WIP: Rebase 1.36 jacob test revert tls gc#2659

Draft

jacobsee wants to merge 2925 commits intoopenshift:masterfrom

jacobsee:rebase-1.36-jacob-revert-gc

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 19, 2026

top command documentation enhancement (#136825)
yashasvimisra2798
authored
Add alpha 2 phase implementation for UserNamespacesHostNetworkSupport
HirazawaUi
committed
Add ResourcePoolStatusRequest API types and generated code
nmn3m
committed
Add ResourcePoolStatusRequest controller, registry, and RBAC
nmn3m
committed
Add tests for ResourcePoolStatusRequest
nmn3m
committed
Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxLength=128) for etcd safety, add Errors printer column
nmn3m
committed
Use string type for printer device columns
nmn3m
committed
Refactor ResourcePoolStatusRequest e2e tests to use Eventually matchers
nmn3m
committed
Pass individual informers, move DRA controllers to resource.go, simplify retry logic and metric tests
nmn3m
committed
Move ResourcePoolStatusRequest e2e tests to control plane context, drop unnecessary Feature:DynamicResourceAllocation tag, fix indentation
nmn3m
committed
Remove +k8s:validation-gen-nolint from ResourcePoolStatusRequest, regenerate the code
nmn3m
committed
KEP-5832: Implement PodGroup admission (#137464)
helayoty
authored
Merge pull request #137889 from sohankunkerkar/memqos-fix-reconcile
k8s-ci-robot
authored
test: fix flaky static pod tests by asserting on termination message and container ID instead of StartTime
tallclair
committed
update google.golang.org/grpc to v1.79.3
aramase
committed
Switch PLEGOnDemandRelist default to `false` for 1.36
dims
committed
enable PLEGOnDemandRelist in feature unit tests
BenTheElder
committed
Merge pull request #137870 from tallclair/push-lplxytyovnkw
k8s-ci-robot
authored
test: Fix PodGroup CRUD test failing due to missing Workload reference
kannon92
committed
KEP-961: demote maxUnavailable feature in statefulset to off by default
soltysh
committed
Merge pull request #137906 from aramase/aramase/c/grpc_v1.79.0
k8s-ci-robot
authored
Merge pull request #137909 from dims/switch-PLEGOnDemandRelist-default-to-false-for-1.36
k8s-ci-robot
authored
Ensure when pod-level memory is modified, skip cgroup writes, but ensure actuated pod-level resources are updated
ndixita
committed
Merge pull request #137015 from nmn3m/contextual-logging-scheduler-events
k8s-ci-robot
authored
CHANGELOG: Update directory for v1.36.0-beta.0 release
k8s-release-robot
committed
Add tests
ndixita
committed

Commits on Mar 20, 2026

Commits on Mar 21, 2026

Commits on Mar 22, 2026

cri-client: use passthrough resolver for socket endpoints
dims
committed
Workload API: PodGroup ResourceClaims (KEP-5729)
nojnhuh
committed
cri-client: add unix socket constructor tests

dims
authored and
test-k8s patch applier
committed

Commits on Mar 23, 2026

Commits on Mar 24, 2026

Commits on Mar 25, 2026

Commits on Mar 27, 2026

Commits on Mar 28, 2026

Commits on Mar 30, 2026

Commits on Apr 1, 2026

Commits on Apr 2, 2026

Commits on Apr 3, 2026

pause: fix version drift in various files
neolit123
committed

Commits on Apr 4, 2026

Commits on Apr 6, 2026

Commits on Apr 7, 2026

Commits on Apr 9, 2026

Commits on Apr 11, 2026

Commits on Apr 12, 2026

scheduler: fix inFlightPods leak when pod is recreated during scheduling failure
MaybeSam05
committed

Commits on Apr 13, 2026

Commits on Apr 16, 2026

Commits on Apr 17, 2026

Commits on Apr 20, 2026

skip MemoryQoS rollback test until implementation is resolved
QiWang19
committed

Commits on Apr 21, 2026

Commits on Apr 22, 2026

Release commit for Kubernetes v1.36.0
k8s-release-robot
committed

Commits on May 4, 2026

Merge downstream-master using ours strategy
jubittajohn
committed
UPSTREAM: 74956: apiserver: switch authorization to use protobuf client

mfojtik
authored and
jubittajohn
committed
UPSTREAM: 93286: wait for apiservices on startup

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: filter out CustomResourceQuota paths from OpenAPI

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: patch aggregator to allow delegating resources

mfojtik
authored and
jubittajohn
committed
UPSTREAM: <carry>: remove apiservice from sync in CRD registration when it exists

mfojtik
authored and
jubittajohn
committed
UPSTREAM: <carry>: hardcoded restmapper with a few entries to rebootstrap SDN when SDN is down

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: Extend NodeLogQuery feature

aravindhp
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-controller-manager: add service serving cert signer to token controller

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-controller-manager: exclude some origin resources from quota

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-apiserver: add our immortal namespaces directly to admission plugin

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add kube-apiserver patches

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: openshift-kube-apiserver: add openshift-kube-apiserver code

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-apiserver: priorize some CRD groups over others

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: create termination events

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: bootstrap-rbac-policy: move over .well-known rules

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: warn only about unknown feature gates

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: disable AES24, not supported by FIPS

rphillips
authored and
jubittajohn
committed
UPSTREAM: <carry>: Remove excessive e2e logging

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: conditionally fill the UserAgent from the currently running test

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: refactor/improve CRD publishing e2e tests in an HA setup

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

marun
authored and
jubittajohn
committed
UPSTREAM: <carry>: export HandleFlags

soltysh
authored and
jubittajohn
committed
UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to allowed node labels

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: use hardcoded metrics scraping authorizer for delegated apiservers

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: add management support to kubelet

rphillips
authored and
jubittajohn
committed
UPSTREAM: <carry>: allows for switching KCM to talk to Kube API over localhost

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: Ensure service ca is mounted for projected tokens

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total

sttts
authored and
jubittajohn
committed
UPSTREAM: <carry>: emit event when readyz goes true

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: crd: add ClusterOperator condition message table column

sttts
authored and
jubittajohn
committed
UPSTREAM: 103612: tolerate additional, but congruent, events for integration test

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-ca.crt for migration compatibility

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: skip posting failures to aggregated APIs to avoid getting false positives until the server becomes ready

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: add max_housekeeping_interval

rphillips
authored and
jubittajohn
committed
UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: Release lock on KCM and KS termination

tnozicka
authored and
jubittajohn
committed
UPSTREAM: <carry>: use console-public config map for console redirect

atiratree
authored and
jubittajohn
committed
UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: optionally enable retry after until apiserver is ready

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: make the PSA workload admission warnings honor the changes that SCC will eventually make to the pod

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies

stlaz
authored and
jubittajohn
committed
UPSTREAM: 115328: annotate early and late requests

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: disable load balancing on created cgroups when managed is enabled

haircommander
authored and
jubittajohn
committed
UPSTREAM: <carry>: APISelfSubjectReview: only test v1beta1 API

bertinatto
authored and
jubittajohn
committed
UPSTREAM: <carry>: Export internal code from k8s.io/apimachinery/pkg/util/managedfields

bertinatto
authored and
jubittajohn
committed
UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kubernetes.default.svc, don't wait for aggregated availability

deads2k
authored and
jubittajohn
committed
UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups

atiratree
authored and
jubittajohn
committed
UPSTREAM: <carry>: selfsubjectaccessreview: grant user:full scope to self-SARs that have user:check-access

liouk
authored and
jubittajohn
committed
UPSTREAM: <carry>: retry etcd Unavailable errors

p0lyn0mial
authored and
jubittajohn
committed
UPSTREAM: <carry>: Export cpu stats of ovs.slice via prometheus

MarSik
authored and
jubittajohn
committed
UPSTREAM: <carry>: advertise shared cpus for mixed cpus feature

Tal-or
authored and
jubittajohn
committed
UPSTREAM: <carry>: temporarily disable reporting e2e text bugs and enforce 2nd labeling to make tests work

soltysh
authored and
jubittajohn
committed
UPSTREAM: <carry>: add new admission for handling shared cpus

Tal-or
authored and
jubittajohn
committed
UPSTREAM: <carry>: Add openshift feature gates to kube-apiserver - inject openshift feature gates into pkg/features

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: allow type mutation for specific secrets

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: annotate audit events for requests during unready phase and graceful termination phase

tkashem
authored and
jubittajohn
committed
UPSTREAM: <carry>: add etcd3RetryingProberMonitor for retrying etcd Unavailable errors for the etcd health checker client

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: add arbiter node role to known labels

eggfoobar
authored and
jubittajohn
committed
UPSTREAM: <carry>: disable etcd readiness checks by default

ingvagabund
authored and
jubittajohn
committed
UPSTREAM: <carry>: log only deprecated api requests

sanchezl
authored and
jubittajohn
committed
UPSTREAM: <carry>: admission: validate minimumKubeletVersion

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: Add volume group snapshot test driver

jsafrane
authored and
jubittajohn
committed
UPSTREAM: <carry>: allow TLS1.3 or modern profile to be specified

authored and
jubittajohn
committed
UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated."

benluddy
authored and
jubittajohn
committed
UPSTREAM: <carry>: Add plugin for storage performant security policy

gnufied
authored and
jubittajohn
committed
UPSTREAM: 134442: Fix ResourceQuota test for CRDs with long names

bertinatto
authored and
jubittajohn
committed
UPSTREAM: <carry>: Skip CPU resource status for workload-pinned pods

harche
authored and
jubittajohn
committed
UPSTREAM: <carry>: Extend k8s suite timeouts for parallel testing load

jupierce
authored and
jubittajohn
committed
UPSTREAM: <carry>: un-skip MutableCSINodeAllocatableCount tests

jsafrane
authored and
jubittajohn
committed
UPSTREAM: <carry>: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters

jluhrsen
authored and
jubittajohn
committed
UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: Register OpenShift cloud providers in k8s-tests-ext

authored and
jubittajohn
committed
UPSTREAM: 138259: Filter out unschedulable nodes in kubectl describe e2e test

authored and
jubittajohn
committed
UPSTREAM: <carry>: adapt quota admission to upstream API changes
jubittajohn
committed
UPSTREAM: <carry>: update builder images
jubittajohn
committed
UPSTREAM: <carry>: add SetCPULoadBalanceDisable() stub to qos_container_manager_linux_test.go

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: add system_client="" to the expected metric strings in flagz_test.go and statusz_test.go

jacobsee
authored and
jubittajohn
committed
UPSTREAM: <carry>: Export email validation functions

ShazaAldawamneh
authored and
jubittajohn
committed
UPSTREAM: <carry>: authentication: enforce claims.email_verified usage when claims.email is used in username expression

ShazaAldawamneh
authored and
jubittajohn
committed
UPSTREAM: <drop>: hack/update-vendor.sh
jubittajohn
committed
UPSTREAM: <drop>: make update
jubittajohn
committed
UPSTREAM: <drop>: hack/update-vendor.sh
jubittajohn
committed
Revert "Add GC to client-go TLS cache"
jacobsee
committed
UPSTREAM: <drop>: test integration failure

bertinatto
authored and
jacobsee
committed