v1.36.3-dd.1

Changelog

• d61ec6a Update to new version of the base image
• 06546ae feat(apiserver): add OTel tracing spans for VAP/MAP CEL evaluation
• e560625 perf(apiserver): cache CEL conversions on VersionedAttributes
• 1c1a983 noderesources: exempt annotated pods from max-pod-count cap
• 8b7e6ce fix(kube-apiserver): always refetch JWKS on unknown key ID
• fde023a Add PodStatusBatchUpdates feature gate to debounce pod status writes
• fc909ff Conflicts errors don't count against retries datadog:patch (#98)
• ceaa8c0 fix ds controller deletes pod when not match RequiredDuringSchedulingIgnoredDuringExecution
• a38f332 - Enable boringcrypto when building.
• db3180e flowcontrol: currentCL can reach maxCL (#87)
• 0f29094 Release commit for Kubernetes v1.36.3
• 5874ee7 DRA: roll back reserved state in allocateDevice
• 2c14a99 Bump images and versions to golang 1.26.5 and update distroless-iptables
• fb2467e stop logging missing optional container annotations
• 4434901 Add e2e test for setting maps and slices to null via SSA
• f015292 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
• ccca5a9 kubelet startPodSync: reuse the previous context to fix memory leak regression
• ab57dc0 Make utf8 replacement char test pass on Go 1.27
• b86d94a Restore string JSON encoding of cri-api KeyValue
• 5acf40f kubeadm: treat already promoted learner as successful
• 24b3a25 kubeadm: use KubernetesAPICallTimeout for mandatory kubeadm-config fetch
• d20c60a Align DeviceTaintRule informer API version with handlers
• 903e7fc Update CHANGELOG/CHANGELOG-1.36.md for v1.36.2
• 24e2b02 Release commit for Kubernetes v1.36.2
• ff173bd Fix job controller reporting active=0 during pod creation backoff
• 02c02b9 Bump images and versions to go 1.26.4 and distroless iptables
• afb3ede Fix wrong marking of errors
• 088d4d9 upgrade go to 1.26.4
• 6489fe4 DRA E2E: simplify kind.yaml
• 0a283bc kubeadm: fix dry-run CA copy paths in init certs
• bed40bd flowcontrol: cover Required rule for spec.type and limitResponse.type
• 746956b flowcontrol: emit Required when spec.type or limitResponse.type is empty
• 6bd05d6 Fix DRA scoring bug with mixed allocated and unallocated claims
• 0f0c734 batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
• c106d15 fix(endpoint): avoid panic on services with empty IPFamilies
• 6c684db fix(csi): preserve mount dir on NodePublish error during remount
• 238883b feat(volume): add IsRemount to MounterArgs
• 37349f7 DRA: account for shared devices when rebuilding counters
• 65cef41 Restore ability to plumb binary data through envvar values
• 314bf62 Only emit non-dupicated values as metrics
• 46a0b04 Optimize how deletions are handled
• aee40ed Improve performance characteristic of selinux metric emission
• d2b5ca0 DRA: fix AllocationModeAll with consumed counters
• 102c4a4 Update CHANGELOG/CHANGELOG-1.36.md for v1.36.1
• 7569396 Release commit for Kubernetes v1.36.1
• 720f13b test/compatibility_lifecycle: resolve feature names from variables
• b0b25e8 kubeadm: use dedicated ClusterRole for apiserver kubelet client
• 2bd8606 KEP-5304: DecodeMetadataFromStream only skips metadata entries with unknown API versions
• b643483 DRA: merge same request metadata across drivers
• f0d0ff9 kubeadm: skip LocalAPIEndpoint defaulting on worker join
• 100bf5d kubeadm: use the localAPIEndpoint for all API calls in 'init'
• 0008353 kube-proxy: don't do full periodic syncs on large cluster mode
• a45cef8 Delete remote endpoint if it has same ip as local endpoint in the system.
• cbb38cd Delete remote endpoint if it has same ip as local endpoint in the system.
• 28dd6f2 hack/update-vendor.sh
• 529473c register zfs cadvisor plugin
• 07144e3 Add a (*Client) addEndpoint method
• 98ecfc6 Evaluate etcd cluster health using quorum
• 891a905 test/localupcluster: stop all components before starting replacements
• 1d850e8 localupcluster: set readiness polling interval to 1 second
• 62d05ad localupcluster: properly query /readyz and /healthz
• 745e271 Update CHANGELOG/CHANGELOG-1.36.md for v1.36.0
• ecf6dec Release commit for Kubernetes v1.36.0
• b2ba48e Escape path inside the container
• 3ddb659 kubeadm: skip promote call when etcd member is already a voting member
• 2aaa5b6 skip MemoryQoS rollback test until implementation is resolved
• bb2bb3c Gate setting memory QoS behind feature gate
• b2f73c0 CHANGELOG: Update directory for v1.33.11 release
• 1845002 CHANGELOG: Update directory for v1.34.7 release
• f8627a6 CHANGELOG: Update directory for v1.35.4 release
• cec8f06 CHANGELOG: Update directory for v1.36.0-rc.1 release
• 9c18c38 Update CHANGELOG/CHANGELOG-1.36.md for v1.36.0-rc.1
• 95ccf45 Release commit for Kubernetes v1.36.0-rc.1
• 064f095 scheduler: address recreated pod review feedback
• f620910 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 48c8f0d scheduler: skip requeueing recreated pods on scheduling failure
• feda787 update go.opentelemetry.io/otel to v1.41.0
• dc47d88 scheduler: fix inFlightPods leak when pod is recreated during scheduling failure
• a2b55fc DRA: use full image name in test manifests
• 45ab866 Downgrade log level from Error to Info for unserved GVRs in peer proxy
• 28b6b1e Reduce number of chaos workers to prevent timeouts
• bf7ccb8 Bump images and versions to go 1.26.2 and distroless iptables
• 3b5f150 devicemanager: constrain topology hints to device NUMA nodes
• 8254743 Pin MutatingAdmissionPolicy storage version to v1beta1
• 7ef0d61 Add release-1.36 publishing bot rules
• bc15d50 CHANGELOG: Update directory for v1.36.0-rc.0 release
• 9531564 Release commit for Kubernetes v1.36.0-rc.0
• cd3d2cf Bump golang version from 1.26.1 to 1.26.2
• cfe5b54 Adds polling for HPA reconciliation_duration unit test (kubernetes#138059)
• 1c87f39 build/dependencies.yaml: enforce PATCH level validation for pause
• bfe8f6b lint small fix
• b9b0ff4 remove accidently commited file
• bc2179d pause: fix version drift in various files
• 1140c34 Make cleanup aware of uid differences
• afdb5e5 Update CNI plugins to v1.9.1
• 3906ec7 kep-5304: bump cdi spec version to 0.5.0
• 84be835 Deflake TestPodSubresourceAuth by waiting for effective permissions before testing
• 10efa46 e2e_node: wait for pod drain before asserting zero pods in Memory Manager Metrics
• 3e7c6e3 Simplify isPodLevelResourcesResizeInProgress to check for absence of actuated resources
• e622b86 remove unnecessary fixes
• ba1ac16 fix erroneously reporting a PLR resize in progress on pod creation
• 65cc1c2 Fix race condition in updating the PodStatus cache
• adbf3b5 Add granular authorization for DRA ResourceClaim status updates
• 9fd706c kubelet: do not destroy nodeAllocatableResourceClaimStatuses
• 61cf993 scheduler: fix race in DRA pending allocation sharing
• 72ed617 Flaky test fix for 'should restart failing container when pod restartPolicy is Always'
• c49126e Fix flakiness in integration test for TopologyAwareScheduling with Basic Policy
• 7c65919 set InPlacePodLevelResourcesVerticalScaling to false if PodLevelResources is set to false
• ccaaf9d Marry WAP logic with the new API fields
• 59c9f75 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• 0519b8e Revert "Switch PLEGOnDemandRelist default to false for 1.36"
• 93f0ba1 Fix malformed OWNERS entries used by maintainers
• 2e60e14 Fix user namespace test cleanup race
• be5285b Fix restartable init container startup race
• 1f15743 Add pod group preemption
• 0218e0d Add option to backup and restore node info snapshot
• 1382c96 Allow cycle state to skip all post filter plugins
• 022a649 cri-client: normalize unix socket endpoints in target helper
• 8298942 cri-client: add unix socket constructor tests
• d80f384 Workload API: PodGroup ResourceClaims (KEP-5729)
• b93ba52 cri-client: use passthrough resolver for socket endpoints
• 0acd0a4 cri-client: use atomic.Bool for useStreaming to fix data race
• d4181e8 test/e2e/node: tolerate exit code 2 in pod status flake
• b12bcfd types: remove +featureGate=NodeLogQuery as defaults to enabled
• cda2805 test: adjust NodeLogQuery feature enabled by default
• e8a1277 feature: promote NodeLogQuery to GA and lock default
• 627ac57 KEP-5491: replace "new(bool)" with "new(true)" to fix typecheck error in validation_resourceslice_test.go
• ec6d65e test fixes
• 3b19886 Test fixes - update expected restart count for containers with no resources that inherit changes due to pod-level modifications
• 466e5d4 sync on observedGeneration and add CPU tolerance in resize framework
• 3b5b845 Promote InPlacePodLevelResourcesVerticalScaling to beta
• 669a0d8 Set WithSerial on HPA tests that conflict api registration
• b613ed5 KEP-5491: change ResourceSliceMaxDevicesWithTaintsOrConsumesCounters to ResourceSliceMaxDevicesWithAdvancedFeatures and add testcases with max devices with list attributes
• 67c57b5 Add tests
• a5e5992 CHANGELOG: Update directory for v1.36.0-beta.0 release
• ecb1f49 Ensure when pod-level memory is modified, skip cgroup writes, but ensure actuated pod-level resources are updated
• f88289d KEP-961: demote maxUnavailable feature in statefulset to off by default
• 3c91eba test: Fix PodGroup CRUD test failing due to missing Workload reference
• 33724b9 enable PLEGOnDemandRelist in feature unit tests
• 4a69899 Switch PLEGOnDemandRelist default to false for 1.36
• f5d4885 update google.golang.org/grpc to v1.79.3
• 57eb99d test: fix flaky static pod tests by asserting on termination message and container ID instead of StartTime
• cf5ba01 KEP-5832: Implement PodGroup admission (kubernetes#137464)
• 71f6d73 Remove +k8s:validation-gen-nolint from ResourcePoolStatusRequest, regenerate the code
• 5513334 Move ResourcePoolStatusRequest e2e tests to control plane context, drop unnecessary Feature:DynamicResourceAllocation tag, fix indentation
• 58cbde2 Pass individual informers, move DRA controllers to resource.go, simplify retry logic and metric tests
• 1d634d8 Refactor ResourcePoolStatusRequest e2e tests to use Eventually matchers
• 4dacffe Use string type for printer device columns
• 8b9159b Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxLength=128) for etcd safety, add Errors printer column
• 4dffbf5 Add tests for ResourcePoolStatusRequest
• 30fe79d Add ResourcePoolStatusRequest controller, registry, and RBAC
• 29601b8 Add ResourcePoolStatusRequest API types and generated code
• 0ffc845 Add alpha 2 phase implementation for UserNamespacesHostNetworkSupport
• 1132a4e top command documentation enhancement (kubernetes#136825)
• aa5e5ea scheduler: use contextual logging for event emission
• e3849e2 Remove reconcilePodMemoryProtection that resets pod cgroup values on systemd
• bd94e01 Rename etcd_bookmark_counts to etcd_bookmark_total and change it from a gauge to a counter metric (kubernetes#136483)
• f44e1fb KEP-5491: '.includes' CEL function raises a runtime error when applying to lists longer than resourceapi.ResourceSliceMaxAttributeValuesPerDevice
• 1375a51 KEP-5491: add more testcases: macro on scalars(when the feature gate is on), and "in" operator cost estimation for documenting purpose.
• 9b45256 KEP-5491: introduce "includes" CEL function that can work both for scalar and list attributes
• cb60b14 KEP-5491: implement matchAttribute/distinctAttribute in experimental allocator for list/scalar fields
• e4e45ed KEP-5491: strategy(dropDisableFields) for list fields in DeviceAttribute
• 991f2d7 Use DeepCopy in GetLimits to avoid returning direct references to resource quantities, ensuring that changes to the returned ResourceList do not affect the original spec
• b431536 KEP-5491: validation for list attributes in DeviceAttribute
• 3902f56 KEP-5491: generated code for list attribute fields in DeviceAttribute API ("make update"-ed)
• f67b004 KEP-5491: add list attribute fields(BoolValues, IntValues, StringValues, VersionValues) in DeviceAttribute API
• 81c0b9c KEP-5491: add DRAListTypeAttributes feature gate with Alpha
• 9488ac9 wrap per-pod proxy call with gomega.Eventually for transient retries
• 880a6dd CHANGELOG: Update directory for v1.35.3 release
• 7dddead CHANGELOG: Update directory for v1.34.6 release
• 96009e4 CHANGELOG: Update directory for v1.33.10 release
• 2d23d21 e2e test for resize of non-sidecar init containers
• 559c63f kubelet support for non-sidecar init container resize
• 2d205b9 use Node Declared Features to handle 'InPlacePodVerticalScalingInitContainers'
• fa50e63 relax validation check for resizing nonsidecar init containers
• d2dbd4c Define 'InPlacePodVerticalScalingInitContainers' feature gate
• 24c1eb2 Add slice and map union member support with tests
• 52cb155 Use IsZero instead of IsNil for union ratcheting check
• 70793b7 use tracing headers directly from otel so the reference to apimachinery will be gone completely
• 8c848ad Moved broadcast logic into StatusManager with no lock-holding.
• b6fbc88 ci fixes
• 2e494fc Overlay latest status for GET and LIST, and in the initial sync for WATCH.
• 67441f2 Addressed comments. Change OnPodDeleted to only populate the name, namespace and UID of the pod object to avoid sending confusing, stale end state.
• b408806 Addressed comments and optimized broadcaster.
• 872a3bd Update generated protobuf bindings for PodsAPI v1alpha1
• 69167c1 Refactored broadcast logic, specifically:
• 0809c4f linter fixes
• 960c317 fmt and ci fixes
• 433ae33 Fix typo
• fd330c3 Refactor PodsServer to use PodManager as source of truth
• 044f65c [KEP-4188] New Kubelet gRPC API with endpoint returning local Pod information
• 83a30f8 Add e2e tests for Workload/PodGroup Job integration
• 736f227 Add integration tests for Workload/PodGroup Job integration
• 981a333 Add admission plugin for update parallelism
• 71f02bb DRA: fix Pods in a scheduling gang sharing ResourceClaims
• ca66143 Add DRA test for device attribute with no value set
• 39e99b2 Add nil OldValue test coverage for union doc_tests
• c9e18ab Fix union validation ratcheting when oldObj is nil
• fa9a1fe Add GC to client-go TLS cache
• 00d3cb1 Update wording for Unused timestamp to indicate lag
• 58f1520 update resize e2e tests to check only resize conditions
• 6c087b2 add unused condition to persistent volume claims
• 30575cd Add scheduling v1alpha2 for DRA kind config
• 68e3009 Implement Workload and PodGroup integration with Job controller
• cbb4ca0 Add EnableWorkloadWithJob feature gate
• d2b77a8 Rename HardReservation to TieredReservation for memoryReservationPolicy
• dbd3f16 Add node E2E tests for MemoryQoS
• 5ccf6ae Add node-level metric and rollback reconciliation
• 3cd22dc Verify that assumed pod NodeAllocatableResourceClaimStatuses matches the status to patch.
• 11c8bf1 Cleanup NodeAllocatableDRAClaimStatus in Unreserve
• cdcfc4e Add integration tests.
• 6b83eef Add pod Status and ResourceSlice API validation
• a84f938 Validate Pod resources cover container and DRA requests.
• 6283652 Add validation check to disallow node-allocatable resource claim sharing.
• 2ce83e6 Add validation to disable in-place resize for pods with node-allocatable resource claims
• 9e22d7b Include node-allocatable claims in kubelet admission check
• 7c4f9ac Account for node-allocatable claims in NodeInfo cache
• 0c25bdf Update scheduler cache interface to pass node-allocatable resource allocations to NodeInfo.
• af186d3 Implement changes in DRA Plugin to handle node-allocatable claims
• 9965856 Add tests for validateTrueBeta and ValidateTrueAlpha
• 0fc3283 Fix round-tripping HPAv2 resources via v1 with object metrics
• 0eb9650 Add test to ensure that object metric HPAs don't fail
• 843fdde Eliminate k8s.io/apimachinery from cri-client
• df2c46d remove no-lint exemption
• aa560bd Use memory.low for Burstable pods, memory.min for Guaranteed only
• c859cb3 Add kernel 5.9+ version check for MemoryQoS
• 3bd92ac Add OWNERS for controller manager integration tests
• 5ea4532 Add PodGroupPodsCount placement score scheduler plugin (kubernetes#137488)
• e8fc7dc validation-gen: move ifEnabled logic to validationStability, document overrides, and fix test comments/coverage
• 63bac0c validation-gen: allow beta validations in alpha packages without prefixes
• 70a6b73 kubelet/pullmanager: use image name parsers that don't modify the source
• 3256f51 cri-api: Add streaming RPCs for CRI list operations
• 0ce4a70 fixed merge conflicts; prev msg: ran hack/update-featuregates.sh
• dd31537 Integration tests for Topology Aware Scheduling
• 9ad4385 Integrate placement plugins into placement scheduling algorithm
• fc88e37 Add admission plugin for PodGroup to add finalizer to every new object
• 1b90507 move protectionutil pkg to controller/util
• 0ef8d78 Add new protection controller for PodGroup
• 15ad8cb Add status field wiping to ServiceCIDR with opt-out FG
• 0f815fd Account for node allocatable claims in PodRequests
• ab5335d Add a linter exception for using maps.
• f266fe4 make update
• 7834e92 Add defaulting for nodeAllocatableResourceMappings[].allocationMultiplier
• 3a5c884 Introduce API fields
• cdfa045 Add DRANodeAllocatableResources feature gate
• 56cd74d dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• 1ca0aae kep-5304: add kubeletplugin implementation for discoverable device metadata
• 5ea8f65 kep-5304: add devicemetadata package for consumer facing decoding utilities
• b9729e8 kep-5304: add DeviceMetadata API
• be5c4d7 kubelet/imageManager: fix allowlisting absolute path images
• a212f52 NodeConformance e2e: tests all Ensure Secret Pulled Images policies
• d6f0260 Add tests for +k8s:required and +k8s:forbidden validation tags
• 744acc4 Handle oldStatus nil case and check message overwrite
• b9bf406 DRA ResourceSlice: explicit AllNodes on Pool and placement validation
• 467ce9c Fix TestGetConntrackMax to align with capped conntrack max values
• a270210 remove gopkg.in/yaml.v3 usage of cobra
• a304826 bump spf13/cobra to v1.10.2
• 6f89451 DRA: add ReconcilePoolWithName to ResourceSlice controller
• 5e07560 Fix race in TestActivatePods testing code
• 6aeb784 Fix race in podGroupState locking
• 88cccd9 enhance unit tests
• b728516 skip setting condition to False if it was True
• 3e9c496 Address code review feedback
• 0ccf6c7 Add integration tests for PodGroup conditions
• 57ba605 Implement podGroup Status
• 57e649a DRA Device Binding Conditions: update unit and integration tests
• 6bf9cd5 DRA Device Binding Conditions: run make update
• cc2ab58 DRA Device Binding Conditions: graduate to beta
• 45ab2fc updated kube_feature.go
• 9149d3f lock psi feature for ga
• 67deec3 DRA: include node name in timeout error and rework FilterTimeout test setup
• 0d2c2cf UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test k8s.io/api -count=1
• bf0d191 Add v1.35.0 API testdata
• 593c6de fix mirror pod starttime failing message
• 1a49c37 kubelet: add terminated_containers_total metric
• c07f3eb Fix logspam in leaderelection controller.
• 6d7dca8 hack/update-openapi-spec.sh
• ce9ad95 UPDATE_COMPATIBILITY_FIXTURE_DATA=true make test WHAT=k8s.io/api
• 9f60cc3 hack/update-codegen.sh
• f6d42d3 make VolumeMountStatus.VolumeStatus a pointer to preserve serialization compatibility
• 298629e Fix discovery test cleanup to wait for delete convergence
• 608be12 suggest running tests after adding testdata without test caching
• ce9df0b kubelet/dra: refactor health helpers and add tests kubelet/dra: extend helper test coverage
• c6b9f3f sharding: gate MatchesSharding call in Matches()
• ab1cfa7 sharding: address review comments (deads2k)
• d43dc1a generated: regenerate proto, openapi, deepcopy, conversion, and testdata
• b8a17e1 sharding: implement UID-based sharding for list and watch (KEP-5866)
• 926e9fc validate container restart policy against container resize policy
• 20dff1b fix featuregate management in tests to exercise both enabled and disabled code paths
• 7dace2d revert podCPURequest to 200m
• b824dd3 remove resize allocatable capacity check from kubelet
• fd8c6d3 add pod resize feasibility check admission plugin
• 0364ab6 PodReadyToStartContainersCondition: refactor test to verify same pod unblocks when volume is created
• 761fc9d Introduce index-based naming in resourceslice controller and sort slices and pools lexicographically
• 4c40143 kubectl: Add ResourceSlices to describe node with O(1) query
• d9da8c7 Add scheduling constraints to v1alpha2 pod group api
• 65a2a61 Preserve externalDocs and example in CRD structural schema conversion
• 4f5c634 Add a polling loop to wait for NodeDeclaredFeatures to sync in scheduler cache
• a4fe5e0 test/integration/apiserver/discovery: give convergence more time
• b2050d1 test/integration/storageversionmigrator: wait longer for CRD updates
• ae79025 test/integration/dra: poll ControllerManagerMetrics values
• 77403e5 DRA: fix FilterTimeout/enabled test to clear worker-0 devices
• 0e8d10f Handle gated pods correctly while popping PodGroup members
• db60e61 kcm: Add integration test for leader election lease release on shutdown
• 98aa74d kcm: Link the leader election release on exit feature gate
• 3ea232f DRA: adapt FilterTimeout test after upstream dra_test.go split
• 47fe3d2 Store assumed pod object on podGroupState.assumePod
• 38f536c Use CycleState.IsPodGroupSchedulingCycle instead of NeedsPodGroupScheduling for pods
• 6bebe8d KEP-2021: HPA condition based scaling to zero
• 4e33d52 DRA integration: split source code
• 180434e DRA integration: split into different packages
• 93c8014 DRA integration: enforce better test isolation
• 3b63fe8 ktesting: support cancellation after WithoutCancel
• e04d25c apiserver testing: fix support for pre-created TContext
• faf5af8 Address review comments for VolumeGroupSnapshotClass e2e tests - Fix errcheck: wrap e2epod.DeletePodWithWait with ExpectNoError - Fix forbidigo: replace gomega.BeTrue with plain Go if/Fail - Add expectVolumeGroupSnapshotClassName helper - Verify spec.volumeGroupSnapshotClassName in failure test cases - Use Patch instead of Update when labeling PVCs - Rename labelKey/labelValue to pvc-group/test-vgsclass - Update getVolumeGroupSnapshot to GetVolumeGroupSnapshot
• 69332de refactor: remove headless service
• 93c755b e2e_node: fix pod StartTime assertion to compare using Equal
• bb76c60 gitignore: ignore AGENTS.override.md for local overrides & add AGENTS.md as not merged yet
• dc607d1 use connectionTimeout
• 7052e37 KEP-5284: optimize constrained impersonation cache key construction
• 9570a0c Add nmn3m to sig-instrumentation-reviewers
• a43c5ce KEP-5284: add benchmark for constrained impersonation
• 5bff98b KEP-5284: assert pre-hashed inputs to buildKey
• 56cd8b2 Enable native histograms gated by feature flag in kubelet
• 34c6060 Enable native histograms gated by feature flag in kube-proxy
• cdf6cdd Enable native histograms gated by feature flag in KCM
• 6453fc2 Add Node Declared Features scheduler performance tests
• 9ed70ce Add PreInitFn and NodeUpdateFn hooks to scheduler_perf test framework.
• d3056cb Set 0 to trigger the relist immediately
• f1ccd2d Add MemoryReservationPolicy to kubeletconfig for MemoryQoS feature
• 9533a4e Implement PlacementScorePlugin in NodeResourcesFit
• 19eedda Add GetNode method to scheduler cache for testing
• f9c3cd9 Graduate +k8s:forbidden to beta.
• 183ebf2 fix: argument order of errors.Is
• 7a188a1 add volume_group_snapshot_class cases
• 6c8e5e2 Add more unit tests for constrained impersonation (kubernetes#136737)
• bd1ed91 fix TestManagedBy by resetting metrics after controller start like other tests
• 7b71b3a make OnPodSandboxReady async to work correctly with on-demand per-pod relist
• 410efb0 add e2e tests verifying PodReadyToStartContainers condition set using criProxy to inject delay time
• d7abab8 add tests to verify invocation of OnPodSandboxReady method and PodReadyToStartContainers condition
• ab73613 [kubelet] add new OnPodSandboxReady method to RuntimeHelper interface to update PodReadyToStartContainers condition immediately after sandbox creation
• b969bbd CPU & Memory managers forward compatibility
• 04977a0 Reduce log level for optimistic lease update fallback
• 77f8d7c kubectl/drain: widen namespace termination retry timeout
• 5d3e8d9 nodeipam: buffer TestNodeSyncResync report notifications
• e0ec980 remove streaming as a dependency of kms repo
• d879ee4 Remove v1alpha1 scheduling API from the API defaulting test
• 9aee7c9 wait for container condition to be true before sending the pod update
• d66ae77 Promote scheduler metrics to beta
• e1b18e3 snapshot pod group state before scheduling cycle and embed pod group manager into cache
• 65564e2 Cap nf_conntrack limits to prevent excessive memory usage on high-core machines
• ccaab0c feat: add LimitResponse declarative validation discriminator tags
• 595da78 feat: add PriorityLevelConfigurationSpec declarative validation discriminator tags
• 865ef0c chore: wire up declarative validation for flowcontrol PriorityLevelConfiguration
• c0cf5d1 address-feedback: pr review round 2
• 3898257 proc mount: drop featuregate note on API
• c8a857b address-feedback: pr review round 1
• 539352e feature: promote ProcMountType to GA
• 5c61228 Run update-featuregates
• bae488e DRA: Promote DRAPartitionableDevices to beta
• efddaf6 test/e2e: deflake pod resize cgroup value verification
• ed055fc make unimplemented msg a const
• 53b1632 Add --tls-curve-preferences flag for configuring TLS key exchange mechanisms
• 6511dea Refactor Priority admission plugin
• bea6f92 fix: stability level to discriminator member validations
• 4413555 kubelet: fix sidecar restart after kubelet restart
• 93755d4 feat: extract resource under describe to a separate variable
• ee51070 DRA: re-enable extended resource tests for version skew testing
• 85bca3b DRA device taints: fix beta-enabled, alpha-disable configurations
• 90912e6 Plumb ctx down to sync() and syncStatus() methods
• bb664ec Tests parallel requests in contrained impersonation
• 39a4f76 Optimize NDF FeatureMapper.Unmap for sparse feature sets
• b1b75f9 Make size explicit; switch to binary string format
• 1c2b07f Avoid computing feature diff when not necessary
• f91f641 Switch to bitmapped FeatureSet implementation.
• e452152 NodeDeclaredFeatures: Add global default NDF registry
• 52b8fa1 NodeDeclaredFeatures: Extract ndf types to subpackage to avoid circular dependencies
• 97f00d1 Setting UseStatusResources when fetching total pod requests and limits
• 67a2378 Update reset fields to match current field wiping behavior
• 92ddb3a Add tests ensuring consistent field wiping and reset fields usage
• a5a0327 Fix test reset fields of servicecidr
• a073972 Add test to ensure reset fields is applied consistently
• 7dee4a2 allow nri plugins to block pod-level resizes
• 27b99fe Add test coverage to ensure that when PLR are checkpointed, overhead is excluded from it. And when mapping allocated resources back from the checkpoint to pod spec the values have resources excluding the overhead
• 6fcb95e scheduler: Moved TestQueuedPodInfo_UpdateInvalidatesSignature from queue/scheduling_queue_test.go to framework/types_test.go
• fbb6896 Fix zero PSI metrics emitted when OS doesn't enable PSI
• 1e0545b scheduler: Removed TestPriorityQueue_SignatureReuse
• e436c1c scheduler: Added a test that validates that adding pod to a queue calculates pod signature and added more cases when pod is updated. Specifically when pod is in backoffQ and unschedulablePods or does not exist in any queue
• 0b0b77a Request on-demand relist when performing sync changes
• ad60a2d DRA device taints: update integration tests
• 7d2781a DRA device taints: generated files
• 566dc7f DRA device taints: graduate to beta
• b4220f8 Add credential pluginkubectl kuberc set options (kubernetes#137300)
• 162be9e plugin/pkg/admission/nodedeclaredfeatures OWNERS
• b3c1418 staging/publishing: order streaming before dependents
• c0e973d scheduler: Replaced context.Context and testing.T parameters with ktesting.TContext in scheduling_queue_test.go
• 8ddefcf kcm: Prepare leader election for release on exit
• c030336 Update pkg/scheduler/metrics/metric_recorder.go
• b0e3817 test: Document UserNamespacesSupport e2e feature
• 8db5109 Remove references to UserNamespacesSupport feature gate from core types
• 8d0f80e staging/testdata: Remove UserNamespacesSupport reference
• f25830b test/e2e*: Remove references to UserNamespacesSupport feature gate
• 527aa66 feature: Move UserNamespacesSupport to GA
• fdfffef staging: update OWNERS for cri-streaming and streaming modules
• 66f4906 fixup: remove unused klog import; drop rogpeppe from apimachinery
• 57d7c4d staging/streaming: replace testify with stdlib in tests
• 1ee1ff9 staging: extract CRI streaming modules with client-go compatibility
• 628754d openapi: update generated v3 specs
• f2ae2cc openapi: filter cross-registered GVKs in per-GV v3 specs
• 863c681 Update pkg/scheduler/backend/queue/scheduling_queue.go
• 408c17e job/metrics: promote metrics to beta and add test
• 260c856 fix: deterministic CPU load distribution for HPAConfigurableTolerance e2e test
• 43c5d2a Add PlacementGeneratePlugin interface and runner
• fa29c9d Revert "Extend PostFilterResult with a list of victim Pods"
• de1385f scheduler: Added ObserveFrameworkDurationAsync to metrics recorder
• 7b00255 scheduler: Removed plugin stats from pod signing process
• 62aa95c scheduler: Created new context when adding or updating pod in scheduling queue
• 7140cf5 Revert "scheduler: Added context to Scheduler struct and used it in eventhandlers instead of context.Background"
• 82c7ddd scheduler: Added context to Scheduler struct and used it in eventhandlers instead of context.Background
• 64db71a scheduler: Removed logger parameter from functions that also receive context in scheduling_queue_test.go
• 67cc4e5 scheduler: Removed logger from functions that also receive context
• d54a935 scheduler: removed wrapping anonymous function when building podSigners map
• 2904e7f scheduler: replaced logger with HandleErrorWithLogger
• 2a394ca scheduler: Added isOpportunisticBatchingEnabled in scheduling_queue.go
• 623d42b scheduler: Removed lazy pod signing
• f032cb5 scheduler: Added logger parameter to signPod in scheduling_queue.go
• 85331e9 Update pkg/scheduler/backend/queue/scheduling_queue.go
• 858040f scheduler: Added eager pod signature calculation
• e6ee21c scheduler: Invalidate PodSignature in QueuedPodInfo Update method
• 3a6c169 scheduler: Reuse scheduling signature for opportunistic batching
• 30b811a DRA Device Binding Conditions: add metrics for prebind flow
• d3919c7 Label unlabeled e2e node tests
• 8c5548e mark ImageVolume conformance test to LinuxOnly
• a509eee Add integration tests for manifest-based admission control
• fad6f8d Block .static.k8s.io suffix in REST API
• 6dee0f2 Add policy manifest loader, source, and plugin wiring
• 58e9e99 Add webhook manifest loader, source, and plugin wiring
• c780c02 Add manifest file loading utilities and metrics
• 7bfea7b Move WatchUntil to staging
• 20696e1 Skip events for multi-object kubectl describe
• 0dafe12 Add staticManifestsDir config for webhook and policy plugins
• 36b78ae Add ManifestBasedAdmissionControlConfig feature gate
• 2411af4 CRI client: pass context to Close and use contextual logging
• df6ec6d Improve stability by sorting containers by create time and ID in kubeGenericRuntimeManager.GetPods() and GetPod()
• dec79e1 E2E tests
• e742be6 CPU quota for pod-level shared pool containers
• cc03787 Pod-level CPU & Memory managers support
• 3774581 Pod-level state for CPU & Memory managers
• 99edcef QoS helper for resource managers
• bb31c7c Pod-level Topology manager support
• 63e5f3a On-demand PLEG pod relisting
• 21533dc Per-pod cache refresh timestamp
• 70d6d02 Add a read-only interface to the podcache
• c1f00c7 Graduate feature to beta
• 5ef85a8 Fix flake in TestGetPods
• 9f9edb2 remove featuregate in e2e_node test
• 3af0ef2 setMemoryQoS clears memory.min when requests 0
• c19439f Support tls server name overrides in EgressSelectorConfiguration (kubernetes#136640)
• f97b142 remove the featuregate checks
• faf9e8d FG Lock to default in 1.36
• 94a96b7 KEP-3695: FG kubeletPodResources GA update
• 1677969 DRA integration: fix test isolation of extended resource test
• 58bb17a Use sets.List() instead of UnsortedList()
• f2d8acc Fix maxItems test to match minItems with ErrorMatcher
• 91ddc8f Add DV tag '+k8s:minItems'
• 383d74b Fail to generate unsigned min and max for negative values
• 7f90ee0 Fix minimum test to match maximum with ErrorMatcher
• c53d59c Add DV tag '+k8s:maximum'
• 4c93674 Add and use util.ParseBool in validation-gen
• 1cdd727 Use util.ParseInt in all validators
• 392b5e5 Updated proxy handler in kubelet
• 3a56126 fix: remove GetReplicas multiplication and dead sendConsumeCPURequestPerPod function
• 117df3d pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions
• 93de6ac Update knftables to v0.0.21
• d11acb0 Re-use existing helper for port-forwarding in autoscaling utils
• 9fcdeca Fix TestBasic timeout caused by continuous re-enqueue
• 0e001ab Fix e2e tests to handle explicit driver opt-in for scheduling
• b764d88 Skip legacy version check
• 945804c Use packaging.version for gcloud version parsing
• 195b9f5 Remove dep. Prometheus from test/e2e/node/pods.go
• 71fd4b1 Rework podGroupAlgorithmResult to use fwk.Status and capture errors correctly
• 2153ed1 scheduler: optimize podGroupInfo to minimize the lock time
• 9d9f4dd E2E framework: introduce WithKubeletMinVersion
• 4ddb7d8 test: fix flaky HPAConfigurableTolerance e2e by deterministic per-pod CPU load
• 1d76d22 kubelet: deduplicate CPU conversion helper functions
• e0dedfb Fix aggregated discovery retry on fetch failure
• 60b32b6 update dependencies.yaml for coredns v1.14.2
• 0680960 Return Error from DRA filter on timeout to enable automatic retry
• d274e05 Remove CRD stored versions from status upon SVM migration
• 4396474 integration tests for configz endpoints
• 8f41f50 bump github.com/coredns/corefile-migration to v1.0.32
• 3ad0cbc feat: add build-tag type switching for FieldsV1 to string that uses unique.Handle[string] for interning and associated tests + benchmarks
• 99f9875 Add unit test for immutable restart policy rules
• 9fb9e93 Add metric tracking the latest cached rv of informers
• a8d8cb0 Truncate watch cache metric to 15 least significant digits
• 8ed40e7 test: add unit tests for deleteObject NotFound handling in garbage collector
• 18cbbbd podStartSLOduration excludes init container runtime and image pulling time, includes only stateless and immediately schedulable pods (kubernetes#131950)
• fcb2169 hack/golangci.yaml.in: remove trailing whitespace
• a902b8f Graduate ComponentFlagz feature gate to Beta
• 5c61dc4 KEP-5284: promote constrained impersonation to beta
• 20f95d2 apimachinery: clarify ErrorHandler and provide helper for formatting
• f33176f DRA scheduler: add unit tests for AllocationTimestamp
• 765891c Condense optionalfields exceptions for apiserverinternal group
• 47d830f Forbid usage of omitzero for fields marked optional
• bef03e1 Add tosi3k to the SIG Scheduling reviewers
• 439ee9f validation-gen/tests: add minlength tag tests
• 011738a validation-gen/validators: add minlength validator
• ed31622 bump coredns to v1.14.2 for kubeadm and cluster/
• f50ae72 Remove feature gate check for placement score plugin validation
• 108c133 Replace map in PodGroupAssignments with a list of interface
• 335f043 Add Min/MaxScore to replace Min/MaxNodeScore
• db3c8f3 Add PlacementScorePlugin interface and runner
• 3f02e11 bugfix(cloud-provider): apply log options first
• 0cc4aaa for discovery integration, set client qps limit to 50 and burst to 100
• 4f260c4 golangci-lint: disable newexpr hint
• eea86f1 flaking fix: ignore watch actions from the informer's reflector
• ec58d18 kubectl: only print default cotnainer if there are multi containers
• 3f094dc Create Workload API v1alpha2 (kubernetes#136976)
• 8a154c3 KEP-5284: add impersonation latency tracking
• 07705a5 Enable native histograms in scheduler gated by feature flag
• f33a276 Refactor container restart policy tests to e2e/common/node
• 6825705 Graduate ComponentStatusz feature gate to Beta
• cf33d3a Fix LastTerminationStatus for RestartAllContainers
• 1d2165b Fix scheduler flaky test: wait for DeviceClass cache sync in dynamicresources tests
• c7ca6b9 Add KubeletMinVersion:1.36 label to DRA extended resource tests
• 83d42f4 issue: setcap build image shouldn't require a shell (kubernetes#136633)
• 3e0352a New resource managers metrics
• 29251da PodLevelResourceManagers feature gate
• 9f73dfc revert adding PullImageResponse.image_id to CRI API
• 7a2b077 Make linter happy
• dede113 Update comment and regenerate API docs
• 6f9b113 Expand on the schedulr comment
• 143c56d Update generated code
• 2c97c04 Add v1beta1 types
• e1a97a7 Update scheduler to check PreventPodSchedulingIfMissing
• e64d62c Update validation tests and add defaulting
• e9396ee Add a new field in CSIDriver to prevent pod scheduing
• 7d9e61b Update generated fields
• 7d4f1a2 Update the types for new preventscheduling field
• e026a94 Remove deprecated PodRequestsAndLimits from kubectl/pkg/util/resource (kubernetes#137442)
• d1ca3c6 Add partitionable devices upgrade/downgrade test.
• 81380fd Fix SnapshotMetadata feature label to match test-infra filter
• aa731ab test/e2e_dra: retry pod check during upgrade/downgrade
• f692e4e DRA upgrade/downgrade: add some debug output for stopping commands
• 3f997b5 local-up-cluster.sh: support overriding or disabling sudo
• d74a0d4 Update SnapshotMetadataService CRD API version from v1alpha1 to v1beta1
• 5782e1e hack/tools: bump golangci-lint to v2.11.2
• 9fccfc6 validation-gen: suppress staticcheck SA5008
• 0dd7cb2 adding stress tests to volume Group Snapshotter
• 52fcf99 move extended resources to dra feature lane
• 37c7a31 kubelet: clarify why node lease renewal uses context.Background()
• 3cd3f37 kubectl: add additional command suggestFor for describe and get
• 6ebabf3 Fix the semantics of e2essh.NodeSSHHosts on error
• 0ffb815 Drop e2enode.FirstAddress
• b68e2ac Drop e2enode.PickIP(), fix its one caller
• 6302e3a Inline a Service jig helper into a test
• 92a8387 Use contextual logging in service cidr controller
• 1f2b70a Lint: Use modernize/rangeint in test/{e2e,e2e_node,images,soak}
• f5efc1d add context to CRI API client and contextual logging per-call
• e78f851 split linux and portable deviceattribute unit tests
• b806a32 client-go CA rotation
• 21006ff document "Kind" e2e feature
• c356602 Pass kubecontainer.Pod to runtime.GetPodStatus
• 1690001 DRA scheduler_perf: fix informer sync check
• a68bdab Add kuberuntime GetPod (singular), and generalized get{Sandboxes,Container} functions
• dd32d7c Lint: Activate modernize/forvar rule in golangci-lint.
• 60b0604 Remove StaticConfiguration from NodeConfiguration
• 2e1bb1f Add OWNERS files for nodedeclaredfeatures component helper
• fd72e17 Add API in declared features library to return feature requirements.
• 1d4776c Require configz to be external versioned runtime.Object
• 80fdfe2 e2e: node: podresources: fix grpc connection issues when kubelet restarts
• 2965357 scheduler plugin test defaults for NodeDeclaredFeatures
• 3cbe7e6 Promote NodeDeclaredFeatures to beta.
• 2634261 cmd/kubeadm: ignore EINVAL error during unmount
• 56e0565 dependencies: klog v2.140.0
• 1360b93 Use contextual logging in leaderelection controller
• bb744ec De-ducplicate and clean logic in FindOrDefaultContainerByName
• b94d21a api/validate: add MinLength validation
• 6bc89a6 field/errors: add TooShort error type
• 68d7b79 kubeadm: Use go:embed for readability
• 8cdc61b fix(kube-proxy): fix IPv6 support check for Linux
• fca6229 Tolerate APF header race with timeout handler in tests
• 7246d1d kubeadm: print CA certificate summary during join discovery
• a555870 e2e: node: podresources: add additional Get() tests for GA
• 7a3c7eb Use provided context in RunLogsContext
• ac1eb12 client-go/cache: add slow-handler tracing in processorListener
• a8c551e Fix test
• 9c99d5f Test that scheduler transform is set as expected in newPodInformer
• e433cbc generate code
• c0addb3 Fix informer factory generation and add test
• 95c15b5 client-go: guard ResultChan() close in StartEventWatcher
• ede65f3 Use context when waiting for conditions
• aa9d704 upgrade go to 1.26.1
• 3b98cd2 Enable native histograms gated by feature flag
• 426bb7c Fix auth registration for statusz and flagz
• 3725740 Check wait condition type cast to avoid potential panic
• b000df2 Keep logs when containers removed by RestartAllContainers
• 906134c Update pod after the container is removed
• 0d0b727 Demote lint newexpr, stditerators to hints
• 45900a1 Fix vet error
• e52fe3b Use HTTP GET for Node log queries in e2e logcheck
• e57b3a7 refactor: update in-tree FieldsV1 consumers to use format-specific accessors
• 3979194 feat: introduce format-specific accessors and equality helper for FieldsV1
• a0dee17 statefulset: wrap errors with %w in StatefulPodControl
• 595f133 Re-enable deadcode-elimination check
• f291ae4 Bump to go 1.26
• ba2a68e KEP-5284: add constrained impersonation metrics
• 6f0f757 use go 1.21 as default publishing bot go version
• 01b23c9 drop go patch version from dependencies.yaml, now that it is tracked solely in .go-version
• 9007ee2 drop go versions from publishing bot config, allow fallback to go.mod versions
• ab732b2 e2e_dra: fix ExtendedResource upgrade/downgrade tests
• 8504c0d deflake pod resize oom_score_adj check
• 4e8c8ff e2e_dra: fix ImplicitExtendedResource upgrade/downgrade
• c4f88de Move DRAAdminAccess feature to GA (kubernetes#137373)
• 80cc27a kep-3926: fix 60s shutdown timeout in transformation tests
• c8826e0 Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
• 1fbd77e test: refactor deletion policy utilities
• c0d8649 test: fix WaitForNamespacedGVRDeletion parameter order
• 54a9cc8 fixup! add tests that verify delete handler with unsafe delete
• 3799fc9 Add unit tests for HPA metrics (kubernetes#136670)
• 63080a7 kubectl describe: migrate to component-helpers resource package and add pod-level resources test (kubernetes#137394)
• 35cf373 increased discovery integration test timeout to resolve flakiness
• 40d8705 Introduce a kubelet-server configuration that allows reloading ClientCA in TLSConfig
• 77fc0cf /configz is official endpoint, removing the misleading note
• 5cb7a19 refactor: extract FieldsV1 declaration, proto, deepcopy into separate manually managed files
• 3e04149 Pass --readonly-pkg to openapi-gen and validation-gen in kube_codegen.sh
• 8af985c fix: Remove GuaranteedQoSPodCPUResize declared feature
• 721eea7 update kube-openapi
• 3caaccc DRA: Fix incorrect behavior when using AllocationModeAll with PrioritizedList
• a48ca68 Add OWNERS file for test/integration/controlplane
• d377659 kubectl wait: Support multiple conditions (kubernetes#136855)
• 4513498 Disable hard fail on deadcode-elimination script for 1.26
• 7ea5b88 cleanup: remove suggestfor from wait command (kubernetes#137266)
• 9d10b1f refactor: remove unused desiredStateOfWorld parameter from DetermineVolumeAction
• 0dec4fa Wait for RS to report status rather than count pods
• b895ce7 golangci-lint: bump to logtools v0.10.1
• 09379fb Remove test for unhandled case.
• 1140b62 Update fwk.Placement type
• 8ec951b Mirror List and WatchList tracing
• 4bc4b73 Address review comments
• 8cd5530 fix the misleading error msg when updating job.status.startTime
• ee02a8a Add --detach-keys for kubectl attach command
• 9f8eca1 add kube-log-runner to images on the fly, replicating the same /go-runner path as the current base image
• 268d9ec Replace PLEG watch conditions
• 2727957 drop v1alpha1 webhookadmission configuration
• adbf7de graduate config.k8s.io.v1alpha1.flagz to beta
• f02e67d test: Address globals pollution in metrics tests
• b26954b merging the pod rejection generation test into pod_admission.go and commenting out PodReadyToStartContainers. Conformance promotion will follow in a separate PR once this lands green, per review feedback.
• e74b406 chore: reorganize component-base/metrics
• 7be3d29 component-base: introduce metrics api
• e5461b7 Prepare pod group scheduling cycle for placement simulation
• df9ee16 kep-3926: add bit-flip corruption test for Secrets decoder error path
• 77b4552 kep-3926: add integration tests for corrupt CR object deletion
• f1bf45e endpointslice/metrics: promote metrics to beta and add test
• a7d8e3a Rework container lifecycle tests to not require "privileged" pod security
• 292e4ca Use localhost for etcd peer listener instead of ETCD_HOST
• dd6f4d3 DRA scheduler: avoid panic during PreBind
• 6be0185 DRA integration: fix goroutine leak in ControllerManagerMetrics test
• 532cc47 Fix incorrect error message in container restart policy validation
• 0659a34 fix(kube-proxy): fix health check binding failure in case of dual-stack
• e035c41 DRA: Promote DRAConsumableCapacity to Beta
• 41816de test: add preprovisioned vgs test
• 48eecb3 Replace cpuset.CPUSet{} with cpuset.New()
• 783b84c kep-3926: refactor secrets_transformation_test.go
• d6b9182 deepcopy-gen: remove dead --bounding-dirs flag
• ad6c155 KEP-4680: Add message field support to DRA device health reporting
• 475f962 Squash nftables endpoint chains into service vmap
• e17963c Do nftables hairpin handling centrally rather than per-endpoint
• aa3a30d Do clusterIP masquerading centrally rather than per-service
• 75aab22 Add NodeName to all EndpointSlices in nftables proxier unit tests
• 912bf9c Use a single RunPermitPlugins function and call AddWaitingPod outside a framework
• 82d8b65 validation: align handwritten and declarative validations
• 729792e update-codegen: regenerate generated files
• 430b5d8 apis/resource: migrate maxLength to maxByte tags
• 3deb264 validation-gen/tests: add maxBytes tag tests
• c965276 validation-gen/validators: add maxBytes validator
• 100b1a6 api/validate: add MaxBytes limit validation
• b9cebe2 validation-gen/tests/maxlength: use TooLongCharacters error utility for assertions
• 91893a3 validators/limits: minor fixes to MaxLength validator
• fff6e59 validation-gen/util: add ParseInt utility for canonical integer parsing
• b5dd643 validate/limits: update MaxLength validation to be character-based
• 9b7ad17 Adjust pod group scheduling cycle code
• 84b4517 Add fuzz roundtrip test for internal DRA API conversion
• affb092 Add fuzz roundtrip test for DRA API conversion
• 910a4ca Fix missing field conversions in v1beta1 DRA API
• fbe6f7f add warning when kubectl rollout undo is used on apply-managed resources
• 62e9425 cri-api: update the generated code
• 3116889 cri-api: add image_id to PullImageResponse
• f11bb48 Remove redundant re-assignment in for-loops under pkg
• 9f1f7de e2e: add executable permission to snapshot metadata test script
• db8e2f4 DRA: serialize binding conditions integration tests with custom scheduler config
• e5920df bug: Fix link file ownership of projected serviceAccountToken
• b738ae6 test/e2e/node: handle quick pod completion in GPU startup wait
• 80c6507 KEP-5707: Deprecate Service.spec.externalIPs
• b0ec568 Fix path in Pod status resourceClaimName validation
• 71e111b Update docs
• 00e6684 Graduate 'apiserver_storage_events_received_total' metric to BETA
• 5c88906 Rename volume_operation_total_errors to volume_operation_errors_total
• 6fee34d default readonly_pkgs in kube_codegen.sh
• 8f48e83 Support multiple versions, add v1alpha1 to deprecated versions
• 0e5872d graduate config.k8s.io.v1alpha1.statusz to beta
• 41bb4b6 Promote sig-storage feature MutableCSINodeAllocatableCount to GA (kubernetes#136230)
• c215164 fix test/integration/scheduler/batch
• 553dc9c Use ephemeral port for etcd peer listener
• f28dc41 DRA device taints: automatically bump TimeAdded when changing effect
• 5dd28f7 netpol: specify explicit per-test pod topologies
• 0ce498f Fix deadlock when listeners get added before processing starts
• c8e8bd5 Add the ability for the statefulset controller to read its own writes
• 3d99d70 Added remove in suggestFor for delete subcommnad
• ba27721 Remove dependency prometheus from test/e2e_node resource metric test
• 6ab1f2a chore: rebase and regenerate
• 5b6ec0c chore: remove staging/src/k8s.io/client-go and proofread
• 43306c3 docs: add endpoint-mappings.yaml to the README
• 1470f0e fix: sort component names for deterministic output
• af7946e fix: path staging/src/k8s.io/component-base/metrics/prometheus/slis
• b200cfc chore: pr feedback
• 12e02d1 chore: lint
• 36d36b9 chore: regenerate metrics docs
• 5b4bb72 feat: add component and endpoint to metrics docs
• 0981579 refactor: consolidate metric structs
• 400743b field/errors: add TooLongCharacters error utility
• f7bd739 e2e: node: cpumanager: create helper creation function
• b0919d8 Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA
• 29e9236 DRA device taints: avoid unnecessary Pod lookup
• 404f0f9 OWNERS: propose ffromani as podresources API approver
• 600d188 dependencies: bump gomega to v1.39.1 and ginkgo to v2.28.1
• e70323e Added SuggestFor to top subcommand
• ba04070 e2e: node: podresources: wrap Get() in Eventually
• e941f65 docs(api): clarify env var key constraints in core types
• c77b52f dependencies: bump cadvisor to v0.56.2
• 017a53a DRA device taints: simplify more tests with synctest
• 4521c34 DRA device taints: remove usage of testify for unit test
• fb94a99 DRA device taints: artificially delay pod deletion during test
• 7d7b4c3 DRA device taint tests: remove List+Watch workaround
• 75626bc DRA device taints: update unit tests
• 8163366 csi: update CSI sidecar images in test manifests
• 4531b9e csi: update CSI sidecar images in cluster/addons
• 72609c3 Update example test to use tCtx Eventually
• 10f7c34 added exceptions for StorageVersion.Spec , StorageVersion.Status , StorageVersionCondition.LastTransitionTime to be a pointer and StorageVersion.Spec and StorageVersion.Status to have omitempty tag
• 1c6365c lint: add granular exception for apiserverinternal
• c0c06c9 lint: Enable optionalfields rule in KAL with mass exclusion
• b278254 Enable optionalfields rule for Kube API linter
• 71a7aea Fix Deprecation message in doc comment
• 225eb90 CHANGELOG: Update directory for v1.35.2 release
• 45a80d2 CHANGELOG: Update directory for v1.32.13 release
• 6749f35 CHANGELOG: Update directory for v1.33.9 release
• d8f2c00 CHANGELOG: Update directory for v1.34.5 release
• c4199ae retry pending pod resizes when another pod terminates
• c246753 address feedback: use componentName and resource labels for flagz/statusz metrics
• 9454a30 Add WithMinEmulationVersion option to skip hand-written validation sub-test
• e364212 Improve AllowlistEntry conversion logic
• 64c0d51 Run openapi codegen
• cede69d Update doc comment
• 8203f2b Update kuberc plugin policy tests
• 7b5dfd5 Revert the graduation of maxLength
• aa1e246 Update OCI image volume type description to remove "noexec" attribute
• 505b937 Rename AllowlistEntry clientcmd.Name to Command
• cabfc88 Update conversion func for AllowlistEntry
• 3ed3163 client-go: error on invalid fake pod logs reactor object
• c24c1e8 Rename internal AllowlistEntry field to Command
• c4c9a9d ktesting: remove type alias
• 9d68532 CHANGELOG: Update directory for v1.36.0-alpha.2 release
• aa494f8 client-go/leaderelection: Check context canceled
• efd6f8b dra: devttr: make sysfs overridable
• b410886 Split ListResource into subfunctions and avoid unclosed Span for Watch
• d11d54d Update pkg/controller to use slices.Contains
• d7e8ee8 start scheduler after creating binding/non-binding slices
• 65e0274 DRA: Kubelet: add namespace to error messages
• 7845a9b DRA: TestGetResources: add new test case
• 7b44aff DRA Kubelet: optimize UpdateAllocatedResourcesStatus claim lookup
• 1f8bd2f DRA Kubelet: optimize GetContainerClaimInfos claim lookup
• 0a9377b DRA Kubelet: optimize GetResources claim collection
• d9956b7 Bump dependencies, images and versions used to Go 1.26.0 and distroless iptables
• 620c1b6 ktesting: fix potential unit test flake
• 8a2d153 ktesting: fix potential log panic
• 8a7e586 dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first
• 43bfd86 Refactor NewTestContext to return Context instead of TContext
• ef30ab6 Update startup_race_test.go
• e54eef1 Use localhost image reference in PodObservedGenerationTracking test
• a542dc5 kubeadm: do not add learner member to etcd client endpoints
• 6e6efbc Graduate Mixed Version Proxy to Beta
• a11feac validation-gen: Fix missing MarkAlpha/MarkBeta for nested validation tags
• f18f0df Add the ability for the replicaset controller to read its own writes
• 008b92e Fix clearing job consistency store for all deletes
• d7cc386 fix: refine cleanup logic
• 4baef5a Remove dependency prometheus from test/e2e_node mirror pod grace period test
• 620d7f3 update component-helpers policies for dependencies
• 911a61d controller/selinuxwarning/cache: Add reverse index
• dfba43e make update swagger
• ee5e2b1 Extract tCtx and collectorCtx from executor
• e123d5c Separate operations and executor in scheduler_perf directory
• fa36069 Extend template functions supported in scheduler perf
• 0678b48 narrowing the lint through adding admissionregistration.
• 0079837 Address review comments
• 642f479 Add upgrade/downgrade e2e tests for the DRAExtendedResources feature
• 40173a2 admission: mark review fields optional
• 61d0dd3 Add the ability for the job controller to read its own writes
• 701db6b validation-gen: Fix all stable api violations by prefixing +k8s:alpha(since:"1.36") and exclude output_tests from linting
• d1f11ee validation-gen: remove manual lint tracking and unused flags
• 7d08854 Fix lint errors
• 6910980 Enforce lint before generating the validation code
• 826978b Add lint rules to enforce optional required, stability and alpha/beta prefix.
• 3956070 1. Optionally Enforce TLS Validation: modified the created http.Transport to configure CAData. The Insecure field is now conditionally set using apiService spec.
• aee4ca0 Fix the pod startup timeout in the NoSNAT test
• 95a17bf Promote multiple validation-gen tags to beta
• 3b5298f Fix resource claim DV
• 12a6d30 Change strategy.go utils to mark handwritten validation errors properly
• b8bd945 Add logic to match errors according to the error origination
• d126389 Convert {is,supports}SubResource to modern tag parsing
• a344563 controller/selinuxwarning: Pre-parse SELinux label
• 9c00b4c etcd: bump etcd sdk to v3.6.8
• 6256cef fix flaky logs test by retrying logs fetch
• 30ce233 fix container restart rule error message
• ebed4d4 dra: deviceattr: split long expression for readability
• 8bb22a5 dra: deviceattr: add Clean for safety
• 0bdee76 Regenerate openapi for sample-controller
• c587558 applying feedback
• fc53227 Fix FSWatcher goroutine leak by adding ctx to Run()
• 712a8d1 Remove unused register.go
• 6581867 chore(sample-controller): generate zz_generated.register.go
• dc4b3be Move storageversionhashdata variables to instance_test.go
• 60c6974 client-go: keep fake pod log action compatible
• ee5f014 KEP-5710: Add WorkloadAwarePreemption feature gate
• a4c074d Address review feedback: replace HandleError and HandleCrash with contextual variants
• 1a1d4f6 Fix nil pointer dereference in submitPodGroupAlgorithmResult
• aa118a4 Make Allocators.Channel() consistent with thier consistency level
• 3d41b43 client-go: make fake Pods.GetLogs honor reactors
• ed083ab add declarative validation tests for ipaddress
• a401451 Drop NodeKiller
• 314d92f Pass pod from cache to updatePod in handleSchedulingFailure
• 130641d Remove WithSerial
• 156fc79 updated generated code
• a3bf198 Style linting
• 45a6ede Mark some HPA slow tests as slow
• ce98459 Update startup_race_test.go
• d2b3483 Update repairip_test.go
• 9e29a74 commentstart lint fixes for apiserverinternal API group
• 4ab6ae2 Drop direct use of github.com/stretchr/testify in component-helpers
• cc9731f fix quota integration test
• 80b9ee1 fix unit test
• 58da2e6 codegen
• d50f814 promote DRA Extended Resource feature to beta in 1.36
• 66c6098 moved data_test.go file contents to data.go file of kubeadm phases
• 7de12a3 Drop direct use of cmp in component-helpers
• 2c9ccde Make quota evaluators in admission conditional on enabled resources
• a64caab Make API group enablement accurate for generic API server
• beefa12 kubelet: reuse common UpdatePod log fields
• 219c13a Revert "Update knftables to v0.0.20"
• ea8bad2 Revert "pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions"
• 05ca657 Rewrite an incorrect dual-stack e2e test
• 4199607 Decrease likelihood of HPA flake
• 1b258b0 e2e: DRA: refactor device class creation API
• df5c17e Add memorymanager option in local-up-cluster
• 2b18086 DRA scheduler: update logging
• e6d9cbf DRA scheduler plugin: increase test coverage
• c9d3f97 Improve test coverage of UpdatePodFromAllocation
• adb941b Use semantic equality for resource comparison
• fc5990e Consolidating containerResources and podResources into a resourceRequirements struct as both have same underlying fields
• 50d2f0f Add egress dialer to proxyClientConfig for Mixed Version Prpxy
• d049bd1 Add processing latency metric for RealFIFO
• 3a9e3b5 Regenerate protobuf
• 696a504 Drop protomessage generator
• 65eb0e9 Daemonset Consistency
• 5fdef09 kubelet: pass upper-level context through killPodNow
• 278cdba Mark HPA's configurable tolerance test as serial
• 8c9b215 Remove some more dead code
• db71bd4 Remove test/e2e/framework/ingress
• 62710a1 Add tests to validate ShareID does not interfere with DRA Resource Health Status
• 2fdc032 Add feature gate for TopologyAwareWorkloadScheduling
• 656c089 Update kubectl kustomize to kyaml/v0.21.1, cmd/config/v0.21.1, api/v0.21.1, kustomize/v5.8.1
• 58d00ac remove unwanted dependency 'github.com/pkg/errors'
• cf1db16 Fix the NodeAuthenticator e2e tests
• 5e8ae74 apiserver: use contextual logging in WatchServer.HandleWS
• 8109698 kubelet: use a single test context in pod status subtest
• 6bccc05 hack: add temporary kubelet contextual logcheck carve-outs
• e94e673 kubelet: tighten podworkers context flow and consolidate kubelet logcheck scope
• 864c54f add validation fields and generated code for v1 and v1beta1
• 73ce1b3 Retry RepairIPAddress runOnce() for Forbidden error
• 124f6f0 Add test to reproduce issue 136288
• 099b2ae Add more metrics for MVP
• bc5a776 add an empty dec validation test for ipaddress
• 88ed94e Scale ReplicaSet in DRA test down once in total, not once per pod
• 755a726 Fix some dual-stack tests to use svc.Spec.IPFamilies
• 66a7bd6 Fix TestEtcdStoragePath for MutatingAdmissionPolicy emulation
• 0af21ea put replacement for v1beta1 MutatingAdmssionPolicy
• 4c13c22 Add conformance tests for MutatingAdmissionPolicy
• 962f5fe Fix integration tests
• cb52554 Generate OpenAPI spec for mutatingAdmissionPolicy
• 0d5bdae promote MutatingAdmissionPolicy to v1: update plugin implementation
• b7c4f21 promote MutatingAdmissionPolicy to v1: api wiring and validation
• 5505c01 promote MutatingAdmissionPolicy to v1: add types and generated code
• 9e50a1b e2e: node: move helpers in util.go
• e809602 podresources: filter out inactive pods in Get()
• 448fa19 e2e: node: podresources: fix expectations for Get() and terminated pods
• 1c947e6 e2e: node: podresources: remove duplicated test
• 8d88146 e2e: node: add GinkgoHelper calls
• 7c54689 etcd: update etcd image to v3.6.8
• d7c1072 Fix example in kubectl create configmap
• 4a326b0 Preempt pods in prebind phase without delete calls.
• a3928d5 run hack/update-openapi-spec.sh
• eb3252e Update the APIGroup field to be optional
• ed551f6 KAL:enforce optionalorrequired on rbac API group
• 7016528 Automate adding kind/* labels to cherry-pick PRs
• 2c24530 remove redundant in test GA-opt-out
• b74cd90 add test GA-opt-out
• 9685591 update feature list with hack/update-featuregates.sh
• a21e27f enable prioritized list test for GA
• 2dadc5c promote DRAPrioritizedList to GA
• dfcf944 Fix missing container_swap_usage_bytes metrics in cri_stats_provider
• 9c3faba component-base/metrics: graduate metrics to stable: kubernetes_build_info, rest_client_requests_total, rest_client_request_duration_seconds, running_managed_controllers
• 6cdd9e6 Add group, version, resource labels to alpha metric apiserver_rerouted_request_total
• e728229 Instrument flagz and statusz endpoints with per-request apiserver metrics
• 3014499 Update HPA Configurable Tolerance e2e test feature
• 0e6bf00 e2e: fix snapshot metadata test flakes by removing in-test CRD creation
• 8e7eb56 Fallback to ExternalIP in tests.
• 76ba5f1 Bump logs e2e timeout to 3s to match log generator
• 25d93e1 Extend PostFilterResult with a list of victim Pods
• ff551f3 DRA E2E: disarm footgun in PodExternal
• aa3f79d DRA upgrade/downgrade: add DeviceTaints test
• e53d93a DRA integration: fix data race
• 7e3bd4c chore(test/autoscaling): replace RC with ReplicaSet and update deprecated API versions in HPA e2e
• 6233b25 Introduce Workload Scheduling Cycle
• a1736c1 update go in publishing rules
• cc48320 client-go/cache: Remove reflector context cancellation logging
• ca13472 promote align-uncore-cache to stable
• 08ee348 Update the text of the StrictIPCIDRValidation warnings
• 6182de8 KEP-4858: update StrictIPCIDRValidation to Beta
• 3d1e90f Bump to golangci-lint 2.9.0
• ca0433b DRA scheduler_perf: avoid race between assume cache and Update calls
• 5b3b059 fix cli throwing an error when trying to follow logs for pod while still initializing
• d42d1e3 Deprecate obsolete slice utility functions
• 6b4a371 Do not get PV for externally deleting volume
• bc17031 network: migrate CIDR validation to DV Co-authored-by: Abhishek Srivastava abhishek@asrivas.me
• bbbc09f proxy/utils: Use net.JoinHostPort to format address.
• 3b25b16 api: enable optionalorrequired linter for authentication API
• 8dd711e address feedback: pass HPAScaleToZero option when already in use
• 0306017 add show-secret flag to the diff command
• 5f3bb4a feedback: Remove disallowed tags logic from discriminator validator
• 70b90d9 feedback: Address review comments
• 98c52cc Update staging/src/k8s.io/code-generator/cmd/validation-gen/validators/mode.go
• 7e5cd91 Fix compilation errors from cherry-picks
• 4c9af15 Revert DV native error matcher
• c04c60f Implement declarative modal validation (+k8s:discriminator and +k8s:member)
• d59cfc9 Add MultiWrapperFunction to support bundling multiple validations
• 1c57c20 Add OwnerReference assertion to TestTransitionInitialToWait
• 09e8aca Fix incorrect APIVersion in PodCertificateRequest OwnerReference
• 088d39c shuffling test cases for consistency
• 33dec22 address feedback: refactor declarative validation migration checks
• d1b805f Mark scheduling Workload validation as Alpha in test
• 93b901d Enhance validation testing: add support for all declarative rules enforcement
• 3470dbd address feedback: add IsAlpha/IsBeta helpers for ValidationStabilityLevel
• 4d2a2ab scheduling/workload: fix tests requiring RequestInfo for declarative validation
• 4f56a29 Enforce zero mismatches in validation equivalence testing
• 2ef3588 Update validation equivalence testing for lifecycle enforcement
• a972411 opt-in Workload v1alpha1 to explicit declarative enforcement
• 069f913 Update mismatch checking to support Validation Lifecycle stages
• eceed00 Implement DeclarativeValidationBeta and Validation Lifecycle strategy
• 0c679ce Introduce DeclarativeValidationBeta and deprecate Takeover gate
• d5e87fe fix: remove duplicate SSH execution in masterExec function
• 4810a2a fix: remove duplicate SSH execution in masterExec function
• ae3163e Fix issue 136525: Handle NotFound errors in garbage collector
• 33ebd41 client-go: Replace deprecated BackoffManager with DelayFunc in Reflector
• c9c926a test: add ratcheting test case for HPA MinReplicas
• 36fcbae test: add declarative validation tests for HPA MinReplicas
• 09681e2 feat: migrate HorizontalPodAutoscalerSpec.MinReplicas to declarative validation
• 82a9a99 Restore omitempty on ServerStorageVersion fields
• 22706b7 pkg/kubelet: add kubelet_metrics_provider metric
• 319978e Update openapi/swagger
• 551c08e Update exceptions to drop "it must be optional"
• dfda908 Update cloud-controller-manager image version to v35.0.2
• d25c688 remove the InPlacePodVerticalScalingAllocatedStatus feature gate
• 7d85587 kubectl explain: render externalDocs from OpenAPI v3 schemas
• 11c6f8c Clean up redundant IsNotFound checks in stateful_set_control
• 0b10375 Add exception for union type in scheduling API
• 0ebf47c Update generated code
• a9034c0 Enable nonpointerstructs alongside optionalorrequired
• 634d1f0 Bump images and versions to go 1.25.7 and distroless iptables
• c2bf995 Add 1s timeout after pods get ready, to ensure log generator produces output
• 6e6107c Cleans up the test, removing duplicate checks and making code more readable
• 550cc86 Move dump package from apimachinery to k8s.io/utils
• 0cb57b9 DRA integration: test sharing a claim sequentially
• bff684d DRA ResourceClaim controller: update logging
• 21bf85d DRA E2E: support usage without real nodes
• c4b2640 Remove exceptions for groups with no issues
• 8651d99 Enforce either optional or required tag on apiserverinternal API group
• 971b079 dra: split slices to shared and onnode
• a925ad2 DRA: Optimize SharedDeviceID.GetDeviceID function
• 94047f3 List containers when given container is not found
• e1a7952 DRA: Rename GetBaseDeviceID to GetDeviceID for SharedDeviceID
• ab62215 e2e: fix typos in snapshot-metadata testfile
• 94cc00a set KEP-5440 to enabled by default and add two e2e tests confirming behavior
• 428b903 Plumb bookmark RVs to controller for observation
• 9c6ac55 Add rv query to store
• e6bea15 Add the windows 2025 support for pause image
• 334fa1c Add tombstone handling for serviceaccount and attachdetach controllers
• 72ef5b3 pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions
• a34e0b2 Add the windows 2025 support for some e2e test images
• 7291cd6 Revert "validation-gen: Implement declarative validation native logic"
• 903a3fe Revert "Add DV support for cross field validators"
• ccd53e4 Reflect expected replica count to the output of kubectl scale
• 0fc147e DRA: e2e: refactor device plugin deployment
• 02485d0 DRA: e2e: move util_sampledevice.go to e2e/node/framework
• 1d6f9dd declarative validation mingration- addressing feedback
• f7a0c01 cluster gce: parallelize cluster cleanup a bit more
• 2ac7de2 Fix also forvar in cmd/kubeadm
• d137915 Use for-range in cmd/{kubelet,kubeadm}
• ba60b42 apimachinery/watchlist: add test for Table rejection via standard List
• aaa168d e2e/apimachinery/watchlist: refactor watchlist Table rejection test for reuse
• a46b190 reflector: reject Table format resources in List and Watch paths
• 6e81ff4 Show CEL library doc comments in godoc
• 019f68b test: fix the flaking TestWebhookConversion_WhitespaceCABundleEtcdBypass
• d948086 e2e test cases should support seccomp default, which is unconfined [LinuxOnly]. Execution failed.
• 62c3d8d Update knftables to v0.0.20
• 2257cdc remove unused env from common.sh
• a15b558 add dockerized go cache to make clean
• 718ebb6 Pipe feature gates
• bce392d Explain limitations and maintenance policy of fake client
• d5dabfc remove Pod Generation feature gate from field descriptions
• 0010062 remove unused allocatedPod var
• 01d4290 remove allocationManager's unused dependency on nodeConfig
• 676be66 move resize infeasibility check into an admitHandler
• 694c998 add 'operation' field to lifecycle.PodAdmitAttributes
• f425715 CHANGELOG: Update directory for v1.32.12 release
• 5fbe09a CHANGELOG: Update directory for v1.33.8 release
• 3403737 CHANGELOG: Update directory for v1.34.4 release
• 699d840 CHANGELOG: Update directory for v1.35.1 release
• 0dbf866 Split from concurrent-node-syncs a separate flag for node status updates
• 5cb2b79 podresources: partially revert PR135485
• 5ff323d client-go informers: context-aware Start + WaitForCacheSync
• fdcbb6c client-go cache: wait for cache sync via channels, better logging
• 7d68b9b Update the csi-driver-host-path version to 1.17.1
• 0511a75 DRA E2E: fix data race in test driver
• 45251e5 client-go cache: allow passing name+logger to DeltaFIFO, RealFIFO and Reflector
• 2cfc906 fix flake on ipaddress allocator integration test
• e3f7eb3 Revert "Mark VAC roll-forward test as flaky"
• d9cf181 Add Patrick as tech lead for sig-instrumentation
• f4882ee Use AddAfter for GV reaping instead of periodic ticker
• 8eb3b65 kubeadm: the preflight check ContainerRuntimeVersion validates if the installed container runtime supports the RuntimeConfig gRPC method. For older kubelet versions than 1.37, it will return a preflight warning.
• b7bd701 Add CertificateSigningRequest create log entry for default kubelet debug level V2
• e80da21 fake client-go: un-deprecate NewSimpleClientset
• aa082ab Revert "kubeadm: switch tests to NewClientset"
• 2238a33 DRA integration: bump timeouts to 1 minute
• 9dc40c8 kubelet: api: validation: remove CustomCPUCFSQuotaPeriod setting
• 9bc91a7 e2e: cpumanager: test for custom cpu cfs quota period
• 5a2578c kubelet: promote the CustomCPUCFSQuotaPeriod to GA
• ccb70a6 kubelet: deprecate DisableCPUQuotaWithExclusiveCPUs
• 6e20366 test/e2e/node: reduce flakiness in GPU nvidia-smi test
• d03e9c8 Use single worker for ActiveGVTracker and Refliter workqueues
• bd31a16 kubelet: defer the configurations flags (and the related fallback behavior) deprecation removal timeline from 1.36 to 1.37 to align with containerd v1.7 support
• 92fc98d DRA: Fix missing GetSharedDeviceIDs bug in GatherAllocatedState with consumable capacity
• 7883039 Remove unneeded use of fmt.Sprintf in test/{integration,e2e}
• d712e0e Add e2e test for external metrics
• 077dfc6 Fix TestAPIServerTracing: update rpc.system to rpc.system.name
• af5741d Fix cases of nilness under pkg/controller.
• f59cfe6 Bump structured merge diff to v6.3.2
• 7d75fea run hack/update-codegen.sh
• eab10ee migrate StorageClass.VolumeBindingMode to declarative validation
• 5cd3d3f migrate StorageClass.ReclaimPolicy to declarative validation
• c1f5381 migrate StorageClass.Parameters to declarative validation
• e819650 migrate StorageClass.Provisioner to declarative validation
• 275adf8 Update OpenTelemetry dependencies to latest versions
• 5e9056f k8s.io/cloud-provider: add missing --webhook-tls-* --webhook-disable-http2-serving options
• 8751dab k8s.io/cloud-provider: fix webhook flags description
• efe3667 Add 404 handling for the statefulset controller pod deletion codepath
• a491db6 CHANGELOG: Update directory for v1.36.0-alpha.1 release
• ae8838f Fixes under staging.
• 95616ce Use slices.Sort instead of sort.Slice.
• 598922d feat(wait): introduce waitOptions.RunWaitContext() (kubernetes#136781)
• dde1c5d Update kubelet to use EventRecorderLogger.WithLogger() for contextual logging when emitting events.
• ad7c5fd PopulateRefs unit test
• 317c96a Fix data race in PopulateRefs by copying Items and AdditionalProperties
• cbfc201 Remove nil checks for unschedulable pods metrics recorder
• a0cc80b Fix Resolve WaitForAttachAndMount concurrency contention and timeout mechanism
• 4bc5464 Remove feature gate HonorPVReclaimPolicy
• c76efb3 Pod Certificates: make update
• 26a78ba Pod Certificates: Add StubPKCS10Request; migrate in-tree usages to it
• 83e7742 Push ClusterTrustBundles v1beta1 deprecation to 1.37
• cb79675 Fix defer duration metric recording bug
• c063acd Fix RecordStorageListMetrics comment
• 8d2bb51 test: refactor to use atomic types
• 066b006 volume: simplify elem check with slices.Contains.
• acb3e13 keep params declared when schema is untyped
• a74bf84 e2e: add tests for external-snapshot-metadata sidecar
• 1333aa5 Refactor ScheduleOne functions for Workload Scheduling Cycle
• a7ec7ef SchemaDeclType resolved.
• 6ec313a Graduate ImageVolume to GA
• bde4b5c simplify cluster role aggregation and remove update path
• 7bb838e Fix kubectl plugin list overshadow detection on Windows
• 7b9e536 clenup(kubelet/test):Add test cases
• c5b066b Add timezone to kubectl describe cronjob output
• 0fe227e nodelifecycle: fix processing deleted pod events, which are currently missed
• 8afc18d Refactor Declarative validation test file for role and clusterrole to be more clearner
• 86aaa3d Round thresholds to nearest 10
• c8c5a16 refactor: improve CSI plugin code clarity and error handling
• f006a94 refactor: extract volumeAttachmentIndexer function for better code reuse
• 4b4fa73 refactor: rename vaindexer to vaIndexer and improve error handling in CSI volume limits plugin
• 6560d3b fix unit test
• dd767cd add err check when plugin init
• edf132e use indexer to acclerate volume limit plugin
• 77b79d7 node status test: fixed lint errors
• 5ca517e migrate kubelet_node_status* to contextual logging
• 0f4b8ad controller-manager: Add ControllerManagerReleaseLeaderElectionLockOnExit feature gate
• 81e4b11 fix(kubelet): ignore resource claim statuses in pod status comparison
• 4df467d separate raw and filtered peer discovery caches
• 3d5153d Remove unused variable CustomMetricsAutoscaling
• 3c1ad42 Add a helper for the operation-counting unit tests in nftables
• 8f2be40 Rename an argument in validation stack
• 2b474ff Adjust the expected and actual parameters of the unit test Equal function to the correct order
• 5a30603 Update leasecandidate client to read from cache
• c7b4a65 kubeadm: removed the built-in flex volume support
• cfd7b49 KEP:5040 Lock gitRepo Volume Driver to disabled.
• aaed752 Consolidate delete handler, reaper logic into same sync loop using the same worker - activeGVQueue
• 1713b6d Wire GVExclusionManager
• 79375cf Add tests for GVExclusionManager
• 41761eb Add GVExclusionManager to process CRD and aggregated APIs GVs
• 438649a Rename exclusion_filter.go to gv_exclusion_manager.go
• af5317b Run codegen
• 08b81b9 Align IsWatchListSemanticsUnSupported comment
• a2ebdf6 DRA E2E: use image utils to manage hostpath image
• 1bd6a8f Set threshold for matching anti-affinity perf test
• 97abc89 test: add vgs retain policy test
• 064a8ec promote HPA metrics to beta
• d21b249 rbac: complete declarative validation migration for PolicyRule.Verbs
• 8b29b3d rbac: enable Declarative Validation for Role
• 5cd1175 rbac:migrate policyRule.verbs to declarative validation
• 197f5ab Delay building discovery transport until needed
• ee8f5e7 avoid goto in hasAvailableEndpoints
• 23a46c2 SeparateCacheWatchRPC LockToDefault set true
• 4325b2b repairip externalname to cluster ip type
• 981b46e Relax the noise margin threshold in TestConcurrencyIsolation
• 7547cfc kubelet: drop cpu load metrics from container metrics test
• 2973c86 add tests that verify delete handler with unsafe delete
• 92a32e6 Replace deprecated sets.String with sets.Set[string] in apiserver.pkg.admission
• ee9d998 client-go features: ignore contextual logging