Skip to content

WIP: do not merge - jacob's 1.36 tests#2654

Draft
jacobsee wants to merge 2930 commits into
openshift:masterfrom
jacobsee:rebase-1.36-jacob
Draft

WIP: do not merge - jacob's 1.36 tests#2654
jacobsee wants to merge 2930 commits into
openshift:masterfrom
jacobsee:rebase-1.36-jacob

Conversation

@jacobsee
Copy link
Copy Markdown
Member

@jacobsee jacobsee commented Apr 24, 2026

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR is related to:

Special notes for your reviewer:

Does this PR introduce a user-facing change?


Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.:


Summary by CodeRabbit

  • New Features

    • New API resources: MutatingAdmissionPolicy, MutatingAdmissionPolicyBinding, PodGroup, DeviceTaintRule, ResourcePoolStatusRequest.
    • Sharded list/watch: ShardInfo metadata echoed and shardSelector query parameter.
    • PodSchedulingGroup and Pod scheduling/grouping; PodCertificateRequestSpec adds stubPKCS10Request.
  • API Changes

    • Several schemas mark top-level fields as required (e.g., CronJob.spec, HPA.spec, TokenReview.spec).
  • Documentation

    • Extensive changelogs and OpenAPI docs added/updated.
  • Chores

    • Go toolchain and CI build image tag updated; local ignore rules extended.

nmn3m and others added 30 commits March 19, 2026 16:50
…00, maxLength=128) for etcd safety, add Errors printer column

Signed-off-by: Nour <nurmn3m@gmail.com>
Signed-off-by: Nour <nurmn3m@gmail.com>
…ify retry logic and metric tests

Signed-off-by: Nour <nurmn3m@gmail.com>
…op unnecessary Feature:DynamicResourceAllocation tag, fix indentation

Signed-off-by: Nour <nurmn3m@gmail.com>
…generate the code

Signed-off-by: Nour <nurmn3m@gmail.com>
* Add admission for podGroup

Signed-off-by: helayoty <heelayot@microsoft.com>

* Create workload object before podgroup

Signed-off-by: helayoty <heelayot@microsoft.com>

---------

Signed-off-by: helayoty <heelayot@microsoft.com>
…econcile

Remove reconcilePodMemoryProtection that resets pod cgroup values on systemd
…and container ID instead of StartTime

The expectation that StartTime changes on kubelet restart for static pods is no longer reliable due to faked init container status logic. This change updates the tests to assert on the specific behavior introduced by that logic.
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
test: fix flaky static pod tests by asserting on termination message …
Remove PodGroupTemplateRef from the PodGroup e2e CRUD test. The
PodGroupWorkloadExists admission plugin (introduced in kubernetes#137464)
rejects PodGroups that reference a non-existent Workload, causing
the test to fail. The workload reference is not needed to test
basic PodGroup API CRUD operations.
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
…ist-default-to-false-for-1.36

Switch PLEGOnDemandRelist default to `false` for 1.36
…ure actuated pod-level resources are updated
…heduler-events

scheduler: use contextual logging for event emission
…to ResourceSliceMaxDevicesWithAdvancedFeatures and add testcases with max devices with list attributes
KEP-961: demote maxUnavailable feature in statefulset to off by default
…oad-api

test: Fix PodGroup CRUD test failing due to missing Workload reference
…ources that inherit changes due to pod-level modifications
…pool-status

KEP-5677: Add ResourcePoolStatusRequest API for DRA resource availability visibility
benluddy and others added 26 commits May 8, 2026 18:15
UPSTREAM: <carry>: Add plugin for storage performant security policy
Add featuregate for performantsecuritypolicy for storage

UPSTREAM: <carry>: Feature gates must now declare dependencies, even if there are none.
Signed-off-by: Harshal Patil <12152047+harche@users.noreply.github.com>
Analysis of flakes from the k8s suite has shown consistent examples
of otherwise well behaved testing failing due timeouts because of
temporary load on controllers during parallel testing. Increasing these
timeouts will reduce flakes.
MutableCSINodeAllocatableCount is now enabled in the default feature set,
the tests should succeed just fine.
…imary clusters

  Detect cluster's primary IP family by querying kubernetes.default service
  ClusterIP instead of using HasIPv4/HasIPv6 flags. The previous logic
  incorrectly returned ipv4 for dual-stack v6-primary clusters because
  both HasIPv4 and HasIPv6 were true.

  This matches the upstream approach in test/e2e/e2e.go and fixes DNS tests
  that were querying for A records instead of AAAA records in v6-primary
  environments.
After openshift/origin#30786 added ibmcloud to the provider switch in
openshift-tests, the provider name is now correctly passed through to
k8s-tests-ext. However, k8s-tests-ext only registers upstream Kubernetes
providers (aws, azure, gce, kubemark, openstack, vsphere) via the
test/e2e/providers.go import. OpenShift-specific providers like ibmcloud
are not registered, causing framework.AfterReadingAllFlags to call
SetupProviderConfig which fails with "Unknown provider" and Exit(1),
crashing every test process.

This registers all OpenShift-specific cloud providers (baremetal, ovirt,
kubevirt, alibabacloud, nutanix, ibmcloud, external) as NullProviders in
k8s-tests-ext. These providers don't require special setup for upstream
kube e2e tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…e2e test

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: jubittajohn <jujohn@redhat.com>
To be squashed with the following commit later:"UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs"

Signed-off-by: jubittajohn <jujohn@redhat.com>
…er_manager_linux_test.go

Squash into: UPSTREAM: <carry>: disable load balancing on created cgroups when managed is enabled
…s in flagz_test.go and statusz_test.go

Squash into: UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total
Signed-off-by: Shaza Aldawamneh <shaza.aldawamneh@hotmail.com>
…e when claims.email is used in username expression

Signed-off-by: Shaza Aldawamneh <shaza.aldawamneh@hotmail.com>
…acheGC is enabled

Squash into UPSTREAM: <carry>: create termination events
Could squash into UPSTREAM: <carry>: emit event when readyz goes true
Squash into: UPSTREAM: <carry>: add management support to kubelet
kuberc subcommand is not yet registered in oc. Tests will be re-enabled after oc is bumped to 1.36
To be squashed with the commit UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs before 1.36 rebase bump merges

Signed-off-by: jubittajohn <jujohn@redhat.com>
Signed-off-by: jubittajohn <jujohn@redhat.com>
Signed-off-by: jubittajohn <jujohn@redhat.com>
Signed-off-by: jubittajohn <jujohn@redhat.com>
@jacobsee jacobsee force-pushed the rebase-1.36-jacob branch from 2a71b56 to 9ec88e2 Compare May 12, 2026 22:49
@openshift-ci-robot
Copy link
Copy Markdown

@jacobsee: the contents of this pull request could not be automatically validated.

The following commits are valid:

The following commits could not be validated and must be approved by a top-level approver:

Comment /validate-backports to re-evaluate validity of the upstream PRs, for example when they are merged upstream.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 12, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jacobsee

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@CHANGELOG/CHANGELOG-1.3.md`:
- Line 395: The changelog has a heading level jump: the line containing "####
ThirdPartyResource" follows a higher-level "##" section and should be demoted to
a single-level deeper heading to preserve Markdown hierarchy; update "####
ThirdPartyResource" to "### ThirdPartyResource" (or to the appropriate level
consistent with surrounding headings) so the heading structure is nested
correctly.
- Line 443: The bullet "mixed plaintext/encrypted ports support in ELBs" has
inconsistent indentation compared to its sibling bullets; locate that exact line
and adjust its leading spaces so it matches the surrounding bullets (use the
same number of spaces/tabs used for sibling list items) so the list renders
consistently in Markdown; ensure nested bullets remain indented one consistent
level deeper than their parent bullet if intended.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 3ca93540-affb-4b9d-bc0b-b972aa802837

📥 Commits

Reviewing files that changed from the base of the PR and between 2af6682 and 9ec88e2.

⛔ Files ignored due to path filters (25)
  • LICENSES/vendor/github.com/armon/circbuf/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/cenkalti/backoff/v4/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/cenkalti/backoff/v5/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/gregjones/httpcache/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/grpc-ecosystem/go-grpc-prometheus/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/karrick/godirwalk/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/libopenstorage/openstorage/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/mistifyio/go-zfs/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/mohae/deepcopy/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/mrunalp/fileutils/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/github.com/pkg/errors/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/metric/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/sdk/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.opentelemetry.io/otel/trace/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/go.uber.org/zap/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/k8s.io/utils/third_party/forked/golang/LICENSE is excluded by !**/vendor/**
  • LICENSES/vendor/k8s.io/utils/third_party/forked/golang/btree/LICENSE is excluded by !**/vendor/**
  • cmd/kubeadm/app/discovery/token/testdata/ca-cert.pem is excluded by !**/*.pem
  • cmd/kubeadm/app/util/config/testdata/mynode.pem is excluded by !**/*.pem
📒 Files selected for processing (275)
  • .ci-operator.yaml
  • .github/PULL_REQUEST_TEMPLATE.md
  • .gitignore
  • .go-version
  • CHANGELOG/CHANGELOG-1.10.md
  • CHANGELOG/CHANGELOG-1.11.md
  • CHANGELOG/CHANGELOG-1.12.md
  • CHANGELOG/CHANGELOG-1.13.md
  • CHANGELOG/CHANGELOG-1.14.md
  • CHANGELOG/CHANGELOG-1.15.md
  • CHANGELOG/CHANGELOG-1.16.md
  • CHANGELOG/CHANGELOG-1.17.md
  • CHANGELOG/CHANGELOG-1.18.md
  • CHANGELOG/CHANGELOG-1.19.md
  • CHANGELOG/CHANGELOG-1.2.md
  • CHANGELOG/CHANGELOG-1.20.md
  • CHANGELOG/CHANGELOG-1.21.md
  • CHANGELOG/CHANGELOG-1.22.md
  • CHANGELOG/CHANGELOG-1.23.md
  • CHANGELOG/CHANGELOG-1.24.md
  • CHANGELOG/CHANGELOG-1.25.md
  • CHANGELOG/CHANGELOG-1.26.md
  • CHANGELOG/CHANGELOG-1.27.md
  • CHANGELOG/CHANGELOG-1.28.md
  • CHANGELOG/CHANGELOG-1.29.md
  • CHANGELOG/CHANGELOG-1.3.md
  • CHANGELOG/CHANGELOG-1.30.md
  • CHANGELOG/CHANGELOG-1.31.md
  • CHANGELOG/CHANGELOG-1.32.md
  • CHANGELOG/CHANGELOG-1.33.md
  • CHANGELOG/CHANGELOG-1.34.md
  • CHANGELOG/CHANGELOG-1.35.md
  • CHANGELOG/CHANGELOG-1.36.md
  • CHANGELOG/CHANGELOG-1.4.md
  • CHANGELOG/CHANGELOG-1.5.md
  • CHANGELOG/CHANGELOG-1.6.md
  • CHANGELOG/CHANGELOG-1.7.md
  • CHANGELOG/CHANGELOG-1.8.md
  • CHANGELOG/CHANGELOG-1.9.md
  • CHANGELOG/README.md
  • OWNERS_ALIASES
  • api/api-rules/sample_controller_violation_exceptions.list
  • api/api-rules/violation_exceptions.list
  • api/discovery/aggregated_v2.json
  • api/discovery/apis.json
  • api/discovery/apis__admissionregistration.k8s.io__v1.json
  • api/discovery/apis__resource.k8s.io__v1alpha3.json
  • api/discovery/apis__resource.k8s.io__v1beta2.json
  • api/discovery/apis__scheduling.k8s.io.json
  • api/discovery/apis__scheduling.k8s.io__v1alpha1.json
  • api/discovery/apis__scheduling.k8s.io__v1alpha2.json
  • api/discovery/apis__storage.k8s.io__v1.json
  • api/discovery/apis__storage.k8s.io__v1beta1.json
  • api/openapi-spec/README.md
  • api/openapi-spec/swagger.json
  • api/openapi-spec/v3/api__v1_openapi.json
  • api/openapi-spec/v3/apis__admissionregistration.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__admissionregistration.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__admissionregistration.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__apiextensions.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__apiregistration.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__apps__v1_openapi.json
  • api/openapi-spec/v3/apis__authentication.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__authorization.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__autoscaling__v1_openapi.json
  • api/openapi-spec/v3/apis__autoscaling__v2_openapi.json
  • api/openapi-spec/v3/apis__batch__v1_openapi.json
  • api/openapi-spec/v3/apis__certificates.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__certificates.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__certificates.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1alpha2_openapi.json
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__discovery.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__events.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__flowcontrol.apiserver.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__internal.apiserver.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__networking.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__networking.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__node.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__policy__v1_openapi.json
  • api/openapi-spec/v3/apis__rbac.authorization.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__resource.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__resource.k8s.io__v1alpha3_openapi.json
  • api/openapi-spec/v3/apis__resource.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__resource.k8s.io__v1beta2_openapi.json
  • api/openapi-spec/v3/apis__scheduling.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__scheduling.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__scheduling.k8s.io__v1alpha2_openapi.json
  • api/openapi-spec/v3/apis__storage.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__storage.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__storagemigration.k8s.io__v1beta1_openapi.json
  • build/build-image/cross/VERSION
  • build/common.sh
  • build/dependencies.yaml
  • build/lib/release.sh
  • build/nsswitch.conf
  • build/pause/CHANGELOG.md
  • build/pause/Dockerfile.Rhel
  • build/pause/Makefile
  • build/server-image/Dockerfile
  • build/server-image/kube-apiserver/Dockerfile
  • build/tools.go
  • cluster/addons/dns/coredns/coredns.yaml.base
  • cluster/addons/dns/coredns/coredns.yaml.in
  • cluster/addons/dns/coredns/coredns.yaml.sed
  • cluster/addons/dns/kube-dns/kube-dns.yaml.base
  • cluster/addons/dns/kube-dns/kube-dns.yaml.in
  • cluster/addons/dns/kube-dns/kube-dns.yaml.sed
  • cluster/addons/dns/nodelocaldns/nodelocaldns.yaml
  • cluster/addons/kube-proxy/OWNERS
  • cluster/addons/kube-proxy/kube-proxy-ds.yaml
  • cluster/addons/kube-proxy/kube-proxy-rbac.yaml
  • cluster/addons/volumesnapshots/volume-snapshot-controller/volume-snapshot-controller-deployment.yaml
  • cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml
  • cluster/gce/config-common.sh
  • cluster/gce/config-default.sh
  • cluster/gce/config-test.sh
  • cluster/gce/gci/configure-helper.sh
  • cluster/gce/gci/configure.sh
  • cluster/gce/gci/master.yaml
  • cluster/gce/gci/mounter/mounter.go
  • cluster/gce/gci/node.yaml
  • cluster/gce/manifests/cloud-controller-manager.manifest
  • cluster/gce/manifests/etcd.manifest
  • cluster/gce/manifests/konnectivity-server.yaml
  • cluster/gce/manifests/kube-proxy.manifest
  • cluster/gce/upgrade-aliases.sh
  • cluster/gce/util.sh
  • cluster/gce/windows/k8s-node-setup.psm1
  • cluster/gce/windows/smoke-test.sh
  • cluster/images/etcd/Dockerfile
  • cluster/images/etcd/Dockerfile.windows
  • cluster/images/etcd/Makefile
  • cluster/images/etcd/OWNERS
  • cluster/images/etcd/README.md
  • cluster/images/etcd/cloudbuild.yaml
  • cluster/images/etcd/migrate-if-needed.bat
  • cluster/images/etcd/migrate-if-needed.sh
  • cluster/images/etcd/migrate/copy_file.go
  • cluster/images/etcd/migrate/data_dir.go
  • cluster/images/etcd/migrate/data_dir_test.go
  • cluster/images/etcd/migrate/integration_test.go
  • cluster/images/etcd/migrate/migrate.go
  • cluster/images/etcd/migrate/migrate_client.go
  • cluster/images/etcd/migrate/migrate_server.go
  • cluster/images/etcd/migrate/migrator.go
  • cluster/images/etcd/migrate/options.go
  • cluster/images/etcd/migrate/options_test.go
  • cluster/images/etcd/migrate/testdata/datadir_with_version/version.txt
  • cluster/images/etcd/migrate/testdata/datadir_without_version/.placeholder
  • cluster/images/etcd/migrate/util_others.go
  • cluster/images/etcd/migrate/utils_windows.go
  • cluster/images/etcd/migrate/versions.go
  • cluster/images/etcd/migrate/versions_test.go
  • cmd/cloud-controller-manager/.import-restrictions
  • cmd/genfeaturegates/genfeaturegates.go
  • cmd/kube-apiserver/OWNERS
  • cmd/kube-apiserver/app/aggregator.go
  • cmd/kube-apiserver/app/testing/testserver.go
  • cmd/kube-controller-manager/app/batch.go
  • cmd/kube-controller-manager/app/controller_descriptor.go
  • cmd/kube-controller-manager/app/controllermanager.go
  • cmd/kube-controller-manager/app/controllermanager_test.go
  • cmd/kube-controller-manager/app/core.go
  • cmd/kube-controller-manager/app/options/options.go
  • cmd/kube-controller-manager/app/options/options_test.go
  • cmd/kube-controller-manager/app/options/resourceclaimcontroller.go
  • cmd/kube-controller-manager/app/plugins.go
  • cmd/kube-controller-manager/app/plugins_providers.go
  • cmd/kube-controller-manager/app/plugins_test.go
  • cmd/kube-controller-manager/app/resource.go
  • cmd/kube-controller-manager/app/scheduling.go
  • cmd/kube-controller-manager/app/scheduling_test.go
  • cmd/kube-controller-manager/app/storageversionmigrator.go
  • cmd/kube-controller-manager/app/testing/testserver.go
  • cmd/kube-controller-manager/names/controller_names.go
  • cmd/kube-proxy/app/conntrack.go
  • cmd/kube-proxy/app/init_linux.go
  • cmd/kube-proxy/app/init_other.go
  • cmd/kube-proxy/app/init_windows.go
  • cmd/kube-proxy/app/options.go
  • cmd/kube-proxy/app/server.go
  • cmd/kube-proxy/app/server_linux.go
  • cmd/kube-proxy/app/server_linux_test.go
  • cmd/kube-proxy/app/server_other.go
  • cmd/kube-proxy/app/server_test.go
  • cmd/kube-proxy/app/server_windows.go
  • cmd/kube-scheduler/app/options/options.go
  • cmd/kube-scheduler/app/options/options_test.go
  • cmd/kube-scheduler/app/server.go
  • cmd/kubeadm/app/apis/kubeadm/v1beta3/defaults_unix.go
  • cmd/kubeadm/app/apis/kubeadm/v1beta3/defaults_windows.go
  • cmd/kubeadm/app/apis/kubeadm/v1beta4/defaults_unix.go
  • cmd/kubeadm/app/apis/kubeadm/v1beta4/defaults_windows.go
  • cmd/kubeadm/app/apis/kubeadm/validation/util_unix.go
  • cmd/kubeadm/app/apis/kubeadm/validation/util_windows.go
  • cmd/kubeadm/app/cmd/certs_test.go
  • cmd/kubeadm/app/cmd/config.go
  • cmd/kubeadm/app/cmd/init.go
  • cmd/kubeadm/app/cmd/options/constant.go
  • cmd/kubeadm/app/cmd/phases/init/data.go
  • cmd/kubeadm/app/cmd/phases/init/data_test.go
  • cmd/kubeadm/app/cmd/phases/init/kubeletfinalize.go
  • cmd/kubeadm/app/cmd/phases/init/uploadconfig.go
  • cmd/kubeadm/app/cmd/phases/join/controlplanejoin.go
  • cmd/kubeadm/app/cmd/phases/join/data.go
  • cmd/kubeadm/app/cmd/phases/join/data_test.go
  • cmd/kubeadm/app/cmd/phases/join/kubelet.go
  • cmd/kubeadm/app/cmd/phases/reset/cleanupnode.go
  • cmd/kubeadm/app/cmd/phases/reset/data.go
  • cmd/kubeadm/app/cmd/phases/reset/data_test.go
  • cmd/kubeadm/app/cmd/phases/reset/removeetcdmember_test.go
  • cmd/kubeadm/app/cmd/phases/reset/testdata/etcd-pod-without-data-volume.yaml
  • cmd/kubeadm/app/cmd/phases/reset/testdata/etcd-pod.yaml
  • cmd/kubeadm/app/cmd/phases/reset/unmount.go
  • cmd/kubeadm/app/cmd/phases/reset/unmount_linux.go
  • cmd/kubeadm/app/cmd/phases/reset/unmount_linux_test.go
  • cmd/kubeadm/app/cmd/phases/upgrade/apply/uploadconfig.go
  • cmd/kubeadm/app/cmd/phases/upgrade/data.go
  • cmd/kubeadm/app/cmd/phases/upgrade/data_test.go
  • cmd/kubeadm/app/cmd/phases/upgrade/postupgrade.go
  • cmd/kubeadm/app/cmd/reset.go
  • cmd/kubeadm/app/cmd/testdata/token-config.yaml
  • cmd/kubeadm/app/cmd/token_test.go
  • cmd/kubeadm/app/cmd/upgrade/common_test.go
  • cmd/kubeadm/app/cmd/upgrade/plan.go
  • cmd/kubeadm/app/cmd/upgrade/testdata/config-token.yaml
  • cmd/kubeadm/app/cmd/util_other_test.go
  • cmd/kubeadm/app/cmd/util_windows_test.go
  • cmd/kubeadm/app/componentconfigs/kubelet_unix.go
  • cmd/kubeadm/app/componentconfigs/kubelet_unix_test.go
  • cmd/kubeadm/app/componentconfigs/kubelet_windows.go
  • cmd/kubeadm/app/componentconfigs/kubelet_windows_test.go
  • cmd/kubeadm/app/constants/constants.go
  • cmd/kubeadm/app/constants/constants_test.go
  • cmd/kubeadm/app/constants/constants_unix.go
  • cmd/kubeadm/app/constants/constants_windows.go
  • cmd/kubeadm/app/discovery/discovery.go
  • cmd/kubeadm/app/discovery/discovery_test.go
  • cmd/kubeadm/app/discovery/testdata/ca.crt
  • cmd/kubeadm/app/discovery/token/testdata/expected-kubeconfig.yaml
  • cmd/kubeadm/app/discovery/token/token_test.go
  • cmd/kubeadm/app/features/features.go
  • cmd/kubeadm/app/phases/addons/dns/dns_test.go
  • cmd/kubeadm/app/phases/controlplane/manifests_test.go
  • cmd/kubeadm/app/phases/controlplane/volumes.go
  • cmd/kubeadm/app/phases/controlplane/volumes_test.go
  • cmd/kubeadm/app/phases/copycerts/testutil_umask.go
  • cmd/kubeadm/app/phases/copycerts/testutil_umask_noop.go
  • cmd/kubeadm/app/phases/etcd/local.go
  • cmd/kubeadm/app/phases/etcd/local_test.go
  • cmd/kubeadm/app/phases/upgrade/health.go
  • cmd/kubeadm/app/preflight/checks.go
  • cmd/kubeadm/app/preflight/checks_darwin.go
  • cmd/kubeadm/app/preflight/checks_linux.go
  • cmd/kubeadm/app/preflight/checks_other.go
  • cmd/kubeadm/app/preflight/checks_unix.go
  • cmd/kubeadm/app/preflight/checks_windows.go
  • cmd/kubeadm/app/util/apiclient/wait.go
  • cmd/kubeadm/app/util/chroot_unix.go
  • cmd/kubeadm/app/util/chroot_windows.go
  • cmd/kubeadm/app/util/config/cluster_test.go
  • cmd/kubeadm/app/util/config/common.go
  • cmd/kubeadm/app/util/config/common_test.go
  • cmd/kubeadm/app/util/config/testdata/kubelet-with-embedded-cert.yaml
  • cmd/kubeadm/app/util/config/testdata/kubelet-with-invalid-context.yaml
  • cmd/kubeadm/app/util/config/testdata/kubelet-with-invalid-user.yaml
  • cmd/kubeadm/app/util/config/testdata/kubelet-with-linked-cert.yaml
  • cmd/kubeadm/app/util/config/testdata/kubelet-without-cert.yaml
  • cmd/kubeadm/app/util/config/upgradeconfiguration.go
  • cmd/kubeadm/app/util/copy_unix.go
  • cmd/kubeadm/app/util/copy_windows.go
  • cmd/kubeadm/app/util/etcd/etcd.go
  • cmd/kubeadm/app/util/initsystem/initsystem_unix.go
💤 Files with no reviewable changes (1)
  • api/discovery/apis__scheduling.k8s.io__v1alpha1.json
✅ Files skipped from review due to trivial changes (11)
  • .go-version
  • api/discovery/apis__storage.k8s.io__v1.json
  • CHANGELOG/README.md
  • .github/PULL_REQUEST_TEMPLATE.md
  • api/discovery/apis__storage.k8s.io__v1beta1.json
  • api/api-rules/sample_controller_violation_exceptions.list
  • .ci-operator.yaml
  • api/discovery/apis.json
  • api/discovery/apis__scheduling.k8s.io.json
  • .gitignore
  • api/openapi-spec/v3/apis__authorization.k8s.io__v1_openapi.json
🚧 Files skipped from review as they are similar to previous changes (24)
  • api/discovery/apis__admissionregistration.k8s.io__v1.json
  • api/openapi-spec/README.md
  • api/discovery/apis__resource.k8s.io__v1alpha3.json
  • api/discovery/apis__scheduling.k8s.io__v1alpha2.json
  • api/api-rules/violation_exceptions.list
  • api/openapi-spec/v3/apis__authentication.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__autoscaling__v1_openapi.json
  • CHANGELOG/CHANGELOG-1.35.md
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1alpha2_openapi.json
  • api/openapi-spec/v3/apis__discovery.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__apiextensions.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__events.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__autoscaling__v2_openapi.json
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1_openapi.json
  • api/openapi-spec/v3/apis__flowcontrol.apiserver.k8s.io__v1_openapi.json
  • api/discovery/aggregated_v2.json
  • OWNERS_ALIASES
  • api/openapi-spec/v3/apis__apps__v1_openapi.json
  • api/openapi-spec/v3/apis__certificates.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__certificates.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__admissionregistration.k8s.io__v1alpha1_openapi.json
  • api/openapi-spec/v3/apis__batch__v1_openapi.json
  • api/openapi-spec/v3/apis__coordination.k8s.io__v1beta1_openapi.json
  • api/openapi-spec/v3/apis__admissionregistration.k8s.io__v1beta1_openapi.json

Although *v1.9* is still compatible, we recommend upgrading to one of the supported versions.
All prior versions of docker will not be supported.

#### ThirdPartyResource
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix heading level jump for markdown structure.

Line 395 uses #### immediately after a ## section, which breaks heading hierarchy.

📝 Proposed fix
-#### ThirdPartyResource
+### ThirdPartyResource
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
#### ThirdPartyResource
### ThirdPartyResource
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 395-395: Heading levels should only increment by one level at a time
Expected: h3; Actual: h4

(MD001, heading-increment)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@CHANGELOG/CHANGELOG-1.3.md` at line 395, The changelog has a heading level
jump: the line containing "#### ThirdPartyResource" follows a higher-level "##"
section and should be demoted to a single-level deeper heading to preserve
Markdown hierarchy; update "#### ThirdPartyResource" to "### ThirdPartyResource"
(or to the appropriate level consistent with surrounding headings) so the
heading structure is nested correctly.

* Use /dev/xvdXX names
* ELB:
* ELB proxy protocol support
* mixed plaintext/encrypted ports support in ELBs
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Normalize nested list indentation under ELB.

Line 443 is indented inconsistently with sibling bullets and can render incorrectly in some markdown parsers.

📝 Proposed fix
-	* mixed plaintext/encrypted ports support in ELBs
+    * mixed plaintext/encrypted ports support in ELBs
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
* mixed plaintext/encrypted ports support in ELBs
* mixed plaintext/encrypted ports support in ELBs
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 443-443: Inconsistent indentation for list items at the same level
Expected: 4; Actual: 1

(MD005, list-indent)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@CHANGELOG/CHANGELOG-1.3.md` at line 443, The bullet "mixed
plaintext/encrypted ports support in ELBs" has inconsistent indentation compared
to its sibling bullets; locate that exact line and adjust its leading spaces so
it matches the surrounding bullets (use the same number of spaces/tabs used for
sibling list items) so the list renders consistently in Markdown; ensure nested
bullets remain indented one consistent level deeper than their parent bullet if
intended.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. backports/unvalidated-commits Indicates that not all commits come to merged upstream PRs. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. vendor-update Touching vendor dir or related files

Projects

None yet

Development

Successfully merging this pull request may close these issues.