRequireLeader to make it part of the etcd store #118794
Add a connection backoff to talk to CRI impls #118779
Remove AdvancedAuditing feature gate. #118763
feature(DynamicResources): return Skip in PreFilter #117903
deprecate RBD plugin from available in-tree drivers #118552
Do not bump API requests backoff in the Job controller due to pod failures #118759
increase coverage ut for kubeadm/app/features #118730
DRA Node E2E: add NodeAlphaFeature to fix CI #118721
handle event errors caused due to terminating namespaces #114849
Do not prepull images for e2e-node jobs #118747
Fix race in logging expectations #118745
Set small DefaultJobPodFailureBackOff in Job integration tests #118744
Replace deprecated sets.Int with sets.Set[int] in Job integration tests #118743
Make use of k8s.io/utils/pointer.Duration #108075
Update toplogy keyset initialization #115982
kubeadm: drop older etcd versions from kubeadm support #118733
update prometheus/client_golang v1.14.0 to v1.16.0 #118689
Updating names from webhookconversion to conversionwebhook for apiserver #118542
Cleanup job controller handling of backoff #118615
Added support for image credential provider for windows and arm64 on gce #117522
added known issue for 1.27 release #116863
AddOrUpdateTaintOnNode: if node does not exists, return an error #113504
Add warnings for big number of completions and parallelism #118420
Make CA valid 1 hour in the past #118631
Fix ginkgo noColor deprecation warning #118585
Return name instead whole volume when error occurred in csi-translation #116746
Mount utils spring cleaning and optimization #117896
Update pending_eligible_endpoints.yaml to match APISnoop #118668
Update container runtime flags to use containerd instead of docker #118666
DRA Node E2E: remove NodeFeature label #118665
check before you sudo on AWS EC2 instances #118628
use ingress-gce-glbc v1.23.1 image for CI #118655
kmsv2: add sanity checks and refine probing logic #116894
Added e2e_node test for sigkilled pods exit code and exit reason check #117597
fix terminationGracePeriod blocked by preStop #115835
e2e: deflake a HPA CPU test by stabilizing cpu consumption #118603
cleanup: remove ProbeTerminationGracePeriod feature tag on test #116091
Bump iscsi test server image #118659
Migrated pkg/controller/job to contextual logging #116910
Update CLI help text for grammar and consistency #118639
remove helper function for unused storage feature in pkg/proxy/util #118128
refactor: simplify RunScorePlugins for readability + performance #118606
Remove csidriver endpoints from pending_eligible_endpoints.yaml #118479
Ensure timeout test handlers don’t complete before timing out. #118539
Pass the mandatory parameters to build arm64 binaries #118567
fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job #118530
iscsi: use dbus from the host #118624
apf: refactor bootstrap ensure strategy #118597
DRA: E2E Node: test GRPC timeout #118574
Make etcd component status consistent with health probes #118460
Update Kind details for DRA e2e #118620
Update publishing-bot rules for release branches to Go 1.19.10 #118629
Fix the flaky legacy_service_account_token_clean_up_test. #118342
Update typo in k8s.po in line 2170 #118157
cleanup: delete unused AuditDynamicOptions in apiserver #111992
use the cgroup aware OOM killer if available #117793
e2e storage: terminate worker quietly on test completion #118623
Remove unused getSeccompProfilePath helper function #118373
Update podFailurePolicy comment from alpha-level to beta #118278
Remove undesired verbose fields from log #118096
Export DefaultServerUrlFor utility function #118055
Update –image-gc-low-threshold option’s description #117964
add –concurrent-cron-job-syncs flag for kube-controller-manager #117550
fix a typo in test/e2e/apimachinery/resource_quota.go #116933
undeprecate kubelet –provider-id flag #116530
kubelet: mark ‘–azure-container-registry-config’ flag as deprecated #118596
Replace os.Setenv with testing.T.Setenv in tests #118481
Set the node-ips annotation correctly with CloudDualStackNodeIPs #118329
remove unused pv informer from expand_controller #118095
Cleanup boilerpate.py #118320
feat: rename PodHasNetwork to PodReadyToStartContainers #117702
Updates chairs, tech leads for sig cloud provider #118595
Add SataQiu as a test/e2e/lifecycle approver #118591
move pkg/util/ipset inside pkg/proxy/ipvs #118338
Migrated pkg/scheduler/framework/plugins/interpodaffinity to contextual logging #116635
Remove StartupProbe on debug with pod copy #118532
Remove unreachable warning on volume name dup #118548
kube-proxy startup node IP detection #118513
kube-proxy: remove log warning about not using config file #118115
feature(schedule_one): use heap to find the highest score node #114688
Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc #118563
Fix warnings on “duplicate” env vars #118547
kubelet/volumemanager: sort unmounted volumes in error message #117079
Promote test for StorageV1CSIDriver Endpoints + 3 Endpoints #118478
dryrun: Don’t reuse current object for conversion #118422
deprecate CephFS plugin from available in-tree drivers. #118143
bump distroless-iptables to v0.2.5 #118541
fix eviction failing test for nil feature gates assignment #118492
Ensure Job sync invocations are batched by 1s periods #118470
Bump images, versions and deps to use Go 1.20.5 #118507
re-send the shutdown signal in case the dbus restart is not done #118498
Fix flaky persistent volumes e2e test #118524
storage: Cleanup cacher testing #118495
storage: Add MadhavJivrajani as reviewer #118531
Cleanup: use Set instead of map in endpointSlice utils #116732
Add flag to prune PASSED subtests in junit xml and have top level tests #117029
feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result #114771
kube-apiserver/cmd: stratify construction to follow options/config/server pattern #118379
DRA: implement e2e node tests #118044
Remove invalid merge key #118522
chore: os.SEEK_END os.SEEK_SET and use b.Logf(…) instead of b.Log(f… #118489
Delete CRDs created during field validation tests. #118237
Webhook conversion metrics [request/error counts and latency metrics] #118292
Move cri/streaming to k8s.io/kubelet staging repository #118253
kube-proxy avoid race condition using LocalModeNodeCIDR #118499
e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints #118510
Fix SELinux contexts used in e2e tests #118504
pkg/util/iptables: use buf.String() instead of string(buf.Bytes()) #118444
kubelet PodResources API: follow-up review comments #116742
kubelet/cm/containermap: Improving test coverage #114760
Document versioning of CRI API #114394
Remove enabled by default beta resources that have been removed #118411
Replace os.Setenv with testing.T.Setenv in tests #117423
k8s.io/apiserver: remove skewed completion from EtcdOptions #118416
dependencies: update go-humanize to latest version #117294
Fix ginkgo deprecation warning #118349
Do not copy bytes for cached serializations #118362
chore: use strings.Contains instead #118486
storage: Implement TestWatchFromZero for cacher #118330
Rename scheduler queue variables for consistency #118467
Follow up from dynamic retryAfter #118282
Add mininumKubelet tag into ReadWriteOncePod test #118451
better JUnit failure messages for golangci-lint and verify in general #118404
kubectl: use bytes.Buffer.String #118443
Adjust the algorithm for computing the pod finish time #118413
Scheduler: fix code style issues for pkg/scheduler #118442
chore: should use buf.String() instead of string(buf.Bytes()) #118433
Add ephemeralcontainer to imagepolicy securityaccount admission plugin #118356
Fix errant debugging code in codegen #118414
Update gnostic library to point to gnostic-models #118384
kubeadm: add command-line integration test to ensure that the supported etcd version is always available for the stable Kubernetes version #118353
Reinstate the azureFile in-tree storage plugin (revert removal) #118388
informer: fix race against Run and SetTransform/SetWatchErrorHandler #117870
kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate #118380
Bump cel go to latest version #118339
add pacoxu to kubeadm approvers #118341
DRA test driver: GRPC calls #118351
kubectl: optimize usage message of commands which have subcommands. #117930
Fixing gmsa-webhook install steps for Windows GMSA full tests #118365
Moving Kubelet Credential Provider test to common so that it can be r… #117527
Revert “kubeadm: add –feature-gates flag for kubeadm upgrade node” #118335
e2e: deflake hpa e2e custom metrics tests #118048
feat: ignore queue close error log when scheduler exit #116583
Promote ExpandedDNSConfig feature to the GA stage #116741
Fix/explain jsonpath #115694
KEP-3668 : promote ServiceNodePortStaticSubrange to beta #117877 : have providerID trigger re-sync, but not be required for load balancer syncs #117602
Consistently use proxyutil as the name for pkg/proxy/util #118334
Move pkg/util/ipvs inside pkg/proxy/ipvs #118296
Add kerthcet and sanposhiho as SIG scheduling approvers #118294
Remove Ephemeral Containers form pending_eligible_endpoints.yaml #118328
test/e2e: replace deprecated ioutil.ReadFile #118318
Promote e2e test for PodEphemeralcontainers endpoints + 2 Endpoints #118304
kubeadm: add –feature-gates flag for kubeadm upgrade node #118316
scheduler: update the scheduler interface and cache methods to use contextual logging #116849
removed the deprecated azureFile in-tree storage plugin #118236
Faster ExtractList. Add ExtractListWithAlloc variant. #113362
kubeadm: warning only for deprecated FG #118270
Improve backoff policy in reflector. #118132
kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning #118306
change the seccompProfile field description to match the imlpementation #117505
e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated #118285
Update google.golang.org/genproto #118269
Move damemi to sig-scheduling reviewers #116969
initial e2e tests for ValidatingAdmissionPolicy #114514
change pv recycler scrub cmd to find -delete #117283
Fix the git-repo test error caused by the correct use of loop variables #118177
LegacyServiceAccountTokenCleanUp alpha #115554
Improve Clarity of Provisioner Waiting Message #118262
Chore: Apply to use contextual logging for all loggers in statefulSet #118071
Chore: fix the example about how to use PollUntilContextTimeout #118274
dra scheduler plugin test: fix loopvar bug and “reserve” expected data #118257
e2e-framework: code cleanup for mismatched comments #118272
Set kube-proxy memory request to 50Mi #118268
merge duplicated linux/windows kube-proxy setup code #118017
node: podresources: graduate to GA #116525
prune-junit-xml cleanup #118065
Write e2e test for StorageV1CSIDriver Endpoints + 3 Endpoints #118099
Validate lock identity #118054
e2e should retry if service is not available #118256
e2e rc: if the pods are running but not ready the test will fail #118248
Lookup ENABLE_CLIENT_GO_WATCH_LIST_ALPHA in NewReflectorWithOptions #118235
Cleanup fd leaks and file removal cleanup #116656
legacy names of volume plugins have been gone a LONG time #118070
kubeadm: add the “config validate” subcommand #118013
fix unknown field error in rs e2e #118242
remove t.skip windows condition when #116693 is merged #118218
Job: Use generic Set in validation #117852
CLI: use new intstr functions #117625
Bump kube openapi #118240
kube-scheduler: NewFramework function to pass the context parameter #118012
kubeadm: speedup init by 0s or 20s #117984
Add test for starting kubelet with a CSI volume mounted #118097
proxy/ipvs: github user name change: daman1807 -> aroradaman #118229
integration: remove special verbosity for garbagecollector and graph_builder #118223
replace deprecated set.String in storage/validation #117047
unit tests: Skip flaky tests on Windows (part 2) #116659
Use wait to avoid blocking the SIGTERM handler #117393
Create local copy to avoid potential race condition #116994
use standard base image in dra dev #118210
Setup e2e_node to support testing on ARM64 #117017
Remove Get * APIResources endpoints from the pending_eligible_endpoints.yaml file #118002
Promote e2e test for APIResources endpoints + 12 Endpoints #118001
Add DisruptionTarget condition when preempting for critical pod #117586
Fixing windows memory allocation e2e tests after a refactor #118185
Using parsers in applyDefaultImageTag and adding error test cases. #116231
hack/update-translations.sh: Improve backslash handling #114053
e2e: apply timeout for CSI Storage Capacity test only to node #118200
Bump runc to v1.1.7 #118061
Allow runtimes to provide additional context on CRI pull errors #117935
fix using stale binaries in local-up-cluster #118191
e2e: use gomega.Expect instead of framework.ExpectEqual in kubectl #117963
graduate LegacyServiceAccountTokenTracking to GA #117591
Fix update-vendor.sh logging #118187
test/e2e: use agnhost latest version in the manifest #118176
kmsv2: ignore cache key expiration on reads #118084
Updating the nodeAffinity of gated pods having nil affinity should be allowed #118053
Make connection lost retryable in webhook #117251
test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers #118125
registry/core/service: remove incorrect comments #118171
test/e2e: remove redundunt type conversion, unused variable…etc #118124
scheduler-perf: inject “benchmark” as name into JSON result filename #118164
Update webhook test code to golang 1.21 #118156
kubeadm: remove function pointer comparison in phase test #118150
cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins #117834
fix apiserver InstallAPIGroups slices out of range #118093
Grab logs from all the containers when DNS related tests fail #118141
Cluster lifecycle: use new intstr functions #117630
Cleanup the Job controller handling of terminating pods #118033
clean up unsupport etcd version #117921
Mark grpc-gateway v1 as an unwanted dependency #118119
belated cleanup of some kube-proxy stuff for old versions #118088
Fix waiting for CRD sync at server start #118104
Support podman for building release images #118073
update image tags in manifests to reflect the version listed in the source #118101
fix typo in volume util #114806
fix false positive kubectl plugin unit tests #117952
Write e2e test for PodEphemeralcontainers endpoints + 2 Endpoints #117895
kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet #118069
test/integration/scheduler: fix data races #117113
clean up kube-proxy nodeport address handling (part 3) #116016
update err status code check in transformation metrics #118086
fix: move to dl.k8s.io from kubernetes-release bucket #118082
yamlfmt cleanup #118066
Chore: cleanup in interPodAffinity #118032
remove vestigial BUILD file #118064
Add all describers to the exported DefaultObjectDescriber #117818
Update docker/containerd/runc versions and capture more logs #117998
Drop zeitgeist from tools go.mod #118076
build latest sample-api-server for test/e2e #118080
remove glusterdynamic provisioner images reference from tests #118063
etcd: Update version to 3.5.9 #118027
replace etcd build to build.sh #117970
Log the warning instead of reporting error #118024
Bump docker/distribution to 2.8.2 #118036
managedfields: A few improvements which will make testing easier #116973
Initialize data if nil #118056
kubelet: Don’t reference the pod manager interface directly from components #117371
emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class #117036
e2e: use gomega.Expect instead of framework.ExpectEqual in windows/* #117962
Migrated the volumezone scheduler plugin to use contextual logging #116829
Fix comments on InformerFor #117985
dependencies: update gh/mitchellh/go-wordwrap #117753
remove CSIStorageCapacity featuregate #118018
etcd: Build image 3.5.9-0 #117999
Changing annotate PrintFlags from annotate to annotated #118045
Add tests to capture discovery output #117995
ensure etc-host file permission is 644 whatever umask is #113209
test/e2e/dra: fix kind cluster creation #118030
fix: remove case sensitive checking of probe headers #114606
Update unwanted deps #118023
Start informers after leader election #115754
Update kube-openapi, drop mapstructure #118014
user –prune-allowlist in kube-addons.sh #117573
fix undefined convertion #117544
add ut for pkg/client/conditions #116531
scheduler-perf: measure workload runtime and relabel workloads #117813
Return dynamic RetryAfter header from APF #117547
Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported #118015
Undo 1.28 shortname additions for now #117993
Add api-machinery TL owners permissions for jpbetz #117982
dependencies: update etcd dependencies to v3.5.9 #117645
dependencies: bump k8s.io/utils #117139
cleanup unused variables for v1beta2 component config #117994
Use getter function for plugin subcommand resolution #117901
kubeadm: Remove leading zeros from etcd member ID in log messages #117919
fix:translations zh_CN LC_MESSAGES k8s.po error #117904
proxy/ipvs: added daman1807 as reviewer #118000
deps: go-gcfg update to the v1.2.3 #117958
remove duplicate validation for csi #117061
proxy/ipvs: use healthzServer for instantiating the IPVS IPv6 proxier #117965
Replace os.Setenv with testing.T.Setenv in tests #117428
Update the cgroups v2 toleration in local-up-cluster #117987
fix: use dl.k8s.io, not kubernetes-release bucket #117950
opencensus update to v0.24.0 #117959
update golang version of etcd build to 1.19.9 #117923
lavalamp is taking a long break #117946
Stabilize local-up-cluster in our CI #117914
ginkgo update to v2.9.4 and gomega to 1.27.6 #117961
dependencies: update gh/Azure/go-autorest to latest version #117748
e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod #117670
update containerd/ttrpc to v1.2.2 #117956
Complete cpuset export to k/utils by revendoring #116761
Release read lock early in proxy service health check #117969
OpenAPI V3 invalid document checks #117954
hack/tools: bump logcheck to v0.5.0 #117941
e2e_kubeadm: stop using deprecated framework.ExpectEqual #117960
cidrset, multicidrset: directly use getIndexForIP method #117931
Deprecate generate*groups.sh -> kube_codegen.sh #117897
When expecting pods count only active ones #117893
wait: fix PollUntilContextTimeout godoc comment #117650
Migrated pkg/scheduler/framework/runtime to use contextual logging #116842
Job: Replace deprecated pointer utils with supported ones #117933
Fix a bug where the AttachedVolume is not printed correctly in the log #117907
DRA: use containerd 1.7 in kind image #117932
add new metric for the internal client-go cache size #117295
test/e2e/dra: update README #117902
unit tests: Fixes kubelet util unit tests for Windows #117616
DRA: fix image build on Mac #117912
QueryParamVerifier falls back on invalid v3 document #117796
upgrade cluster-autoscaler v1.26.1 to fix ci warnings #116526
using –max-time instead of –connect-timeout for e2e/network/service tests. #117913
kubeadm: Make etcd member removal idempotent #117724
apimachinery/util: stop using deprecated io/ioutil #117900
scheduler_perf: dynamic resource allocation test cases #116207
Simpler openapi gen - subprojects do themselves #117899
Return Skip in InterPodAffinity#PreScore under specific conditions #117794
Fix a bug where the KubeletConfiguration is not printed correctly in the log #115950
etcd: Update version to 3.5.8 #117335
MinimizeIPTablesRestore to GA #117872
Passing podUID in AddReference and DeleteReference #117836
Do hostNet Pod-ports -> hostPorts in Pod defaults #117696
component-base: avoid data race in log format registry #117114
cri-api: fix comment lines about PROPAGATION_PRIVATE #115704
kubeadm: Add etcd client unit tests #117792
Codegen: a new script for subprojects to use #117262
generate ReportingInstance and ReportingController in Event #116506
Export GOMAXPROCS environment variable #117885
remove ability to re-enable serving deprecated node.k8s.io/v1beta1 types #117642
Allow override of prerelease/buildID portions of version at runtime #117688
mount-utils: fix flaky test ‘TestFormat’ #117539
Fix make etcd image failed #117879
Tweak annotating kubemark nodes on startup #117858
Chore: clarify need update test cases #117741
kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade #117861
storage/etcd: skip SendInitialEvents if the request is backward compatible #117862
unittests: Fixes unit tests for Windows (part 7) #114764
Controlled rollout of CEL libraries and language feautres #116779
remove ServiceInternalTrafficPolicy e2e feature tag #117864
remove GAed KubeletCredentialProviders （1.28） #116901
Fix unknown field error in deployment lifecycle e2e #114873
Job: Use generic Set in controller #117855
Replace the deprecated ioutil method in the credentialprovider directory #117477
remove DevicePlugins featuregate #117656
Add new partial/full sync time metrics for iptables kube-proxy #117787
Fix CHANGELOG-1.27 cronjob correctly #117354
Add parameter to set SecurityContext for containers in tests #110779
Cleanup: modify some sentences about statefulset #115452
Remove default annotations from copied storage class #111730
Update podFailurePolicy comments #117802
kubeadm: fix crictl pull using wrong flag, use -i and -r #117835
respect local GOPROXY setting in build/common.sh #117839
fix doc mismatch #117391
kubelet/kuberuntime: Fix flaky test ‘TestGeneratePodSandboxConfig’ #117538
Fix potential mutex usage bug #117523
Replace os.Setenv with testing.T.Setenv in tests #117426
upgrade etcd deps to v3.5.8 #117342
e2e services: retry if healthcheck nodeport is not available #117830
Use the right command for ss/netstat when we log the usage message #117820
OWNERS_ALIASES: add self to sig-node-reviewers #117636
Add go.work and go.work.sum to .gitignore #117811
Add support for CRI ErrSignatureValidationFailed #117717
remove DelegateFSGroupToCSIDriver featuregate #117655
add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations #117535
pkg/proxy: use generic sets #117386
Improve and simplify maintenance of APF bootstrap objects without type assertions #111422
Make resize of hollow objects more verbose in start-kubemark #117808
add Authorization tracking request/error counts and latency metrics #117211
Replace os.Setenv with testing.T.Setenv in tests #117422
pkg/registry/flowcontrol: avoid race condition during Create #117107
support short name for flowschema and prioritylevelconfiguration #116208
🐛 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope #117677
Disable NewVolumeManagerReconstruction and SELinuxMountReadWriteOncePod feature gate #117751
fix: fixes flake in TestKMSv2Healthz #117735
proxy startup-time config handling cleanup (take 2) #117747
Add node check to vSphere cloud provider #117243
promote ProxyTerminatingEndpoints to GA #117718
Update publishing-bot rules for release branches to Go 1.19.9 #117778
remove tracking annotation from validation and webhooks #117633
Don’t use Nodes.ExternalIPs to verify the NodePorts connectivity #117785
Use the kubectl we built and wait for node to be ready #117766
e2e agnhost functionality to RST TCP connections #117764
Bump Ginkgo Poll Progress parameters to a sane level #117784
Improve integration test performance in scheduler #116634
Replace os.Setenv with testing.T.Setenv in tests #117421
Remove GA feature gates in 1.28 about DryRun #117380
QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents #117768
unit tests: Fixes kuberuntime unittests for Windows #116575
Update distroless-iptables to v0.2.4 #117746
test/e2e_node: move getSampleDevicePluginPod to a test-only source file #117710
Add jpbetz to approvers of apiextensions-apiserver #117618
Replace the deprecated ioutil methods in the test directory #117468
unittests: Fixes server journal unit test on Windows #117136
Add go report and latest release badges #116709
scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration component config #117649
Include stderr in cred provider plugin errors #117448
fix typo annotation key notes. #117325
scheduler_perf: code cleanups #117232
KEP-3325 : Promote SelfSubjectReview to GA #117713 cluster/gce: Fetch image from image family #115043
dependencies: klog v2.100.1 #117687
Add check to skip PodTopologySpread PreFilter if no constraints are specified #117683
endpointslice: reduce visibility of vars/funcs #117396
Bump images, dependencies and versions to go 1.20.4 #117744
dependencies: update gh/go.uber.org/{atomic,multierr} #117328
Upgrades spf13/cobra to v1.7.0 #117090
Move glusterfs 1.25 deprecation notice to the deprecation section. #117711
Remove old metric scheduler_goroutines #117727
Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP #117723
windows-tests: Update connectivity check util function #117721
Clean up brace whitespace in **/validation_test.go #117716
e2e node: bump all nodes ready timeout #116947
Network: use new intstr functions #117626
Write e2e test for APIResources endpoints + 12 Endpoints #117611
Update cri-tools to v1.27.0 #117545
dependencies: udpate seccomp/libseccomp-golang to v0.10.0 #117330
dependencies: update {vishvananda/netns,xlab/treeprint} #117327
replace ioutil with os, update doc in kubelet #117198
Support specifying custom LB retry period from cloud provider #94021
kubelet: use new intstr functions #117627
remove Mkdirtemp func to reduce util pkg for testing #117430
Remove unnecessary if judgments #117394
Swap assert.Equal parameters oders to follow convention #117105
remove seccomp profile path on security context #117050
Fix image pull error type ErrRegistryUnavailable #117612
node: device-mgr: Handle recovery flow by checking if healthy devices exist- attempt 2 #116376
Remove/Withdraw NetworkPolicy Status #115843
Fix Strategic Merge merging leaving patch directives in objects when field doesn’t exist #117568
Fix SSA being silently disabled by lack of OpenAPI config #114998
Removing WindowsHostProcessContainers feature-gate #117570
Update kube-openapi to fix race #117705
Fix strategic merge patch $deleteFromPrimitiveList bug #110472
Apps: use new intstr functions #117624
API machinery: use new intstr functions #117623
API: use new intstr functions #117622
Registry: use new intstr functions #117629
Fix LocationOfOrigin shows up unexpectedly #117576
dependencies: update cgroups, ttrpc, ebpf versions #117253
intstr: add constructor from int32, deprecate int constructor #116665
Remove ability to re-enable serving deprecated discoveryv1beta1 APIs #117664
Revert “proxy startup-time config handling cleanup” #117690
kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane #117660
Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs #117661
dependencies : update gopkg.in/warnings.v0 v0.1.2 #117347
Replace os.Setenv with testing.T.Setenv in tests #117425
scheduler_perf: update throughputCollector #117230
Replace os.Setenv with testing.T.Setenv in tests #117427
remove validation GCE-ism #117531
Correct the changelog for GlusterFS removal in 1.26. #117678
proxy startup-time config handling cleanup #117297
test for init container restarts #117657
Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests #117671
dependencies : update gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1 #117349
Remove ability to re-enable serving deprecated eventv1beta1 APIs #117665
Remove ability to re-enable serving deprecated batchapiv1beta1 APIs #117662
Allow node addresses to be used as loadBalancer addresses for proxy-mode=ipvs #115019
Remove last endpoint for kubernetes Service during graceful shutdown of final kube-apiserver #116685
kubeadm: fix unit test failure on node with multiple cri endpoints #117614
Chore: add ipfamilies tweak functions #117595
Remove GA feature gates in 1.28 about network #117237
added init containers tests to simplify the sidecar KEP large PR #117654
Refactor some watchcache tests #117641
node: e2e device plugin test improvements #117057
Migrated pkg/scheduler/framework/plugins/podtopologyspread to contextual logging #116797
Migrated pkg/scheduler/framework/plugins/noderesources to contextual logging #116748
update the etcd base image to v1.4.2 #117643
Migrated pkg/scheduler/framework/preemption & defaultpreemption to use contextual logging #116835
use go 1.19.x for etcd version monitor compilation #117651
correct etcd base image reference in the doc #117644
stop watcher when error occurs #117534
kubeadm: support upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded #116570
feat(NodeVolumeLimits): return Skip in PreFilter #115398
Fix nil pointer in test AfterEach for volumeperf.go #117368
Fix bug where CEL listOfString.join() results in unexpected error #117593
scheduler_perf: support test case selection via labels #117196
updating microsft/go-winio package to latest version #117306
Code clean up for kubeadm #117619
Fixes bug when extra params added to discovery content-type #117571
improve remotecommand testing fuzzing the data stream #116191
cluster/gce: update cloud-provider-gcp image to latest tagged version #117605
dependencies: update coredns/caddy to v1.1.0 #117280
Fix scheduler performance regression after adding plugin metrics #117594
remove expansionFailed const in volume expansion and avoid var name collision #117286
Fix typo in kubectl api-resources help text for –categories flag #117603
update kubectl edit documentation #116512
Refactor cacher.ListerWatcher code structure #117584
Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election #117558
Add saschagrunert to sig-node-reviewers #117404
Dependencies: Update google.golang.org/protobuf v1.30.0 #117350
Enable a bunch of generic storage tests for watchcache. #117582
Drop v1.25.0 API testdata #117578
Add a comment to document that roleRef is immutable #115487
Fixed typo kind/documentation #114875
Cleanup service controller unit test #116277
Add v1.27.0 API testdata #117537
remove unused not api functions in the pkg/apis directory #115168
Avoid volume copy in checkAttachableInlineVolume #117488
dependencies:update github.com/google/gofuzz to v1.2.0 #117483
dependencies:update github.com/go-logr/logr to v1.2.4 #117482
remove nodes resource from CoreDNS RBAC manifest #117521
vendor: bump runc to 1.1.6 #117241
golangci-lint: allow exceptions for Go naming convention #117551
Refactor watch bookmark tests to allow sharing between etcd3 and watchcache #117413
Generalize few watch tests from cacher #117415
Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole #117414
Add test for cmd/kubeadm/app/phases/upgrade/compute.go #113969
test/integration/auth: fix data race #117110
service controller trigger update when service ipfamilies changes #116520
Delete duplicate code in schedule.go #117229
enhancemanet: reduce calculation calls #117390
kubeadm: fix unit test panic for TestNewResetData #117530
support fieldSelector spec.hostNetwork #110477
call kube::golang::setup_env before setting up worktree, cleanup update-mocks.sh #117526
etcd: Build image 3.5.8-0 #117332
Replace os.Setenv with testing.T.Setenv in tests #117424
openapi: Make file client more easy to re-use #116972
ensure we can remove _output #117510
Remove unnecessary int type conversion #116902
kubelet: truncate the precision at a millisecond for image pull event message #117276
drop linux/arm build warning, now that 1.27 is released, this is cove… #117508
remove GA feature-gate for 1.28 #114068
dependencies: Update golang.org/x/tools to v0.8.0 #117352
remove defunct interactive tutorial #117484
e2e: fix flaky test ‘should contain OpenAPI V3 for Aggregated APIServer’ #117449
cacher: do not simply popExpiredWatchers when the cacher hasn’t dispatched any event #117014
dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1 #117408
dependencies : Update golang.org/x/time v0.3.0 #117399
Unified Conntrack Cleaning #116104
Fix stomping os env in kubectl e2e tests #117453
skip clear quota if FSQuotaMonitoring is disabled #117077
Document gomega.Equal() instead of gomega.BeEqual() #117416
service controller: add providerID Node predicate #117388
kubelet: Mark new terminal pods as non-finished in pod worker #117019
kubelet: pass context to VolumeManager.WaitFor* #117412
Add SIG ownership to controller/nodelifecycle #117252
skip pod resource check when request is zero #116408
Control e2e framework -> k/k/pkg dependencies #117379
fix the mistake in the release note #117220
e2e framework: remove last dependency to k/k/pkg/kubelet #117370
remove unnecessary check #117043
Move kubelet config API to e2e_node #117361
changelog: fix formatting issue with v1.27 change log #117364
dependencies: update coreos dependencies #117275
e2e/apimachinery: Add an e2e test for the API Streaming feature #117277
dependencies: update {uuid,sortorder} #117296
get rid of e2e/framework -> k/k/pkg/kubelet dependency #117282
replace spew methods with dump methods #117278
Clarify kubelet/kube-proxy iptables rule skew constraints #117307
Simplify statefulset fuzzer #116602
Revert “Optimization on running prePreEnqueuePlugins before adding pods into activeQ” #117194
feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread #117025
dependencies: update gh/Azure/auto-test/{adal,validation} #117285
kube-aggregator: correctly use client-go TLS cache with custom dialer #117258
add log includes pod preemption details #117214
Revert conversion refactoring #117301
dependencies: update container storage interface spec to v1.8.0 #117279
encode NamespacedName with lower case in JSON #117238
dependencies: azure-sdk-for-go to v55->v68 #117284
apimachinery util/diff cleanups #116896
hack/local-up-cluster.sh: Always sudo chown the certs dir #116385
Codegen: use openapi-gen via k8s.io/code-generator #117261
Fix a data race in TopologyCache #117249
remove some dead code in cmd/kube-proxy #116593
Codegen: subprojects: nuke old files #116282
Fix TopologyAwareHint not working when zone label is added after Node creation #117245
cleanup comments in v2 proto api #116996
Add --concurrent-job-syncs flag to kube-controller-manager #117138
Codegen: subproject cleanups and chdir #116281
Fix azure disk e2e after migration and while using external CCM #117216
cacher: prevent a potential deadlock #117137
Use case-insensitive header keys for http probes #117182
kubelet: Do not mutate pods in the pod manager #116482
move check for noop managed field timestamp updates #116865
startResourceClaimController errrorf message has typos #116503
scheduler perf: allow creating 0 items #117202
test/integration: create nodes directly with kubernetes.io/hostname label #117201
scheduler_perf: fix race condition #117199
scheduler perf: remove cleanup func #117197
Add new contribex leads to sig-contribex-approvers #117187
HPA Controller - Update Owners #117178
Add unit tests showing the effect of unlimited containers when calculating pod limits #117171
Fix typo at job_test.go #117170
supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 #117169
watchcache: currentCapacity acquires a read lock #117154
Add CecileRobertMichon to sig-cluster-lifecycle-leads #116953
deprecate ExperimentalHostUserNamespaceDefaulting #116723
DRA: get rid of unneeded loops over pod containers #116560
Remove vestigal err check from CEL admission controller. #116442
Fix gorestful typos in the APIServerHandler.Director docstring #115076
cpumanager: fix typo in godoc #117152
wait: fix incorrect suggested method #117143
Specify kube root for test-e2e-node/aws to work #117141
Remove endpoint related RBAC from scheduler cluster role #117140
Set metrics-server’s metric-resolution to 15s #117121
Bump metrics-server to v0.6.3 #117120
test/integration/framework: avoid race around grpclog.SetLoggerV2 #117109
Storage e2e image base version update for RBD and ISCSI #117103
Move genericclioptions.IOStreams to genericiooptions.IOStreams #117102
kubelet: fix setup of emptyDir with sizeLimit (fsquota) #117099
CVE-2023 : 27561 CVE-2023-25809 CVE-2023-28642: Bump runc go module v1.1.4 -> v1.1.5 #117095 Refactor remote runners to allow pluggable cloud specific extensions #117053
kubectl events: Support fully qualified names for –for flag #117034
Fix directory mismatch for volume.SetVolumeOwnership() #117022
Fix seccomp localhost error handling #117020
Set GOMAXPROCS explicitly #117016
fix doc mismatch #117009
test: Fix flake in node e2e mirror pod tests #117000
kubelet: Ensure pods that have not started track a pendingUpdate #116995
Deflake TestGetListNonRecursive #116987
Do not look at VPC-related resources outside the cluster’s network #116950
Use the generic Set in scheduler #116940
Add API approvers #116918
Fix sample-controller docs after moving to context-based cancellation #116916
update ci script and add readme #116899
add tests for generate transformer #116893
kmsv2: test cleanup #116881
Add structured alternatives to strings in client-go/tools/cache #116869
fix GetPodVolumeClaims in comments #116845
Fix memory leak in kubelet volume_manager populator processedPods #116833
Adding additional validations to queried endpoint list iteration. #116749
sig-network OWNERS fixups #116730
Chore: test simplification for stateful set #116722
Wire bootstrap token authn secret lister only when it is enabled #116721
kubelet: HandlePodCleanups takes an extra sync to restart pods #116690
don’t ignore UID impersonation in webhook clients #116681
deflake: Add retry with timeout to wait for final conditions #116675
Add an image for kubectl #116672
print node status when failed for kubemark start #116652
Update cri-tools to v1.26.1 #116649
admission ApplyTo: take in clients #116648
Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark #116605
ftr(etcd): add benchmarks for getlist #116374
Bump Konnectivity to 0.1.2 #116348
Codegen: fix full (burn it to the ground) regen #116283
fix: the volume is not detached after the pod and PVC objects are deleted #116138
fix: After a Node is down and take some time to get back to up again, the mount point of the evicted Pods cannot be cleaned up successfully. #116134
hack/OWNERS: add pohly as reviewer and approver #115729
Add note about TLS 1.3 cipher suites #115399
node: create podresources endpoint also on windows #115133
delete unused functions in pkg/controller directory #115100
feature(volume_restrictions): return Skip in PreFilter #114898
Capture spew.Sprintf() with all our favorite config into a util func #114800
fix test cases that may be incorrect #114746
add sig/storage label for pkg/controller/volume package PR #113800
Codegen: streamline code for subproject generation #116280
Update publishing-bot rules for release branches to Go 1.19.8 #117134
Do not log entire pod struct while attaching the volume #115036
Update distroless-iptables to v0.2.3 #117126
Bump images, dependencies and versions to go 1.20.3 #117125
Export WebhookHandler struct because some CCMs use Run directly #117088
Fix: Recreate DaemonSet pods completed with Succeeded phase #117073
Clean up formatting #117023
Skip vendor directory when removing generated files #116945
.*: update vendor dir and cleanup #116948
publishing-bot rules for the new release-1.27 branch #116919
kmsv2: validate encrypt response at DEK generation time #116877
Call function that validates resize policy for in-place pod resize feature #116857
Fix deprecated metrics #116906
Remove references to kubernetes.io/grpc appProtocol #116866
Drop development dependencies from test targets #116860
Clarify EPSlice docs wrt the Ready conditions #116743
Fix pod object update that may cause data race #116702
safe-sysctl: skip checking for windows #116792
kubelet: Read DNS Config options from file for Windows #116800
Fix aggregated discovery race when using CRD and Aggregated APIService under same group #116770
Update kube_features comment for aggregated discovery and openapi v3 #116820
Use standard *.kubernetes.io instead of *.k8s.io for ApplySet #116780
Add 12 get * V1APIResources to file pending_eligible_endpoints.yaml #116658
Improve the performance of map usage #116806
Clear front proxy headers after authentication is complete #116785
Fix CI regex for missing rc.0 tags #116809
Clean up reference to deleted denied function #116783
Deflake GC e2e test #116724
ValidatingAdmissionPolicy: fix policy object validation #116772
Fixup 1.27 release note #116756
Preserve UID and ResourceVersion in BindingREST #116550
API-initiated eviction: handle deleteOptions correctly #116554
Add missing unit test for resource resize policy defaulting #116684
Move the arm deprecation notice in a different spot #116718
kubelet: fix data races #116706
update openapi-spec #116705
Give terminal phase correctly to all pods that will not be restarted #115331
change where transformers are called #116623
Add certificates.k8s.io/v1alpha1 ClusterTrustBundle #113218
Fix missed watch events when watch is initialized simultanously with reinitializing watchcache #116172
test: Update standalone test in node e2e #116631
KEP-3705 cloud dual-stack –node-ip #116305
make kubectl explan test tolerate either “RESOURCE” or “FIELD” #116657
fix standalone test #116628
Adding validation for Topology annotations #116612
update documentation for metrics for 1.27 #116664
check if test volumes created #116569
HPA: expose the metrics “metric_computation_duration_seconds” and “metric_computation_total” from HPA controller #116326
feature(hpa): beta graduation for the container resource metrics #116046
Add missing trace dependency to kubemark #116645
Add additional metrics for OpenAPI V3 #116622
test/e2e: Improve kubectl subresource e2e test #116639
Create with ingressClass annotation and IngressClassName both set #115447
Adds Pod DNS Policies support for Windows pods #110566
remove key hierarchy in reference implementation #116630
fix: increases timeout to avoid flake #116626
Webhook framework for cloud controller manager #108838
kubelet dra: add lock to addCDIDevices #116621
missed registering kubelet-config-file for the command line use case running test-e2e-node target #116611
kubectl prunev2: issue discovery requests in parallel #116584
Update kubeletplugin API for DRA to v1alpha2 #116558
Fix null pointer access in doPodResizeAction for kubeletonly mode #116504
Update resource.AllocationResult with a slice of ResourceHandlers #116332
Restructure resize policy naming and set default resize policy values #116119
Generate proto API and update feature gate for beta #115123
IPAddress allocator #115075
test/e2e: Fix flaking subresource test #116619
Update kubectl kustomize to kyaml/v0.14.1, cmd/config/v0.11.1, api/v0… #116598
Test kubelet standalone mode #116551
dependencies: ginkgo v2.9.1, gomega v1.27.3 #116539
service controller - #115204 follow-up #116536
use encDEK, keyID and annotations to generate cache key #116345
Add batch.kubernetes.io to labels created in the Job controller. #114930
kmsv2: add k8s.io/kms/internal/plugins/mock to internal modules #116613
Update NodeExpandSecretRef comment for beta #116581
api: extend validation of dynamic resource allocation fields in PodSpec #116576
Flip SELinuxMountReadWriteOncePod to Beta #116425
Graduate KubeletTracing feature to beta #115750
Allow setting per-workqueue metrics providers #114242
wait: Introduce new methods that allow detection of context cancellation #107826
Lock CSIMigrationvSphere feature gate for k8s 1.27 #116610
Optimize topology spreading for null selector #116607
AppArmor no reevaluation of host is needed #116606
Aggregated discovery client resilient to nil GVK in response #116603
dra: PodScheduling -> PodSchedulingContext #116556
kubectl explain: use openapiv3 by default #116390
add net.ipv4.ip_local_reserved_ports to safe sysctls #115374
kubectl prunev2: simple e2e/integration test #116599
kubectl prunev2: Refactor the applyset to be more reusable #116580
kubectl diff: refactor tracker into a separate type #116579
Updating perfCounterUpdatePeriod for Windows to 10 seconds #116546
feat: forbid to set matchLabelKeys when labelSelector isn’t set in topologySpreadConstraints #116535
kube-controller-manager: convert to structured logging #116529
Introducing Topology Mode Annotation, Deprecating Topology Hints Annotation #116522
resourceClaimController should be registered like the others one to keep code clean #116002
token/cache: use go 1.20’s approach for no-copy string/bytes conversions #115935
Extend the PodResources API to include resources allocated by DRA #115847
KEP 2258: add node log query #96120
kubectl: Change subresource flag to beta #116595
test/e2e: Add e2e tests for kubectl –subresource #116590
StatefulSet v1beta1 defaulter tests #116561
clean up kube-proxy stale-conntrack-entry handling, revert broken code #115299
Add service-feature-gates argument to node_e2e #116591
get pvc again to get the pv name that bound to the PVC #116568
re-organize remote e2e test to be pluggable #116517
Fix PreFilter logic problem in node affinity #116465
KEP-127 : user namespace support for stateless pods #116377 ApplySet: allow custom resources to be parent objects #116353
kmsv2: re-use DEK while key ID is unchanged #116155
volume: use contextual logging #113584
Migrate pkg/scheduler/framework/plugins/defaultbinder to contextual logging #116571
Followup 112643: remove residual code associated with DynamicKubeletConfig #116330
Split run controllers per controller-manager #115619
fix concurrent-map-write of FakeOS.Create #115576
Add test for pkg/kubelet/util #115397
Remove unuse code in pkg/kubelet/util #115053
kubelet: fix recording when pulling image did finish #114904
update comment #114701
kubelet/cloudresource: Improving test coverage #114634
daemonset: use contextual logging #113622
cri-api: document expectation of 16 MB limit #110435
Fix volume reconstruction in standalone mode #116577
unit tests: Fixes init and rejoin unit tests for Windows #116573
add podresources DOS prevention using rate limit #116459
Initialize pod resource allocation checkpoint manager to noop #116351
update coredns to v1.10.1 #115603
Link apiextensions-apiserver binary statically #114226
Fix EventSeries starting count discrepancy #112334
Remove NodeResourceTopology API from staging #96275
kubelet: create top-level traces for pod sync and GC #114504
api: resource.k8s.io v1alpha1 -> v1alpha2 #116299
Fix StatefulSet fuzzer #116566
Type System for ValidatingAdmissionPolicy #115668
kubelet: TestSyncKnownPods should not race #116557
API docs trivial typo #116553
add e2e test for correct resizing of a snaphot restore #110304
Avoid using negative words in PreFilter and PreScore tests. #116508
Remove unnecessary int64 type conversion #116502
Graduate StatefulSetAutoDelete to beta #116501
MessageExpression for ValidatingAdmissionPolicy #116397
DRA: add constant PluginClientTimeout #116555
promote CSINodeExpandSecret feature to Beta #115621
Cleanup deprecated metrics #115209
Fix DescribeTable for selfsubjectreview e2e #116545
Update DRAManager to allow multiple plugins to process a single claim #116513
initialize feature gates in test project #116494
Fix broken links in API documentation #116490
prunev2: Basic pruning logic #116205
don’t process unsupported loadbalancers with mixed protocols #115966
Split out HealthCheckNodePort stuff from service/endpoint map Update() #115253
Explicit bump to go 1.20 #116542
fix(HPA): make a difference in SuccessfulRescale events between the resource metric and the container resource metric #116045
copy pkg/proxy OWNERS to pkg/util/conntrack #116540
Properly align synctrack.SingleFileTracker struct #116477
fix(HPA): ignore the container resource metrics in HPA controller when the feature gate is disabled #116043
wait: Split the wait package up into individual files to make refactors easier #116476
Remove Azure disk in-tree storage plugin #116301
Remove storage.k8s.io/v1beta1 API version of CSIStorageCapacity #116523
Remove enable-taint-manager and pod-eviction-timeout CLI flags #115840
deployment controller: use contextual logging #113525
unittests: Adds winstats unittests #110864
Stop clear non-existant retention policy rule #116533
SecurityContextDeny admission plugin: add warning on creation #115879 test: refactor remote test running #116518
Promote whoami kubectl command #116510
namespace controller: use contextual logging #113443
add integration tests for debug profiles general & baseline #115909
Migrate pkg/controller/bootstrap to contextual logging #113464
Rename ContainerStatus.ResourcesAllocated to ContainerStatus.AllocatedResources #116450
add(scheduler): implement “plugin_execution_duration_seconds” metric in PreEnqueue #116201
Create pending_eligible_endpoints.yaml and move endpoints from ineligible_endpoints.yaml #115976
kubelet DRA: Add checkpointing mechanism in the DRA Manager #115912
cleanup(scheduler): move metric labels to metrics package #116312
Update distroless-iptables and setcap images #116509
Revert “Disable unified build and static init optimization for tests” #116500
Watch instead poll system namespaces #116170
Drop 32 bit linux/arm platform #115742
Graduate Evented PLEG to Beta #115967
bash: compare numbers numerically, not lexically #116286
Three more lifecycle checks to demonstrate various validation techniques for containers lifecycle checks #116426
Link kube-aggregator binary statically #114227
Fix incorrect watch events when watch is initialized simultanously with reinitializing watchcache #116436
Add e2e tests for SELinux metrics #116424
Mutable pod scheduling directives #116161
Remove redundant subsystem in kube-apiserver pod logs metrics name #114497
Add a Clear() function to generic sets #116216
code cleanup #111372
kubectl debug: Not share process namespace if user explicitly disables it #116366
Enable Aggregated Discovery for Beta #116108
client-go: shut down watch reflector as soon as stop channel closes #116435
Add metrics for aggregated discovery #115630
client-go: Add support for API streaming to the reflector #110772
Add e2e tests for StatefulSetStartOrdinal feature #115468
[KCCM - service controller]: KEP-3458 implementation #115204
kubelet/kuberuntime: Improving test coverage #114373
clusterroleaggregation: use contextual logging #113910
garbagecollector: use contextual logging #113471
update go to 1.19.7 in publishing bot rules and drop 1.23 config #116456
e2e: podresources: promote platform-independent test as NodeConformance #116423
increase ut coverage for probe/util.go #115708
rework init containers test to remove host file dependency #116398
One lock among PodNominator and SchedulingQueue #116395
Detect and clean up unneeded after_roundtrip fixtures #116384
Update kube-openapi to 15aac26d736a #116349
add unit tests for probe errors and ExecProbeTimeout #116306
Remove unused resize.go from pkg/kubelet/container #116296
kubelet: avoid duplicate printing the flag deprecation warnings during re-parsing #116131
kubelet: remove the deprecated –master-service-namespace flag #116015
Add metric for failed orphan pod cleanup #115972
Add messageExpression field for CRD validation #115969
cleanup(kubelet): remove unused function #115929
Default to sandbox Seccomp field instead of SeccompProfilePath #115898
kubectl-explain: add –output plaintext-openapiv2 fallback #115480
dedupe pod resource request calculation #115367
kubelet: Fix fs quota monitoring on volumes #115314
Move StatefulSetStartOrdinal feature gate to beta #115260
managedfields: Move most of fieldmanager package to managefields #115065
pkg/apis: Replace deprecated pointer function #114902
cmd/get: Remove cmd argument from Run() #114682
kubelet/nodestatus: Improving test coverage #114558
Update kuberuntime_manager_test.go #114498
add test for pkg/probe/http/request.go #114426
Cleanup: fix variable names in comments #114420
And test for pkg/probe/util.go #114397
Log spelling formatting #114357
remove mime AddExtensionType in discovery test #114290
cleanup container runtime options #114017
apiserver: grammar correction of comment #112882
Ensure go-to-protobuf gen can run when not in GOPATH #112061
tests: Ports kubelet unit tests to Windows #110949
add unit test coverage for pkg/kubelet/types/ #110760
docs(desired_state_of_world.go): log in desired_state_of_world.go seems to be wrong #111634
kubelet: Force deleted pods can fail to move out of terminating #113145
Avoid metric lookup in Parallelizer.Until on every work piece #116428
add unit test coverage for pkg/kubelet/util/queue #110741
unexport buggy function nodeSelectorAsSelector #116422
statefulset: use contextual logging #113840
reflector: allow watch method to accept a watcher #116409
Bump images, dependencies and versions to go 1.20.2 #116404
Turn off P&F filter in standalone CRD server tests #116394
[CCM - service controller] addressing left over comments from #109706 #111658
Promote gRPC probe e2e test to Conformance #115856
Fallback query param verifier #116392
hack/local-up-cluster.sh: Cleaup on SIGINT #116386
default memoryThrottlingFactor to 0.9 and optimize the memory.high formulas #115371
node: topologymgr: Graduate Kubelet Topology Manager to GA #116093
Allow encryption for all resources #115149
Recognize etcd/grpc cancel errors correctly #116393
sync default qps of kubelet change everywhere #116356
test connectivity for terminating pods #116232
add more init container testing #115984
Promote OpenAPI V3 to GA #116235
Surface “stale” GroupVersions from AggregatedDiscovery #116145
fix: remove SchedulingMigratedInTreePVs feature gate in sched perf test #116383
cronjob: shut down integration test quickly again #116381
Unlock CSIMigrationvSphere feature gate #116342
e2e network test for multiple protocol services on same port #116333
golangci-lint: synchronize configs and add verification for that #116367
cleanup: sync testdata as CronJobTimeZone is GAed #116354
Revert “Revert #114605: its unit test requires root permission” #115769
e2e: add e2e test to node expand volume with secret #115451
Drop aws kubelet credential provider and cleanup aws storage e2e tests #116329
node ipam controller ut: run test in parallel to avoid timeout #116174
Revert “node: device-mgr: Handle recovery flow by checking if healthy devices exist” #116341
Address last-minute requested changes for inplace update feature testing in scheduler #116320
Handle AllAlpha and AllBeta in SetFeatureGateDuringTest #116154
Graduate API Server tracing to beta #116144
verify-golangci-lint.sh: support stricter checking in new code #109728
Add OpenAPI V3 E2E Tests #116200
Bump default API QPS limits for Kubelet #116121
Fix nil pointer access panic in kubelet from uninitialized pod allocation checkpoint manager in standalone kubelet scenario #116271
migrate versionedattr to avoid circular dependency #116264
Revert “do not assume backend on e2e service jig” #116331
Logs performance benchmarks #115358
Split volume reconstruction refactoring from SELinuxMountReadWriteOncePod #115268
Get rid of context.TODO and simplify waitForStatusCurrentReplicas #116298
use contextual logging（nodeipam and nodelifecycle part） #112670
cacher: WaitUntilWatchCacheFreshAndForceAllEvents #116302
kube-controller-manager: fix a bug that the kubeconfig field of kubecontrollermanager.config.k8s.io configuration is not populated correctly #116219
e2e endpoint slices with duplicate addresses #114144
verify: include “govet-levee” in normal “make verify” #116248
delete Evicted pods first during pod gc #116167
Apply context cancellation to ValidatingAdmissionPolicy #116103
Promote CronJob TZ to GA #115904
add some ut for cronjob strategy and timezone in schedule #115504
Migrate sample-controller to contextual logging #113879
: add healthz verification when determining HC response for eTP:Local #111661
Skip hasSupport check for List type #116247
[HPA e2e] Reduce possible number of scale steps to minimize stabilization test flakiness #116040
Migrate /pkg/controller/ttlafterfinished to structured and contextual logging #115332
Migrate StorageVersionGC to contextual logging #113986
Migrate ttl_controller to contextual logging #113916
Update pkg/controller/cronjob/ for contextual logging #113428
KEP-3488 : Implement Enforcement Actions and Audit Annotations #115973 unit tests: Skip flaky tests on Windows #115925
allow to mutate pv nodeaffinity label key #115391
test: Fix node e2e shutdown test flake #116317
Fix comments at fit_test.go to increase redability #116066
QueryParamVerifier V3 does not support List #116313
Apply cost constraints to ValidatingAdmissionPolicy #115747
Add volume reconstruction metrics #115965
skip reconcile for if Spec is unchanged. #116309
composited type systems for CEL. #116267
feature(scheduler): implement plugin_evaluation_total metric #115082
KEP-3488 : Implement secondary authz for ValidatingAdmissionPolicy #116054 feat: graduate matchLabelKeys in podTopologySpread to beta #116291
scheduler: get an element from the nodes slice out of the loop for the better performance #116287
Update obsolete links to kubernetes.io/docs/user-guide in Go structs descriptions in apps packages #116124
Update obsolete links to kubernetes.io/docs/user-guide in Go structs descriptions in autoscaling packages #116109
improve message, log level and testing for unmanaged pods in disruption controller #116256
Belatedly remove controller-manager IPv6DualStack feature gate #116255
“empty response” not logged as error in memcache discovery client #115978
add SeccompProfile to Pod and Container accessors/mutators #115968
Remove AWS legacy cloud provider + EBS in-tree storage plugin #115838
reflector: extract watch and startResyncAsync methods #116297
node: device-mgr: Handle recovery flow by checking if healthy devices exist #114640
Improve the performance when Resource Clone #116273
kubelet/deviceplugin: fix concurrent map iteration and map write #114572
Open API V3 version of QueryParamVerifier #115119
cacher: deflake TestGetCurrentResourceVersionFromStorage #116294
kubelet: remove unused DockerID type #116083
Codegen: subprojects: clean up verify scripts #116284
DRA: fix CDI spec version #116279
rename ExperimentalPodPidsLimit to PodPidsLimit #116266
update docs for ContainerStatus fields #115463
Create and update the ApplySet parent object #116243
GRPCContainerProbe is GA #116233
test: e2e node shutdown test logging improvements #115693
test: Fix path to e2e node sample device plugin #116240
fix “go vet” issues, check as part of golangci-lint #116166
Update kube-openapi to afdc3dddf62d31f5e3868d699379c571a6007920 #116162
fix restricted debug profile #115672
Fix deadlock in ready test #116251
Promote pdb #115914
Automatically recreate PVC for pending STS pod #113270
Wait for pod to be running before expanding #116227
Syncing IPVS conntrack cleaning with IPTables. #116171
Add a warning event when pdb has found a unmanaged pod #115861
kmsv2: improve test coverage #116202
Add custom error struct for Group/Version not found #116237
deps: Update github.com/coreos/go-systemd/v22 to v22.4.0 #116242
cleanup(controller): use IsSuperset to avoid interim slice #115882
remove retention policy for staging buckets #116222
Updates old 403 and 404 discovery response tolerations #115865
update documentation on generateSelector for manual selector case #116215
kmsv2: retain more key ID metrics #116221
Add windows nodeSelector to provisioning functions #116152
include beta metrics in documentation and update docs for metrics #116223
update lease controller #116218
node: cpumgr: stricter pre-check for the policy option full-pcpus-only #114114
Add symlink data verification to statefulset e2e #116071
node: device-mgr: sample device plugin: Add support to control registration process #115107
cleanup: replace deprecated sets.String #116179
cacher consistent streaming support #110960
Add API for watch list #115402
Add MaxParallelImagePulls support #115220
Adding e2e test to verify hyperv container is running inside a VM on Windows #116189
bump go-jose to v2.6.0 #115893
refactor validatingadmissionpolicy cel validator and compiler to be reusable #115816
Revert “Revert “Merge pull request #115324 from alexzielenski/apiserver/smd/use-openapiv3” #116106
test: Add e2e node test to check for unknown pods #115442
remove ValidateJobTemplate and add more test cases to batch validation #116052
kubelet: Replace deprecated pointer function #114785
Fixes bug with Root not handling Group without Version #116195
fix: should not set default storageclass if annotation “volume.beta.kubernetes.io/storage-class” is set #116089
test: Add log artifact for ginkgo node e2e and tune default ginkgo flags #116057
Poll for stats until Windows kubelet present it in the stats endpoint #116110
klog update #115277
update ci script to create cluster and gather metrics #116148
Add retention policy to staging buckets #115634
scheduler perf: benchstat support #115425
upgrade etcd deps to v3.5.7 #115413
e2e: dra test driver update #116181
e2e: Remove dead code in tests #116164
Deflake tests in staging/src/k8s.io/kube-aggregator/pkg/apiserver #115859
start to count time since the connection was actually established #116176
fix apiserver metrics RecordsWatchCacheCapacityChange use watchCacheCapacity as increase total #116033
retry for negative TerminationGracePeriodSeconds update #116127
prunev2: Add labels for objects that we apply #115988
feat: add kms mock plugin for e2e tests #116022
skip special features in TestPodSecurityGAOnly #116153
Typo: fix EndpointsLeasesResourceLock ->ConfigMapsLeasesResourceLock #116090
Codegen: set LC_ALL and unset GREP_OPTIONS #116141
Update otelhttp dependency to v0.35.1 #116140
golangci-lint improvements #116130
Add metrics for number of events received from etcd #116128
Graduate JobMutableNodeSchedulingDirectives feature to GA #116116
Fix codegen for older bash #116105
Fix the flaky OOMKiller test by sleep at start #116082
DRA: Pass CDI devices with a new CRI field #115891
word misspelling #114016
More code-review changes from k/utlils cpuset review #115359
Allow mutating schedulingGates in the Pod template for suspended Jobs #115940
e2e framework: deprecate gomega wrappers #115961
Add support for pulling images from private registry #114625
Replace closures in test packages #115987
Partition watchers by namespace/name scope #115918
kubeadm: Improve testcases for init and join command #113574
Improve spec.template.spec.restartPolicy description #111856
In-place Pod Vertical Scaling feature #102884
Move AllowElasticIndexedJobs into JobValidationOptions declaration #116102
Improve the performance of method CandidatesToVictimsMap #116095
turn field validation e2e tests into conformance tests #116111
fix typo on Evictor’s Preempt func #116059
Add CRD compatibility fixtures #116039
kmsv2: add mock kms for reference implementation #116031
Fix API field references for autoscaling v1, v2 and v2beta2 #115996
remove aws from e2e loadbalancer udp conntrack tests #115977
apiserver: terminate watch with rate limiting during shutdown #114925
bump kube-dns to v1.22.20 #116079
kubeadm: modify ‘–config’ flag from required to optional for ‘kubeadm kubeconfig user’ #116074
test: fixing + linting gomega usage #115953
move util from envelope to kms package #116070
log request metadata as part of read/write #116055
Revert “Merge pull request #115324 from alexzielenski/apiserver/smd/use-openapiv3 #116062
update github.com/coredns/corefile-migration v1.0.20 #116060
update SSA to use OpenAPIV3 for builtin and CRD models #115324
remove setting dek_cache_inter_arrival_time_seconds for KMSv2 only #116053
svc: Support pods with same address #115907
Cleanup resources when initializing error in integration #115854
OpenAPI V3 Root interface and basic implementation #115393
scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim #116018
Minor refactor of DeleteCollection in preparation for pagination support there #115666
DRA resource requirements in PVC #115928
Remove StatefulSetStartOrdinal feature gate checks in StatefulSet validation #116027
client-go: fix the wait time for trying to acquire the leader lease #114872
Add field-level warning for deprecated spec.externalID of node #115944
Reuse generic Watch test for watchcache #114656
Split cacheWatcher into its own file #116037
Refactor to use openapi fake client #115784
Support for elastic Indexed Jobs #115236
Fix createStaticPod to not use container.RestartPolicy #116005
Replace a function argument in statefulset e2e framework #115989
Update ExistsInDiscovery to ignore 404 errors in autoscaling utils framework #115964
storage: Get rid of TestListDeprecated #115794
ut: fix TestLegacyFallbackNoCache versions order #115998
pod.spec.terminationGracePeriodSeconds is a negative then convert to 1 #115606 e2e: node remove: kubevirt device plugin #115926
kubeadm: skip ipv4 check if the cluster is using IPv6 address #115420
removed function getAppArmorFS #115749
add missed case for float types #115827
clean up kube-proxy nodeport address handling (part 2) #115256
left over uncounted from tracking cleanup #115970
update kms_operations_latency_seconds metric bucket range #115947
unit tests: Fixes kubeadm postupgrade failing unit test on Windows #115924
Fix for windows kube-proxy: ‘externalTrafficPolicy: Local’ results in no clusterIP entry in windows node. #115919
Fix legacy fallback stale for aggregated discovery #115770
apiserver/util/proxy: Improving test coverage #115633
restructure kms staging dir #115938
apiserver: fix APF tests, use T functions on the test goroutine #115686
Clean up FakeRecorder event emission #115933
kmsv2: add metrics for invalid_key_id_from_status_total #115846
Graduate PodSchedulingReadiness to beta #115815
Implement local KEK generation and rotation #115814
getHost and getHostname have documentation swapped for IPv6 #115628
KEP-3178 : related iptables rule fixups #114470 Add e2e_node test for oom killed container reason #113205
Documentation for the CRI API reason field to standardize the field for containers terminated by OOM killer #112977
Improve performance of method haveOverlap #115922
proxy/ipvs: Use generic Sets and sanitize code #115073
api-machinery: add a rate limited request wait group #115927
Allow inclusion of annotations in channel events when using FakeRecorder #115860
Fix typo at most_allocated_test.go #115903
Graduate DownwardAPIHugePages feature to stable / GA #115721
staging: add DRA repo to list #114359
cacher: Fix watch behaviour for unset RV #115096
e2e framework: revise import restrictions #115710
Remove global vSphere framework variable #115863
Fix update-mocks to use better globs #115272
update distroless iptables to v0.2.1 #115905
kubeadm: remove the manual conversion from versioned cluster cfg to internal cfg #115676
Graduate SeccompDefault feature to stable / GA #115719
Add integration test for diff –prune –selector #115571
kubectl: add unit tests for kubectl debug profiles #115839
Switch image in gRPC probe tests to agnhost #115800
OpenAPI-based CEL type library #113312
New openapi v3 testing file client #115809
client-go: make generating certificate/key permissions more restrictive (600) #115472
Remove unnecessary ETCD_UNSUPPORTED_ARCH for arm64 #115255
Migrate pkg/controller/podautoscaler to contextual logging #114687
update go to 1.19.6 in publishing bot rules for active release branches #115855
APF: two improvements when dumping priority levels #112393
client-go/cache: fix missing delete event on replace #115620
Promote pdb healthy to beta #115363
[Flaky test] fix floating point precision error in TestDifferentWidths #113263
kubectl: use pointer.Bool instead of deprecated pointer.BoolPtr #115837
Bump images, dependencies and versions to go 1.20.1 #115828
Validating the scheduling gate name qualified #115821
old design proposals are now moved to Design Proposals Archive repo #115604
fix:Optimize code for else logic #114447
cleanup: using const systemNodeRoleName instead of string “system:node” #115713
change unnecessary switch to if in metrics.go #114201
cleanup(scheduler): move metricRecorder to metrics package #115519
test/utils: avoid data race during parallel create #115799
kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch #115575
kubectl debug: add netadmin profile #115712
Remove checks for userspace proxy mode in e2e tests #115811
kmsv2: add metrics #115394
webhook metrics top out at 2.5s but default timeout is 10s #115802
Optimization on running prePreEnqueuePlugins before adding pods into activeQ #115583
Revert “restclient: rename “method” label to “verb”” #115808
dra: avoid goroutine leaks from event broadcaster #115798
e2e dra: fix resource limits in a mixed cluster #115797
node: topology-mgr: Add metric to measure topology manager admission latency #115590
Update golang.org/x/net to v0.7.0 #115786
Move /proc/asound from defaultReadonlyPaths to defaultMaskedPaths #112037
Revert “Refactor fake versions of openapi client into testing subdir” #115785
Migrate apiserver tracing_test.go to registry.k8s.io #115626
kubeadm: show a warning message when detecting that the sandbox image of the container runtime is inconsistent with that used by kubeadm #115610
Refactor fake versions of openapi client into testing subdir #115465
Graduate ReadWriteOncePod to beta, updated e2e test #114494
Remove unused code #115758
cleanup: simplify pickOneNodeForPreemption in preemption #114887
Update ineligible endpoints yaml to include debug endpoints #115739
Add test for pkg/kubelet/sysctl/allowlist_test.go #115384
Document risk of HTTP response body in probe failure msg #115670
cleanup: delete useless code from kubelet volumemanager #111982
test/integration: goroutine leak check #115456
oidc: do not leak work queue goroutine #115759
Ipvs: Enable Source Port hash flag for “mh” method. #115527
Add applyconfiguration generator to code-generator script #114987
update node-local-dns to v1.22.17 #115717
Add uablrek in pkg/util/ipvs/OWNERS #115737
Revert #114605: its unit test requires root permission #115732
Use predefined variable instead of duplicated string #115709
client-go: add an Error() function on Request #115685
Drop cp from the etcd images #115733
Remove cgo dependency #115730
Remove check for CSI driver running on node for CSI migration attach operations #115464
kubectl debug: Use restClientGetter instead cmd.Factory #115722
Support preemption of pods using ReadWriteOncePod PVCs #114051
Revert “use kube-proxy defaults values for CI” #115723
fix: applyconfiguration-gen fails for types with non-builtin map fields #114920
Add kind cluster and encryption config for e2e #115714
don’t run loadbalancer tests on large environments #115697
[HPA e2e] Calculate more precise consumed CPU usage for N replicas #115584
kubectl/pkg/drain: Include namespace in evictPods return error #115594
fix docker buildx check #115690
Disable unified build and static init optimization for tests #115692
implement local KEK service #115677
e2e: revise complete report creation #115678
flaky test wait.sh: Add deployment assertion before running wait #115579
PodSecurity test: update registry from k8s.gcr.io to registry.k8s.io #115674
close grpc server in test file to avoid goroutine leak #115617
(kubectl debug): Support debugging via files #111453
logcheck.conf: ensure that kms and value/encrypt uses structured logging #115669
Simplify case conditions #113794
test: Simplify NPD start timestamp calculation #115635
Use structured logging in value/encrypt #115667
Update k8s.io/utils to a36077c30491 #115665
Add metrics for grpc service #115649
Allow SSH e2e node base64 key injection #115657
store hash of encrypted DEK as key in cache #115350
Promote pod resource metrics to stable #115454
Updated the change in registry #115645
cleanup kubectl describe cronjob v1beta1 in 1.26 #110953
update IPTablesOwnershipCleanup to beta #114472
Enforce nodeName cannot be set along with non-empty schedulingGates #115569
Simplify construction of /metrics request #115557
client-go: don’t wait too long after EventBroadcaster.Shutdown #115514
Remove obsolete GKE local SSD test #115601
Remove 4 CSIDriver endpoints with conformance test from the Ineligible endpoint list #115597
Added serialization from etcd error metric #114376
[#115501] Unit testcase for the fix for issue with missing Loadbalancer policies for IPV6 endpoints in Dualstack mode. #115577
kubelet: prepare DRA resources before CNI setup #114364
e2e: wait for pods with gomega, II #115548
kubelet/client: collapse transport wiring onto standard approach #115315
sample-apiserver: create the client cert with SHA256 #112662
*: Bump golangci-lint version and adapt to new linters #115537
Add enablement/disablement unit test for StatefulSetStartOrdinal feature #115536
replace nodeipam custom logic by a workqueue #115529
kubeadm: backup kubelet config for “upgrade node” and “upgrade apply” #114695
Add windows nodeSelector to e2e storage testing pods #115443
Add an option to limit the number of concurrent mkfs calls #115379
client-go: add a metric to count request retries #108396
Using BuildOpenAPISpecFromRoutes instead of deprecated BuildOpenAPISpec #115542
cloud-provider: add log options, allow setting logging-format via CLI option #108984
Revert “e2e: wait for pods with gomega” #115543
Improve performance on the cloud provider node-controller #115521
kubeadm: fix etcd learner join #115038
apiextensions: Benchmark escaping in SchemaHas and pool Schemas #115403
Add cici37 as API reviewer #115490
Bump images, dependencies and versions to go 1.20 #114502
e2e: wait for pods with gomega #113298
Add wrapper around ScrapeAndCompare #115515
Added error handling in ValidateAdmissionPolicy #114894
small comment the ephemeral containers are not accounted for the QoS … #115485
[#115501] Fix for issue with missing Loadbalancer policies for IPV6 endpoints in Dualstack mode. #115503
Add golang.org/x/lint to unwanted dependencies #115488
Don’t explicitly set image version in tests #115484
[Evented PLEG] Ignore container events with nil PodSandboxStatus #114351
Document relationship between requests/limits #115434
Fetch go version using gimme if needed #115377
increasing coverage from 78% to 94% for strategy.go for batch/job #115111
Rename “method” label to “verb” in rest_client_requests_total #115455
Added workerCount flag to node controller in cloud controller manager #113104
add direct construction of TypeConverter from OpenAPI #114439
Add integration tests for MultiCIDRRangeAllocator #115453
test: Use preloaded busybox image in mirror pod test #115441
remove FG ControllerManagerLeaderMigration #113534
Make docs more accurate for the contention-profiling flag #115424
Fix: Pod terminating stuck because of trying to umount not actual mounted dir #114605
scheduler perf: goroutine leak #115423
test: Fix node e2e device plugin flake #115445
chore: add k8s node-role.kubernetes.io/control-plane taint #114759
improve performance #114179
test: Update runtime class detection logic #115437
Cleanup: improve some note for code #115383
Update previous succeeded indexes for Indexed jobs unconditionally #115349
chore: improves tests for hot reload of encryptionconfig #113896
Revert “Add integration tests for MultiCIDRRangeAllocator” #115428
fsquota: only generate pod uuid is nil #112624
unittests: Fixes unit tests for Windows (part 6) #114508
Write APIService lifecycle test + 4 Endpoints #115214
test: Bump timeout for runPausePod #115411
Ignore error when we can’t find plugin capable of expanding the volum… #115345
Add integration tests for MultiCIDRRangeAllocator #115291
client-go: add unit test for Request thread safety #112072
Set node_stage_path whenever available #115346
Validate format of timeZone before calling system LoadLocation method #115375
Extend checkpoint e2e test to check for results #115155
Move KEP-3453 MinimizeIPTablesRestore to beta #115138
node: topologymgr: add metrics about admission requests and errors #115137
fix invalid url #113973
change the comment in CRI API to point to the correct logs directory #115292
use a proper regex looking for the restartCount #115273
Add linter to check if api docs match field tag names #114948
Skip Generic Ephemeral Volume tests if VolumeBindingMode is immediate and it’s a multi-topology environment #109869
Separate Put and Patch Options #115339
e2e ginkgo timeout fixes, III #114580
apiserver: remove 34s timeout from DELETECOLLECTION rest handler #115341
dependencies: update gomega to v1.26.0 #115266
update sig-storage owners #113863
Move GetHostname() from k/k/pkg/util/node to k/component-helpers/node/util #115338
Pass context to StartTestServer to get contextualized logger from it during tests #115298
Check for initial kubelet certificates more frequently #114367
apiserver: fix cve for CORS #112809
Extend example to contain –as=… #108835
dynamic resource allocation: avoid apiserver complaint about list content #115354
update comment to match implementation #115368
delete unused functions in pkg/kubelet directory #115101
pause: remove obsolete Windows buildx workaround #115062
*: Make docs more accurate for the contention-profiling flag #114490
Avoid typechecking stdlib #115382
add aojea as approver for networking APIs: services/allocators, netwo… #115378
Reserve Nodeport Ranges For Dynamic And Static Port Allocation #114418
etcd: Update to version 3.5.7 #115310
E2e apps #115094
ValidatingAdmissionPolicy: use natively-typed informer for params #115145
Trim out suffix added to backing file path of loopback device #115210
Enable ComponentSLI as beta feature #114997
etcd: Build image 3.5.7-0 #115336
Use expansion without recovery if allocatedResource/resizeStatus unset #115304
client-go: add a test to document retry conditions #110253
Use host protoc if it is the correct version #115243
Fix konnectivity-client metric registration. #115327
Refactor: cleanup node/storage tests #115247
e2e node: Update runtime class handler skip logic #115219
Kubelet GRPC probes: improve network resources utilization #115321
Skip failing Windows unit tests (volume) #114992
Fix nil pointer error in nodevolumelimits csi logging #115179
fix-typo #114694
Field validation e2e tests and GA graduation #115271
Decrease target value for scale up tests in HPA #115311
logs examples #115308
Fix panic on ClusterIP allocation for /28 subnets #115322
fix race in aggregated discovery controller #115302
skip scale test for probes #115329
Skip failing Windows unit tests #114991
kmsv2: implement expire cache with clock #113121
logs: add AddGoFlags #114731
update kube-openapi dependency #114550
Implemented MarshalLog in namespacedname.go #106379
e2e/network_policy: using expected==observed as condition for polling probeConnectivity #115283
More carefully compose RequestURI for metrics request #115259
Revert “Fix:[Flake] [sig-node] Restart [Serial] [Slow] [Disruptive] K… #114981
Check for all errors in CRI connection validation #115102
Set go_package in all proto files #115249
Prime KMS v2 key ID inline with transformer construction #115267
hack: update logtools to v0.4.1 #115060
update changelog approver and reviewers for v1.27 #115098
Add bart0sh as a sig-node reviewer #114989
Always emit the stopped leading event #111652
Use git ls-files in a few places instead of find #115240
kube-proxy: support the logging feature gates #115233
Modifies receiver names for struct FakeProxier to make them the same. #114094
Do not use a global variable for etcdURL #115254
clean up kube-proxy nodeport address handling (part 1) #115244
e2: fix check of “pod is consistently pending” #114825
Generate swagger from update-codegen #115246
Call update-generated-protobuf from update-codegen #115245
Kubelet TCP/HTTP probes: improve network resources utilization #115143
Codegen: use ls files and pre-remove gen’ed mocks #115248
Remove openapi files before regen #115250
Codegen: move all proto-bindings scripts together #115238
Codegen: remove generated files before regenerating #115198
Call go install instead of build.sh #115222
e2e/network_policy: using Poll Immediate for intra pod connectivity probes #115207
Don’t generate clients for example internal APIs #115196
runtime log verbosity level changes #114609
Bump konnectivity-client to v0.1.1 #115191
solve race on NewHTTPProxyHandler #115230
wait: ExponentialBackoffWithContext should take context-aware fn #115113
Update CNI version to 1.2.0 #115125
k8s.io/component-base/logs: match full help text in unit test #115195
test images: Update CudaVectorAdd test image to support arm64 #114915
Remove corev1 from fieldmanager #115211
apiserver: update serialization version priority for policy API #115193
diff.ObjectReflectDiff is DEPRECATED use cmp.Diff #113540
added limit value to the pod validation error to simplify debugging #112925
Remove deprecated and orphaned generated code #115186
Use status key ID to determine staleness of encrypted data #114544
use python3 in hack #114976
Refactor validation files into pkg/validation #114936
Fix 2 kubelet proto-generating scripts missing inputs #115197
feature(InterPodAffinity): return Skip in PreFilter #114889
Make tmp dir configurable and dynamic at local-up-cluster.sh #115017
Route controller should update routes with NodeIP changed #108095
Fix apiserver example2 to update gen’ed protobufs #115187
Don’t generate clientset/doc.go in client-gen #115184
wait: Use a context implementation for ContextForChannel #115140
ValidatingAdmissionPolicy: fix bug preventing multiple policies from using same paramKind #115147
k8s.io/component-base/logs: fix usage through Go flag package #114680
Add multi-pod tests with SELinux mounts #113789
switch spdy round trip tests to simple http proxy #113637
fix volume_zone, iterate all topologyLabels when check node #115052
Allow SecretReference.Name in PVs to have 253 characters #114776
CronJob controller cleanups #110838
Lock the AdvancedAuditing feature gate to true #115163
graduate LegacyServiceAccountTokenTracking to beta #114523
Fix bug in reflector not detecting “Too large resource version” error before 1.17.0 #115093
Rename apiserver identity lease labels to apiserver.kubernetes.io/identity #114586
bump honnef.co/go/tools to support go1.20 #115129
Rename enum openapi test #115135
clean up master-service-namespace #114446
refactor policy admission Validator to be lock free #114527
Ipvs: remove the scheduler validation #114878
cleanup: EphemeralContainers feature gate related codes #114542
wait: Make WaitFor and WaitForWithContext private #115116
apiserver/kmsv2: mv Service interface into kmsv2 #114922
tracking with finalizers is the default way for the job controller so comments are not needed that say we are tracking with finalizers #115063
win: fix cpu count to calculate cpu_maximum #114231
Wait for logs pod to complete before counting lines #115127
cleanup(kubectl-e2e): remove invalid comments #115117
kubectl: use autoscaling v2 for hpa #114886
fix typo #114721
feature(volumebinding): return Skip in PreFilter #114897
delete unused functions in pkg directory #115110
delete unused functions in pkg/volume directory #115109
delete unused functions in pkg/util directory #115103
use klog instead of klog.V(0)–controller manager part #115074
add e2e test for kubectl default container annotation #115046
PodGC should not add DisruptionTarget condition for pods which are in terminal phase #115056
cache: Reflector should have the same injected clock as its informer #115077
Update to new release of moby/ipvs #115079
use –null instead of -Z in grep invocation #115069
Revert “UpdateOrCreateToken get secrets err handling optimization” #115068
feature(volume_zone): return Skip in PreFilter #114896
Option to ignore existing pods’ preferred inter-pod affinities if the incoming pod has no preferred inter-pod affinities #114393
Update warnings for removed in-tree plugins #115035
Update SyncJob with PodControllerError updates in job unit tests #115030
Fix the job controller unit test for enforcing ActiveDeadlineSeconds #114944
apiserver: update serialization version priority for flowcontrol API #114492
pkg/controller/job: re-honor exponential backoff delay #114516
block ephemeral container addition to static pods #114086
UpdateOrCreateToken get secrets err handling optimization #115000
fieldmanager: remove dependencies on internal #115039
Do not N^2 loading webhook configurations #114794
be more strict on e2e network timeouts #114260
Make seccomp annotations non-functional #114947
update publishing rules to use go1.19.5 #115029
controller/nodelifecycle: Make monitorNodeHealth process nodes concurrently #114296
Fix gocritic lint errors for cmd/kubeadm/* #114901
deps: Bump cAdvisor to v0.47.1 #114883
[Prepare for go1.20] *: Bump versions and fix tests #114766
releng: Update images, dependencies and version to Go 1.19.5 #115010
Removing Legacy Job Tracking Code #114647
e2e framework: consolidate timeouts and intervals #114783
e2e: bring back total test spec for Ginkgo v2 #114417
kubeadm: remove the unused variable DefaultAuditPolicyLogMaxAge #115002
encryption-at-rest: clean up context usage and duplicated code #114370
Bump kube-openapi #114879
Remove PodSecurityPolicy related code except client-go & API type #113467
fieldmanagertest: Reduce API surface of the test package #114977
Do not log errors when ServiceHealthServer is closed normally #114724
fix a small log error about proxy #114773
Do not include scheduler name in the preemption event message #114980
kubelet podresource: fix GetAllocatableResources metrics #114802
unit tests: Fixes kubeadm enforce requirements test #114957
Removes deprecated kubectl openapi column printing #114972
fix doc of types.go of network v1, v1alpha1, v1beta1 #114063
Update isomorphic event definition in the events/v1 client to match aggregation logic from core/v1 #112365
Removes kube-openapi dependency from Patcher #114938
Update staging README.md #114910
fieldmanager: Make internal managers private #114868
apiserver: refactor WithWaitGroup handler #114970
dependencies: update ginkgo to v2.7.0 #114859
Refactors kubelet’s plugin watcher #114187
Make the warning about pod name clearer #114691
Generate warning for EndpointSlice AddressType FQDN #114677
CR conversion: protect from converter input edits #114959
Include head and tail of clipped test messages #114954
Fixes the issue #114145 #114940
Changed remaining code to improve output for files under test/e2e/autoscaling #114742
Fix this e2e failure causes subsequent e2e failures altogether #114693
fix doc of types.go of node #114065
Prevent CSIMigrationAzureFile gate from being disabled #114953
Improve vendor verification works for each staging repo #114952
Exports WarningPrinter field in DeleteOptions #114937
Disable multiple pv mount tests for vsphere intree driver #114933
Use label selector for filtering out resources when pruning for kubectl diff. #114863
Code refactor for readability in RunFilterPlugins #114798
Remove support for seccomp annotations when determining whether a container update should trigger a policy evaluation #114846
test/OWNERS: add pohly as approver #114769
Adjust preemption event message to do not include preemptor pod metadata #114923
fix a typo in pkg/proxy/ipvs/proxier.go #114907
Fix SyncPastDeadlineJobFinished for enabling finalizer path #114905
Adjust DisruptionTarget condition message to do not include preemptor pod metadata #114914
Close body when Report non-OK status code #112934
Ensure job is up to date in informer cache in test #114876
cleanup(nodeaffinity): remove impossible scenario from test cases #114891
update cri-tools to 1.26.0 #114548
add archived dependencies into unwanted-dependencies.json #114912
Promote e2e test for SubjectAccessReview & createAuthorizationV1NamespacedLocalSubjectAccessReview +2 Endpoints #114906
kubeadm: update .import-restrictions #114899
staging/publishing: remove rules for 1.22 #114892
Enable all features during etcd storage path test #114885
Prepare cpuset for import into kubernets/utils #113744
kms gRPC test: wait until server is healthy #114881
bump kube-openapi #114869
cmd/kubeapiserver: Clean code, avoid unnecessary condition, avoid non-nil but zero-length slice #114860
Add atiratree as sig-apps reviewer #114633
kmsv2: add grpc service #114678
Update OWNERS for jefftree #113959
Fix TestJitterWithNegativeMaxFactor flaky test #114078
feature(scheduler): won’t run Filter if PreFilter returned a Skip status #114125
Enhanced logic to identify eligible preemption node #114623
Avoid mutation of PVC in stateful set controller shared cache #114870
fix path for not approved licenses #114858
add deads2k to approvers for code-generator and sample-controller #114867
remove deprecated Kubeadm v1beta2 API #114540
egress_selector.go: register konnectivity-client metrics. #114832
Bump cel-go bump to 0.12.6 to fix bug in cel-go #114857
gitattributes: all files LF line endings #114388
test/integration: Replace deprecated pointer function #114820
(minor) kube-proxy startup cleanup #114725
Fix verify-license cleanup #114851
test/e2e: Replace deprecated pointer function #114848
Distinguish between Unschedulable and UnschedulableAndUnresolvable in scheduler’s PostFilter #114699
staging/publishing: open up kms package for sub packages and utils #114850
Give TypeConverter to TestFieldManager #114835
pkg/apis: Replace deprecated pointer function #114784
portforward: return error on lost connection to pod #114460
Update doc about json tag is needed to generate informer externalversion package #114786
Stop Cache in scheduler when tests tear down #114653
kubeadm: fix the nil pointer dereference in testcase #114842
Revert “Add link to to file” #114840
tests: Ports volume unit tests to Windows #110931
Drop unused EndpointsHandler / EndpointsConfig from pkg/proxy/config #114749
Fix:[Flake] [sig-node] Restart [Serial] [Slow] [Disruptive] Kubelet hould correctly account for terminated pods after restart #108912
code-generator: refer to the API package for GV{R,K} #113654
kubeadm: unittest might run as non-root #114834
Fix verify-licenses script #114826
Revert “bump golang.org/x/oauth2” #114829
Key encipherment usage v1.27 #111660
plugin/pkg/admission: Replace deprecated pointer function #114817
cleanup(scheduler_perf): remove all removed feature gates #114796
Hide OpenAPI details behind the NewTypeConverter #114792
Bump konnectivity-client to v0.0.35 #114789
Verify that the key matches the cert #113581
Disallow prune for server-side applied objects #113348
bump golang.org/x/oauth2 #114822
Remove heapster rule from system:controller:horizontal-pod-autoscaler clusterrole #114801
Fix normal request metric verb correctly #114774
pkg/registry: Replace deprecated pointer function #114803
Remove duplicate fmt.Sprintf for logging #114738
fix test order in controller/openapi/builder/builderst.go #114570
Modify the return type of RunFilterPlugins to *Status #114629
expose prometheus.Registerer so that we can hook into this from exter… #114646
Licensing: skip modules with fewer subdirs than mods #114782
Drop unused Endpoints-tracking code from pkg/proxy/ #114757
Set singular names for core types to pass to discovery #113542
kubelet: migrate container runtime endpoint flag to config #112136
Fix clearing of rate-limiter for the queue of checks for cleaning stale pod disruption conditions #114770
fix: tryUnmount should respect mounter.withSafeNotMountedBehavior #114736
kubeadm: return the output from stdout and stderr #114719
e2e storage: define local PersistentVolume tests in deterministic order #114761
refactor current ipallocator #114750
CHANGELOG-1.26: move OpenStack in-tree provider removal to urgent notes #114754
Fix installDriverToCSINode(): do not skip CSINode update if Allocatable.Count changed #114528
Fix data race when emitting similar Events consecutively #114236
use klog.InfoS instead of klog.V(0).InfoS-proxy part #114734
Retry when recording an EventSerie results in an AlreadyExist error #114237
Misleading message when there are no metrics. #114740
simplify group-version-to-pkg-path() #114710
codegen: safer use of ‘sort’ and ‘xargs’ #114704
Cleanup codegen subproject scripts #114705
Replace deprecated pointer function in scheduler tests #114700
Make verify-generated-swagger-docs use worktree #114708
Make verify-yamlfmt.sh use git worktree #114707
Remove dep on gengo #114709
Make verify-mocks.sh use git worktree #114706
make update: Use a shell array instead of string #114711
Ipvs: remove module check #114669
Set permissions for timestamp directory before publishing update to avoid permission denied #114464
Remove TODO about API proxy checking for svc #114683
Remove old comments about IPv6 not being ready #114681
Set correct SELinux label for host paths volumes created by host path provisioner #112021
Removed factory from apply command flag struct #114030
e2e: Remove kubeadm-ism in DNS HostNetwork test #114667
e2e: clean up listing #114431
kubeadm: return stored FakedServerVersion when dry-running #114658
Update daemonSet status even if syncDaemonSet fails #113787
kubeapiserver/admission: Improving test coverage #114503
Add .go-version file containing build go version #114660
fix typo #114630
Optimize volumebinding by moving PV list calls to PreFilter #114098
Differentiate CONNECT requests from other requests #111988
statefulset: handle API error on pod deletion #113834
Improve performance of NodeResourcesFit scoring #114390
Reuse generic GetList test for watchcache and fix inconsistency issues for both etcd3 and watchcache #113730
Add test for cmd/kubeadm/app/images/images.go #114597
Update 1.23 publishing go version to go1.19.4 #114648
Don’t run cloud IPAM controller when cloud provider is not enabled #114596
Update 1.24 publishing go version to go1.19.4 #114645
Make handling scheduleResult more readable #114486
Ignore api-resources not found error until it’s ready #114627
e2e: ginkgo timeline #113538
kubeadm: handle dry run GET actions from fake discovery #114632
tests: network: Prefer internal IPs first #113799
Removed the reverted changes from Changelogv1.26.md #114602
Add pod to dsw if termination is not completed during reconstruction #114326
Fix wait test timeout #114611
Resource Claims must be a map type, not set #114585
e2e: Use framework helpers to create namespaces #112019
job_controller: refactor job controller to be able to inject FakeClock for UTs #110710
kubeadm: revert feature to backup kubelet config for “upgrade node” #114608
drop the api testdata for v1.24.0 #114594
Embed context deadline exceeded in error to let errors.Is can work #114578
store cloud-controller-manager logs #114604
e2e: don’t assume NodeIP are reachable #114600
Add v1.26.0 API testdata #114581
Skip .metadata.manageFields when describing unkown resources #114584
return error message when calling status.Message() #114456
#79612 fix(client-go): return error in fake discovery #114291
pass context to gomega #114579
e2e ginkgo timeout fixes, II #114573
e2e storage: fix “Stress with local volumes [Serial] should be able to process many pods and reuse local volumes” #114576
e2e node taints stop controller with context #114569
kubeadm: fix the bug that kubeadm always do CRI detection even if it is not required by phase subcommand #114455
e2e dns don’t fail if configmap does not exist #114567
cleanup e2e kubectl cli tests #114565
Fix indentation/spacing in comments to render correctly in godoc #114559
e2e ginkgo timeout fixes #114564
Makefile: Add example of how to run integration tests and get code coverage report #114545
update github.com/Microsoft/hcsshim to v0.8.25 #114553
kubeadm: enable etcd’s learner mode when joining etcd members #113318
clean up code #111178
Fix incorrect log information and log structure #110723
Services API: warnings on IP addresses #114505
Issue API warnings when workload names are not DNS labels #114412
e2e: ginkgo timeouts: use context provided by ginkgo #112923
lock LegacyServiceAccountTokenNoAutoGeneration #114522
sig-node-reviewers: add endocrimes #114515
endpoints: remove obsolete ServiceSelectorCache #113929
refactor CORS handler #114190
Reduce redundant conversions #114360
Replace the ioutil by the os and io for the pkg/proxy/ipvs #113463
Add recovery expansion tests #114289
unittests: Fixes unit tests for Windows (part 4) #110453
don’t assert error inside wait.Poll loops #114533
Fix issues in volumesnapshot test for ephemeral storage #114217
docs: fix typos in CHANGELOG/CHANGELOG-1.25.md #114097
kubeadm upgrade: fix dry run of backing up kubelet config file #114532
Fix a regression that scheduler always go through all Filter plugins #114518
StatefulSet validation needs to allow old names #114510
Write e2e test for SubjectAccessReview & createAuthorizationV1NamespacedLocalSubjectAccessReview +2 Endpoints #114345
legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #114266
Propagate HasSynced properly #113985
tests Windows: Fixes test failures related to COMPUTERNAMEs being truncated #110014
Remove volume expansion feature gates #113942
kubeadm: replace Runtime.GOOS with go:build tag #114489
kubeadm: backup the kubelet config file before writting the new one #114330
fix msg in /test/e2e/apps/daemon_set.go #114355
The MinDomainsInPodTopologySpread feature gate will be enabled by default as a Beta feature #114445
kubeadm: add chendave as kubeadm reviewer #114477
kubeadm: fix invalid testcase for enforceRequirements #114080
e2e: cpumanager: proper test clean-up #114072
kubeadm: bump to use golang generic #113465
Bump github.com/aws/aws-sdk-go to v1.44.147 #114195
node: e2e: device plugins: Deflake e2e tests #113309
apiserver: cleanup unused StrategyExceptions #114428
feat: improve naming #111371
e2e ginkgo timeouts: cleanup commits #114469
fix: remove ioutil for new go version #114414
Clean up SCTP tests #113335
Refactor mock tests in different files #113930
fix double lock and excercise its codepath in tests #114459
Replace os.Exit in diff #113508
Clean up CRD conversion code structure #113151
scheduler volumebinding: leverage PreFilterResult for bound local PVs #109877
e2e: Update GetExternalIP and GetInternalIP method name to make them more explicit. #114092
Skip tests if SSH not working #110473
e2e framework: fix unit test flake #114454
e2e ginkgo timeouts: simplify code #114425
Windows Kube-Proxy implementation for internal traffic policy #114407
e2e loadbalancer test connectivity within cluster first #114171
Add CRD integration tests for ValidatingAdmissionPolicy #113795
Unexport OpenAPIGetter factory method #114435
Reduce load of Job integration test #114261
cmd/kube-controller-manager/app/options: Improving test coverage #113981
update release-note for cherry-picks of #110255 #113285
Noderesourcetopology- api: Repo Bootstrap #110252
kubeadm: add missing –cri-socket flag for upload-certs phase #114443
Windows Kube-Proxy implementation of ProxyTerminatingEndpoints feature #113776
scheduler/internal: Improving cache and heap test coverage #114273
pass status to handleSchedulingFailure #114082
tests: Add DaemonSet with LB rolling update test #114052
Validate labelSelector in topologySpreadConstraints #111802
Svc typenames star traffic policy type #110991
Lower volume attached touch log level #113947
Fix documentation for referenced Batch v1 and v1beta1 API fields #113570
rollout restart: Change error message to more descriptive #113040
Add link to CHANGELOG.md #113156
update comment of annotation_key_constants.go #112497
Refactor to simplify factory Validator #114413
Allow profiling information to be served on Unix-Domain Socket #114191
pkg/api/persistentvolume: Improving test coverage #114048
update API Change in release note #114164
Remove GA feature gates: CSIInlineVolume, CSIMigration, DaemonSetUpdateSurge, EphemeralContainers, IdentifyPodOS, LocalStorageCapacityIsolation, NetworkPolicyEndPort, StatefulSetMinReadySeconds #114410
cleanup: add help information for apiserver cel metrics #114378
add github.com/mindprince/gonvml to unwanted dependencies #114204
Update the godoc on the encryption config API on how to specify group… #114163
remove flaky tag for GCE NEG tests #114131
use TotalScore summarized in NodePluginScores #113456
Correct Typos in getBeginingAndEndIndices func Name #111367
Add a flag to HNS Load Balancer policy to hint HNS about the VIP being an External IP #113742
e2e: make GetSubnetPrefix IP family agnostic #114027
Tune the error messages in scheduler cache #114361
Fix: resourceToWeightMap will never be nil here #113499
don’t assert error inside goroutines #114411
Mark github.com/gorilla dependencies to avoid increasing use #114408
e2e: accept context from Ginkgo #114401
Autoscaling: advance v2 as the preferred API version over v1 #114358
kubeadm: cleanup the temporary workaround about kubelet –container-runtime flag #114409
Check the correct error in d.downloadAPIs #114404
Bump grpc to v1.51.0 #113707
Fix client-go request retry race #113933
update coredns to v1.10.0 #114279
fix wrong statement in unittest of BoundedFrequencyRunner #113909
Removes unnecessary dry run verifier #114294
e2e apimachinery: simplify cleanup #114392
rotate-certificates is a GA feature now #114379
Removes unused k8s.io/kubectl/pkg/apply files #114374
remove enabled by default beta resources that have been removed #114356
Deflake a preemption test that may patch Node incorrectly #114350
Use k8s utils pointer instead of Azure autorest/to #114343
kubeadm: set priority for “system-node-critical” Pods #114338
unittests: Fixes TestReplaceFile for Windows #114334
Fix table in sync controller comment #114300
kubectl scale: Use visitor only once #114252
kubectl exec: return descriptive error message when multi resource passed #114249
Make Mounter interface exportable #114246
use kube-proxy defaults values for CI #114229
Link kubectl-convert binary statically #114228
Improving scheduler extender unit tests #114223
fix the alpha phase version of LegacyServiceAccountTokenTracking #114220
Re-factor FieldManager tests for better re-use #114218
Avoid serialization of maps when log level < 10 #114216
fix spelling error in e2e upgrade apps daemonset test #114196
Add more validation to rules.yaml #114194
Don’t re-run EnsureChain/EnsureRules on partial syncs #114181
Tracing: sample always in hack/local-up-cluster.sh #114180
endpointslicemirroring handle endpoints with multiple subsets #114155
pkg/kubelet/network/dns: omit unnecessary fmt.Sprintf #114178
Retry patch when then service is unavailable or timeout. #114176
Validate StatefulSet names as DNS Label #114172
Improve error messages of flags that parse quantities and percentages #114169
staging/src/k8s.io/legacy-cloud-providers/azure: remove unnecessary fmt.Sprintf #114158
update ineligible_endpoints.yaml to include getResourceAPIGroup #114156
Implement PreFilter for VolumeZone plugin for performance #114149
Fix OwnerReferencesPermissionEnforcement complaints when autodeleting PVCs #114116
Bump gcb-docker-gcloud to v20221007-69e0da97ef #114085
Remove unused numExistingEndpoints variable #114076
Fix a potential goroutine leak #114071
kubernetes components using leader election to leases #114055
i18n: Fix bug where package-level variables are not translated. #114054
pkg/controller/deployment/util/deployment_util.go:Improving test cove… #114033
Fix API field references for coordination v1 and v1beta1 #113876
Add test for staging/src/k8s.io/apimachinery/pkg/version/staging/helpers.go #114015
kubeadm: respect user provided kubeconfig during discovery process #113998
Self-nominate mimowo as a reviewer for pkg/controller/job & test/integration/job packages #113196
Guard against merging non-canonical replace directives #113978
Fix API field references for scheduling v1, v1alpha1 and v1beta1 #113875
Replaces path.Operation with filepath.Operation (kubelet) #113255
unittests: Skip test if not on GCE #113138
fix OldReplicaSets in kubectl describe deploy #113083
wait for ingress admission to catch up to the cache during testing #112955
optimize testcases arrangement #112799
Optimize turning a Set into a Selector #112648
Kubemark: fix typos to be HollowKubeletOptions #112627
Update NodeStatus about IP change #112490
Add metric for max no. of CIDRs available #112260
Wrong description for function ResolveEndpoint #112247
Reflector: support logging Unstructured type #111898
pkg/controller: Replace deprecated func usage from the k8s.io/utils/pointer pkg #111839
reportedVerb should get from CleanVerb to be consistent between metrics and logs #111835
reorganize some logic of controller_utils.go #111683
kubelet: cleanup secretManager and configManager in podManager #111583
Remove ioutil from auth plugin #111576
Remove ioutil from kubectl #111572
kubectl: remove unnecessary TODO annotations #111403
Reduce indentation in daemonset controller code #111207
Add test for cmd/kubeadm/app/constants/constants.go #113943
add alexzielenski to OWNERS #113922
Add apelisse into some more OWNERS files #113904
Add mpuckett159 to sig-cli reviewers #113897
Update API doc to use the field name in description #113894
Update github.com/aws/aws-sdk-go #113877
kubeadm: remove unused command flag constants #113874
Error Suppression in printer/internalversion/printers #113870
cmd/kube-apiserver/app/options: Improving test coverage #113823
cleanup:Omit comparison with boolean constant #113768
fix: Remove dependency on github.com/pkg/errors #113672
Combine RequestAuditConfig with RequestAuditConfigWithLevel #113564
kubectl displays seccomp profile for pod and container #113284
Fix SPDY proxy authentication with percent escaped characters #113283
Remove unused RBAC rule from system:kubelet-api-admin #113267
add kms as to 1.26 rules for multiple components #114353
Update publishing-bot rules to Go 1.18.9 #114288
releng: Update images, dependencies and version to Go 1.19.4 #114284
staging/publishing: add kms to apiserver 1.26 rules #114335
Update golang.org/x/net 1e63c2f #114319
Revert “expose prometheus.Registerer so that we can hook into this from external sources” #114309
expose prometheus.Registerer so that we can hook into this from external sources #114293
add etcd 3.5.6-0 to kuebadm supported etcd version #114232
publishing-bot: Fix apimachinery rule for release-1.26 pointing to the wrong staging dir and use correct Go version #114193
OWNERS(sig-release): Promote Verónica (Tech Lead) and Jeremy (Chair) #114146
Fix endpoint reconciler failing to delete masterlease #114122
changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 #114096
use etcd 3.5.6-0 after etcd image is promoted #114093
test/e2e_node: set apiserver kubelet preferred addresses #114044
Bump GOLANG_VERSION to build etcd migrate utility #114084
etcd: Build image 3.5.6-0 #114064
Add missing tags for kms and dynamic-resource-allocation for publishing #114077
Fix an accuracy issue of scheduler_pending_pods metric #113946
dra: test examples: ensure that the claim parameter name is consistent #113976
Add RUNTIME_CONFIG=“resource.k8s.io/v1alpha1” #113960
kms: use different context for server lifecycle and initial load #113955
e2e tests: Revert windows-nanoserver image version #113923
staging/publishing: add release-1.26 branch #113934
Switch deprecated API serving back to gating on beta #113937
Add e2e test to ignore failures with 137 exit code #113927
Fix kubernetes/gce-ingress jobs #113858
test/integration/apiserver/cel: more tests! #113738
Fix subpath disruptive tests #113853
e2e loadbalancer udp conntrack test #113650
Updating refs for e2e test images to latest #113900
Updating pause image refernces to 3.9 #113895
Fix autogeneration mark for instrumentation doc #113814
Adds field to force non-aggregated discovery #113797
add unit tests for storageversiongc controller #113147
remove unused afterEach hook on e2e services #113850
Fix a typo and a misnamed field in CHANGELOG-1.26.md #113843
Add missing PodStartupLatencyTracker to kubemark #113887
Improve stability and performance of the taint_manager unit tests #113386
Add gogo libraries to unwanted dependencies #113871
Update shellcheck version (0.7.2 -> 0.8.0) and fix findings #113541
Update unwanted dependencies list #113818
dynamic resource allocation #111023
Fix bugs with aggregated discovery #113764
Add CSI migration of OpenStack Cinder volumes #113826
Use goroutine to speed up volume clenaups #113169
integration: fix race with the controller in TestDSCUpdatesPodLabelAfterDedupCurHistories #113848
Fix match onExitCodes when Pod is not terminated #113856
Update changelogs with missing CVE-2022-3162, CVE-2022-3294, CVE-2021-25749 #113827
api: add unhealthyPodEvictionPolicy for PDBs #113375
Add logging for reconciler unit test #111577
fix test flake in TestLegacyServiceAccountTokenTracking #113835
Add e2e test for job pod failure policy used to match pod disruption #113812
update documentation after code freeze #113824
Move events command to top level #113819
Introduce APIs to support CrossNamespaceSourceProvisioning #113186
Add [Feature:SELinux] to all tests that require SELinux #113809
Revert “Graduate API Server tracing to beta” #113803
Rename cel admission package and the feature gate to validatingadmissionpolicy #113735
Replace klog with benchmark log framework in scheduler_perf #113724
use admission.Handler readyFunc for CEL Admission plugin #113758
Validating admission metrics integration #113475
kubelet: Keep trying fast status update at startup until node is ready #112618
Fix discovering numa distance when node ids are not starting from 0 or it’s ids are not sequential #113788
tests: Spawn poststart / prestop pods on the same node as the https pod #113597
Add implementation of KEP-3335, StatefulSetSlice #112744
Revert “feature(scheduler): won’t run Filter if PreFilter returned a Skip status” #113786
deps: Bump cAdvisor to v0.46.0 #113769
fix credential provider metric names #113754
Ignore error when getting api-resources until it’s ready #113708
cluster: remove KUBE_TEST_IGNORE_CLOUDPROVIDER_TAINT which is no longer needed #113635
Enable the “Retriable and non-retriable pod failures for jobs” feature into beta #113360
Fix incorrect “Invalid attach limit” error when maxAttachLimit is 0 #112344
Graduate API Server tracing to beta #113693
Fix broken readwriteOncePod serial tests #113753
kubelet: fix nil pointer in startReflector for standalone mode #113501
Standardize naming in generic storage watcher tests #113721
Add borrowing between priority levels in APF #113485
Aggregated discovery client #113599
Aggregated discovery server changes #113171
fix possible race of listwatch in admission test #113760
clean up errors, ensure they log lines, improve documentation #113751
kubectl apply: warning that kubectl will ignores no-namespaced resource in future release with namespace specified and with default pruneAllowlist #110907
Delete the useless line #112593
Implements hot reload of the KMS EncryptionConfiguration #112050
Remove specific command suggestion from kubectl rollout undo error message #111795
kubelet: add support for broadcasting metrics from CRI #113609
Part 3: Bug fixes, integration & E2E Test #113442
Fix params to be null instead of an empty map if paramRef is null #113749
apiserver: use the correct error when logging errors updating managedFields #113711
egress_selector.go: hard cap UDS dial. #113486
spelling fix #111908
fix etcd compaction doc #111879
cidr_set.go : fix several typo #110485
Make static controller registration slightly safer #113747
Migrate another usage of utiltrace to component base tracing #113698
Promote APIServerIdentity to Beta #113629
Reconstruct SELinux mount label #113596
Fix grpc probe log #113582
upgrade github.com/prometheus/client_golang to v1.14.0 #113577
Clean up testing code of kubectl cmd section #113444
e2e: improve failure handling #113383
add metrics/slis to cloud-controller-manager health checks #113340
Fix comments on CSI migration feature gates #113723
Add comments to clarify the updated logic in kubelet’s status_manager #113718
kubectl apply: Deprecate –prune-whitelist in favor of –prune-allowlist #113116
Improve apiserver SLI metric name #112679
Add Support for Evented PLEG #111384
Deflake limitrange singleflight test #113736
Deprecate CLI flag pod-eviction-timeout in KCM #113710
Revert “Update daemonSet status even if syncDaemonSet fails” #113733
upgrade runc to v1.1.4 #113719
feature(scheduler): won’t run Filter if PreFilter returned a Skip status #112637
Added scope to api server tracing #113728
Promote job metrics #113010
StatefulSet: Cleanup the complex defer function updating the status #112737
Fix kubectl describe ingress when default backend is empty #113664
Add solver for APF concurrency rebalancing #112137
Part 2: Core scheduling implementation #113275
Add extra value validation for matchExpression field in LabelSelector #113699
make eviction message more clear #111597
Fix stats for podAndContainerStatsFromCRI #113291
Fix etcd path construction #113696
CEL validation in Admission chain #113314
kubectl: apply --server-side managed fields migration #112905
: add validation for duplicate kms config name when auto reload is enabled #113697
Update k8s.io/utils to fix util tracing panic #113688
Add verb resource to api server tracing #113682
Clean shutdown final #113669
Additional integration test validations for apiserver tracing #113642
Enable shell completion descriptions for bash #113636
update documentation for metrics with deprecated version and k8s version #113610
Added: publishing events for topologyAwareHints changes #113544
Graduate kube-scheduler NodeInclusionPolicy to beta #113500
Improve the API description of PodSecurityContext.SupplementalGroups to clarify its unfamiliar behavior #113047
node: topologymanager: Improved multi-numa alignment in Topology Manager #112914
Add pod disruption conditions for kubelet-initiated failures #112360
Update daemonSet status even if syncDaemonSet fails #112127
CSI Inline Volumes: promote API tests to conformance #111724
kubelet: make the image pull time more accurate in event #111772
Add alculquicondor to test/integration/framework OWNERS #113679
Rework volume reconstruction #113262
Windows hostnetwork alpha #112961
fix node address validation #113681
apiserver identity : use SHA256 hash in lease names #113649
kms: add wiring to support automatic encryption config reload #113529
Add ability to pass format options in mount-utils #112877
Fix ownerRef controller validate err msg #112223
Standardize naming in generic storage tests #113666
Add nodeInclusionPolicy benchmark tests to scheduler_perf #113615
make Azure File CSI migration as GA in 1.26 #113160
kube-apiserver: print supported media types on failure to find a serializer #113648
Graduate JobTrackingWithFinalizers to stable #113510
Refactor scheduler_perf_test codes #113503
rewrite signature of function StartEventWatcher #111545
Fix formatting of API server diagram #113661
scheduler/framework: remove useless SetFailedPlugin #113528
Update publishing-bot rules to Go 1.18.8 #113668
Add ambiguous selector check to HPA #112011
default warn to enforce level #113491
test: Stop kubelet systemd service after node e2e #113199
Reuse generic GetListNonRecursive test for watchcache #113588
Clarify a few validation messages #112582
Correct some incorrect comments #113352
FilterLatency tracing for APIServerTracing #113217
cluster: fix cloud-controller-manager.manifest to use priorityClassName #113640
Stop creating three copies of admission plugins #113634
Turn on CCM in kube-up when cloudprovider=external #113271
remove const that’s not used #111707
Switch to newer nvidia installer for m97 #113632
kube-proxy ipatbles: update log message #113613
e2e - use resource-consumer:1.13 #113601
Promote CSIMigrationvSphere to GA #113336
Promote DelegateFSGroupToCSIDriver feature to GA #113225
fix local-up-cluster.sh to run on other arch than amd64 #113604
Promote EndpointSliceTerminatingCondition to GA #113351
Promote cronjob_job_creation_skew metric to stable #113008
Remove duplicate and unused index from PodIndexer #111607
apiserver identity: use persistent names for lease objects #113307
New histogram: Pod start SLI duration #111930
Clean shutdown of nodeipam controller #113620
test: Fix e2e_node restart_test flake #113273
Define metrics for API Priority and Fairness borrowing #113483
Add enablement tests for feature gate nodeInclusionPolicyInPodTopologySpread #112805
apiserver: remove redundant field from seatDemandStats #113598
Handle nil case correctly in TimingHistogramVec::WithLabelValuesChecked #113494
kubectl run: deprecate unused / nonuseful flags #112261
Part 1: New Pod API .spec.schedulingGates #113274
Add container name in the BackOff event message #113216
kubectl explain –output plaintext #113146
Fix disruption controller permissions to allow patching pod’s status #113580
e2e loadbalancer remove after each cleanup #113562
kube-proxy: add a flag to disable nodePortOnLocalhost #108250
Promote ServiceInternalTrafficPolicy to GA #113496
Do not raise an error proposing to use ‘–overwrite’ when annotating with the same value #109505
Move non-graceful node shutdown to beta #113511
Log a warning when dropping unknown fields from loading an audit policy #113535
CRI: Add Windows Podsandbox Stats #110754
refactor static analysis code for stability framework #113560
Clean shutdown of few more integration tests #113559
Add metric deleting_pods_total #113519
Refactor storage tests - part 5 #113555
KEP-1435 Mixed Protocol values in LoadBalancer Service GA #112895
Remove CRI v1alpha2 #110618
structured-logging: replace KObjs with KObjSlice for logging #110747
Refactor store index into its structure #113387
Add testcases for pkg/kubelet/cm/pod_container_manager_linux.go #109757
chore(scheduler): cleanup some minor issues in testing #113505
e2e: formatting enhancements #113384
Optimize Everything and Nothing label selectors #112649
sync website change #112053
Copy LoadBalancerStatus from core to networking #106242
Support cancelable SPDY executor stream #103177
promote ProxyTerminatingEndpoints feature to Beta #113363
Cleanup: kube-proxy internal naming #113277
Fix and extend APIServerTracing integration tests #113233
Replace brancz as feature approver for SIG Inst #113557
resolve winkernel proxier treating stale VIPs as valid #113521
Add benchmark for large indexed job #113478
graduate LegacyServiceAccountTokenNoAutoGeneration to ga #112838
Reuse generic TestGet in cache tests #113427
node: kubelet: cpumgr: CPU Manager to GA #113018
releng: Update images, dependencies and version to Go 1.19.3 #113550
node: devicemgr: Graduate Kubelet DeviceManager to GA #112980
Shutdown tracerprovider when stopping the kube-apiserver #113545
egress_selector.go: Add a dial starts metric. #113520
resource-consumer windows image use leak-and-touch for memory allocations #113020
Revert “plumb context from CRI calls through kubelet” #113548
Remove ehashman from sig-node roles #113512
cleanup psp related rbac in cluster addons #113461
scheduler: integration test for ReadWriteOncePod alpha #113419
Fix setting resource version on etcd3 deletion #113369
graduate RetroactiveDefaultStorageClass to beta #113329
Fix sample-apiserver E2E image build failure #113513
kubeadm: add testcases for kubeadm reset #113462
test/images/agnhost: Adds a test user and group in the image for a E2E test case of SupplementalGroups with pre-defined group in the image #113185
Get response content-type #113523
add support for parsing custom collectors from the stability framework #113518
Update shellcheck version (0.7.1 -> 0.7.2) and fix findings #113514
kubelet: fix pod log line corruption when using timestamps and long lines #113481
Promoting WindowsHostProcessContainers to stable #113476
Promote test for ResourceQuota status to Conformance +3 Endpoints #113455
Allow DBG=1 to be used with make release-images and make quick-release-images #113452
docs: Correct the log message for pv controller to make it more accurately descriptive #113450
Plumb context to Kubelet CRI calls #113408
test images: Retrigger failing images #113296
Image Version Bump in Manifest for Node Perf Test tf-wide-deep #113282
minimize iptables-restore input #110268
Fix APF width estimate for creating service account’s token #113206
kubelet: remove the unused constant AnnotationInvalidReason since sysctl annotations are deprecated and migrated to fields #112796
Add unit tests for active_deadline.go #112373
kubelet: fix nil crash in allocateRemainingFrom #113021
kubelet: remove superfluous function #111220
Add Makefile target lint #113490
StatefulSet: fix kube-controller-manager panic due to StatefulSetPersistentVolumeClaimRetentionPolicy being nil #113358
kube-aggregator: remove redundant Scheme registration logic #113431
Fix SELinux check of mounted volumes #113406
kubeadm: simply struct of joinOptions by removing joinControlPlane #113320
update documentation for stability framework #113484
Fix SELinux context mount with unknown context #113411
unittests: Fixes unit tests for Windows (part 3) #110403
Simplify go.mod #113424
Fix Makefile help target #113280
Reduce log noise on SELinux mount mismatch #113405
Add SELinux mount support to all volume plugins #113321
Update the doc string of the SeccompDefault feature gate #113281
Adding e2e test for running Windows hostprocess containers as members of a local usergroup #113119
update paths for documentation #113472
Fix tracing wrapper comment #113458
node: metrics: cpumanager: add metrics about pinning #112855
grpc: set localhost Authority to unix client calls #112597
remove UnversionedKubeletConfigMap feature gate: GAed in v1.25 #113448
Promote replaceCoreV1NamespaceFinalize +1 Endpoints #113454
feat: make jsonpath wait logics consistent with condition #109525
(kubectl apiresources): Use restclientgetter instead cmdutil.Factory #112002
(kubectl certificates): Remove certificates/v1beta1 client usage #111990
Refactor matcher interface #113349
Refactor WatchError test to make it generic #113430
Add metrics for CEL for admission control KEP #112994
fixed kubectl test that passes when it should fail on changed test input #113423
Use SSA to add pod failure conditions #113304
dependencies: update to gomega v1.23.0 and ginkgo v2.4.0 #113367
HPA : Enhance error message to capture POD details #112544
Add borrowing inputs #113222
kubectl-alpha-events: e2e ignore some timeout errors(flake) #113198
Fixed CVE-2022-27664 Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80 #112693
update documentation generator #113413
Add benchmark for json.compact high cpu usage in watch #113326
Disable expansion in SC, if driver does not support it #113409
e2e framework: fix incorrect backtrace in Failf #113390
Refactor storage tests - part 3 #113370
kube-apiserver: keep the types of LeaseEndpointReconcilerType and NoneEndpointReconcilerType the same as MasterCountReconcilerType #113361
Promote ardaguclu to approver for sig-cli related stuff #113311
Migrate apiserver from utils/trace to component-base/tracing #113172
fix GetAllocatableCPUs in cpumanager #112913
Audit single context #111095
Move CSIDriver checks from NewMounter to SetUpAt #113306
Move CSI json file saving to SetUpAt() #108874
Custom resource encryption #113015
Refactor storage tests - part 2 #113364
Remove ioutil from controller-manager #111569
kubeadm: Don’t reuse the ignorePreflightErrors from initCfg for reset #113355
Add support to metrics framework to auto-generate documentation for metrics #113343
add a metric for retroactive sc errors #113323
Refactor storage tests #113357
kubeadm: print the invalid field when validating bootstrap token discovery #113353
Swagger unmarshaljson #113338
test: remove flaky pod update test in CSIInlineVolumes e2e #113141
Shell completion for plugins #105867
unittests: Fixes unit tests for Windows #110263
swap name for storage metric for underlying storage db #113310
Fix time.Since() in defer. Wrap in anonymous function #113325
refactor sets use generic #112377
Fixed: 22422 use singleflight to alleviate simultaneous calls to #112696
NodeLifecycleController: Remove race condition #113136
test images: Fixes httpd-new image #113297
update scheduler config version to v1 #113276
track legacy service account tokens #108858
Introduce constants for the two parameters of seat borrowing #113189
test images: Revert windows-servercore-cache version #113303
pvc storage request warning for fractional byte value #113238
unittests: Fixes unit tests for Windows #111534
Remove the unused pkg/util/ipconfig #113191
Replace the ioutil by the os and io for the pkg/util #113194
hack/tools enable additional linter gocritic in golangci-lint #113256
Add e2e test to validate that hostProcess containers can use inclusterclient #113149
HostProcess containers metrics e2e test fixes #113219
Replace deprecated pointer conversions in scheduler #113265
hack: pass several Ginkgo parameters to the CLI instead of the test binary #113214
fix flaky admission tests #113264
Add e2e to validate stats for Windows hostprocess containers #111332
add metrics/slis to kubelet health checks #113030
Remove unuseful multi scheduler testcases #113193
Refactor schedulingCycle and bindingCycle in scheduler #112025
kubeadm: print the detailed manifest info when decoding it into runtime.Object fails #113244
cleanup scheduler server_test.go #113231
more shellcheck cleanups #113229
Add metric for terminated pods with tracking finalizer #113176
add unit tests for apiserverleasegc controller #113074
test/e2e/instrumentation/logging/utils: remove dead package #113213
Fix DeleteCollection API decode DeleteOptions fail #113133
Ensure we are using GNU date for builds #113210
Set default test timeouts first, only then modify the required ones #113208
Add new tracing library to bridge otel and utiltrace apis #113183
flake: wait for crd ready in kubectl apply script #113159
e2e: remove JSON progress output on stdout #113212
e2e storage: cleanup with context #113128
hack/tools: update golangci-lint version (1.48.0 -> 1.50.0) #113202
change framework.RunScorePlugins to return slice organized by node #108494
apiextensions-apiserver: change k8s.io/apimachinery/pkg/util/diff to github.com/google/go-cmp/cmp #112691
assorted small shell script fixes #113190
Record event and metric for lifecycle fallback to http #113175
More useful audit error logs #111706
Fix feature gate name in release note #113178
CEL Admission Plugin #112858
improve readability, code nesting too deep #112675
Normalize HTTP lifecycle handlers with HTTP probers #86139
logo: better alignment of layers #113180
Replace error string with ErrorList in scheduler validation testing #113153
Simplify tests for job metrics by resetting them #113166
migrate usage of merge to MergeBuckets for static analysis #113155
register podresources metrics #112897
Aggregated discovery types #111978
pkg/admission/storageclass: pick one storageclass conditionally if >1 present #110559
Pick up new AWS region by bumping aws-sdk-go for 1.26 #113084
Fix node-perf test tf-wide-deep: bumped image version, and removed arm64 arch testing #109295 #113012
Add SIG Apps owners for job integration tests #113167
grammar: replace all occurrences of “the the” with “the” #112546
node: e2e: device plugins: Add more logs for clarity #113165
replace WithInsecure() with WithTransportCredentials() #113077
Removes test of deprecated –dry-run value #113150
Do pod preemption in parallel. #113127
kubectl-e2e: the event rendering may have 3 or 4 whitespaces #113158
fix typo #113089
remove gopkg widget #113154
kubectl explain openapiv3 template foundations #113024
Fixes getNestedMountpoints grouping #112571
move MergeBuckets into component-base so we can properly support it for static-analysis #113148
Add capability for tests with multiple PVs with the same VolumeHandle #113046
kube-proxy react on Node PodCIDR changes #111344
Fix bug in which APIServerTracing did not work with some egress selectors #112979
print error message when fsck failed #112972
Fix SELinux PodSecurity message when only user or role are set #113111
Write e2e test for ResourceQuota status +3 Endpoints #111957
(aws_credentials): update ecr url validation regex #113087
Fix duplicate code block of ListAll function #108959
prefixTransformers: allocate after transformation length is known #113118
unit tests: Skip Windows-unrelated tests on Windows #111601
Replace DeepEqual to Diff compare on scheduler-binding #109662
fix typo in Makefile #113132
Remove redundant type conversion #113129
Wait for pod not running or gone in storage tests #113135
remove errant replace from code-generator/examples/go.mod #113126
k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval #113120
Bump log level for health check warning for missing components #113107
Sort kubelet pods by their creation time #113041
restart claim sync when PVC is updated #113137
Update GO address link #112966
added daschott to proxier/winkernel owners #113125
order the output for stable metrics since we’re supporting more than just stable now #113123
Fix metrics time durations in schedulerCycle and bindingCycle #113113
Fix ‘ctr not found’ error with gce kube-up for Ubuntu OS deployments #112901
add support for merging calls to Linear/Exponential Buckets #113117
actually resolve the computations for buckets for static analysis #113115
client-go: raw data options for fetching openapiv3 #113062
Use sync in e2e storage provisioning tests #109924
apf: change controller to use SSA for patches #110173
add --concurrent-horizontal-pod-autoscaler-syncs flag to kube-controller-manager #108501
apiserver: fix typo in graceful termination test #112953
Preserve metadata for fake dynamic client unstructured lists #107278
dependencies: update to gomega v1.22.1 and ginkgo v2.3.1 #113106
remove rate limiter metric as it is not in use #113054
Add a scheduler profile level parameter percentageOfNodesToScore #112521
test dualstack services with assigned clusterIPs #113071
e2e test for ReadWriteOncePod PV access mode #112987
scheduler: remove unused constant DefaultBindTimeoutSeconds from VolumeBinding plugin #113102
kubeadm: Enable dry-run mode for phase of control-plane-prepare certs #113005
e2e: skip AllNodesReady when the test skipped framework initialization #113097
node: e2e: memorymgr: Fix test failure #113042
e2e: Remove ginkgo option output-interceptor-mode #111339
kubeadm: fix the err msg if the token format is not match #113094
Refactors describe command to split flags from options #112714
Fixing words in the comment #113082
Move the Kubelet Credential Provider feature to GA and Update the Credential Provider API to GA #111616
add metrics/slis to kube-proxy health checks #113057
Write e2e test for replaceCoreV1NamespaceFinalize +1 Endpoints #112891
Remove log line from expiration cache #112860
fix a typo in test/conformance/walk.go #112587
do not print status stack in case of timeout from timeout handler #112374
update kube-openapi #112988
graduate ServiceIPStaticSubrange to GA #112163
Remove kube-proxy userspace modes #112133
Add categories to kubectl api-resources wide output and add –categories flag #111096
code check modify #109590
CHANGELOG fix some format error of changelog1.24 #110498
Promote ExpandedDNSConfig feature to beta stage #112824
update sig-network reviewers/approvers on controller manager #112558
add metrics/slis to kube-scheduler health checks #113026
convert int32 to pointer using library function #110902
Fix the job finished metric issue due to the final job status update occasionally failing #112948
Fix the bug that kubectl convert does not pick the right api version #112700
Update to latest kubedns and nodelocaldns images. #113045
kubeadm: fix the help msg for kubeadm init phase upload-certs #113039
kubeadm: print out the solution if CA files do not exist #112941
update fsnotify to v1.6.0 #113037
add rule to KUBE-SERVICES Chains to return early when source address match localhost #112950
Promote Read, Replace ReplicationController scale endpoints Conformance - +2 Endpoints #113059
Promote replaceCoreV1NamespacedServiceAccount test to Conformance - +1 Endpoint #113061
Promote List, Patch and Delete LimitRange test to Conformance - +3 Endpoints #113060
feat: update preemption victims metric #112939
add support for parsing buckets from variables of prom.Linear and prom.Expo helpers #113052
kubeadm: optimize and make the usage consistent about apierrors.IsNotFound #113048
update readme for instrumentation static analysis code #113049
kmsv2: enable logging for kmsv2 enc/dec operations #112153
cleanup: Remove out-of-support Windows 20H2 images #112924
Load encryption config once (second approach) #112789
Bumps cobra from 1.5.0 to 1.6.0 #113011
account for timing ratio histogram function calls #113027
unparameterize ‘webhook’ from conversion metrics since it’s the only one #113022
Extract ParseError from PodInfo #112219
split and move CEL package #112926
fix metric labels in cloud-provider metrics since it breaks static analysis #112992
add explicit stability levels for shared metrics #112991
add support for parsing gauge func #113014
CloudProvider: service update event should be triggered when appProtocol in port is changed #112785
Switch to assert.ErrorEquals from assert.Equal to check error equality #112944
remove DynamicKubeletConfig feature gate from the code #112643
add ‘metrics/slis’ to kcm health checks #112978
Add liggitt to dep-approvers alias #112997
Bump golang.org/x/text to v0.3.8 #112989
add support for timing histograms and const labels #112995
test: demote service ClientIP affinity timeout tests from conformance #112806
Remove newScheduler for reducing complexity #112563
e2e storage: proxy workarounds #112975
kubeadm: Inherit dry-run flags for each sub-phases #112945
remove in-tree volume limits test now that CSIMigration is GA #112956
Make root approvers list non-recursive, shift from individuals to sig/subproject aliases #112952
client-go: factor the dynamic client similarly to others #112774
kubeadm: fix typo for cmd reset’s runner binding #112946
Update_ineligible_endpoints.yaml : add createAuthorizationV1SelfSubjectRulesReview to the list #112844
Cleanup CopyFile #112933
Update publishing-bot rules to Go 1.19.2 and 1.18.7 #112904
add meta-metrics for metrics framework #112907
wire up feature-gate for component slis #112884
Adding flag for testing to ignore cloud provider taint. #112850
e2e: sub package refactoring #112043
releng: Update images, dependencies and version to Go 1.19.2 #112900
dependencies: update to sigs.k8s.io/yaml v1.3.0 #112875
moved the downloading of the node_perf tensorflow test-data artifact … #112869
Updating kube-proxy base impage to distroless-iptables:v0.1.2 #112892
Add feature gate CelValidatingAdmission #112792
put component slis endpoint behind a feature gate #112881
Test startup: make staging bucket regional #112872
emeritus fejta #112866
Add test for internal metric #112846
drop Gopkg.toml from publishing bot rules #112870
remove more lingering bazel references #112864
Clean up detritus from generated_files #112865
scheduler: cleanup the unused event types about Service #112827
Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingresss IP #112837
Support otel tracing in cri remote image service #112709
Kill off makefile-driven code-generation #112819
cleanup: use sets.Clone() to avoid interim slice #111314
cleanup: use sets.Len() insead of len(sets.List()) #111313
update-vendor.sh tweaks #112853
Revert “Avoid tainting with NoSchedule when DisableCloudProviders feature is on” #112833
Write e2e test for replaceCoreV1NamespacedServiceAccount - +1 Endpoint #112823
apf: don’t omit flowschemas from reset fields test #112575
apiserver: prerelease-lifecycle-gen for flowcontrol #112832
Write List, Patch and Delete LimitRange test +3 Endpoints #112430
add v1beta3 for Priority And Fairness #112306
cleanup: reuse code logic in NodeInfo.AddPod & NodeInfo.RemovePod #112658
Avoid tainting with NoSchedule when DisableCloudProviders feature is on #112821
Add validation for runtime endpoint flag #112542
use copy() instead of a loop #112097
reword image gc failure log #112631
Delete the cloud node IP annotation if it is stale #112184
go1.19: change some atomic.Value to atomic.Bool #112258
kube-apiserver: mark unused master-service-namespace flag as deprecated #112797
use correct timeout for pod startup wait #112790
e2e storage: add Rename to PodIO #112803
Fix comment in HPA’s scale event replicaChange #111463
Update sidecar controllers to latest versions in the e2e #112781
kubelet: append options to pod if there are multi options in /etc/resolv.conf #112414
Use https links for k8s KEPs, issues, PRs, etc #112707
typo fixed with NodeInclusionPolicy #112784
Write e2e test for Read, Replace ReplicationController scale endpoints +2 Endpoints #112586
Add more accurate error message for WhoAmI command #112753
upgrade Blackfriday to v2 and re-implement render #112731
Drop unsupported iks configuration for kubemark #112726
Remove ssh firewall only when we delete network #112783
replace deprecated ioutil functions #112598
scheduler: remove unused plugin name ServiceAffinity #112766
Remove references to already deleted volume plugins #112723
Extend the metrics stability framework to support additional parses #112676
Avoid following redirects in aggregator availability controller #112772
github.com/matttproud/golang_protobuf_extensions v1.0.2 #112738
kubeadm: remove redundant import alias and unused apiclient util funcs #112761
Bump konnectivity-client to v0.0.33 #112689
enable health check SLI metrics for apiserver #112741
: validate annotations key and size #112461
kubelet: Record a metric for latency of pod status update #107896
Kubeadm: Cleanup runPreflight in init/preflight #112742
fix: remove redundant error log print #112728
Improves message for pod status in rejectPod #112644
fix test order in pkg/kubelet/sysctl/util_test.go #112316
Lock ServerSideApply feature to true #112748
use klog.InfoS instead of klog.V(0).Infof（registry part） #112672
kubeadm: fix the field path of ClusterConfiguration networking validation #112751
remove glusterfs dynamic provisioner server #112749
kubeadm: support image repository format validation #112732
add go:build no windows for some control-plane related UT for kubeadm #112620
use generic slis as entrypoint for healthcheck metrics #112740
fix:e2e test flake: Probing container should mark readiness on pods to false… #111741
encryption config: no-op refactor to prepare for single loading #112703
Add staging directory for kms #111980
wire up feature enablement metric in feature_gate.go #112690
: update envelope caching unit tests #112484
Update instructions to install cfssl #112724
Remove redundant type conversion. #112712
clients: clarify a misleading comment #112705
drop scripts and files related to linkcheck #112704
transport/cache: statically assert that tlsCacheKey is comparable #112680
Optimize authenticator oidc test #112674
Fix typo error in shared_informer #112665
Honor the CLOUD_PROVIDER_FLAG flag. #112710
Drop DOT dependency #112692
Revert “Enable paralellism in scheduler unit tests” #112702
Fix handling of NoExecute taint when PodDisruptionConditions is enabled #112518
rbd: try to tolerate the images without ‘kubernetes-dynamic-pvc’ prefix #112635
Add unit test in kubelet volumemanager ASW: Detach a volume that had been mounted by pod should be skipped #111343
Consider only plugin subpath when cleaning up mounts #112607
add a feature enabled metric #112652
fix several typos under scheduler framework #112028
do not assume backend on e2e service jig #112663
Make autoscaling team the autoscaler_contract package approver #112660
e2e storage: add test for retroactive storage class assignment feature #112445
Fix outdated code comments of proxierHealthServer #112324
Fix the test failure on volume snapshot #110826
Improve the error returned from the LabelSelectorAsSelector func #112472
Fix HPA E2E CustomResourceDefinition test #112335
Update to latest k8s.io/utils to pick up changes #112673
Optimize name rules #112641
improve integration test customization of authn/authz #112590
Update PreserveUnknownFields field document link #112615
remove podOverhead feature gate as a feature is now GA since 1.24 #112579
variable name change for better understanding #112554
LocalStorageCapacityIsolationFSQuotaMonitoring: feature gate typo in e2e test #112659
use klog.InfoS instead of klog.V(0).Infof（kubemark part) #112671
Add humblec to approvers and reviewers list for Ceph driver #112640
fix typos in pkg/validation and test/cmd #112603
Update cri-tools to v1.25.0 #112058
Update changelogs for 1.25.2, 1.24.6, 1.23.12, and 1.22.15 #112655
kubelet: increase log level for “Path does not exist” in kubelet_getters #112650
Fix flaky TestStalePodDisruption #112610
Add approver and reviewers for 1.26 #112457
Enable Parallel test execution in pkg/scheduler #112289
Update github.com/go-openapi/jsonreference to drop github.com/PuerkitoBio/purell #112613
Add –disable-compression flag to kubectl #112580
Add timeout to kubemark cleanup commands #112623
logs: remove deprecated klog flags #112120
kubeadm: try to reuse RunData if possible #112596
Clean up feature gates ServiceLoadBalancerClass and ServiceLBNodePortControl #112577
update fsnotify/fsnotify to v1.5.4 #112588
Remove GA featuregates IndexedJob and SuspendJob #112589
scheduler: Update cached Pod any time to make sure the Pod’s status is up-to-date #110279
Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 #112584
e2e framework: pod polling #112503
(kubectl patch): Add descriptive message when patch type is unsupported #112556
Update etcd 3.5.5 and all otel related libraries to newer versions #112545
Remove DeprecatedInsecureServingOptionsWithLoopback #112380
kube-proxy use debug log level for Service cache operations #112451
improve the comments #110941
Simplify P&F concurrency test #112474
test: new beta version should be disabled by group,version #112402
Scheduler: remove GA featuregates: DefaultPodTopologySpread, NonPreemptingPriority, PodAffinityNamespaceSelector and PreferNominatedNode #112567
Add notes for strategic merge patch is not supported for CR #112466
client-go: test transport generation is goroutine safe #112226
Fix list estimator for lists that are executed as gets #112557
various corrections in pkg/volume #112509
Eliminate unnecessary string conversions in options.go #112532
use klog.InfoS instead of klog.V(0).InfoS #111708
Optimize: correction code specification #112238
Simplify the integration test for node lifecycle manager #111720
e2e: better ginkgo progress reports #112352
Remove ioutil in kubelet/kubeadm and its tests #111221
e2e: klog output #111961
Add no-op package file to avoid build constraints exclude all Go file… #112540
Limit redirect proxy handling to redirected responses #112526
kube-scheduler: add taints filtering logic consistent with TaintToleration plugin for PodTopologySpread plugin #112357
Do not return err if CSIdriver is not found #112520
fix endpoint slice controller logging format error #112516
various typo corrections in test/e2e package #112510
Fix calculating error when adding nominated pods in podTopologySpread #112507
client-go: remove reference to TPR in examples #112514
add e2e test for hostNetwork pods with dnsPolicy: ClusterFirstWithHostNet #112511
Cleanup WhoAmI table sorting code #112501
etcd: Updated to v3.5.5 #112489
unittests: Fixes cmd unit tests for Windows #111076
Improve unit test coverage in pkg/util/taints/ #108332
e2e framework: better error when service account creation times out #112504
fix linter errors #112227
kubeadm: allow RSA and ECDSA format keys in preflight check #112508
Don’t run TestCleanup that requires etcd on non linux+amd64 platforms #112416
Add compatibility fixtures for v1beta2 flowcontrol #112487
etcd: Build image 3.5.5-0 #112485
Fix Infelicities in TestRESTClientLimiter #112475
Remove unused functions in pkg/util/taints/ #112436
Remove ioutil from component-base #111567
Check for context cancellation on each buffered chunk #112476
Using simpler wrapper function capabilities.Setup instead of calling Initialize directly #112448
HPA E2E tests: Multiple Metrics #112444
aws: skip health rules if they are a subnet of the client rule #112267
client-go/transport: drop Dial and GetCert fields in favor of Holders #112450
added ratcheting validation for x-kubernetes-list-type #111866
kubectl: fix memory leaks in port forwarding client #112091
Fix WhoAmI flaky test #112471
Corrects target in the KUBE-IPVS-FILTER chain #112463
cleanup useless check about CIDR #112437
Reduce kubeadm tls bootstrap wait #112350
Switch to release tag for antlr : v1.4.10 #112458
Update some scheduler misc #112222
Update kube-dns and nodelocaldns to 1.22.11 #112446
Reduce allocations in HasSchemas #112433
Remove ‘DisabledForLargeClusters’ tag for LB tests #112392
Add auth API to get self subject attributes #111333
Add zone field to vsphere test cloudconfig #112427
FIX: HPAs scale down with target >= 100 #112178
Fix test order staging/src/k8s.io/legacy-cloud-providers/azure/auth/azure_auth_test.go #111420
Removal of GlusterFS code from the repo #112015
Update endpointslice controller maximum sync backoff delay to match expected sequence of delays #112353
devicemanager: do not leak empty TopologyInfo to TopologyManager #112387
Fix test order pkg/volume/azuredd/azure_common_test.go #111381
e2e: improve description of framework callbacks #112421
Update_ineligible_endpoints.yaml : add createCoreV1NamespacedBinding to the list #112406
Call SetupDevice for Block Volume only if Volume is not globally Mounted #112403
Ensure metric ‘running_managed_controllers’ is registered #112205
client-go: support waiting for SharedInformerFactory shutdown #112200
Prune unused root replace directives #112422
rate limite etcd healthcheck request #112046
feature(scheduler): add “goroutines” metric and deprecate the “scheduler_goroutines” metric #112003
update auto can-i error message #110267
Fix flaky and failing HPA E2E Behavior tests #112351
Add a “DisableCompression” option to kubeconfig #112309
Tiny comment cleanup in pkg/apis/apps/types.go #112391
Add e2e HPA Tests: CPU and Memory Average with different aggregation methods: Average Value and Utilization #112252
e2e storage: update helpers #112390
volumebinding: handle special delete event in AssumeCache #112354
e2e storage: close all pending streams when proxy listener gets closed #112251
Remove CSRDuration feature gate. #112386
clarify CPUCFSQuotaPeriod values, set the minimum to 1ms #112123
e2e: avoid random control plane output through GinkoWriter #112389
Add marseel/mborsz to sig-scalability-approvers and move mm4tt to emeritus #111959
Fix Flake: On TearDown script, delete all firewall-rules with a single gcloud run #112203
e2e: reduce built time for framework #112375
e2e framework: replace custom cleanup support with Ginkgo v2 mechanisms #111998
build: update to klog v2.80.1 #112349
Fix the TestRoundTripTypes by adding default to the fuzzer #112355
kubeadm: improve tips of incorrect input of kubedm subcommand #111277
Remove in-tree credential plugins (again) #112341
add method symmetric difference in sets.String #111768
Add an option for aggregator #112193
exec auth: support TLS config caching #112017
Promote CoreV1NamespaceReplace Test +1 Endpoint #112308
E2E import aliases #112294
Update branch rules in publishing rules to Go 1.18.6 #112329
kms: fix go routine leak in gRPC connection #111986
use IPv6 Address Prefix Reserved for Documentation for api docs #112301
Update images, dependencies and version to Go 1.19.1 #112287
fix: modify declaration slice and map code style #112235
Reduce default gzip compression level from 4 to 1 in apiserver #112299
add function to upgrade managedfields CSA to SSA #111967
support removal of event handlers from SharedIndexInformers #111122
update lock getter of leaderelection #112022
Make TestApplyResetFields exhibit surprising object #107515
Optimize: simplified regexp #112241
Kube-scheduler: Deprecate Component config v1beta3 #112257
kubeadm: using the existing exported method to add config flag #112272
test: use bytes.Buffer.String #112093
Call queueSet::boundNextDispatchLocked enough #112198
kubelet/stats: deduplicate makePodStorageStats #108855
Add DisableAnonymous to DelegatingAuthenticationOptions #112181
kubelet: drop bitArray implementation #111935
Revert “Remove unused flags from kubectl run” #112243
kube-proxy: code optimization for readability #112208
Aggregated Discovery: add feature gate #112112
Consolidate PreFilter and Filter reason messages for scheduler #110894
dependencies: update to klog v2.80.0 #112199
fix pod created failed when resource request is 0 #111544
Marshal MicroTime to json and proto at the same precision #111936
Changed code to improve output for files under test/e2e/storage #111311
Avoid propagating “search .” into containers /etc/resolv.conf #112157
kubeadm: Add the option to cleanup the tmp directory #112172
pkg/util/ipset: add sig-network to reviewers/approvers #112182
Remove race between kubelet startup and mounter rootfs #112195
Changelog-1.25: add 1.25.0 known issues section #112106
fix: Node not found when testcases is executed #112145
code optimization: deal with error first to prevent unnecessary computing #110695
Tolerate sub-microsecond eventTime changes on update #112183
Move constant schedulerError in scheduler to v1 package #112146
Prevent host access on VIP addresses in proxy-mode=ipvs #108460
Fix typo “sturct” to “struct” #112089
cloud-provider: remove deprecated insecure serving from Config #112166
vsphere in-tree driver test fixes #111951
Add e2e HPA tests: Scale to zero, scale a CRD targetRef #111865
kubeadm: too early return for reset with dry-run or force mode #112175
Update to use GA PodSecurity webhook image #112159
Validate segments with client-go/dynamic #112134
Initialize Name earlier in the Create process: GenerateName #112063
Improve kubectl display of invalid errors #112150
cleanup(scheduler): remove outdated comments on metrics package #112004
e2e: suppress too verbose output #112129
Add OWNERS for autoscaling-owned directory #112035
controller-manager: remove deprecated insecure serving from Config #112142
hpa: rename rebalanceIgnored to scaleUpWithUnready for understanding #110492
e2e: use custom timeouts in GetSnapshotContentFromSnapshot() #112074
Add request body size metric for the write path. #111917
HandleError of updateStatusIfNeeded in func reconcileAutoscaler #111170
Fix replica calculation at start of HPA scaling policy period #109058
Expand aggregated API server integration test to include CRUD #112069
fix error type when handling failures in scheduler #111999
Add soltysh as cmd/kcm approver #112118
refactor: move attachdetach controller param validation ahead #111904
Enable new set of Go metrics in Kubernetes #111910
Cleanup: Remove unused lastContainerStartedTime time.Cache lru #111932
Fix CEL size estimation #111964
kubeadm: unify the way to cleanup the files for kubeadm reset #110972
Kubeadm cleanup for taint / toleration with master label #112008
Dryrun cleanup #112064
Fix IPVS proxier to update stale real server after restart #111635
Revert “change CPUCFSQuotaPeriod default value to 100us to match Linu… #112077
Revert “promote LocalStorageCapacityIsolationFSQuotaMonitoring to beta” #112076
kubeadm: move show-join-command as a separate phase #111512
make applyconfiguration-gen work in non-kube repositiories #111934
make TestListPager_EachListItem rework #111241
add aojea as client-go reviewer #112068
Remove not correct annotations with node.Spec.Unschedulable #111864
Self-nominate alculquicondor as job approver #112070
fix a flag replace of container-runtime=remote #112062
pkg/util/coverage: update fakeTestDeps impl #112047
Bump prometheus/client_golang to v1.13.0 #112052
Fix the wrong status returned from RunPreFilterPlugins #112029
Remove dead code from the controlplane instance #111945
Write CoreV1NamespaceReplace Test +1 Endpoint #111848
update changelog kube-proxy distroless based on feedback #112049
etcd3: include GroupResource in logs/metrics #112042
fix nestedPendingOperations mount and umount parallel bug – minimal change #110951
adding csantanapr as approver for changelog #112045
Add distroless change into changelog #111983
Log scheduling queue events #111878
Watch cache: use resource.group for object type in log messages and metrics #111807
upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check #112026
style: remove redundant judgment #112024
Clarify cpu.cfs_period_us default value #111554
kubeadm: remove container-runtime=remote #112000
integration: TestCacheControl and TestHSTS close the ResponseBody #111885
add test to isKubeadmConfigPresent method #111458
Enforce strict handling of deprecated APIs in alpha #111973
chore(kms): remove unused plugin name and migrate from deprecated io/ioutil pkg #111981
cmd/kube-proxy: Replace deprecated func usage from the k8s.io/utils/pointer pkg #111833
kubeadm: remove MutateImageRepository for registry change #112006
Optimizing: make map cap #111968
Fix rollout history bug #111093
kubeadm: revert dedup prefix unix:// in node annotation #112005
remove kube-proxy mode fallback #111806
Add e2e HPA Behavior Tests: Scale up and down controls #111874
Add creating a destroying services test #111120
Add validation test for features.GracefulNodeShutdownBasedOnPodPriority #109966
Update API compatibility data for 1.25 #111974
kubeadm: add test cases for version_test.go #111949
Configure and install out-of-tree gcp credential provider #111495
resolve goroutine leak in nodelifecycle tests #109185
Fix typo of e2e utils under network framework #111954
regression test for exponential recursion bug on CRDs #111912
Bump prometheus/client_golang to v1.12.2 #111909
e2e: use user provided timeout in WaitForPodsWithLabelRunningReady #111907
Add a possibility of setting GODEBUG env var for kube-apiserver binary #111906
Fix PVC nil pointer dereference during migration-enabled volume expand #111894
code cleanup: omit comparison to bool constant #111883
fix(apf): not reset apf when panic #111850
pkg/scheduler: Replace deprecated func usage from the k8s.io/utils/pointer pkg #111845
pkg/proxy: Replace deprecated func usage from the k8s.io/utils/pointer pkg #111842
cmd/kubeadm: Replace deprecated func usage from the k8s.io/utils/pointer pkg #111836
Change CPUCFSQuotaPeriod default value from 100ms to 100us to match Linux default #111520
fix(typo): remove extra “ from autoscaling doc string #111830
Add pod info. KObj(pod) to scheduler cache log #111826
replace os.Exit with FlushAndExit #111816
Fix potential context leaking in scheduler #111810
more error types when retry patching a pod’s status #111809
Apimachinery meta errors: Support errors.Is and error wrapping #111808
kube-proxy: optimize the format of the flag usage string #111801
Update Netpol e2e tests to use framework CreateNamespace #111789
kubeadm: try to load CA cert from external CertificateAuthority file when CertificateAuthorityData is empty for existing kubeconfig #111783
fix(scheduler): split scheduleOne into two functions for schedulingCycle and bindingCycle #111775
add metrics for health checks (for later use in apiserver) #111771
Make the validation logic about LeaderElectionConfiguration consistent between component-base and client-go #111758
Revert “client-go: remove no longer used finalURLTemplate” #111752
update golangci-lint for go 1.19 and delete hardcode go version in golangci-lint config #111736
Remove in-tree openstack cloud provider #67782
Expose a pending pods summary in scheudler’s dummper output #111726
Run node-local-dns in non-privileged mode #111694
kubelet: remove unused custommetrics package #111692
Pv controller tests structs with names #111690
(kubectl cluster-info): Move towards RESTClientGetter instead cmdutil.Factory #111689
(kubectl certificate): Move towards restClientGetter instead cmdutil.Factory #111687
use constant NamespaceDefault instead of variable namespace #111684
Change cluster/gce/util to wait for firewall rule creation and fail on error #111670
[CCM - service controller] Clean up node sync and fix re-sync of failed services. #111663
Add test for cmd/kubeadm/app/cmd/util/cmdutil.go #111656
Fixes typo in ReplicaSetStatus description #111611
Add e2e tests for node log viewer #111598
Fix label output bug where dry run message was not printed #111571
Remove ioutil from kube-aggregator #111570
Remove ioutil from component-helpers #111568
Remove ioutil from code-generator #111566
Remove ioutil from client-go #111564
clean-up apiserver metrics and use subsystem #111551
add unit test for /staging/src/k8s.io/kubectl/pkg/util/storage #111533
Cleanup: remove prometheus dependencies for volume #111527
chore(e2e): add e2e test for non graceful node shutdown #111380
wrong description #111379
Fix problem in updating VolumeAttached in node status #111205
APF concurrency isolation integration test #111148
Add Framework interface detectors in scheduler #110717
Use OpenAPI to determine patch type in kubectl apply patching #110454
fix defer in loop and optimize test cases with explicit field name #110390
Fix error message #109945
fix a broken link #109884
fix bugs of container cpu shares when cpu request set to zero #108832
Azure: Skip “instance not found” error for LB backend address pools #111428
Restore in-tree credential plugins for 1.25 #111918
Revert “Add an option to conditionally disable compression based on client ip.” #111896
Fix failing test/e2e/storage/csi_mock_volume.go test #111859
Fix capture loop vars in parallel or ginkgo tests #111846
Docs: node-port-range should not overlap ephemeral #111697
fix a memory leakage problem when calling DryRunPreemption #111773
staging/publishing: add release-1.25 branch #111786
Add integration test for Retroactive default StorageClass assignement #111746
Revert “enforce strict alpha handling for API serving” #111784
Remove feature to enable e2e tests #111770
document that services healthcheckNodePort is inmutable once set #111657
Prevent panic in cloud-provider #111748
Add e2e HPA Behavior tests: scale up/down limited by number of Pods / min, scale up/down limited by percentage / min #111346
Fix flaky CSIInlineVolumes e2e test (issue 111740) #111751
Promote Ephemeral Containers e2e test to Conformance #111440
node_e2e: add a dbus restart test #111749
Enhance NodeIPAM to support multiple ClusterCIDRs #109090
Remove potential goroutine leak in testing framework #110182
KEP-596 : Move CSIInlineVolume feature to GA #111258 Fix deleting UIDs tracking expectations #111721
volume: FeatureGate access to GetHostIDsForPod() #111693
Fix e2e network dns_configmap test #111702
Support handling of pod failures with respect to the configured rules #111113
[CCM - service controller] Remove schedulability predicate for LB set #111691
Update go.mod to go1.19 #111696
Speed up SELinux volume relabeling using mounts MVP #108692
Fix things commented out in 1.19rc2 #111678
Clear ephemeral container resources field when creating one in volume test #111521
Bump images, dependencies and versions to go 1.19 #111679
Revert “e2e: should manage the lifecycle of an APIService” #111675
add test for GetAPIServerVirtualIP #111596
Update publishing-bot rules for go1.17.13 and go1.18.5 #111685
Stop panic in govet levee under golang 1.19 #111677
e2e: trim junit report for Spyglass #111669
don’t quota events.k8s.io events by default #110939
cleanup: Remove storageos volume plugins from k8s codebase #111620
Implement KMS v2alpha1 #111126
Avoid re-syncing LBs for ETP=local services #109706
make ObjectReference field ownership granular #110495
Promote Local storage capacity isolation feature to GA #111513
Add support for user namespaces phase 1 (KEP 127) #111090
vendor: Bump cAdvisor to v0.45.0 #111647
Revert “e2e: Trim junit reporter to adapt with testgrid” #111668
Avoid hard coding Operating System and Architecture in hack/lib/etcd.sh #111613
e2e: Trim junit reporter to adapt with testgrid #111627
CRI changes to support in-place pod resize #111645
modify the signing/approving controller to tolerate either set of usages for kubelet client and serving certificates #111061
Fix JobTrackingWithFinalizers when a pod succeeds after the job fails #111646
Promote CronJobTimeZone to beta #111435
Allow retroactive storage class assigment to PVCs #111467
Move e2e test from alpha with feature promoted to beta #111448
Update CRI API to support Evented PLEG #111642
Enable ‘running_managed_controllers’ for KCM/CCM controllers: routes, services and cloud-node #111462
Upgrade CSIMigrationGCE feature gate to GA #111301
KEP-3327 : Add CPUManager policy option to align CPUs by Socket instead of by NUMA node #111278 ginkgo: disable color escape sequences by default when not connected to a terminal #111633
update smd to 4.2.3 #111557
Deprecate kubescheduler ComponentConfig v1beta2 #111547
Promote NamespaceStatus endpoints test +3 Endpoints #111522
Add worker to clean up stale DisruptionTarget condition #111475
kubelet tracing instrumentation #105126
Add unit tests for registry/admissionregistration/validatingwebhookconfiguration #104386
Fix missing format string PVC namespace #111523
add deprecated warning for node beta labels in pv/sc/rc/csi storage capacity #108554
cleanup: Remove flocker volume plugins from k8s codebase #111618
Add flag to disable compression for local traffic #111507
Fix iSCSI over ipv6 #110688
apiserver: Remove the deprecated --service-account-api-audiences flag #108624
cleanup: Remove quobyte volume plugins from k8s codebase #111619
Append new pod conditions when deleting pods to indicate the reason for pod deletion #110959
add test for GetNodeNameAndHostname #111623
Minor fixes to e2epod wait logic #111555
Remove some unused functions #111628
Update design-proposals URL #111426
feat:(kms) encrypt data with DEK using AES-GCM instead of AES-CBC #111119
kubeadm: make pre-release warning log less confusing #111615
Set zone label selector for preprovisioned AWS in-tree tests #108696
Add jpbetz as approver to pkg/registry/admissionregistration #111610
Share a single etcd3 client logger across all clients #111477
Hostprocess container test updates #111609
CCM [Service controller]: align function pointer variable with struct name #111538
Promote ControllerRevisionLifecycleTest +7 Endpoints #111449
Introduce PodHasNetwork condition for pods #111358
Promote Event Lifecycle Test +1 Endpoint #111265
unittests: Fixes unit tests for Windows (part 2) #110399
Fixes kubelet log compression on Windows #111549
Promote CSIMigrationAWS to GA #111479
add test for String #111502
feat: ignore all event resource for gc #110888
Enable ‘running_managed_controllers’ for KCM nodeipam controller #111466
mount-utils: add Linux specific non-systemd Mounter #111218
Mark enable-taint-manager CLI flag as deprecated #111411
fix that beginning of help text is cut off for apply and replace –filename flag #111486
Implement KEP-3178 “iptables cleanup” in kubelet #110291
Partly remove support for seccomp annotations #109819
add test for ValidatePort #111492
Correct event validation messages using the core/v1 field name reportingComponent #111506
fix: refer to url of Node Allocatable #111152
Disable AcceleratorUsage Metrics: ga #110940
Update k8s.io/utils to ee6ede2d64ed #111587
deprecate GlusterFS plugin from available in-tree drivers. #111485
Adding value attribute to get the value of zone property as per the u… #111342
feat: set ProbeTerminationGracePeriod default to true #108541
correct OpenAPI extension in error message #111446
Respect PodTopologySpread after rolling upgrades #111441
scheduler: include supported ScoringStrategyType list in error message for NodeResourcesFit plugin #111206
Add unit tests for grace period in killContainer func #110733
validate nodeLabels in kubelet #109263
cleanup: omit redundant arguments in make call #111450
kubelet: Fixes plugin Watcher for Windows #111439
Update the feature state in the help text of the --seccomp-default flag #111431
Fix test order pkg/kubelet/winstats/winstats_test.go #111418
Promote EphemeralContainers feature to GA #111402
unittests: Adds Windows unittests #111020
Use checksums instead of fsyncs to avoid slow discovery caching on MacOS #110851
Fix s.RuntimeCgroups error condition #110648
fix test for CheckpointStateRestore #106244
chore(kubelet): simpler createAndInitKubelet func #103069
fix: add pod info to the error log #111239
Deflake TestStaticPodExclusion #110071
the err of “GetKubeletContainer” function should not affect the value of “RuntimeCgroups” #109347
tests: Enables a few Conformance tests for Windows (part 2) #108592
add container probe duration metrics #104484
test-e2e-node: set ginkgo test timeout to 24h #111541
Enable gce pd driver via a flag rather than an env var #111481
cleanup: fix some error log capitalization #111454
Graduate component config to stable in kube-scheduler #110534
Promote feature CustomResourceValidationExpressions to beta #111524
Update the comment in pkg/scheduler/framework/plugins/noderesources #111287
Fix kubeadm upgrade plan issue with FQDN nodes names #111531
Skip CEL expression validation if OpenAPIv3 schema is invalid #111519
Remove unnecessary use of fmt.Sprintf #111496
promote LocalStorageCapacityIsolationFSQuotaMonitoring to beta #107329
Windows: ensure runAsNonRoot does case-insensitive comparison on username #111009
add warning log if volume calculation took too long than 1 second #107490
Skip schemas that don’t have CEL rules in NewValidator #111483
Add dims to conformance-behavior-approvers #107881
Update OWNERS #111493
Improve tests and fix bugs in container validation #111401
Update to latest kubedns and nodelocaldns images. #111490
Don’t use KUBE-MARK-DROP for LoadBalancerSourceRanges #110289
Update publishing-bot rules for go1.17.12 and go1.18.4 #111500
fix ambiguous comments of priorityClass update validation #111398
Cacher: add support for draining watchers #111460
Add new flags into alpha events #110007
Add option to retry internal api error in reflector. #111387
Switch initial/final seats type to uint64 #111503
kubeadm: move getClientSet to cmd utils #111455
Update agnhost image to 2.40 #111491
update base image to Fedora 36 for volume/(gluster|iscsi|rbd) #111489
Fix test order staging/src/k8s.io/component-base/logs/json/json_test.go #111419
Change kubectl diff to exclude managedFields by default #111319
chore: move chewong to emeritus_approvers #111414
Prevent dirty service object leaking between reconciles #109601
allow namespace admins to use leases to encourage migration off of configmaps #111472
Add examples of matchExpressions validation as unit tests #111451
declare unsupported vSphere versions for in-tree plugin #111255
Add shell completion for new –subresource flag #109070
test/e2e/common/node: fix several typo #111249
clean unreachable code #111228
add unit test for pkg/kubelet/types/ func GetPodStartTime() #111139
Fix grammar in K8s OpenAPI spec doc #110586
Improved mount detection using openat2 for kernel 5.10+ #109217
Update k8s.io/utils to 9bab9ef40391 #111442
PodSecurity: OS based updates to restricted standard #105919
Modify timeout for etcd healthcheck #111399
Prevent from future leaks of goroutines in integration tests #111444
Add support for summary metrics for stablity checks #111415
Fix pod stuck in termination state when mount fails or gets skipped after kubelet restart #110670
iptables proxy reorg in preparation for minimizing iptables-restore #110266
Update to 1.19rc2 (from 1.18.3) #111254
grpc: move to use grpc.WithTransportCredentials() #109778
Bump default burst limit for discovery client to 300 #109141
Ignore non-semantic changes to objects #106388
kubeadm: prefer to use pkg/errors package and cleanup fmt.Errorf #111394
Make scheduling e2e tests run PSa-restricted pods #111306
vendor: downgrade github.com/matttproud/golang_protobuf_extensions to v1.0.1 #108108
Clean shutdown of cloud controllers in integration tests #111437
Clean shutdown of cloud controllers in integration tests #111317
omit comparison to bool constant #111046
Remove RunAnAPIServer from integration tests #111395
Update Azure max data disk count map #111406
test: cluster: Bump to COS 97 image #111412
Remove estimateMinSizeJSON calls for CEL #111156
Add Ephemeral Containers to node conformance tests #111404
Supply denominators #110164
No need to assert an error when the error is not nil #111377
Eliminate MaintainObservations function in P&F #111348
Revert “Cleanup: remove validation of removedPlugins” #111378
Fix typos in the variable name in scheduling_queue_test.go #111365
Fix Priority plugin comment #103663
Promote DS max surge to GA #111194
controller/nodelifecycle: Refactor to not make API calls under lock #110359
kubeadm: pass etcd progress notification flag to etcd #111383
Fix CHANGELOG-1.22.md: Cluster Storage Interface -> Container Storage… #110032
disallow –force and –prune in client-side apply #111374
Replace fallocate with dd in e2e tests #111369
Optimize away repeated structural schema and CEL DeclType construction in CRD validation #110135
add test case for ToValidOperationID method: TestToValidOperationID #109690
Fix firewallneedsupdate and firewallRuleEqual #111186
use exist const to replace TCP str #111269
Print ServiceAccount attached to the Pod #111192
Clean shutdown of serviceaccount integration tests #111325
cleanup: use append other than for loop #111307
Conformance test “manage the lifecycle of an APIService” is Disruptive and should run in Serial #111347
fix:handle error and remove Redundant type conversion #111172
Cleanup no longer used Create/Delete TestingNamespace #111324
Fix some syntax errors under the staging/src/k8s.io/client-go/rest/ folder #110666
Switching everything to use pause:3.8 #111330
Typo in kubectl delete –help 111302 #111315
use new distroless kube-proxy image #111060
replace deprecated setoutput #109300
Promote List, Patch & DeleteCollection ResourceQuota test - +3 endpoint coverage #111264
Promote APIService lifecycle test + 4 Endpoints #111263
Add unit tests for explain command #110885
sched: evaluate error message once #111295
Add e2e HPA Behavior tests: scale down stabilisation, scale up disabled, scale down disabled #111253
Fix incorrect message when attaching to ephemeral containers #111185
Enable ‘running_managed_controllers’ for KCM/CCM for cloud-node-lifecycle controller #111033
Add service port mutation test #110967
Fix and expand explanation and debug info from flaking test #111162
cluster: use systemd cgroup driver for cgroupv2 #111231
Adjust watch channel sizes in watchcache #109708
Pick up major changes from cel-go latest release #111071
cleanup: use sets.Clone() to avoid interim slice #111268
Introduce config for API Priority and Fairness #111181
Print pod.Spec.RuntimeClassName in kubectl describe #110914
Add integration test for podgc #111091
Revert “Revert the workaround needed to cleanup for Ginkgo V1” #111284
test: Only Check NPD logs in standalone mode #111238
kube-proxy: windows: Removed hnsV1 #110957
cleanup: use sets.Len() instead of len(sets.UnsortedList()) in the isEmpty function #111267
Re-Generate k8s.io/apimachinery/pkg/util/sets #111173
Write NamespaceStatus endpoints test +3 Endpoints #109763
Promote pod OS to GA #111229
csi: validate the secretnames in CSI spec against NameIsDNSSubdomain #108331
Refactor taint_manager to do not use getPod and getNode stubs #111084
cacher: indroduce expiredBookmarkWatchers #111244
Fix leaking goroutines in multiple integration tests #111242
proxy: queue syncs on node events rather than syncing immediately #111219
Graduate server side validation to beta #110178
set ginkgo intercept mode to none to avoid hangs #111240
fix a possible panic because of taking the address of nil #111235
kubeadm: fix comment typo #111210
enable stylecheck check in golangci #111101
Add audit-id to storage traces #110680
Fix leaking goroutines in multiple integration tests #110633
scheduler: framework: initialize indexers in scheduler core with non-nil map #110663
client-go: Modify FakeEvents to Work Event Sink started with "" namespace #110649
Retry when it fails to update pods status on scheduling loop #109832
refactor controlplane to use just one client-go #111191
cleanup: remove all duplicate import #109639
Revert “Move kubectl wait to informers with a cache to avoid hanging due to objects disappearing from the cluster” #111224
Remove redundant code in pkg/scheduler/framework/plugins/volumebinding #111203
Format the code in pkg/scheduler/framework/plugins/noderesources #111200
Update error log to Error Wrapping #111199
scheduler: remove useless null pointer check about nodeInfo for in-tree plugins #111153
Delete dead audit code #111125
scheduler: improve the comment and add more unit test cases for DefaultNormalizeScore #111047
Graduate MinDomains in Pod Topology Spread to beta #110388
kube-proxy: kernelspace mode is announced to be default for windows #110762
Ensure the directory for the file in flag --audit-log-path exists #110813
Add testcases for cmd/kubeadm/app/util/net.go and version.go #111189
Clean shutdown of controlplane integration tests #110569
Improve the accuracy of output msg in pkg/controller/endpoint/endpoints_controller.go #111134
Add rate limiting when calling STS assume role API #110706
Update etcdRequestLatency metrics bucket size #107042
cacher: Use PodList type for use in GetList #111171
Remove redundant variable definitions in apis/autoscaling #111169
Fix failing e2e test: Handle two default IngressClasses more cleanly #111138
scheduler: using math.MinInt64 instead of -math.MaxInt64 #111062
refactor the reflector to pave the way for streaming #111176
Make yamlfmt tool print filenames #111135
Make coverage handle relative-path pkgs #111131
When metrics are counted, discard the wrong container StartTime metrics #110880
Add support for slash as sysctl separator to Pod securityContext field and to PodSecurityPolicy #106834
Fix: some typo in apimachinery/pkg #111081
Add comment on build_binaries_for_platform #111133
Remove unused unset_platform_envs func #111132
Makefile: sort debug output by time #111129
kubeadm: UnversionedKubeletConfigMap is GAed in v1.25 #111146
gitignore __* - leave them for local use #111128
Correct wrong syntax #111080
metrics for CEL compilation and evaluation #111035
filter out terminated containers in cadvisor_stats_provider #110950
Make kubelet set alpha.kubernetes.io/provided-node-ip unconditionally #109794
Fix kubelet panic when accessing metrics/resource endpoint #111141
Add comments around go install #111130
fix: update comment for related updated func #111127
mount-utils: only detect systemd when needed #111083
Promote minReadySeconds to GA #110896
Minimal checkpointing support #104907
Refactor gc_controller to do not use the deletePod stub #111070
make sure auto-mounted subpath mount source is already mounted … #110973
Bump cel-go to v0.12.3 #111008
Skip mount point checks when possible during mount cleanup. #109676
Always log APF WorkEstimate params in kube-apiserver http logs #111109
Pass context to pkg/scheduler/framework/plugins/volumebinding. #110958
fix: update the typo code comment #111097
Add timing ratio histograms #110104
quota: add an update filter #111039
fix:remove Redundant type conversion #110930
fix static-check for staging/src/k8s.io/client-go/ #111002
Stop using the deprecated Measure method #111065
Handle two or more default IngressClasses more cleanly #110974
Update kube aggregator readme #111064
merge MakeDefaultErrorFunc into handleSchedulingFailure #111036
Use errors.As to detect wrapping in StatusCause #108532
enabling CSIMigrationvSphere feature by default #103523
Revert the workaround needed to cleanup for Ginkgo V1 #111063
Fix ControllerRevision e2e test flake #111075
Fix: import the same package multiple times #111087
Remove validation of removedPlugins in KubeSchedulerConfiguration #111032
Handle os.MkdirAll error #110879
Update the Chinese translation of kubectl #110538
Change snapshot-controller image to v4.2.1 #110980
kubeadm: respect user specified image repository when using Kubernetes ci version #111017
Capture the Container Logs for a Flaky Test #111015
Improve the accuracy of error msg in /pkg/scheduler/internal/queue #111016
migrate deprecate flags from ginkgo v1 to v2 #111059
remove excluded staticcheck that were already fixed #109477
fix CustomArgs annotation, todo describe #108792
add unit test coverage for pkg/util/node and Remove duplicate testcases for func TestGetNodeHostIPs #110825
fix pass []any as any in variadic function #111048
Add second set of additional CRD validation E2E tests #110576
Fix description of Ports in PodSpec #110564
Kubernetes 1.25: CSIStorageCapacity: use v1 as storage version #109394
clean up unused function ‘GetServiceHealthCheckPathPort’ #110975
Remove invalid comments in hack/lib/version.sh #110899
e2e: bump Azure Disk in-tree timeouts #111034
Add x-kubernetes-validations cost limit integration test #111005
Do not skip job requeue in conflict error #111026
Promote patchCoreV1NamespacedPodStatus test - +1 endpoint #111011
Correct wrong syntax #110916
Remove obsolete refs to gate EndpointSliceNodeName #111010
Migrate Ginkgo from v1 to v2 #109111
cleanup: Removes duplicate utils code #110860
pkg/kubelet: skip long test on short mode #110774
add unit test coverage for pkg/kubelet/util/util_unix_test.go #110683
Validate dry-run and force flags can not be used same time in replace #110326
Computation of the StorageVersionHash use overridden storage versions in unit test #110904
agnhost: Check symlink target’s permissions for Windows #110877
build: update to klog v2.70.1 #111001
Graduate SeccompDefault feature to beta #110805
Write ControllerRevisionLifecycleTest +7 Endpoints #110122
kubeadm: De-dup the confirmation on the interactive cmds #110998
Remove SIG Scheduling approvers from reviewers #111004
scheduler: do not update sched.nextStartNodeIndex when evaluate nominated node #110947
Move kubectl wait to informers with a cache to avoid hanging due to objects disappearing from the cluster #110923
Update godoc.org to pkg.go.dev in kubeadm #110997
Write APIService lifecycle test + 4 Endpoints #110237
Write List, Patch & DeleteCollection ResourceQuota test - +3 endpoint coverage #109683
Rename IPFamilyPolicyType => IPFamilyPolicy #110990
kubeadm: Don’t ask for input if it’s dry run mode #110978
Update golangci-lint to 1.46.2 and fix errors #110811
enable ServiceIPStaticSubrange beta by default #110703
Don’t use KUBE-MARK-DROP for “no local endpoints” #110290
cleanup:use copy other than for loop #110824
Re-enable JobTrackingWithFinalizers #110948
Fix pod’s deadline to nil when cache ttl is set to zero #110954
Promote endPort in Network Policy to GA #110868
add unit test coverage for pkg/util/slice #110876
Add failure handling of the desiredStateOfWorldPopulator start #110901
Execute the Run function of kubelet, Remove invalid comments and remove run function #110691
Filter out unsatisfied nodes when calling AddPod in PodTopologySpread #110768
scheduler: remove unused Equal function for HTTPExtender #110952
Remove TTL for scheduler cache to resolve the race condition when Cac… #110925
cleanup: delete same utils.go in pkg/apis/storage #110862
Revert “Move kubectl wait to informers with a cache to avoid hanging due to objects disappearing from the cluster” #110922
Remove side effects from e2e aggregator API service test #110039
Cleanup FindPluginBySpec() in VolumePluginMgr #109853
kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join #110791
kubeadm: use non-serializable startup probe for etcd pods #110744
Remove e2e echoserver image and replace it by agnost #110840
Write Event Lifecycle Test +1 Endpoint #110798
Refactor scheduler code #110892
kubeadm: Force to disable debug mode for crictl #110874
Bump kube-openapi to the latest #110831
test/e2e: fix GetCurrentKubeletConfig #110875
kubeadm: improve the error message of getClusterNodeMask #110889
Fix:[Flaky test] create a sequence of pods latency/resource should be within limit when create 10 pods with 50 background pods #108958
Fix link to eviction policy in e2enode eviction test #110693
Introduce KUBECACHEDIR environment variable to override default discovery cache dir #109479
only clean up iptables chains periodically in large clusters #110334
Stop trying to “preserve” iptables counters that are always 0 #110328
kubeadm: support retry mechanism for removing container in reset phase #110837
Do test fixture setup outside cel.UnstructuredToVal benchmark loop. #110548
Enable resource builder flattening in rollout status #110398
Fix missing of RLock in SeenAllSources #106551
cleanup:use append other than for loop #110827
kubeadm: update join –discovery-file docs #110819
(kubectl apply): Split patching types into functions and refactorings #110619
refactor: pleg/getContainersFromPods #109227
Check for errors ahead of time #110745
Fix requeueing of cronjobs with every-style schedule #109250
Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers #110140
fix evictionManager debugLog wrong #110711
Retry Unix domain sockets on Windows nodes for the plugin registration mechanism #110075
Clean up unused code in kubelet #109407
Method call ‘err.Error()’ might lead to a nil pointer dereference for pkg/kubelet/cm/cpumanager/cpu_assignment_test.go #108682
SUPPORT.md: HTTP => HTTPS #110812
kubelet: convert node shutdown manager to contextual logging #110504
kube-proxy iptables test number of generated iptables rules #110503
Add test case for getPodVolumeSubpathsDir #109691
Write patchCoreV1NamespacedPodStatus test - +1 endpoint #110705
Only provide an oldSelf binding when referenced by a CEL rule. #110549
Change reflect.Ptr to reflect.Pointer #110788
(kubectl events): Add integration tests #110766
Don’t force detach volume from healthy nodes #110721
Remove unused flags from kubectl run #110668
Update cherry_pick_pull.sh #110632
Use clock package from k8s.io/utils/clock #110776
Wait for cache sync in TestSyncPastDeadlineJobFinished #110771
Add KMS v2alpha1 API #110201
kubelet: add CRI definitions for user namespaces #110535
fix comments in pkg/proxy/types.go #110756
promote the Portworx feature gate to Beta #110411
volume/fc: fix FibreChannel volume plugin matching wrong disks #110719
Improve run and debug attach message upon failure #110764
fix typo in genericapiserver.go #108833
kubeadm: handle dup unix:// prefix in node annotation #110656
kubeadm: Honor cert-dir for cert operations #110709
Firewall Pinhole Fix for ILB and NetLB #109510
Bump konnectivity-client to 0.0.32 #110731
remove release-1.20 from prom bot due to eol #110748
kubeadm: certs renew doesn’t support positional args #110712
don’t use KUBE-MARK-DROP in ipvs proxy #110628
vendor: bump runc to 1.1.3 #110496
Incomplete coverage of test scenarios #110736
clean up spelling_failures #110685
fix: –chunk-size with selector returns missing result #110652
build: update to klog v2.70.0 #110724
Add additional CRD validation E2E tests #110330
fix: list pod err after an pod evicted #110425
EndpointSlice with Pods without an existing Node #110639
kubeadm: add the preferred pod anti-affinity for CoreDNS Deployment #110593
correct input params of ByIndex #109632
Increase timeout for TestSyncPastDeadlineJobFinished #110700
fix several typo #110684
CSIMigration feature gate to GA #110410
check for the test duraiton to make NodeProblemDetector test reliable #109396
fix “k8s.io/client-go/rest” is being imported more than once,optimize code #110707
Add TestAutodeleteOwnerRefs statefulset integration test #110612
fix the running of the kube-controller-manager #110531
scheduling: fix duplicate checks for number of enabled queue sort plugin #110167
Initialize UID earlier in the Create process #110646
REQUEST: nominate kerthcet as sig scheduler reviewer #110638
Remove redundant variable definitions in scheduler apis defaults.go #110567
disruptioncontroller: check for scale subresource correctly #109957
Revert “Add e2e test for HPA behavior: scale up delay” #110664
typo in comments pkg/kubelet/volumemanager/volume_manager.go #110655
kubeadm: fail faster when the version is not provided #110635
test/e2e/network: fix a bug in the hostport e2e test #110640
kubelet: Update deprecation messages from 1.24 to 1.25 #108823
Nit: Fix a typo #110108
component-base: make LoggingConfiguration a single-version API #105797
remove deprecated label and update snapshot controller version #110204
Revert “filter out terminated containers in cadvisor_stats_provider” #110616
Should spread Pods to schedulable cluster zones #110451
Update ineligible_endpoints.yaml #110583
Fixing grammar in e2e Windows test logging #110557
Remove the description of the docker shim from the kubelet #110506
staging-readme: Document the need to add doc.go in a staging repo #110624
add some uts of group_version.go #110448
PodSecurity: promote config and feature gate to GA #110459
Updating base container image for pause image on Windows #110379
client-go: fix panic in ConfirmUsable validation #110436
Fix leaking goroutines in multiple integration tests #110604
Update Debian base images to latest #110558
kubeadm: ensure kubelet config patch results are in YAML #110598
Fix typos #110588
Fix unnecessary recreation of placeholder EndpointSlice #110365
Using t.Run() in integration test TestApplyAlsoCreates #110574
add missing error handling steps #110469
hack/tools: use logcheck v0.1.0 from sigs.k8s.io/logtools/logcheck #110571
RBAC: Modify the Description for the apiGroup. #110561
Bump grpc to v1.47.0 #110378
Fix leaking goroutines in multiple integration tests #110529
Bundle metrics registration into test server creation #110516
Using inherited context in utils #110202
GIT-110239 : fix activeDeadlineSeconds enforcement bug #110294 Incomplete coverage of test scenarios and optimize bad code #110560
Fix example webhook cert generation #110551
Add e2e test for HPA behavior: scale up delay #110385
Update etcd packages to v3.5.4 #110519
Pass context to client calls in scheduler/volumebinding tests #110232
Optimize code for SetDefaults_NodeResourcesBalancedAllocationArgs #110542
Disable trimpath in debug mode #110525
Use namespace created by framework #110509
Prune defaults for CRDs for OpenAPI V2 #110179
Drop spurious replace #110546
kubeadm: upgrade coredns to v1.9.3 #110489
Switch to released version of v3.8.0 - github.com/emicklei/go-restful/v3 #110518
minor ipvs fixes #110540
Fix issue that Audit Server could not correctly encode metav1.DeleteOption #110110
Remove the PairVec types #110515
Define NoOptDefVal for validate flag #109850
clean: remove useless parentheses #110493
e2e: ensure single image for populator containers #110465
Update gopkg.in/yaml.v3 to v3.0.1 #110520
fix image pulling failure when IMDS is unavailable in kubelet startup #110523
Update staging/README.md #108825
Remove BUILD from .spelling_failures #110527
Clean shutdown of some auth integration tests #110505
Switch to v1.0.2 of github.com/chai2010/gettext-go #110513
services strategy no longer depends on IPFamilies #110502
Switch to released tag v1.0.0 for github.com/daviddengcn/go-colortext #110512
Switch to released tag v0.1.0 of github.com/pquerna/cachecontrol #110511
Switch to v1.0.0 of github.com/MakeNowJust/heredoc (avoid SHA) #110510
Switch to release tag v0.5.0 of systemstat #110508
improve parsing in iptables unit tests #109844
upgrade Azure/go-autorest/autorest to v0.11.27 #110371
docs: add ephemeral-storage to SystemReserved/KubeReserved comment #110323
Switch to v3 of github.com/emicklei/go-restful by updating kube-openapi #110351
Fix e2e test failure #110272
log tests #109194
lock CSIMigrationAzureDisk feature gate to default #110491
code optimization: deal with error first to prevent unnecessary computing #110372
Avoid duplicate Failed conditions in job status #110292
graduate ServiceIPStaticSubrange to beta #110419
Ingress API: rework the ingressClassName API documentation #109293
: Bump coredns to v1.9.3 #110488
kubeadm: use staticpod known tags for upgrade/init phases #110474
Ignore EndpointSlices that are marked for deletion #109624
kubelet: Mark ready condition as false explicitly for terminal pods #110256
remove bazel BUILD in EXCLUDE_TARGET in makefile #110446
unit tests for Class E IP addresses #110457
add print-manifest flag to print addon manifests to STDOUT #109995
overwrite known targets in patch manager cache in case it changes #110442
Fix printer functions to use int64 and string explicitly #110408
Update publishing-bot rules for Go 1.17.11 #110427
Fix SCTP default-deny test #110395
Fix leaking goroutines in multiple integration tests #110362
kubeadm: add support for patching a “kubeletconfiguration” target #110405
kubeadm: graduate the UnversionedKubeletConfigMap FG to GA #110327
Update Go to 1.18.3 #110421
Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker #110191
update kubectl api-resources help info #110394
correct the e2e framework flag description typos #110404
Update storage e2e test images #110240
Add fast build support for s390x #109594
Include powershell in short description for kubectl completion #109773
enhance pod polling failures #109828
Fix volume reconstruction for CSI ephemeral volumes #108997
test: RunAsUser causes pods to not start on Windows #110235
Remove newlineReporter custom report #110319
fix CVE-2022-27191: Bump golang.org/x/crypto to v0.0.0-20220315160706 #109552
Remove release note added twice #110184
Update cri-tools to v1.24.2 #109813
Don’t fail when OpenStack config contains unknown directives #109709
remove ioutil in kubelet #109692
refactor(hack): use ${BASH_SOURCE[0]} to get script name #109516
kubelet: Remove the deprecated --experimental-kernel-memcg-notification flag #109388
prevent the unit test name too long in report #109228
fix defer in for loop, maybe resource leak #110360
etcd: Updated to v3.5.4 #110033
refactor(kubectl): add Debugger interface for kubectl-debug #105008
Drop unnecessary json.Marshal #110353
enhance assertions in test/e2e/windows #110303
A calculation function for StatefulSet maxUnavailable and some tests for it #110286
kubeadm: mutate ClusterConfiguration.imageRepository to “registry.k8s.io” #110343
Fix leaking goroutines in multiple integration tests #110264
dependencies: bump CSI to v1.6.0 #109366
cleanup deprecated metrics and usages #110337
Clean up some EndpointSlice-related code in apiserver endpoint reconciler #107878
Remove unused and un-enable-able apiserver multiple ports feature #107872
Add unit tests for pvc quota #101997
Add Windows Server 2022 support for GKE #110333
Fix typo at pkg/windows/service/service.go:94 #108974
create resultsDir if the folder not exists #106441
e2e: node: re-enable the device plugin tests #109820
remove TODOs from http package and prober #108803
there is no need for gci-docker-version and gci-ensure-gke-docker - t… #108195
fix: remove the redundant count variable #108232
Enable volume expansion tests for generic ephemeral volumes #110180
fix the registry configuration #110313
add explicit typing for continue tests #110311
Move from k8s.gcr.io to registry.k8s.io #109938
remove deprecated metric and promote the replacement to STABLE #110310
Cleanup: modify unmatch comments with stopCh #110297
test/e2e_kubeadm: add URL scheme test for node CRI annotations #110287
restmapper: re-try shortcut expander after not-found error #96771
kubeadm: add serializable health checks for etcd probes #110072
Fix leaking goroutines in scheduler integration tests #110250
fix audit union loop variables in closures #110145
CSINodeExpandSecret featuregate has to be 1.25 based #110244
etcd: Build image 3.5.4-0 #110031
Endpoints and EndpointSlices should not publish IPs for terminal pods #110255
customresource: stop shallow-copying metadata #110131
clarify a comment on annotation key validation #109892
Fix leaking goroutines in QuotaEvaluator #110246
Remove the use of derecated PodDeleteTimeout const #109977
Error message optimization for podautoscaler controller #110228
complete doc #110183
Fix leaking goroutine in multiple integration tests by migrating to common StartTestServer utility #110229
Fix: Add test cases for method IsZeroCIDR() in pkg/proxy/util/utils_test.go #110203
Cleanup feature gate check for SelectorIndex #110227
Adds Verification Commands. #110200
Fix up some kubernetes service reconciling code organization. #110234
add test case TestValidateServiceNodePort for validateServiceNodePort method #110082
pkg/proxy/userspace/roundrobin: Make lb.services nil check standardized #108259
Add v1beta1 snapshot CRDs to cluster addons #110223
Clean shutdown of kcm, ccm and scheduler #110207
Fix typo: type -> eventtype #84145
Fix apiserver shutdown in integration tests #110000
Restricted Pod E2E tests #109946
agnhost: bump version 2.39 #110214
bump gcp driver and sidecar versions #110192
Untwist apf metrics #110162
customresouce: clean up the storage constructor #110130
test/e2e/common/node: enhance assertions #110127
Fix cluster IP allocator metrics #110027
apiserver: fix preshutdown hook behavior with graceful termination #110026
agnhost: fix sigterm shutdown #110212
hardens TestAggregatedAPIServer #110194
Refactor kube-proxy internal naming for Service Port Name string #109424
Delete non-need AddUnschedulableIfNotPresent calling in TestCoreResourceEnqueue #107419
update to new level of agnhost #110176
Always dial using a context #110079
users of watchtools.NewIndexerInformerWatcher should wait for the informer to sync #109790
add readyz handling to netexec #110174
Give apf metrics abstractions more familiar names #110101
hardens integration job tests #109749
coordinate the kubectl warning style #108210
Update managedFields time when field value is modified #110058
Clear shutdown of scheduler metrics recorder #110148
Fix resource quota shutdown #110125
Cleanup portallocator/ipallocator interfaces #109975
Fix leaking goroutines in kubelet integration test #110138
client-go: fix backoff delay #110100
Fix maxUnavailable of StatefulSet should not less than 1 #110069
filter out terminated containers in cadvisor_stats_provider #108787
kubeadm: remove unused ImagesPull #110141
apiserver: improve graceful termination tests #110132
kubeadm: cleanup OldControlPlaneTaint from unit tests #110137
auth e2e: node_authn test: don’t expect a SA secret #109719
kubeadm: Parse ENV vars to crictl command #110134
remove enabled by default beta resources that have been removed #110010
Use CEL EagerlyValidateDeclarations to improve compilation performance #109835
Fix stop signal to drained signal in genericapiserver config #110129
Increase csiNodeInfoTimeout from 1 minute to 2 minutes #110055
Handle panic during validating admission webhook admission #108746
kubeadm: remove RemoveOldControlPlaneLabel #110111
Fix event broadcaster shutdown in multiple controllers #110090
apiserver: add lifecycle signal for preshutdown hook #110096
kubeadm: cleanup the “master” taint on CP nodes during upgrade #110095
Fix more initial numerators #110102
remove featuregate in 1.25 #108218
fix log err msg #109774
kubeadm: remove temporary handling of CRI socket paths without URL scheme #109356
apimachinery/clock: Delete the apimachinery/clock package #109752
Kubeadm upgrade plan support json/yaml output #108447 apiserver: refactor - move AuditBackend.Run out of NonBlockingRun #110094
Cleanup CRD storage on shutdown #110061
Set validate functions requiring no parameters for all commands #110088
fix: reflector to return wrapped list errors #110076
Diagram for graceful shutdown #110081
Fix additional panic #110040
storage: split paginated and non-paginated list tests, make them generic #110024
Add unit tests for kubectl completion command #110052
Add unit tests for api-resources and api-versions commands #110051
tls.Dial() validates hostname, no need to do that manually #110029
Avoid leaking StorageObjectCountTracker goroutine #110062
Simplify Create/Delete-TestingNamespace functions #110063
Unified v1/event NewREST function with other #109733
Fix issues in SPDY RoundTripper #109651
Update publishing-bot rules for Go 1.17.10 #110050
Update snapshot CRDs to v6 in add on folder #110021
kubeadm: container runtime is by default docker in kubelet v1.23 #110047
Update Go to 1.18.2 #110043
Remove warning log for crd merging #109880
Fix resizing of ephemeral volumes #109987
update kubectl doc url #109824
feat(kubectl rollout): support multiple resources for rollout status #108777
apiserver/storage: add myself to the reviewers list #110025
fix defer in loop, maybe resource leak #109830
do not install docker with curl #109753
Minor cleanups in integration test shutdown #110030
kubeadm: perform dockershim cleanup for 1.25 #110022
Use typed ImageID for imageutils images #109989
Remove gcp and azure auth plugins #110013
storage: move continue token definition to storage #109971
Fix requests scope classification #110009
storage: move the APIObjectVersioner definition to storage #109970
Wrap weighted histograms #109729
don’t skip Feature:EphemeralStorage based on skipper #109997
kubelet/stats: update cadvisor stats provider with new log location #108115
Cleanup no-longer used storage cleanup method #109978
cleanup: modify the comments of NodeInclusionPolicy #109968
Correct errors in the netpol test suite #109990
Make internalStaticIP flexible #109413
CSI migration doesn’t count inline volumes for attach limit #107787
update for APIs removed in 1.25 #108797
authn: fix cache mutation by AuthenticatedGroupAdder #109969
e2e: fix unit test #109961
Benchmark cel.UnstructuredToVal #108011
Cleanup etcd healthcheck on shutdown #109930
GCE: skip updating and deleting external loadbalancer if service is managed by ingress-gce #109858
cleanup: remove useless codes when checking Skip status #109519
Clean shutdown of couple controllers in integration tests #109972
Wait for cache to sync in job’s TestWatchOrphanPods #109947
cacher: don’t accept requests if stopped #108414
Close events recording sink in integration tests #109781
feat: implement node inclusion policy in scheduler #108884
Migrate ipallocator and portallocator to new Events API #109873
Fix Panic Condition #108080
Be sure to update the status of StatefulSet even if the new replica creation fails #109694
Add leases permissions to glbc rbac #109950
Fix discovery cache TTL to 6 hours #109896
tests: Include the Windows node name in the exception #109822
Fixed port name validation error message. #107213
Add NodeInclusionPolicy to TopologySpreadConstraint in PodSpec #108492
Fix ServiceIPStaticSubrange assigns duplicate IP addresses #109928
Simplify and extend the benchmarks of prometheusextension timing histograms #109925
test/integration: clarify namespace utilities #109919
storage/testing: move cancelled watch test to generic package #109914
storage/testing: move creation test to generic package #109909
azure: remove GA IPv6DualStack feature-gate #109874
node-perf: use tf-wide-deep:1.2 #109921
do not skip DownwardAPIHugePages #109852
correct coverage MainStart argument order #109843
Replace ioutil with os and io for the test/images #106415
integration: force close httpserver on exit #109901
Add sanposhiho to SIG Scheduling reviewers #109888
wake up only when pod being added to activeQ #109879
Minor cleanup in apiserver startup in integration tests #109899
fix data race in device manager plugin hander #109849
test/e2e/auth: enhance assertions #109734
Clean up wrong release note #109872
Refactor scheduler integration test that starts APIServer in a non-standarized manner #109897
dependencies: logr and zapr v1.2.3 #109891
Finish clustername removal #109602
remove pkg/scheduler/framework/FilterOutPods since it’s not used anymore #109756
scheduler_perf: Remove test cases for Preemption which always fail #109542
fix typo for nodelifecycle controller #108089
unexport mistakenly-exported kube-proxy constants #109845
cleanup: move scheduler unit tests to use PodWrapper #109684
Clarify ExternalTrafficPolicy/InternalTrafficPolicy definitions #109308
add verify-licenses.sh to the EXCLUDED_PATTERNS in make-rules/verify.sh #109859
integration: refactor and split scheduler tests #109834
storage/etcd3: factor tests to accept storage.Interface #109833
fix: resolve goroutine leak in integration tests #109252
Copy recordPluginMetrics in CycleState.Clone #108727
Fix OpenAPI loading error caused by empty APIService #109836
csi: modularize validation of secretRef object fields for PV #108420
Clean storage shutdown for allocators #109854
add verify-licenses.sh hack script (#108942) #109299
fix kube-proxy bug with multiple LB IPs and source ranges #109826
Update links to cluster auditing documentation #109736
kubeadm: only taint CP nodes when the legacy “master” taint is present #109840
Use module mode when building/installing #109464
fixing the panic in TestVersion #107122
Modify function parameters #109311
Skip adding data to avoid “json: unsupported value: NaN” panic when data is NaN #109545
Reduce number of repetitions and pods in TestPreemptionRaces #109825
Promote Batchv1JobLifecycleTest +4 Endpoints #109534
Reduce number of buckets in ttl controller for 2k+ nodes clusters #109779
Fix leaking reconciler storage #109760
refactor watch cache metrics so that they are in a single place #109626
Improve Create/Update traces. #109557
1.25: feature gate cleanup #109435
Fix broken links #109795
Update Metrics doc as there is a typo in package #109711
Remove PodSecurityPolicy admission plugin #109798
kube-proxy: fix healthz return unexpect code 200 #109483
modify link #109792
Don’t increment “no local endpoints” metric when there are no remote endpoints #109782
Bump cel-go to v0.11.2 #109804
v1.24.0 API fixture data #109803
Adding myself to sig-network reviewers and approvers #109772
e2e: node: explicit skip for device plugin tests #109770
honor the framework delete timeout for pv #109764
Minor cleanup to use t.Run() in test/integration #109759
hardens integration serviceaccount tests #109755
kubeadm: replace *clientset.Clientset with clientset.Interface for join phase #109751
spdyroundtripper: don’t need to verify server hostname twice #109750
Optimize test cases for iptables #109740
Optimize test cases for ipvs #109738
Drop unused golang/template package and funcs #109607
fix e2e coverage package for go 1.18 #109697
update go.mod files to go 1.18 #109440
Replace use of Sprintf with net.JoinHostPort #109344
ServerSideFieldValidation: Fix bug treating metadata fields as unknown fields #109268
Only log requests for configured consumptions in ResourceConsumer #109231
winkernel proxier cache HNS data to improve syncProxyRules performance #109124
update k8s url #109735
sched: remove unused code in heap.go #109727
Remove parallel node processing in PreFilter stage in volumerestrictions scheduler plugin #109715
Export function returning kustomize version #109430
test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine #109342
Cleanup legacy scheduler perf tests #109696
Log StructuredLog: spelling formatting #109659
GCE Windows: Copy the CNI binaries from the right folder #109657
e2e: move feature gate support from test/e2e to test/e2e_node #109649
storage/etcd3: clarify the pagingation flow in LIST #109623
storage/etcd3: continue unifying test setup #109618
refactor: remove deprecated deleting-pods-qps deleting-pods-burst register-retry-count flags #109612
hack: make test-e2e-node: remove old project refs #109606
Warn on receiving a space before the token #109587
e2e: add storage capability for offline volume expansion #109580
remove stutter from alpha metric #109579
sig-node: endocrimes as e2e_node approver #109574
e2e_node: remote runner: Require containerd/crio #109572
e2e_node: Cleanup old unused jenkins scripts/config #109571
Implementation of a function that returns the wait state of the scheduler #109478
Show topologySpreadConstraints in Describe command #109563
fix the image for node performance tests - model expected tensorflow… #109551
Replace scheduler_e2e_scheduling_duration_seconds with scheduler_scheduling_attempt_duration_seconds in scheduler_perf #109546
Add PodWrapper functions for scheduler testing #109536
Return preflightError if an error occurs when running the preflight #109527
Remove the duplicate code snippet in client-go delaying_queue tests #109520
Update storage.GuaranteedUpdate to be clearer #109514
fixed incorrect tag on volume cloning test case #109509
fix comment of IngressClassParametersReferenceScopeCluster #109506
Move path error to const and squash tests #109504
Fix job tracking leaving pods with finalizers #109486
Remove pjh from cluster/gce/ OWNERS files #109468
Add Apply and ApplyStatus methods to dynamic ResourceInterface #109443
kubelet: parseResolvConf: Handle “search .” #109441
Set default flake attempt to 1 (not 2) #109410
Fix typo in TokenRequest doc string #109421
test/integration/framework: call closeFn() in startAPIServerOrDie() on error #109338
Fix: test case wrong output in cmd/kubeadm/app/cmd/completion_test.go #109324
conformance-test: use kubelet healthz port. #109322
Cleanup rest storage resources on shutdown #109303
: Cleanup KUBE-NODE-PORT chain in filter table. #109288
storage e2e: set fstype for CSI ephemeral inline volumes #109279
Start drafting weighted and timing histograms #109277
test-cmd: Reorder process shutdown and exit immediately in cleanup #109270
Tweak quantity docs #109259
remove deprecated kubectl.kubernetes.io/default-logs-container support #109254
add maxunavailable to kubectl describe #109251
Bump CSI Proxy to v1.1.1-gke.0 #109249
remove unused/orphaned golang package forks #109244
Update flag descriptions for watch cache #109201
Log whether watch cache is used for particular resources #109175
update owner aliases for sig instrumentation #109160
cleanUp:check existence using basic method of set #109150
fix some nits from API changes #109139
cpu/memory manager containerMap memory leak #109103
Update rs.extensions to rs.apps #109101
fix volumebinding test in scheduler #109043
kubelet: fix panic triggered when playing with a wip CRI #109042
Refactor all device-plugin logic into separate ‘plugin’ package under the devicemanager #109016
pkg/storage/etcd3: correctly validate resourceVersions #108938
e2e/cleanup: fix package name and dir name mismatches #108789
Improvement: Updated the serviceaccount flag for multiple subjects. #108654
Update OWNERS file for stable metrics #108503
kube-controller-manager: Remove the deprecated --experimental-cluster-signing-duration flag #108476
Add pod status info log for e2e creating pods failure #108409
fix: exclude non-ready nodes from azure load balancer #108284
refactor: Change the uses of IsQualifiedName to ValidateQualifiedName #108150
integration: custom etcd gracefully termination #108048
Replace dbus-send for fake PrepareForShutdown message #107819
packet-flow-based iptables proxy tests #107471
fix comment of e2e test case garbage_collector #107444
Add missing test cases for RunAsGroup and SetRunAsGroup methods #107215
Add error handling for Write() function #105995
csi: add nodeExpandSecret support for CSI client & add unit test #105963
Added –sum flag to kubectl top pod #105100
Cleanup: use klog.Info in pkg/volume/util/operationexecutor/operation_generator.go #103911
kubelet: more resilient node allocatable ephemeral-storage data getter #101882
scheduler_perf: create sleep operation #101835
Fix misspelling of success. #99685
fix: NeedResize build failure on Windows #109721
Do not wrap lines if we can’t read term size #109722
Bump cAdvisor to v0.44.1 #109658
windows GCE: Bumps containerd version to 1.6.2 #109592
Disable Intree GCE PD tests by default #109541
Update publishing-bot rules #109567
Disable JobTrackingWithFinalizers due to unresolved bug #109487
Ensure that not-exist and pattern error return different results #109488
Fix crash in E2E Job lifecycle test when the job doesn’t have annotations #109473
Update min golang version to 1.18.1 #109484
hack/jenkins: Remove GODEBUG workaround for sha1 changes #109312
etcd: Update to v3.5.3 #109471
etcd: Build 3.5.3-0 image #109470
Update publishing-bot rules for Go 1.17.9 #109465
Update Go to 1.18.1 #109461
Revert “Introduce APIs to support multiple ClusterCIDRs (#108290)” #109436
Correct event registration for multiple scheduler plugins #109442
Add apf_execution_time log field. #109109
Retry Job update on conflict #109365
Rollback HonorPVReclaimPolicy feature to Alpha #109362
Add or Remove PV deletion protection finalizer based on PV recalimPolicy #109205
Revert generate name #109340
Disable newly enabled Conformance node->pod tests for Windows #109321
apimachinery: remove implicit copy of a lock #109212
test/e2e/framework: use restricted policy by default, default existing tests to privileged #109283
fix the retry logic in ssh in test framework #109314
Add NetworkPolicyStatus to ineligible_endpoints.yaml #109294
Fix the nil pointer dereference for comformance spec validation #109256
storage capacity conformance #108867
Feature flag change when moving from alpha to beta #109213
Promote Read, Replace, Patch BatchV1NamespacedJobStatus test - +3 endpoints #109267
Avoid updating Services with stale specs #107631
Fix translation of Azure availability zones #109154
client-go: make retry in Request thread safe #109114
Fix error for inline migrated volumes #109290
Add initial E2E tests for AnyVolumeDatasource feature #108664
Fix: abort nominating a pod that was already scheduled to a node #109245
rest: Ensure response body is fully read and closed before retry #109050
Revert “Enable ServerSideFieldValidation feature gate on by default in beta #109271
Move cron job feature gate to correct file #109272
tests: Enables a few Conformance tests for Windows (part 1) #108590
cleanup: skip a test validate time_zone letter case in darwin #109218
Fix local-up-cluster for running only an API server #109269
Add separate cost limit test. #109242
fix: pod workers test #105599
use privileged enforce level for nfs test #109222
kube-controller-manager: remove unused option deployment-controller-sync-period for deployment controller #107178
Make STS available replicas optional #109241
Correctly attribute some data structures from gotestsum repository #109170
Flake fix: validate each expression once in primary CEL correctness suite #109238
set parallelism in integration tests using GOMAXPROCS #109239
compact scheduling failure msg for taint/toleration mismatch #109119
Add sync_proxy_rules_no_endpoints_total metric #108930
Fix the overestimated cost of deletaged API requests in P&F #109188
v1 types for Leader Migration #108016
Exercise defaulting tests with/without features enabled #108491
Fix copylock vet errors in component-base metrics #109200
Fix non-enum CSR condition field, omit enums from static openapi snapshot #109178
Revert “Field status.hostIPs added for Pod (#101566)” #109151
Avoid log spam in servers without auditing enabled #109181
Kube proxy rule reorg XLB->EXT #109060
Remove the deprecated insecure serving from the cloud controller manager #108953
Update docker/distribution to 2.8.1 to fix go module checksum error #109169
Prune junit xml files to avoid issues with test grid. #109112
Update comments to reduce confusion #108815
Ipvs: non-local access to externalTrafficPolicy:Local #97081
Add some sudo in local-up-cluster.sh #109084
Graduate Leader Migration to GA #109072
Fix issues in indexer caused by object changing the number of index values #109137
TestPreShutdownHooks: change timeout to 200ms #109134
Add metrics for OpenAPI v3 generation #109128
Switch to pause 3.7 for Kubernetes 1.24 #109123
Reduce CEL runtime cost limits by 1 ⁄2 based on latency goals #109122
Track field validation in metrics #109120
Add audit annotations and log prefixes to deprecated cert warnings #109107
vendor: bump runc to 1.1.1 #109104
Tolerate additional error messages in TLS unit tests #109102
remove baseline pod security in host pid sharing testing #109097
OpenAPI V3 Enable Beta #109031
feat: prepare KMS data encryption for migration to AES-GCM #108745
vendor: bump golang/mock to 1.6.0 #109092
contextual logging #108995
Update kubectl kustomize to v4.5.4 #108994
Inject SSH public key into CRI-O serial prow jobs #108909
re-push “add volume kubelet_volume_stats_health_abnormal to kubelet #105585” #108758
Update AnyVolumeDataSource feature gate to beta #108736
use sync.Map in CycleState for better performance #108724
Enable node-expansion to be called on all nodes for RWX volumes #108693
Apply ProxyTerminatingEndpoints to all traffic policies #108691
Update EnableControllerAttachDetach documentation #108256
Fixing logic for kubelet permissions check on windows #108146
apiserver: stop http server after pre shutdown hooks #108033
KEP 3140: TimeZone support for CronJob #108032
Remove generator dependency of expose.go #106824
Graduate JobReadyPods to beta #107476
Add note about etcd v3.5.0 data corruption #109121
mark AzureDisk CSI migration as GA #107681
kubelet: check taint/toleration before accepting pods #101218
fix the doc about generateName conflict #108126
Dep bump to runc 1.1.0, cadvisor 0.44.0 #109029
client-go: OpenAPI v3 support #108992
Audit mutex #109078
deprecate vsphere releases less than 7.0u2 for in-tree vsphere volumes #109089
API: maxUnavailable for StatefulSet #82162
CRD CEL Validation: per-CRD estimated cost limit enforcement #108990
Delete dead code #109080
Create a KUBE-IPTABLES-HINT chain #109059
Reduce number of pods in Job+GC tests #109025
Upgrade to blang/semver/v4 v4.0.0 #108629
Document the sources for the sourceIPs audit log field #93438
kubeadm: add etcd flag for member data consistency #109074
ServerSideFieldValidation Beta Graduation #108889
Calculate CEL cost totals #108612
fix internalTrafficPolicy #106497
test/e2e: let e2e tests configure namespace labels #106454
Deprecate apiserver_dropped_requests_total metric #109018
use oneOf for IntOrString and Quantity in OpenAPI v3 #108713
Update types to be neutral about container runtime #108282
webhooks,aggregation: add metrics to count certs with SHA1 signatures #109024
Add cli-maintainers as approvers to cmd/(gendocs|genman|genyaml) #106451
Allow adding new verbs in AddSpecialVerb #109068
Fix: Correct spelling mistakes in cmd/kubeadm/app/cmd/phases/workflow/runner_test.go #109001
Fixes exited messages when leaderelection lost #107724
Add storage tests for Azure File in-tree storage plugin #106678
Detect local traffic using interface #95400
resume kubectl cp with tail when –retries is negative #108748
fix Kubectl describe node missing event #106485
Rework ‘running_managed_controllers’ metric interface #109017
Turn down log level for etcd #109061
skip re-allocate logic if pod is already removed to avoid panic #108831
Fixed race condition in test manager shutdown #108193
Raise verbosity of EncoderWithAllocator log #109044
Bump kube-openapi and update err handling #108996
Improve debug output in pod conformance test failures #109053
Integration subtests #109048
Updates for kubectl generated ref docs for dockershim removal #109033
Reintroduce response status and header on kubectl verbose debug #108505
Test: remove redundant SetNamespace() for pvc #108443
pointer usage error #107241
Fix pkg/controller/replicaset/replica_set_test.go variable reference error #99488
Write Batchv1JobLifecycleTest + 4 Endpoints #108642
Migrate statefulset files to structured logging #106109
Default enable flag for beta feature HonorPVReclaimPolicy #109035
fix: update WithDiscoveryQPS method description #107451
Use WaitForPodRunningInNamespace for proxy e2e tests #109039
Server Side Field Validation Support For Kubectl #108350
update k8s.io/system-validators to v1.7.0 #108988
Updates moby/sys mountinfo package to v0.6.0 #108828
Remove deprecated discovery/ServerResources function #107180
Fix typo in get_test.go #106998
Revert #108954: Use CEL EagerlyValidateDeclarations to improve compilation performance #109040
Revert “Revert “Merge pull request #107797 from tkashem/revert-107456”” #109030
test/e2e_node: update kubelet credential provider tests to use new v1beta1 APIs #109006
Move all volume expansion feature gates to GA #108929
CRI-API - Add rootfs size to WindowsContainerResources #108894
Return a placeholder error for blocking failures and skip CEL validation. #108859
Fix inconsistent requirement for kind in strict json decoding #109019
Start deprecating long/golang version information #108987
Fix typos under pkg/scheduler #108976
Cleanup: pkg/util/ipset #108946
pkg/storage/etcd3: be more precise in watch test #108939
Windows gmsa e2e: Don’t assume bash is avaliable for webhook deployment #108899
Graduate OpenAPI Enums to beta #108898
client-go: wrap previous error to provide more context to caller #108698
Don’t follow redirects with spdy #108531
Support shell completion for the type/name form #108493
add check for colima docker socket as fall back #108310
KEP-3070 : Reserve Service IP Ranges For Dynamic and Static IP Allocation #106792 track latency incurred in various layers of apiserver #107910
Use CEL EagerlyValidateDeclarations to improve compilation performance #108954
Use tempdir for shutdown tests #108986
Fix: Clean job tracking finalizer from orphan pods #108752
kubectl: support –subresource flag #99556
e2e: deflake “should run through the lifecycle of Pods and PodStatus” #108892
Support CEL CRD validation expressions that reference existing object state. #108073
[node e2e] prepend credential provider flags on ubuntu os also #108965
Move kubelet credential provider feature flag to beta and update the api’s #108847
logcheck update and golangci-lint integration #108159
Beautify kubectl help flag commands #104736
Expose the version of Kustomize that Kubectl embeds #108817
Copy request in timeout handler #108455
pkg/storage/etcd3: update test to time out, not panic #108934
Rename unschedulableQ to unschedulablePods #108919
allow namespace editors to evict pods #108738
Temporarily disable TestCheckRetryClosesBody #108981
Return type instead of object #107090
Implement page size progressing for rare selectors #108569
Updated Etcd Version to 3.5.1 in go.mod #106591
publishing/rules: remove .gitattributes before publishing #108970
Record dropped requests in apiserver_request_total metric #108927
fix: race detected in TestErrConnKilled #108553
add gc metrics and collect sync errors #106844
pkg/storage/etcd3: use correct diff in tests #108936
pkg/storage/etcd3: refactor “too large” resourceVersions #108935
Fix verify:* after go 1.18 upgrade #108902
kubectl config subcommand cleanup: set-cluster, set-context, set-credentials #107978
Prefer user-provided node IP #107750
klog v2.60.1 #108725
kubectl: Remove deprecated run flags #108820
Promote PodOS field to beta #107859
RuntimeClass and PodOverhead tests promotion to Conformance #108781
Remove ClusterName #108717
support preemptionPolicy in describe PriorityClass #108701
Remove DiscoveryClient from diff command #108580
promote grpcProbes to beta #108522
Fix error logging statement to make it easier to understand #108363
Write Read, Replace, Patch BatchV1NamespacedJobStatus test - +3 endpoint coverage #108114
Remove flaky CEL cost tests that rely on map iteration order #108950
Graduate IndexedJob to stable #107395
Remove johnbelamaric as sig-network reviewer and approver #108937
kube-up: use registry.k8s.io for containerd-related jobs #108928
Fix OpenAPI v3 bug with #/definitions #108907
Increase timeout for stats/summary check #108862
Script kubectl kustomize update process #108857
Fix doc strings for kubelet config APIs #108841
test/e2e_node: add kubelet credential provider tests #108651
Change aggregator to proxier for OpenAPI v3 #108637
Add CEL cost stability test #108529
Managing nil pointer in VolumeManager #108442
client-go: chain the error returned by rate limiter #108342
kubectl: apiserver changes to add –subresource support #103516
Move volume helpers to “k8s.io/component-helpers/storage/volume”. #103062
kubelet/cm: refactor, prepare for runc 1.1 bump #108597
Wire cert contexts #108191
storage capacity GA #108445
Promote graceful shutdown based on pod priority to beta #107986
Temporarily ignore some verify failures in go1.18 and other broken things #108901
CEL: Enable regex pre-compilation, Add cost estimates for function extension libraries #108617
kubeadm: reuse found crictl path for exec #108873
kubelet: If the container status is created, we are waiting #107845
Add bootid support for windows node. #108704
Run kubelet in a job object in windows #105077
golang: Update to 1.18 from 1.18rc1 #108870
Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config #108613
Revert the revert of #107456 - “apf: change controller to use SSA for patches” #108383
Promote CertificateSigningRequest’s Spec.ExpirationSeconds field to GA #108782
make comments of (c *threadSafeMap) updateIndices optimization code more accurate #108680
Promote load balancer class to GA #107979
add better link for gcp auth plugin doc #108852
remove no longer supported scheduler option runAllFilters #108829
Clean up unused exec auth from cluster setup #108824
clean an unnecessary else #108842
Fix function name of IsNodeExist error #108826
Cherry-pick: Fix incorrect EnableTCPReset for non-TCP protocols #107981
show error details removing or adding ipset entry #108452
refactor: remove configurator in scheduler #108790
proxy/iptables: fix up endpoint chain name computation #108812
pkg/proxy: Simplify LocalTrafficDetector #108811
test: increase timeout in pod collection deletion #108813
kubectl create token: use duration instead of expiration seconds #108810
Fix incorrect test cases to cover code that needs to be tested in TestValidateIPSet #108351
Updating TopologyAwareHints feature gate to be on by default #108747
Remove v1alpha1 of the execcredential #108616
webhook: use rest.Config instead of kubeconfig file as input #106155
fix kubectl describe ingress shows default-backend:80 when no default… #108506
sort kubectl get output format #108271
Bump agnhost@v2.36 to include changes for –delay-shutdown flag #108771
Exact Matching for Field Validation Integration Tests #108710
Set PodMaxUnschedulableQDuration as 5 min #108761
client-go: default user agent if empty #108772
kubeadm: fix the bug that windows node failed to join IPv6 cluster due to preflight failures #108769
eviction: Deflake TestStart #108010
replace all occurrences of “node”, nodeName to “node”, klog.KRef(“”, nodeName) #99292
Delay writing a terminal phase until the pod is terminated #108366
mark PodOverhead to GA in v1.24; remove in v1.26 #108441
topology translation of in-tree vSphere volume to vSphere CSI #108611
Exercise Get of serviceaccount in e2e #108757
Add test cases of kubelet_pods_test.go. #100424
Add HNS Load Balancer Healthchecks for ExternalTrafficPolicy: Local #99287
Fix:Update misspelled comment in pkg/scheduler/internal/queue/events.go #108742
Wire in request context #108646
agnhost: support –delay-shutdown flag for the net and netexec subcommands #108750
pod overhead test to be made a Conformance #108714
googleapis/gnostic -> google/gnostic and update kube-openapi #108644
tests: Updates the should delete a collection of pods test #108593
CEL MaxLength integration #108419
short circuit remaining validation rules if one exceeds its per-cost limit #108695
Add gMSA Reading and Writing Files Test Case #108432
csi_attacher: improve attach/detach timeout message #108628
Revert “add volume kubelet_volume_stats_health_abnormal to kubelet” #108731
Fix logging statement with missing parameter #108359
kube-proxy: remove port opener #108496
Support CI jobs that use prebuilt-images by adding additional image tags #108712
remove enum markers on types without validation #108639
make the preempt failed message per node compressible in event #108705
Add sig-autoscaling as owners of test/e2e/framework/autoscaling #108702
kube-controller-manager: Cleanup MarkDeprecared call for already removed flag #108539
Remove the WarningHeaders feature gate #108394
Update sig-storage owners files #108699
apiserver: Remove the deprecated --deserialization-cache-size flag #108448
Implement MinDomains on Pod Topology Spread #108362
add volume kubelet_volume_stats_health_abnormal to kubelet #105585
Update CEL runtime cost limit #108595
Make daemon.NodeShouldRunDaemonPod function public #108485
test: support storage tests with non-standard kubelet root directory #108253
kubelet: expose OOM metrics #108004
Fix test:Probing container should have monotonically increasing restart #108652
remove metadata-concealment related testing #108694
Fix comment typo #108684
Update PreFilter interface to return a PreFilterResult #108648
Generalize Query Param Verifier #108620
Promote replaceCoreV1NamespacedPodTemplate test - +1 endpoint coverage #108431
Add klueska to test/e2e/node/OWNERS file #108690
Add CEL runtime cost into CR validation #108482
Add e2e test for HPA behavior: decreased downscale stabilization #108264
Update publishing-bot rules for Go 1.17.8 / 1.16.15 #108685
mount-utils: Add support for btrfs resize #108561
test/integration: improve TestTransform #108495
storage: etcd: clarify lease manager configurations #108214
CSI inline volumes should support fsGroup #108662
Add MinDomains API to TopologySpreadConstraints field #107674
Update ineligible_endpoints.yaml to include Log endpoints #108676
Makefile: Pass SHELL to sub-make #108661
Makefile whitespace cleanup #108659
Makefile: use $$ in define blocks #108660
Remove unsupported Windows SAC images from pause image #107056
Remove unsupported Windows SAC test images #107055
Remove support for previously deprecated nodeExpand call #108614
fix: some function should pass context parameter #108484
made independent test cases ginkgo.It for checking connectivity #107132
Updated Sig-windows Memory Limits tests to not assume all nodes are the same #107477
Improve unit test coverage in pkg/util/netsh/ #108655
Support for in-tree PV Deletion protection finalizer #108400
e2e: support CSI images in -list-images #108458
Update cobra to v1.4.0 #108643
Bump cel-go to v0.10.1 #108647
kubeadm: fix bad indentation in the API go docs #108636
migrate nginx to k8s.gcr.io image #108581
add the grpc-health-checking to agnhost #108500
kubelet: cgroups: be verbose about validation #108568
e2e: do not parse resourceVersion #108638
Remove apf_fd from httplog #108631
Remove the restart kubelet check from the test. #108563
Add env var to verify-typecheck for serial execution #108618
Field validation CRD benchmarks and decoder unit tests #108204
Switch to use the DBG flag to build debug binaries #108603
Remove the legacy Nginx testcases #108598
csi: add validation of secretRef format for CSI PV update functions #108418
kubelet apiserver: be gentle closing connections on heartbeat failures #108107
Avoid deep-copying object when possible on kube-apiserver watch path #108252
AzureFile: Volume without secretNamespace fails to mount after translating to CSI #108000
Fix typo in watch_based_manager_test #108402
Remove generic_scheduler.go and generic_scheduler_test.go #108557
Ensure static certs in kubeconfig override exec plugin #107410
Pass instrumented runtime service to containerGC #108527
Bump to CEL v0.10.0 and update tests and usage #108576
remove audit.k8s.io/v1[alpha|beta]1 versions #108092
endpointslice: remove unnecessary HandleCrash #108316
add resource enablement check for e2e tests of beta APIs #108426
apimachinery/pkg/util/proxy: escape forwarded URI #106525
apiserver: Remove the deprecated --target-ram-mb flag #108457
Explicitly specify journald config so the kube-up deployed nodes retain logs #108550
fix some typo #108535
Add unit tests for cluster, context, and user command line completion functions #107977
Stop publishing Pod ResourceVersion in Endpoints and EndpointSlice API #108450
make scheduler_perf stable #107771
Avoid dockerhub for nginx (fix for only pull-kubernetes-e2e-gce) #108514
bump konnectivity-client@v0.0.30 #108437
apiserver: Remove the deprecated --experimental-encryption-provider-config flag #108423
kubectl drain: Generic “declare a controller” message #108314
Add datapolicy tags to pkg/kubelet/ #96004
remove ValidateProxyRedirects and StreamingProxyRedirects #106830
Clean up unused configurable categories #108489
Scheduler: Remove genericScheduler and SchedulerAlgorithm. #107135
fix typo for pause image env var in kube-up #108513
Restore wait loop to integration test #108507
Log main golang runtime env vars #108480
kubectl version should fail when given extra arguments #107967
Increase default value of cache TTL to 6 hours. #107141
Switch pv-recycler container image to debian-base #108490
cleanup: delete unused function NewNodeInfoLister #108479
csi: add unit tests for controllerPublishSecretRef name & namespace validation #108391
Make builds fail if go2make misbehaves #108379
Makefile: add a DBG variable #108371
Forbid CEL transition rules on unmergeable CRD subschemas. #108013
simplify function MatchProvisioner #108473
add several testcases to cover PriorityClass admission veeifications #106565
Add bootstrap policy for HPA external metrics #104244
integration: run test cases in eachs own subtest #108477
Fix typo in bug report template #108386
client-go: refactor retry logic for backoff, rate limiter and metric to be reused by Watch, Stream, and Do #108347
1.21 regression: fix regression introduced by PR 100320 - sensitive information would be logged #107121
Add CEL function library #108312
kubeadm: fix a bug when dry-running with existing ca.key / ca.crt #108410
Improve error message for missing CRDs #107363
Enable specifying pause image in containerd config.toml #108456
Add enj to hack OWNERS #108454
kubeadm: improve getStaticPodSingleHash error messages #108315
Allow KUBE_TEST_REPO_LIST to be a remote url as well #108429
no auto-generation of secret-based service account token #108309
Update TopologyManager algorithm for selecting “best” non-preferred hint #108154
Skip updating Endpoints if no relevant fields change #108078
fix defer in for loop, maybe resource leak #108228
improve test coverage #108276
Fix typo in pkg/kubelet/pluginmanager/cache/actual_state_of_world #108340
kubelet/eviction: eliminate redundant allocations when handling eventfd #96828
Start building etcd v3.6.0-alpha.0 image for scalability tests #108389
Fix nodes volumesAttached status not being updated #108167
Log where we pull images from in an e2e test #108417
Fix cpu share issues on systems with large amounts of cpu #106570
integration framework: log number of leaked goroutines #108408
update feature gate DefaultPodTopologySpread release note #108407
Add the last zz_generated.openapi.go file #108381
two files not being used any longer #108327
do not return err when PodSandbox not exist #108325
Write replaceCoreV1NamespacedPodTemplate test - +1 endpoint coverage #108286
Added Logs Statement for a Pod in graph_populator. #107744
add VolumeStatCalDuration metrics for fsquato monitoring benchmark #107201
client-go: add request and response size metrics #108296
Correct comment related to IngressClassNamespacedParams feature gate #108393
test/e2e/node + test/e2e/scheduling: improve checks #106486
storage: etcd: use cmp.Diff for comparisons #108187
graduate default pod topology spread to ga #108278
Makefile: emit codegen info via kube::log::status #108378
Makefile: avoid redundant work upon make restart #108377
Makefile: clean up static/nonstatic build output #108376
Remove hack/tools/Makefile #108367
Makefile: use errexit, pipefail, and nounset #108369
Makefile: remove superfluous @ #108368
Fix proto gen #108365
Bump konnectivity-client to v0.0.28 #108339
fix: fix kube-scheduler KEP link #108334
Detect CNI installation in local-up-cluster.sh #108295
bump kube-addon-manager image version to 9.1.6 #108341
refactor: rename SchedulerCache to Cache in Scheduler #108269
wait for default service account instead of its token #108313
kubelet: Remove the deprecated flag --experimental-check-node-capabilities-before-mount #104732
bump client_golang to v1.12.1 #108328
e2e: Embed DNS related maninfests into codebase #108293
prevent enabling beta by default for new api groups #107993
set/validate object namespace before admission #94637
add kubelet config validation test for RegisterWithTaints #106858
client-go: add unit test to verify order of calls with retry #108262
e2e: Fix ResourceConsumer unstable request interval #108104
Update client-go latency metrics bucket #106911
reduce the number of allocations in the WatchServer during objects serialisation #108186
Fix cronjob status reconciliation when job template labels change #107997
Support ExtenderName in FakeExtender #108230
Rename SupportsSELinux to SELinuxRelabel #108156
Remove RuntimeClass feature gate and stop serving older versions of RuntimeClass #103061
Update secrets field API doc #108280
Only log full iptables-restore input at V(9) #108224
Fix typo allcoated -> allocated #108205
delete redundant characters in comment #108239
OWNERS(releng): Reconcile existing Release Managers #107431
migrate more rest handlers to select by resource enablement #108263
kube-proxy endpoint filtering unit test refactoring #107393
[Fix pull-local-node-e2e] Install CNI and Enable containerd for kubekins docker #108160
iptables tests cleanup #108251
storage: etcd: misc Watch test cleanups #108211
golang: Update to go1.18rc1 #107105
Update our repository to incorporate project health best practices from clomonitor.io #108110
Nit: Replace errors.New(fmt.Sprintf(...)) with fmt.Errorf(...) #107590
Simplify storage interface #106948
Improve API compatibility fixtures to reduce churn #108219
Graduate PodAffinityNamespaceSelector to GA #108136
go-to-protobuf: use full path for go_package #106630
storage: etcd: TestList: improve RV choices #108190
increase Azure ACR credential provider timeout #108209
storage: etcd: TestWatchError: improve readability #108200
Turn off volumehost type check in kubemark clusters #108066
Fix flaky test - when gracefully shutting down with Pod priority should be able to gracefully shutdown pods with various grace periods #106671
feat: turn on CSIMigrationAzureFile by default on 1.24 #105070
storage: etcd: pass contexts correctly in TestConsistentList #108172
Graduate SuspendJob to GA #108129
Make EndpointSlice strategy move node name from topology map to field instead of discarding when updating via v1 #108198
Add crit-tools arm64 sha512 hash to configure.sh #108034
Nested decoders handle strict decoding errors #107697
Revert #104308 to bring back LockContention tests #104334
Env var for additional flags sent to the csi-proxy binary #107806
kube-proxy: only set route_localnet if required #107684
remove docker installation from startup scripts #108192
Add serathius to etcd image owners #108179
convert rest storage to per-resource part 1 of…? #108169
kubeadm: improve the strict unmarshaling of component config #107725
Fix broken link for common.sh #108122
storage: transformers: pass a context.Context #108174
Replace url label in rest client latency metrics by host and path #106539
Stop setting selfLink in kubectl #108165
Discard null values in complex objects in strategic patch #107705
storage: etcd: use sub-tests #108173
Don’t decorate admission for audit when audit is disabled #108147
storage: etcd: remove a duplicate test case #108171
Update selflink doc #108163
Parse mount options with double quotes and commas correctly #108162
Forbid empty AppArmor localhost profile #108143
fix: do not return early in the node informer when there is no change… #108149
Suppress container not found errors in container runtime getPodStatuses #107670
Add a deprecated cmd flag for the time interval between flushing pods from unschedualbeQ to activeQ or backoffQ. #108017
Remove unused --dockershim-checkpoint-dir e2e.test flag #108094
log grabbing: obtain timestamps on extra services #108057
test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults #108127
add warning when kubectl set env from secret leads to uppercase #107934
kubeadm: apply “master” label/taint migration for 1.24 #107533
Revert v1beta1 PodDisruptionBudget selector patchStrategy to pre-1.21 behavior #108138
Add v1.Secret to go-flow-levee analysis targets #107810
Mark pod-infra-container-image flag as deprecated #108045
🤓 simple grammar fix #107909
Fix incorrect parameters in EndpointsEqualBeyondHash #108123
Add Windows node reboot #104698
test: bump nfs-provisioner to 3.0.1 #108111
Graduate RemoveSelfLink to Stable #107527
Add support for CRI verbose fields #107945
Remove unused --container-runtime e2e.test flag #108093
Update sig-cli OWNERS #108109
kubeadm: switch UnversionedKubeletConfigMap to true #108027
perf:logic-optimiz-for-DetermineVolumeAction #107701
Update publishing-bot rules for Go 1.17.7 / 1.16.14 #108103
Fix validation of event updates #108047
scheduler integration benchmark improvements #107677
Update Go to 1.17.7 #108091
endpointslice: don’t try to update topology cache if node informer error #108090
container_manager: use oomScoreAdj instead of default when set #106082
Completions for kubectl config delete-user #107142
Remove util/selinux package #108070
Fix panic in Kubelet #107887
Enable node restriction plugin by default for local clusters #107737
Clean up logic for deprecated flag –container-runtime in kubelet #107594
Improve test coverage: add unit tests TestReadAtMost in pkg/util/tail #108044
Update CHANGELOG-1.23.md to delete reverted change #107712
apiserver: use endpoint lease reconciler as default #108062
Fix bug in TopologyManager with merging hints when NUM_NUMA > 2 #108052
Remove feature gate SetHostnameAsFQDN #108038
Vendor in k8s.io/utils Changes #108059
cluster/ - Configure containerd only if necessary #108054
Remove tolerate-unready-endpoints annotation #108020
Change level for klog.Fatal in kubectl #108053
fix: data race when hijack klog #107774
Update ManagedFields Time description to be more accurate #107650
Remove verult from OWNERS files #108058
Catch unused API compatibility fixtures #108055
feat: add container name when violate quota constraints #107210
Add Ingress Class to kubectl describe ingress output #107921
update the –runtime-config handling to ensure that user preferences always take priority over hardcoded preferences #108029
Add controllerUID index to improve ReplicaSetController performance #102330
resttest: Modify TestContext to have namespace in context #108039
Add note for the deprecated vSphere 6.5 #106279
should omit comparison to bool constant in pkg/controller/controller_utils.go #106398
Remove dashboard cluster addon #107481
cacher: Minor cleanup and refactor of code and tests #108042
cm: Remove legacy docker references #108007
Read number of running processes from /proc/loadavg. #107108
Consider threads-max when deciding MaxPID. #107112
Removed references to Docker in Kubernetes API #31393 #107691
De-duplicate predicate (known as filter now) logic shared in kubelet and scheduler #103934
Fix examples of admission registration rules that contain wildcards #107175
Add command to request a bound service account token #107880
Deduplicate errors between baseline & restricted checks #107698
Fix serialization of x-kubernetes-validations OpenAPI extension #107970
kubeadm: fix the bug that ‘kubeadm init –dry-run –upload-certs’ command failed with ‘secret not found’ error #108002
e2e test for CVE-2021-29923 #107552
GCE L4 load balancer: enable migration of Instance Group management out of K/K. #107296
check activeQ.Len() before Pop() #108001
Add log for the error extender returns #107974
Verify that DeleteCollection respects context cancellation #107950
Fix wrong status code in unit test error messages and replace deprecated function call #107770
Remove option ’T’ from wget on Windows #107983
Remove deprecated flag –non-masquerade-cidr in kubelet #107096
Graduate NonPreemptingPriority to GA #107432
code-generator: fix the bug that ApplyConfiguration constructor missing WithKind/WithAPIVersion methods #107834
GCEPD: fix incorrect return value in WaitForAttach #107236
kubeadm: warn only when config value is different with default value #107785
add fieldPath back to event logs #107812
cacher: Use watchCacheInterval to reduce lock contention #105483
refactor unreserve test #103642
FlushFrequency config type #107618
Use zip instead of git-archive #107995
Added env variable for cloud-provider #106241
fix flake in TestTimeoutHeaders #107992
Fixes zone/region labels setup and kubelet stucking on startup if credentials stored in secret for legacy vSphere cloudprovider. #101028
kubeadm: fix the bug that ‘kubeadm certs generate-csr’ command does not remove duplicated SANs #107982
Fix kubelet cri round trip test #107971
refactor: rename webhook duration tracker #107975
make test-e2e-node: default to containerd #107877
Add labels when there sig aliases used in approvers/reviewers #107656
release-note: Describe issues around node admission in 1.22 #107348
Add 1.23 release note for x509 commonname #107961
Deeply copy JSONSchemaProps.XValidations. #107956
Optimize pod topology spread performance #107623
set secondary address on host-network pods #106715
Make ShowManagedFields public so printers users can tweak the value #107947
Wire contexts to Disruption controllers #107935
fix flake in detach tests #107924
for ./OWNERS, ensure approvers are in reviewers and emeritus approver… #107942
Fixed typo in hack/serve-prom-scrapes.sh #107941
dual-stack feature gate ga #107666
legacy-script.sh fixes - junit output and add missing record_command #107740
RunCordonOrUncordon error if drainer has nil Ctx or Client #105297
Update CHANGELOG OWNERS with 1.24 release note team members #107940
wrap error from RunCordonOrUncordon #107764
Replace ioutil with os and io for the test #106015
Add manually invalidate cache documentation into delete #107162
[CI Job failure] Fix job containerd-e2e-ubuntu #107832
kubelet: Pods that have terminated before starting should not block startup #107900
E2E: {cpu,topology} manager: improve debuggability #107915
[Summary API [NodeConformance]] Increase timeout for initial /stats/summary validation #107913
Fix concurrent usage issue of the same scheme #107876
Add option to bootstrap kubeconfig for hollow-node #107532
Allow cloud controller manager flags to be set in ./hack/local-up-cluster.sh #105300
Update azure auth plugin deprecation to warning #107904
kubeadm: move well-known system constants to constants.go #106883
e2e_node: Remove Dynamic Kubelet Config tests #107903
Replace the deprecated io/ioutil with os and io for cmd #106062
Optimize cronjob controller status updates #107470
Fix kubetest errors when executing local provider #107386
Add tests for LessThanOrEqual #100883
tests: Removes [Excluded:WindowsDocker] tag from Windows #106597
Add details about preemption in the event for scheduling failed #107775
apiserver: correct references to service-account-signing-key-file flag #107863
e2e: Feature tags must be in square brackets #107869
apiserver: Call .Decorator inside update func #107847
deflake TestRoundTripSocks5AndNewConnection unit test #107841
fix Azurefile volumeid conflict issue in csi migration #107575
fix flushBackoffQCompleted: remove defer #107816
Include pod UID in secret/configmap cache key #107831
Revert “Merge pull request #107456 from tkashem/apf-ssa” #107797
Increase number of workers to 3 for Windows #107777
apf: create suggested pl before flowschema #107729
Add dgrisonnet to sig-instrumentation approvers #107793
Move kubelet secret and configmap manager calls to sync_Pod functions #107821
ReservedMemory Configuration for NUMA #106840
Add request header retrieval to agnhost netexec #107796
Fix race on unit test “kube-proxy ipvs: fix to prevent concurrent map read and map w… #107815
Ensure the execHostnameTest() compares hostnames #107786
readability enhancement for cj controller unit test #107659
Use FakeProber in kubemark clusters #107608
Revert “Populate OpenAPI in all integration tests” #107794
Extend deadline for /stats/summary test #107768
Mark device as uncertain if unmount device succeeds #107789
Revert changes to the flb-exporter hash value #107769
kube-proxy ipvs: fix to prevent concurrent map read and map write #107748
fix ingress path for tests when ingress controller is already running #107753
Clean up logic for deprecated flag –container-runtime in scripts #107663
e2e: Wait for kube-root-ca.crt to be created #107763
Support UDP test for netwpol on windows #107525
Remove dynamic kubelet config #106932
Populate OpenAPI in all integration tests #107765
fail if the runtime/kubelet process is not fetched #107745
remove code duplication #107066
Create namespace for Pod not to occur error log of namespace not-found #107700
kubelet: fix static pods not restarting in certain cases #107695
Cleanup kubectl label selectors with ‘cmdutil.AddLabelSelectorFlagVar’ #107400
disable socks5 flake test #107758
Improve kubectl apply label selector message #107397
refactor initRegistryAndConfig function #107636
Add myself to legacy-cloud-provider OWNERS #107693
replace filepath.Walk with filepath.WalkDir in doCleanSubPaths #107669
Update CRI-API Capabilities to include a field that allows us to set … #104620
pull-kubernetes-update ci job needs etcd installed #107738
Add configuration point to SharedInformer to transform objects before storing #107507
strip dry-run metadata unwanted fields #107088
Add a script to help with running make update using docker #107728
cacher: Implement watchCacheInterval to reduce watchCache lock contention #106828
sched: fix goroutine leak in unit tests #107703
staging/publishing: update branch rules to reflect new Go versions 1.17.6 and 1.16.13 #107616
Fix up integration test user groups #107644
update godoc for ServiceLBNodePortControl feature gate #107692
Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true #107688
Fix printing control character in kubectl explain #107682
Add SOCKS5 proxy support for kubectl exec #105632
Fix bug with node restriction blocking pvc.status.resizestatus change #107686
Fix goroutine leaks in package selectorspread #107445
Fix label msg when overwrite flag is set #107657
change node staging path for csi driver to PV agnostic #107065
Update fluent bit version to 1.8.10 for GKE windows container #107478
Remove dockershim comments in kubelet #107664
upgrade github.com/cespare/xxhash/v2 to v2.1.2 #105142
apf: change controller to use SSA for patches #107456
apf: add metric to track dispatch with no accommodation #106629
Include applying subresource in Running section #107588
apf: clarify with comment #107106
Add enj to sig-auth-encryption-at-rest-approvers #107648
Handle invalid selectors properly #107559
Fix flake on TestQuotaLimitService #107276
expand the alias from contribex to the full name #107642
Test isolation among FlowSchemaStatus Conditions #107572
Turn off informer for statefulset unit tests #107443
Update to runc v 1.0.3 #106912
Fix topology hints test #107548
fix not return when channel closed #107542
Controller metrics #106845
integration test: API allow IPs with leading zeros #107564
Skip tests when no signal emitting command #107595
change default container-runtime-endpoint to containerd.sock #107624
remove GAed HugePageStorageMediumSize feature gate #104120
update to Go 1.17.6 #107612
feat: propagate req context into proxyReq #107606
Fix kubectl bug where bash completions don’t work if –context flag is specified with a value that contains a colon #107439
Explain rollout of API Priority and Fairness in kube_features.go #107316
build/dependencies.yaml: remove the dependency on Docker #107607
Clean up dockershim flags in the kubelet #106907
Updated Links to IANA for Service Name and Transport Protocol Port Number Registry #107603
Make KUBE_TEST_ARGS come last, so that -args can be used #107516
added devicePath check for fcDisk #107279
kubeadm: adapt CRI detection and defaults after the dockershim removal #107317
Update cri-tools to v1.23.0 #107604
kubeadm: make the phase prefix and capitalization consistent #107584
Removes code that was not completely cleared before #107517
kube-proxy: fix misleading in help info #105586
Deprecate dynamic log sanitization #107207
fix: delete non existing Azure disk issue #107406
Remove unused selflink references in different testing-related files #107551
upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 #107565
Remove fluentd-elasticsearch addon #107553
Correct the feature gate string for RBD migration. #107554
Validate OWNERS files - remove sections about emeritus reviewers #107540
kubeadm reset: add support for dry-run #107512
Remove no-longer used selflink code from kubelet #107550
fix: remove outdated ipv4 route when the corresponding node is deleted #106164
It is weird that lastScheduleTime is earlier than creationTime #107528
Make metadata fake client implement testing.FakeClient #105387
re-add missing sig-security-* aliases #107541
limit the scope of 169.254.169.252 ⁄32 to host #107502
Fix typo #106445
storage: correct struct fields in volume plugins #107529
Cleanup OWNERS files - Jan 2021 Week 1 #107293
Order suggested FlowSchemas by matching precedence #107510
add myself as approver to pkg/controller #107508
fix: azuredisk parameter lowercase translation issue #107429
Next step in CSI migration for openstack #107462
logs: add benchmark #106594
Skip tests when no signal emitting command #107361
migrate volume/csi/csi-client.go logs to structured logging #99441
cleanup: remove switch for binary condition in scheduler cache #107494
log message verbosity #106978
Graduate EfficientWatchResumption feature to GA #106943
remove iptables cleanup from local-up-cluster.sh #107450
Remove runtime in validate #107426
Fix typo #106453
fix curent to current #107080
fix grammar #106400
Fix AppArmor unloaded profile e2e test #107448
Remove skip Multi-AZ test based on provider #107472
cleanup(kubelet): use errors.Is(err, os.ErrProcessDone) #107250
synced up v1 and v1alpha2 CRI API comments and updated the readme #107192
Mark container-runtime kubelet flag as deprecated #107094
fix: some typos and syncPod outdated workflow annotation #106470
kubelet: Remove false PLEG errors #106353
kubeadm: print warnings to stderr #107467
correct struct fields in various core storage structs #107466
cli: avoid logging command line errors in more cases #107044
add test to cover multipoint with scoring extension #106766
Allow greater or equal in storage provisioning check #107408
nodeAffinity filtered nodes should be excluded when calculating skew … #107009
kubeadm: remove the deprecated output/v1alpha1 API #107468
fix goroutine leaks in TestConfigurationChannels #107163
test/integration/scheduler_perf: check for unused template parameters #104716
Fix header mutation race in timeout filter #107452
Update GKE kubernetes sources download link #104669
use a community owned domain for the invalid registry #107455
Reject proxy requests to 0.0.0.0 as well #107402
refine comments of quota monitor #107389
Add GC workqueue Forget to stop the rate limiter #106029
fix the problem of using %w incorrectly #104927
correct struct fields in VolumeSource and PersistentVolumeSource #107441
Fix typo in empty_dir.go #99099
Use math.Round when convert float to int in PodTopologySpread #107384
restore NumPDBViolations info of nodes, when HTTPExtender ProcessPree… #105853
fix typos in comment #107420
Add Service integration tests for internalTrafficPolicy when Type=ExternalName #107339
removed unnecessary log line #107427
update cadvisor version in test #106287
kube-scheduler: log possible error #105870
Replace ioutil with io and os for pkg/api #106021
kube-proxy: fix duplicate port opening #107413
Add completion for kubectl config set-context #106739
Slightly improve reliability of storage List tests. #107330
csi: correct struct fields in CSI{Persistent}VolumeSource. #107385
Remove feature gate ImmutableEphemeralVolumes #107152
cleanup: remove insecure flag #106865
kubectl: remove unnecessary fmt.Sprintf #106152
Cleanup FindPluginByName() in VolumePluginMgr #106073
Add metric for reporting total end-to-end mount time #107006
add failopen metric #107171
refactor recordSchedulingFailure function name to more appropriate #106578
Support IPv6 in echoserver #107392
Skip tests unless multizone #107338
fix the log description #105264
Add label selector in ‘kubectl rollout’ commands #99758
Replace ioutil with io and os for cluster/images/etcd #106019
kubectl: Document –for’s Unicode case-folding condition-value comparison #104671
CHANGELOG: Reflect that lease manager object limit is 1k, not 10k #104561
custom-metrics: do cleanup even if the creation is not full succeed #103252
kubelet: use newtimer instead in nodeshutdown manager #106796
Improve the error message when trying to proxy an unsupported service type #106488
Remove return value from MaybeResetRESTMapper() #106472
fix(cpumanager): Do not release CPUs of init containers while they are being reused in app containers #104837
[pkg/printers/internalversion/import_known_versions]: fixup typo #104228
fix kubelet flushlogs not working together with exit #104774
if the ok returned by RequestInfoFrom is false, the requestInfo is nil #107176
add more message for no PodSandbox container #107116
Don’t bypass ResponseWriter wrappers for apiserver healthz errors. #107034
remove RuntimeClass feature gate #106882
Update default PF flow schemas to avoid all endpoint/configmaps operations from controller-manager to match leader-election PL #106725
add unit tests for TestSetNestedStringSlice, TestSetNestedSlice etc. #106647
test/e2e/common/storage: enhance assertions #106624
Request: Add wzshiming as SIG Node reviewer #104143
add probe warning message body for terminated redirect #103967
support removal of files by the ./hack/update-openapi-spec.sh #106975
Add more info when failing to call PdhAddEnglishCounter #106644
fix return code when request /logs with long file name #101478
Add unit tests for registry/apiserverinternal/storageversion #104429
fix a potential deadlock #102636
Update ineligible_endpoints.yaml to include HPA #107349
kubeadm: remove the restriction that the ca.crt can only contain one certificate #107327
Remove –enable-swagger-ui since no effect from 1.14 #105032
Check the private SSH key existence in the node e2e tests #106621
Add unit tests for pkg/registry/authorization/util #104807
Fix comment out typo (from resolve.conf to resolv.conf) and change the content name (from maxResolveConfLength to maxResolvConfLength) #106979
Execute sync before taking the snapshot #107312
Recommend SimpleIntervalClock instead of IntervalClock #106915
Fix logging resource-scoped watch requests as GET requests. #106674
fix static check of importing the same package multiple times #101856
Fix the leak of vSphere client sessions #107337
kubeadm: use build tags and split the Windows releated logic into separate files for kubelet component config #107270
Clean up dockershim in tests #107179
replace syscall with sys/unix pkg in pkg/util/ipvs #107001
Fix kubectl completion zsh to use any command name rather than hardcoded kubectl #106969
Don’t perform expensive go-cmp/cmp comparisons if unneeded #104822
kube-apiserver: use –api-audiences as –service-account-api-audiences is deprecated #103078
Fix a panic when using invalid output format in kubectl create secret command #107221
Use utils string-slice comparison #104819
Build: improve documentation of build artifacts #103311
Concurrentize pkg/registry/flowcontrol/ensurer/strategy.go #107326
remove runDockershim #97252 #107309
assignQuota checks if the underlying medium supports quotas and if so setting it #107302
flake: remove the error handler for cronjob integration test #107200
fix obsolete comments in runtime/schema struct #106688
fix “k8s.io/apimachinery/pkg/util/validation” is imported more than once #106215
break the pointless loop when group matched #105598
Update sleep .5 ⇨ sleep 0.5 #105389
code cleanup for container/helpers.go #106756
P&F: enable mutating work estimator #106085
Make RetryWatcher sleep interruptible #93709
Delete .staticcheck_failures #107328
add test cases for scheduler/PriorityQueue.Activate #106203
changelog-1.22:Fix notes of PR 101151 #105765
Improve test coverage: pkg/api/persistentvolume #107159
kubeadm: fix panic in runKubeletConfigPhase #107314
Fix PV controller unit test 5-7 #107166
updated deprecation messages from 1.23 to 1.24 #106667
Fix log blank typo to avoid en/decode issues #106547
Fix the wrong log #106421
fix S1017 and S1002 in pkg/apis/core/validation/validation.go #106397
fix commont of controller manager leadermigration filter #106375
fix duplicate webhook insert operation #106294
Fix and improve comments on kubelet metrics #105829
Fix display of CHANGELOG-1.19.md by inserting newline #103136
Remove AppArmor loaded profile validation #97966
Stop defaulting Service internalTrafficPolicy when type is ExternalName #104846
Graduate PreferNominatedNode to GA #106619
apf: use v1beta2 in registry package #107104
remove crictl tar #106340
There are no more Feature:Performance tests any longer, removing the … #106283
k8s.io/apiserver/pkg/server: fix name in APIServerHandler description #105449
Fix typo in gci/README.md #98771
client-go: Clear the ResourceVersionMatch on paged list calls #107311
Refers to the GC doc in the blockOwnerDeletion API doc #107195
Change default runtime to containerd for Windows cluster #107189
Add comment on beta status for APIPriorityAndFairness feature gate #107145
Remove dockerless build tag and DockerLegacyService interface #107119
conformance: correct typo for cronjob forbidconcurrent #106856
Fix a typo in comment #105955
Fix function comment typo #105808
Optimize Cobra parameters of Controller Manager #105721
Fix link 404 #99329
Fix doc for leader-elect-resource-lock flag #107185
Fix the doc string of GetOldObject func #105976
fix(*): display the diff as new-old #103036
Use a lister for bootstrap flowcontrol config objects. #105800
set RemainingItemCount to ParitalObjectMetadataList #107177
kubeadm: ensure CRI endpoints are managed with URL schemes #107295
Deprecate Service.Spec.LoadBalancerIP #107235
Remove unused arg of kubeadm/WaitForKubeletAndFunc #107217
cleanup(apiserver): Correct the error message to not use the “–max-resource-write-bytes” & “–json-patch-max-copy-bytes” string. #106875
Changed code to improve output for files under test/e2e/autoscaling #106200
Set max results if its not set #106280
chore(kubectl_utils): remove windows specifc command addition for sync #107137
Bump elasticsearch image to 7.16.2 #107209
kube-proxy should log the payload when iptables-restore fails #106847
fix: documenting that kube-proxy only use the first address in each endpoint #106643
When volume is not marked in-use, do not backoff #106853
Fix order of commands in the snapshot tests for persistent volumes #107173
fixing three goroutine leaks in bounded_frequency_runner_test.go #107095
e2e: Stop using deprecated zone nodeSelector #106821
Adds Windows support for etcd image #106593
dependencies: update klog to v2.40.1 #107103
kube-proxy: note that cli args is ignored if config file is specified #107157
docs: fix error link path in storage e2e test doc #106831
e2e tests: log zone when creating volume #106822
feat(netpol tests): netpol probeConnectivity refactor #107138
Remove docker as container runtime for local-up-cluster.sh #106909
Improving performance of EndpointSlice controller metrics cache #107091
Fix openapi v3 bug which causes incorrect schema version to be looked up #107061
go.mod: github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 #104733
Don’t log vSphere configuration data in storage e2e tests #107136
Fix default config flags #107131
Allow create.specialVerbs to be customized #107083
Allow custom img resolver and flags for set image #107085
Mark --container-runtime-endpoint and --image-service-endpoint stable #106954
Remove AttachID matching from Detach #107025
apiserver endpoint reconciler ip families #106721
Prepare AllocateLoadBalancerNodePorts for GA #107027
fix the error when cleaning up finished jobs for cronjob #104799
Remove Hostprocess flag from e2e test #107087
clear pod’s .status.nominatedNodeName when necessary #106816
Update CHANGELOG to add missing release notes. #107084
Reset metric observed by TestProxyHandler for repeatable test runs. #107060
tests: Lowers the number of pods returned by estimateMaximumPods #107030
Remove adtac from sig-scheduling reviewers #107076
Add Close() for profile #107050
skip reduceAllocatableMemoryUsage if cgroup v2 is enabled #107070
csi-translation-lib: Fix doc string of few funcs #106986
kubeadm: cleanup the feature gate of dual-stack. #106648
nominate denkensk to sig-scheduling reviewers #107036
Cleanup OWNERS files (No Activity in the last year) #106436
Fixed skipping valid volume plugins when another plugin has an error #106703
Remove JSON logging performance regression #107035
scheduler: cleanup return value #107051
Remove bazel condition check in openapi_test #106914
conformance tests should have at least 2 untainted nodes #106313
kubeadm: mark v1beta2 as deprecated #107013
Document when workqueue metrics are dropped #106934
Fix unexpected end of TestDependentsRace #106950
Unify code for List and GetToList for etcd and cacher #106542
cap nunmber of tries on e2e nodePort stop service test #106990
Changelog: mention kube-scheduler bits deprecation #107022
Re-introduce removed kubectl –dry-run values. #107003
kubeadm: handle dockershim specific flags for 1.24 #106973
Clarify APF metric wrt all three stages of execution #106748
Point flowcontrol users at v1beta2 #107004
staging/publishing: Set go1.16 version to go1.16.12 and go1.17 to go1.17.5 #106944
bump k8s.io/gengo #106601
Introduce new prune parameter into diff command #105164
Drop unused auto-install invocation #106843
include field paths in unknown/duplicate errors #106568
Direct v2betaX users to migrate to HPA v2 #106887
Rename ServeWithListenerStopped to Serve in secure_serving #106256
Skip LB test for IPv6 clusters #106992
adding evictions_total metric and marking evictions_number deprecated #106366
apf: track initial and final seats in httplog and metrics #106628
scheduler: fix race condition during cache refresh #106744
Skip creating HNS loadbalancer with empty endpoints #106936
Promote Pod- & ServiceProxy Test to Conformance - +12 endpoint coverage #106880
apf: ensure exempt request is noted with classification #106827
Code generation outside GOPATH #106964
Bump konnectivity network proxy to v0.0.27. #106922
mount-utils: Detect potential stale file handle #106906
Update to go1.17.5 #106956
dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 #106949
Lint/Beautify yaml in OWNERS files #106458
Fix Bugs in CPUManager distribute NUMA policy option #106599
Update golang.org/x/tools to a specific tag (v0.1.8) and avoid SHA #106921
Remove invalid comment in legacyregistry #106291
kubeadm: update OWNERS for 1.24 #106920
Fix node resizing E2E test flake #104177
kubeadm: amend constant to kubelet. #106872
Remove stackdriver version variable #104640
kubelet: set failed phase during graceful shutdown #106901
Remove support for Endpoints and ConfigMaps lock from leader election #106852
refactor(apiserver): remove the insecure flags #106859
apf: add new label for request_execution_seconds metric #105517
Improve pathrecorder duplicate registration info #106892
refactor: remove the insecure flags in controller-manager #106860
Deprecate types in k8s.io/apimachinery/util/clock #106850
Even more resilient version.txt #106658
kubeadm: validate local etcd certficates during expiration checks #106891
update k/utils to v0.0.0-20211116205334-6203023598ed to fix inotify memory leak #106473
Add V1.23.0 api compatibility testdata #106868
Completely remove in-tree dockershim from kubelet #97252
rbd: initialize ceph monitors slice with an empty value. #106878
Disable GCE external load balancer when services handled by Ingress-GCE #106683
Remove feature gate NamespaceDefaultLabelName #106838
resolve TODO in mapToUnstructured and sliceToUnstructured #106797
Changed code to improve output for files under test/e2e/apimachinery #106764
Update fieldValidation godoc #106722
feat(sample-controller): use UpdateStatus #106530
Remove ReallyCrashForTesting and cleaned up some references to Handle… #101719
testdata dirs are not useful go code #106559
kubeadm: avoid requiring a CA key during kubeconfig expiration checks #106854
cleanup: return frameworkruntime.NewFramework directly #106851
Update to go1.17.4 #106833
staging/publishing: Add justaugustus as approver + RelEng reviewers #106823
fix mapToUnstructured error message: should be ‘map’ instead of ‘struct’ being converted #106786
cleanup: use present typeFrom variable to avoid another reflect.TypeOf call #106785
kubectl: combine assertion prevent npe in test #106762
Added an integration test for NodeResourcesFit scoring #106747
Update kubemark to use EndpointSlices and proper user-agents #106740
Add watchcache metrics to tracking its progress #106737
OWNERS: add pohly as SIG Instrumentation review and component-base/logs approver #106736
Correct Generator calls for executing seat count #106727
fix typo in /test/integration #106676
refactor: use utilerrors instead of join error msg #106673
Make writing version.txt more resilient #106653
api/errors: explicitly allow nil error parameters #106646
DelegateFSGroupToCSIDriver e2e: skip tests with chgrp #106641
Add status count to the existing storage_operation_duration_seconds histogram, remove volume_provision metric check #106609
Adding an example for kubectl plugin list #106600
add trace step for transformResponseObject #106598
Code cleanup: fix some typo #106588
fix test failed because of flag redefined #106584
Registering kube-proxy metrics on windows kernel mode #106581
Simplify storage.Interface by merging Watch and WatchList functions. #106528
Add e2e tests for disable nodeport lb feature #106522
Replace time.Now().Sub(x) with time.Since(x) #103863
correct kube-addon-manager image location #106495
Bump Metrics Server to v0.5.2 #106492
Add unit test for Recorder #106452
cleanup duplicated method makeNodeWithExtendedResource in noderesources unit test #106447
Fix format string argument mismatch in e2e framework log message #106427
kube-proxy remove todo: call iptables -S first when delete chain #106406
Update dims as approver for some top level dirs #106381
Fix golang imports in k8s.io/pkg/controller/volume/persistentvolume package #106344
Fix failing volume cloning e2e test for GCE PD CSI Driver #106322
e2e_node: provide an option to specify hugepages on the specific NUMA node #106307
Changed code to improve output for files under test/e2e/instrumentation #106233
Fix string output format for secret validations #106179
refactor: remove dup code #106153
Refactor kubelet config validation tests #105360
Fix duplicate CSI kube client #105127
storage e2e: replace mock driver, update images #106791
Revert dockershim CRI v1 changes #106803
publishing-bot: remove rules for release-1.19 #106781
Grpc field rename #106774
Add enj to sig-auth-authenticators-approvers #106728
bump TestHTTP1DoNotReuseRequestAfterTimeout timeout #106716
publishing-bot: add 1.23 rules #106670
Revert sigs.k8s.io/structured-merge-diff/v4 to v4.1.2 #106660
Unversion and normalize openapi v3 fixtures #106657
Delegate FSGroup CSI driver e2e: verify fsgroup is passed to CSI calls #106611
test: update major page fault values for summary test #106533
Clean up deep copy needed for UpdateStatefulSet #106616
e2e_node: unify device tests #106348
Fix the bug with GRPC probe #106518
test/e2e_node/remote: support pure SSH mode #105764
Speed up field validation tests #106577
Return BadRequest for invalid large patch #106576
enabling runtime-config to be passed via make file for node-e2e testing purposes #106431
Deflake “Kubelet should correctly account for terminated pods after restart” #106544
Add e2e test for CEL Validation Rules #106462
Validate etcd image versions in test manifests #106563
Updating TopologyCache to disregard unready endpoints in calculations #106510
Updating kube-proxy to ignore unready endpoints for Topology Hints #106507
bumpt etcd image version for e2e tests #106562
Changed code to improve output for test/e2e/windows #106220
Server Side Strict Field Validation #105916
kubelet: fix npe in test #106414
tests: Prepull images #105481
tests: Fetch the pod logs in failed cases #105451
Promote DeleteCollection service e2e test to conformance - +1 endpoint #106281
StatefulSet PVC auto-delete implementation #99728
kubelet: print flags after initializing logging #106520
node e2e: endocrimes as reviewer #106493
demote kubelet events test from Conformance #106511
skip tests that uses default storage class #106503
Make CRI v1 the default and allow a fallback to v1alpha2 #106501
Graceful Node Shutdown Based On Pod Priority #102915
bump e2e period to wait for events #106508
Revert “Bump DynamicKubeConfig metric deprecation to 1.23” #106505
Use client set to get nodes configuration #106471
Implement grpc probe action #106463
use golangci-lint #106448
Close connection and stop listening when port forwarding errors occur so that kubectl can exit #103526
migrated schedular to structured logging #106305
kubelet: extract multiple ignore errors validate logic to isExpectedError #106041
OpenAPI v3 #105945
Fix(kube-proxy): remove os.Exit from cobra.Command #104750
oidc authenticator: allow http.Client to be overridden #106141
Bump discovery burst for kubectl to 300 #105520
Add warning about using unsupported CRON_TZ #106455
Turn CSIMigrationAWS on by default #106098
Scheduler simplified MultiPoint plugin config #105611
migrate –register-with-taints to KubeletConfiguration #105437
Csi translation portworx #103447
Graduate TopologyAwareHints feature gate to beta #106433
Fix metrics AlreadyRegisteredError on TestRecordOperation and TestGetHistogramVecFromGatherer unit test #106289
ResettableRESTMapper to make it possible to reset wrapped mappers #105623
Add Support for OpenAPIEnum in OpenAPI v2 #105057
turning on the CSIMigrationGCE feature flag #104722
Fix sample_and_watermark_test.go for bad luck, repeated test #106325
Include Conditions in kubectl describe namespace #106219
Recover expansion failure #106154
Remove ignore error flag for drain, and set this feature as default #105571
CloseIdleConnections of wrapped Transport RoundTrippers #104844
kubectl: add deprecation notice to flag usage help #106172
Watch HPA v2 instead of v1. #106316
fix edit of non-registered custom API types #106268
CHANGELOG/1.9: Fix up GCS bucket references #106450
Factored TimedObserver into less surprising pieces #106432
Add wait json #105776
Feature implementation: Validation rules for Custom Resource Definitions using the CEL expression language #106051
Fix timeout flake in restart kubelet e2e #106434
RBD in-tree plugin migration to CSI driver using migration translation lib #95361
Remove feature gate check when skipping OnRootMismatch tests #106435
Reduce the number of expensive calls in the Windows stats queries for dockershim #104287
prevents garbage collection from removing pinned images #103299
Add more msg when exec probe timeout #106201
fix init container oomkilled as a failure #104650
Increase the duration to expire an assumed pod #106412
DelegateFSGroupToCSIDriver feature gate to beta #106330
updated probe handler types descriptions #106285
Add missing alias - used in staging/src/k8s.io/cluster-bootstrap/OWNERS #106430
Simplify kubelet file config field allowlists #105685
De-flake ephemeral containers e2e test #106425
Exclude generated files from the static check #106418
Fix deletion protection unit test #106376
e2e_node: fix nil pointer exception under quota lsci test #106408
Kube-proxy/ipvs; Use go “net” lib to get nodeIPs #101429
Add dgrisonnet as sig-instrumentation reviewer #106275
Upgrade etcd to 3.5.1 #105706
Update comment on ResourcePolicyRule #105555
leaderelection: populate the apiVersion/kind when reporting events #106399
package log runner as part of Kubernetes releases #106123
Use HPA v2 in E2E tests. #106315
Added requestSloLatencies metric #105890
Skip OnRootMismatch tests if the CSI driver supports VOLUME_MOUNT_GROUP. #106395
kubelet: cgroupv2 disable memcg notifications #106332
Fixed using reference in for loop #105459
Revert strict-in-alpha to false #106392
upgrade kustomize-in-kubectl to v4.4.1 #106389
kubeadm/certs/renew:remove deprecated flags csrOnly and csrPath #106370
test/e2e: cleanup e2e core framework’s import from sub package e2elog #106170
Get Windows network stats directly for Containerd #105744
Ensure there is one running static pod with the same full name #104743
Switch from arguments to an input structure for kubectl command #106159
kubelet: fix file descriptor leak in log rotations #106382
Don’t clear managedFields on live object #106195
Fix nil check in map merge #105135
Remove some dead code in the ipvs proxy #105450
kubeadm: add mutation for Linux paths in KubeletConfiguration on Windows #105992
pod/storage: remove always-empty ‘oldMachine’ in setPodHostAndAnnotations() #106048
Remove outdated metric IMPLEMENTATIONS, update links #106360
Move a number of scheduler metrics to STABLE #106266
Wire contexts to RBAC controllers #105550
Fix staticcheck failure in pkg/kubelet/cm/cpuset #103415
Append node e2e logs to file where possible #106362
Mark restart_test as flaky #106359
OWNERS(justaugustus): Prune extraneous reviewer roles #106358
kubeadm: fix test failures in the e2e_kubeadm suite #106321
Add NodeFeature tag to ephemeral containers e2e #106346
Migrated remaining lines of server.go and csi.go to structured logging #106314
Fix flake caused by sampling signal counter too early. #106329
Fix check for subpath source #105512
Remove redundant forwarding rule in filter table #97279
ScoringStrategy RequestedToCapacityRatio’s shape should not be empty #106169
don’t expand $(ls -A /scrub) in PV_RECYCLER_TEMPLATE #106319
: Fix out of bounds in TestSyncLabels unit #106327
vendor: update system-validators to v1.6.0 #106323
make kubectl cp resume on transfer error #104792
Fixed nil pointer dereference #106317
Move configurable fsgroup to GA #105885
Add wired off code for Validation rules for Custom Resource Definitions using the CEL expression language #106234
Graduate IngressClassNamespacedParams to GA #104636
build: use debian-iptables:bullseye-v1.1.0 #106301
PodReadinessGate is stable feature and test runs all green #106299
Clean up some service logging #106296
The DownwardAPIHugePages feature is beta now, set true by default. #106271
fish out ShareProcessNamespace from orphans tab #106298
kubeadm: fix inverted warning message #106288
more iptables proxy cleanups #106269
Changed code to improve output for files under test/e2e/lifecycle #106226
Bugfix: prevent daemon controller to adopt controller revisions of ot… #101250
vendor: Bump cAdvisor to v0.43.0 #106282
Fix concurrent map writes error in kube-apiserver #106045
Changed buckets for apiserver_request_duration_seconds metric #106306
client-go: add jitter to flowcontrol.Backoff #106240
PV controller changes to support PV Deletion protection finalizer #105773
e2e_node: does not rely on Kubelet automatic restart service under hugepages tests #106251
More seat metrics for APF #105873
Don’t write fake logs to the real test log #106297
Add mTLS as default HTTPConnect egress configuration for GCP. #104921
Upgrade preparation to verify sysctl values containing forward slashes by regex #102393
tests: Logs the stdout and stderr for network consistency Windows tests on error #106273
Bump k8s.io/kube-openapi to commit ee342a809c29 #106181
e2e_node: Skip dynamic config tests when the feature is disabled #106263
Use simple match instead of regex match in GCE Windows OpenSSH startup script #106245
Add periodic etcd scraping to integration tests #106190
Improve wording for panic message #106186
E2E podresources: fix test checking esclusive cpus allocation #106116
Migrated scheduler files comparer.go, dumper.go, node_tree.go to structured logging #105968
Update sig-cli owners #106156
fix some kubeadm init phase constants #106243
Changed the Info type so that the config file can be displayed withou… #106228
Migrate assume_cache.go to structured logging #105904
kubeadm: introduce the UnversionedKubeletConfigMap feature gate #105741
Migrated scheduler files preemption.go, stateful.go, resource_allocation.go to structured logging #105967
Create HPA v2 Stable API #102534
fix some lint error #105874
Pod os field kubelet #105292
Make the docker buildx check call –help #106174
Migrated scheduler file cache.go to structured logging #105969
Move WindowsHostProcessContainers feature-gate to Beta #106058
: Reconcile OS and arch labels periodically #104613
e2e_node: fixes after dynamic configuration removal #106210
Fix creation of the administrator_keys_file file with many users #106196
kube-proxy consider endpoint readiness to delete UDP stale conntrack entries #106163
Added non-serialized metrics for windows, for 3 pods #105854
Adding kubelet metrics for started and failed to start HostProcess containers #105406
Konnectivity Proxy: move proxy-agent cpu limit to request. #103626
making some apiserver metrics stable #106122
Fix edit command #105817
–as-uid flag in kubectl and kubeconfigs. #105794
kubeadm: add a new output/v1alpha2 API; deprecate output/v1alpha1 #105295
remove unnecessary function after PR #88885 merged #103634
staging/publishing: fix go version for go1.16.10 #106217
Kubelet: implement support for podAndContainerStatsFromCRI #103095
Bump konnectivity to v0.0.25 #106213
Update to go1.17.3 #106209
Ensure deletion of pods in queues and cache #106102
kube-proxy iptables code clarity cleanups #106158
Update to latest kubedns and nodelocaldns images. #106189
Update corefile-migration to v1.0.14 and update coredns to 1.8.6 #105251
fix kubelet/types is imported more than once #105621
Don’t guess SELinux support on error #105934
Fix bug where using kubectl patch with $deleteFromPrimitiveList on an empty or nonexistent list adds the item to be removed #105421
misc iptables proxy fixes #106030
Use “Capacity” instead of “Allocatable” for an accurate node memory total size #102917
client-go token source transport implement RoundTripperWrapper interface #106177
Add –override-type flag to kubectl run and kubectl expose #105140
kubemark: replace deprecated –log-file parameter