- Update to version 1.20.15:
* Release commit for Kubernetes v1.20.15
* Add guard against nil/error/panic for topologies.go
* fix: do not delete the lb that does not exist
* Fix header mutation race in timeout filter
* Don't set sysctl net.ipv4.vs.conn_reuse_mode for kernels >=5.9
* kubeadm: remove the restriction that the ca.crt can only contain one certificate
* Fix the leak of vSphere client sessions
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.14
* Release commit for Kubernetes v1.20.15-rc.0
* Release commit for Kubernetes v1.20.14
* kubeadm: avoid requiring a CA key during kubeconfig expiration checks
* kubeadm: print the CA of kubeconfig files in "check expiration"
* kubeadm: validate local etcd certficates during expiration checks
* Ensure deletion of pods in queues and cache
* kube-scheduler: Increase the duration to expire an assumed pod
* Skip check for all topology labels when using system default spreading
* workqueue: fix leak in queue preventing objects from being GCed
* Fix workqueue memory leak
* Update mounter interface in volume manager
* node: e2e: add test for the checkpoint recovery
* e2e: node: release-1.20: backport findKubeletServiceName
* e2e: node: backport SRIOV utilities
* devicemanager: checkpoint: support pre-1.20 data
* Reduce calls to docker from dockershim for stats
* Fix concurrent map writes error in kube-apiserver
* fix: remove VMSS and VMSS instances from SLB backend pool only when necessary
* fix: leave the probe path empty for TCP probes
OBS-URL: https://build.opensuse.org/request/show/1065750
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=33
- Update to version 1.20.13:
* defer close the rotated log open
* Add tests for checking bind mounts
* Check subpath file
* Add check for subpaths
* Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch
* Update bazel
* Fixed unit test SELinux support
* Add shortcut for SELinux detection
* Don't guess SELinux support on error
* Use separate pathSpec for local and remote to properly handle cleaning paths
* support more than 100 disk mounts on Windows
* Support cgroupv2 in node problem detector test
* Update debian, debian-iptables images to pick up CVEs fixes
* Fixing how EndpointSlice Mirroring handles Service selector transitions
* Fix race condition in logging when request times out
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12
* Run storage hostpath e2e test client pod as privileged
* Ignore VMs in vmss delete backend pools
* fix: skip not found nodes when reconciling LB backend address pools
* fix: consolidate logs for instance not found error
* Revert 102925: Fix Node Resources plugins score when there are pods with no requests
* e2e scheduling priorities: do not reference control loop variable
* tests: Wait for the network connectivity first
* 'New' Event namespace validate failed
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11
* Refine locking in API Priority and Fairness config controller
* kube-controller-manager: properly check generic ephemeral volume feature
* Fix null JSON round tripping
* Propagate conversion errors
OBS-URL: https://build.opensuse.org/request/show/936735
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=10
* defer close the rotated log open
* Add tests for checking bind mounts
* Check subpath file
* Add check for subpaths
* Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch
* Update bazel
* Fixed unit test SELinux support
* Add shortcut for SELinux detection
* Don't guess SELinux support on error
* Use separate pathSpec for local and remote to properly handle cleaning paths
* support more than 100 disk mounts on Windows
* Support cgroupv2 in node problem detector test
* Update debian, debian-iptables images to pick up CVEs fixes
* Fixing how EndpointSlice Mirroring handles Service selector transitions
* Fix race condition in logging when request times out
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12
* Run storage hostpath e2e test client pod as privileged
* Ignore VMs in vmss delete backend pools
* fix: skip not found nodes when reconciling LB backend address pools
* fix: consolidate logs for instance not found error
* Revert 102925: Fix Node Resources plugins score when there are pods with no requests
* e2e scheduling priorities: do not reference control loop variable
* tests: Wait for the network connectivity first
* 'New' Event namespace validate failed
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11
* Refine locking in API Priority and Fairness config controller
* kube-controller-manager: properly check generic ephemeral volume feature
* Fix null JSON round tripping
* Propagate conversion errors
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=30
- Update to version 1.20.11:
* Fix a small regression in Service updates
* Service: Fix semantics for Update wrt allocations
* Fix buckets initialization
* fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs
* fix: skip case sensitivity when checking Azure NSG rules
* Keep MakeMountArgSensitive and add a new signature that receives flags
* Update the unit tests to handle mountFlags
* Add missing interface method in mount_unsupported.go
* Pass additional flags to subpath mount to avoid flakes in certain conditions
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10
* Copy golang license to staging copies
* delete stale UDP conntrack entries for loadbalancer IPs
* job controller: don't mutate shared cache object
* Set idle and readheader timeouts
OBS-URL: https://build.opensuse.org/request/show/919508
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=9
* Fix a small regression in Service updates
* Service: Fix semantics for Update wrt allocations
* Fix buckets initialization
* fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs
* fix: skip case sensitivity when checking Azure NSG rules
* Keep MakeMountArgSensitive and add a new signature that receives flags
* Update the unit tests to handle mountFlags
* Add missing interface method in mount_unsupported.go
* Pass additional flags to subpath mount to avoid flakes in certain conditions
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10
* Copy golang license to staging copies
* delete stale UDP conntrack entries for loadbalancer IPs
* job controller: don't mutate shared cache object
* Set idle and readheader timeouts
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=29
- Update to version 1.20.10:
* Bump to golang 1.15.15 in build/**
* Bump to golang 1.15.15 in cluster/** and staging/**
* Bump to golang 1.15.15 in test/**
* Avoid spurious calls to update/delete validation
* Fix metrics reporting for the deprecated watch path
* Update configure-helper.sh
* Update configure-helper.sh
* Update configure-helper.sh
* Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools
* feat: Provide IPv6 support for internal load balancer
* Update to using apiserver-network-proxy v1.22
* Make CSR cleaner tolerate objects with invalid status.certificate
* disable aufs module
* update comments and owners file for pkg/util/removeall
* kubelet: do not call RemoveAll on volumes directory for orphaned pods
* APF e2e: wait for steady state before proceeding
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.9
* Updated to use konnectivity client v0.0.21, and implemented placeholder context
* include google/go-cmp in client-go/dynamic/fake/BUILD
* Simplify use of the fake dynamic client
* fix: return empty VMAS name if using standalone VM
* Fix race in attachdetach tests
* Fix frameworkImpl.extenders being not set
* Fix closing of decorated watcher channel on timeout
* update bazel
* (scheduler e2e) Create balanced pods in parallel
OBS-URL: https://build.opensuse.org/request/show/914238
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=8
- Update to version 1.20.9:
* Bump to golang 1.15.14 in build/**
* Bump to golang 1.15.14 in cluster/** and staging/**
* Bump to golang 1.15.14 in test/**
* Update debian-iptables image to buster-v1.6.5
* Update debian-base image to buster-v1.8.0
* Bump SMD to v4.1.2 to pick up #102749 fix
* generate scheduler merge patches on the pod status instead of the full pod
* p&f e2e test: log response header for better troubleshooting
* Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default
* Do not throw error when we can't get canonical path
* Fix Node Resources plugins score when there are pods with no requests
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8
* Remove error wrap from logs
* staging/publishing: Set default go version to go1.15.13
* build: Update to k/repo-infra@v0.1.8 (supports go1.15.13)
* Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13)
* Update to go1.15.13
* feat: remove ephemeral-storage etcd requirement
* endpointslicemirroring controller mirror address status
* sched: fix a bug that a preemptor pod exists as a phantom
* Revert "Cleanup portforward streams after their usage"
* Remove unnecessary snapshot ability check
* serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match
* Fix VolumeAttachment garbage collection for migrated PVs
* Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error
* Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin
* Ignore transient errors when gather stats
* Speed up PV provisioning for vsphere driver
* fix error of setting negative value for containerLogMaxSize
* Upgrade konnectivity-client for GRPC connection fixes
* Update etcd image revision
* Update debian-base to buster-v1.7.0
* Update debian-iptables to buster-v1.6.1
* Respect annotation size limit for SSA last-applied.
* Remove unnecessary quotes from get-kube scripts
* Fix expired unit test certs
* fix: delete non existing disk issue
* Azure: avoid setting cached Sku when updating VMSS and VMSS instances
* Update cos-gpu-installer image
* Ref counting is only applicable to Remote endpoints
* Make watch order conformance test reliable
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7
* fix removing pods from podTopologyHints mapping
* fix: avoid nil-pointer panic when checking the frontend IP configuration
* Use CSI driver to determine unique name for migrated in-tree plugins
* Add jitter to lease controller
* Avoid caching the VMSS instances whose network profile is nil
* chunk target operatation for aws targetGroup
* Fix watchForLockfileContention memory leak
* Fix cleanupMountpoint issue for Windows
* Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY
OBS-URL: https://build.opensuse.org/request/show/906676
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=7
* move upgrade test frameworks closer to Describe
* Update setcap image to buster-v2.0.3
* Update debian-iptables image to buster-v1.6.5
* Update debian-base image to buster-v1.8.0
* Update to go1.16.6
* Bump SMD to v4.1.2 to pick up #102749 fix
* generate scheduler merge patches on the pod status instead of the full pod
* Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default
* Fix race in attachdetach tests
* Fix Node Resources plugins score when there are pods with no requests
* Do not throw error when we can't get canonical path
* Update CHANGELOG/CHANGELOG-1.21.md for v1.21.2
* Remove error wrap from logs
* client-go: reduce log level of reflector again
* Update to go1.16.5
* feat: remove ephemeral-storage etcd requirement
* endpointslicemirroring controller mirror address status
* sched: fix a bug that a preemptor pod exists as a phantom
* Revert "Cleanup portforward streams after their usage"
* serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match
* Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error
* Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin
* use subpath for coredns only for default repository
* (scheduler e2e) Create balanced pods in parallel
* Fix VolumeAttachment garbage collection for migrated PVs
* fix error of setting negative value for containerLogMaxSize
* Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml
* kubeadm: remove e2e test for ClusterStatus
* Update etcd image revision
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=20
- Update to version 1.20.7:
* staging/publishing: Set default go version to go1.15.12
* build: Update to k/repo-infra@v0.1.7 (supports go1.15.12)
* Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12)
* Update to go1.15.12
* fix: not tagging static public IP
* Add test create service with ns
* Set namespace when using kubectl create service
* Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428)
* Updating EndpointSlice controllers to avoid duplicate creations
* Update pkg/volume/azure_file/azure_provision.go
* Normalize share name to not include capital letters
* Extend pod start timeout to 5min for storage subpath configmap test
* fix: set "host is down" as corrupted mount
* no watch endpointslice in userpace mode
* Ensure service deleted when the Azure resource group has been deleted
* Updating EndpointSlice validation to match Endpoints validation
* Make parallel build memory threshold configurable
* fix: azure file namespace issue in csi translation
* pkg/kubelet: improve the node informer sync check
* Additional CVE-2021-3121 fix
* Fix startupProbe behaviour changed
* Fix test
* staging/publishing: Set default go version to go1.15.10
* build: Update to k/repo-infra@v0.1.6 (supports go1.15.11)
* Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11)
* Update to go1.15.11
* add duration encoder to structured logger
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6
* exec test should not run in Parallel as feature gate is not locked
OBS-URL: https://build.opensuse.org/request/show/894325
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=6
- Update to version 1.20.6:
* azure: fix node public IP not able to fetch issues from IMDS
* Fix test now that empty struct are tracked in mangaed fields
* make generated_files
* Update bazel and dependencies.
* Update to use cliflag.NamedFlagSets
* Address comments.
* Update NodeIPAM wrapper
* Delete build file based on latest changes.
* Update extension mechanism and related sample.
* Address review comments
* Address review comments
* Modify integration test to fill CCM test gap
* Update test
* Move initialize cloud provider with client builder reference inside controller start func
* Separate example func and add README.md
* Separate func
* Add demonstration of wiring nodeIPAMController config object
* Remove cloud provider name as input parameter.
* Fix flag passing in CCM.
* Use apply to create objects in TestApplyStatus
* Stop skipping APIService in apply test
* Stop clearing OpenAPIConfig for kube-aggregator
* Declare TCP default for service port protocol
* Add ability to skip OpenAPI handler installation
* do not tag user created public IPs
* apf: fix test flake
* update gogo/protobuf to v1.3.2
* Fixed describe ingress causing SEGFAULT
* Update sigs.k8s.io/structured-merge-diff to v4.0.3
OBS-URL: https://build.opensuse.org/request/show/885590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=5
* azure: fix node public IP not able to fetch issues from IMDS
* Add yaml util to unmarshal numbers into int/float
* Use apply to create objects in TestApplyStatus
* Stop skipping APIService in apply test
* Stop clearing OpenAPIConfig for kube-aggregator
* Add ability to skip OpenAPI handler installation
* apf: fix test flake
* Fixed describe ingress causing SEGFAULT
* update gogo/protobuf to v1.3.2
* Update sigs.k8s.io/structured-merge-diff to v4.0.3
* e2e fix: loosen configmap to 10 in resource quota
* apf: handle error from PollImmediateUntil
* Stop probing a pod during graceful shutdown
* staging/publishing: Set default go version to go1.15.10
* build: Update to k/repo-infra@v0.1.5 (supports go1.15.10)
* Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10)
* Update to go1.15.10
* slice mirroring controller mirror annotations
* webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup
* api-server add --lease-max-object-count
* apiserver add metric etcd_lease_object_counts
* update metadata-concealment to 1.6 for removing legacy checking
* apiserver add --lease-reuse-duration-seconds to config lease reuse duration
* additional subnet configuration for AWS ELB
* Revert "Automated cherry pick of #97417: fix azure file secret not found issue"
* Use the correct volum handle format for GCE regional PD.
* Increasing maximum number of ports allowed in EndpointSlice
* Update CHANGELOG/CHANGELOG-1.19.md for v1.19.9
* bazel
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=16
* Updating EndpointSliceMirroring controller to wait for cache to be updated
* Updating EndpointSlice controller to wait for cache to be updated
* Add tests for populated volumes
* Fix comment on getPodVolumeSubpathListFromDisk
* Fix tests to test for new behavior
* Add warnings after cleanup back
* Automatically remove orphaned pod's dangling volumes
* Count pod overhead as an entity's resource usage
* Ensure only one LoadBalancer rule is created when HA mode is enabled
* Fix issue in checking domain socket for plugin watcher
* Use Lstat in plugin watcher to avoid Windows problem
* Skip visiting empty secret and configmap names
* Number of sockets is assumed to be same as NUMA nodes
* disables APF if the aggregated apiserver cannot locate the core kube-apiserver
* Fix repeatedly aquire the inhibit lock
* Sync node status during kubelet node shutdown
* remove executable permission bits
* Upgrading vendored dependencies
* Upgrading cAdvisor to 0.38.8
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4
* build/OWNERS: Add Dan and Sascha as reviewers
* OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir
* Bump konnectivity-client to v0.0.15 in release-1.20
* Storage e2e: Remove pd csi driver installation in GKE
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3
* kube-cross: update image to use v1.15.8-legacy-1
* [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8)
* Use go-runner:buster-v2.3.1 image (built on go1.15.8)
* staging/publishing: Set default go version to go1.15.8
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=13
- Update to version 1.20.2:
* move all variables in sampleAndWaterMarkHistograms::innerSet
* use default unkown sock for kubeadm cmd if cri detect is not needed
* cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip
* Release reserved GCE IP address after ensure completes.
* Ensure reproducible builds when build through docker
* Fix cadvisor machine metrics
* Create OWNERS for most of the API Priority and Fairness impl
* fix the deadlock in priority and fairness config controller
* Cherry pick 443 and 448 from cloud provider azure
* Fix bug in CPUManager with race on map acccess
* clean up executing request on panic
* fix azure file secret not found issue
* fix: azure file latency issue for metadata-heavy workload
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1
* Add more logging for Mount error
OBS-URL: https://build.opensuse.org/request/show/865038
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=4
- Update to version 1.20.2:
* move all variables in sampleAndWaterMarkHistograms::innerSet
* use default unkown sock for kubeadm cmd if cri detect is not needed
* cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip
* Release reserved GCE IP address after ensure completes.
* Ensure reproducible builds when build through docker
* Fix cadvisor machine metrics
* Create OWNERS for most of the API Priority and Fairness impl
* fix the deadlock in priority and fairness config controller
* Cherry pick 443 and 448 from cloud provider azure
* Fix bug in CPUManager with race on map acccess
* clean up executing request on panic
* fix azure file secret not found issue
* fix: azure file latency issue for metadata-heavy workload
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1
* Add more logging for Mount error
* etcd version for 1.19 is 3.4.13 for cve fixes
* Flush FibreChannel devices before deleting
* Fix FibreChannel volume plugin corrupting filesystem on detach
* vendor: update cAdvisor to v0.38.6
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0
* Revert "iAdd host IP to etcd listen client URLs."
* fix migration logic
* Add AcceleratorStats to cri_stats_provider
- Update to version 1.20.1:
* Revert "Use host IP instead of localhost for control plane component kubeconfig files."
OBS-URL: https://build.opensuse.org/request/show/864584
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=10
- Update to version 1.20.1:
* Revert "Use host IP instead of localhost for control plane component kubeconfig files."
* etcd version for 1.19 is 3.4.13 for cve fixes
* Flush FibreChannel devices before deleting
* Fix FibreChannel volume plugin corrupting filesystem on detach
* vendor: update cAdvisor to v0.38.6
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0
* Revert "iAdd host IP to etcd listen client URLs."
* fix migration logic
* Add AcceleratorStats to cri_stats_provider
OBS-URL: https://build.opensuse.org/request/show/860457
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/kubernetes1.20?expand=0&rev=3
* Revert "Use host IP instead of localhost for control plane component kubeconfig files."
* etcd version for 1.19 is 3.4.13 for cve fixes
* Flush FibreChannel devices before deleting
* Fix FibreChannel volume plugin corrupting filesystem on detach
* vendor: update cAdvisor to v0.38.6
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0
* Revert "iAdd host IP to etcd listen client URLs."
* fix migration logic
* Add AcceleratorStats to cri_stats_provider
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=8
* APF e2e: disable drown-out tests temporarily
* coredns dep.Severity is newdefault, not newDefault
* addressing review comments and supports parallel run
* Update ingress conformance test for finalizers
* vendor: update cAdvisor to v0.38.5
* fix: change disk client API version for Azure Stack
* service.spec.AllocateLoadBalancerNodePorts followup
* [go1.15] Use go-runner:buster-v2.2.2 image (built on go1.15.5)
* [go1.15] staging/publishing: Set default go version to go1.15.5
* [go1.15] Update to go1.15.5
* [go1.15] hack/tools: Update to k/repo-infra@v0.1.3 (supports go1.15.5)
* [go1.15] build: Update to k/repo-infra@v0.1.3 (supports go1.15.5)
* Restore beta os/arch labels on initial node registration
* matches specific usernames instead of "*"
* range_allocator: Test (lack of) double counting
* cidrset: Add test for double counting
* Fix double counting of IP addresses
* ap&f e2e: eliminates client-side rate-limiting
* fix bug: concurrent map writes error
* Bump node-problem-detector to v0.8.5
* Revert "check volume directories instead of mounts for cleanupOrphanedPodDirs"
* Revert "plumb context with request deadline"
* Revert "use default value when the specified timeout is 0s"
* Revert "add e2e tests for request timeout"
* Deflake ThrottledLogger test
* fix: resize Azure disk issue when it's in attached state
* kube-aggregator: fix apiservice availability gauge
* Fix TestStartingResourceVersion flakiness
* make sure managedFields are written
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/kubernetes1.20?expand=0&rev=1
