Skip to content

v1.35.6-dd.10

Choose a tag to compare

@dd-octo-sts dd-octo-sts released this 12 Aug 19:09

Changelog

  • a1980d1 Update to new version of the base image
  • f25ad12 feat(apiserver): add OTel tracing spans for VAP/MAP CEL evaluation
  • c8149cd perf(apiserver): cache CEL conversions on VersionedAttributes
  • b2d83c5 noderesources: exempt annotated pods from max-pod-count cap
  • 3e17a5d fix(kube-apiserver): always refetch JWKS on unknown key ID
  • 161a419 patch from PR# 133654
  • c558a36 Conflicts errors don't count against retries datadog:patch (#98)
  • 98a4c92 fix ds controller deletes pod when not match RequiredDuringSchedulingIgnoredDuringExecution
  • 39fc0a3 - Enable boringcrypto when building.
  • 2a49a5b flowcontrol: currentCL can reach maxCL (#87)
  • 96b6c43 Sidecar: Enable Lyft type sidecars
  • fc0e7a6 Release commit for Kubernetes v1.35.6
  • 5ccf8f4 Bump images and versions to go 1.25.11 and distroless iptables
  • d44082b Fix wrong marking of errors
  • d2212b8 kubeadm: fix dry-run CA copy paths in init certs
  • a74c5bf Fix DRA scoring bug with mixed allocated and unallocated claims
  • 77292b8 fix(endpoint): avoid panic on services with empty IPFamilies
  • df562ae fix(csi): preserve mount dir on NodePublish error during remount
  • f1ce76d feat(volume): add IsRemount to MounterArgs
  • b596e7b Restore ability to plumb binary data through envvar values
  • 4a0532b Cache selinux conflicts
  • fd08821 controller/selinuxwarning/cache: Add reverse index
  • 9f52f4d controller/selinuxwarning: Pre-parse SELinux label
  • 350f793 DRA: fix AllocationModeAll with consumed counters
  • 90640ec Update CHANGELOG/CHANGELOG-1.35.md for v1.35.5
  • 6636cbc Release commit for Kubernetes v1.35.5
  • b9ffe7c kubeadm: use dedicated ClusterRole for apiserver kubelet client
  • 7909267 kubeadm: skip LocalAPIEndpoint defaulting on worker join
  • f792796 kubeadm: use the localAPIEndpoint for all API calls in 'init'
  • faa8112 kube-proxy: don't do full periodic syncs on large cluster mode
  • 943d941 Delete remote endpoint if it has same ip as local endpoint in the system.
  • d550d45 Delete remote endpoint if it has same ip as local endpoint in the system.
  • 6d314b2 Add a (*Client) addEndpoint method
  • feb7fa1 Evaluate etcd cluster health using quorum
  • 1a7f0b3 Escape path inside the container
  • 6953afb scheduler: address recreated pod review feedback
  • bf14155 scheduler: skip requeueing recreated pods on scheduling failure
  • 55f12e8 scheduler: fix inFlightPods leak when pod is recreated during scheduling failure
  • 31d47ca Update CHANGELOG/CHANGELOG-1.35.md for v1.35.4
  • 7b8c6cf Release commit for Kubernetes v1.35.4
  • 1687aa8 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • e87f6b9 update go.opentelemetry.io/otel to v1.41.0
  • 97ccbdf Bump images and versions to go 1.25.9 and distroless iptables
  • 69dd59d podStartSLOduration excludes init container runtime and image pulling time, includes only stateless and immediately schedulable pods
  • 46ba1c3 Deflake TestPodSubresourceAuth by waiting for effective permissions before testing
  • 1d5e94e podresources: filter out inactive pods in Get()
  • 91a1e8b e2e: node: podresources: fix expectations for Get() and terminated pods
  • 9d8bbea Fix device plugin admission failure after container restart
  • d8a562b Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
  • b6ee759 Add slice and map union member support with tests
  • 3d39627 Use IsZero instead of IsNil for union ratcheting check
  • 7b708cc Add DRA test for device attribute with no value set
  • 863ed56 Add nil OldValue test coverage for union doc_tests
  • 9a39e5c Fix union validation ratcheting when oldObj is nil
  • b0ec348 KEP-961: demote maxUnavailable feature in statefulset to off by default
  • 570f471 kubelet: fix sidecar restart after kubelet restart
  • 4c04292 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.3
  • 6c1cd99 Release commit for Kubernetes v1.35.3
  • 93de120 pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions
  • 6b56734 Update knftables to v0.0.21
  • b57e146 cmd/kubeadm: ignore EINVAL error during unmount
  • af6488c Use localhost image reference in PodObservedGenerationTracking test
  • 61003ad drop publishing rules from dependencies.yaml on release branch
  • b9be60a start scheduler after creating binding/non-binding slices
  • 659d489 dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first
  • 02115b6 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.2
  • fdc9d74 Release commit for Kubernetes v1.35.2
  • 1c0c911 kubeadm: do not add learner member to etcd client endpoints
  • d05c506 Fix flake TestDeviceTaintRule test by adjusting event hanlder status update logic Co-authored-by: Pohly patrick.ohly@intel.com
  • 69d9b9b Bump images and versions to go 1.25.7 and distroless iptables
  • 2371267 add dockerized go cache to make clean
  • de51841 Update CHANGELOG/CHANGELOG-1.35.md for v1.35.1
  • bd39991 fake client-go: un-deprecate NewSimpleClientset
  • 0a9d14b Fix flaky TestApplyCRDuringCRDFinalization test
  • 38378d5 Bugfix: calculate request latency properly in audit log filter