Changelog for kubernetes1.20-apiserver-1.20.15-3.2.x86_64.rpm :

* Thu Feb 22 2024 Dominique Leuenberger - Use %patch -P N instead of deprecated %patchN.
* Mon Mar 27 2023 Robert Munteanu - Stronger conflicts for completion packages
* Mon Mar 27 2023 Robert Munteanu - Split individual completions into separate packages
* Tue Feb 14 2023 Priyanka Saggu - Update to version 1.20.15:
* Release commit for Kubernetes v1.20.15
* Add guard against nil/error/panic for topologies.go
* fix: do not delete the lb that does not exist
* Fix header mutation race in timeout filter
* Don\'t set sysctl net.ipv4.vs.conn_reuse_mode for kernels >=5.9
* kubeadm: remove the restriction that the ca.crt can only contain one certificate
* Fix the leak of vSphere client sessions
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.14
* Release commit for Kubernetes v1.20.15-rc.0
* Release commit for Kubernetes v1.20.14
* kubeadm: avoid requiring a CA key during kubeconfig expiration checks
* kubeadm: print the CA of kubeconfig files in \"check expiration\"
* kubeadm: validate local etcd certficates during expiration checks
* Ensure deletion of pods in queues and cache
* kube-scheduler: Increase the duration to expire an assumed pod
* Skip check for all topology labels when using system default spreading
* workqueue: fix leak in queue preventing objects from being GCed
* Fix workqueue memory leak
* Update mounter interface in volume manager
* node: e2e: add test for the checkpoint recovery
* e2e: node: release-1.20: backport findKubeletServiceName
* e2e: node: backport SRIOV utilities
* devicemanager: checkpoint: support pre-1.20 data
* Reduce calls to docker from dockershim for stats
* Fix concurrent map writes error in kube-apiserver
* fix: remove VMSS and VMSS instances from SLB backend pool only when necessary
* fix: leave the probe path empty for TCP probes
* Mon Feb 07 2022 Dirk Müller - avoid bashism in client-common postinstall script (bsc#1195391)
* Wed Dec 08 2021 rbrownAATTsuse.com- Update to version 1.20.13:
* defer close the rotated log open
* Add tests for checking bind mounts
* Check subpath file
* Add check for subpaths
* Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch
* Update bazel
* Fixed unit test SELinux support
* Add shortcut for SELinux detection
* Don\'t guess SELinux support on error
* Use separate pathSpec for local and remote to properly handle cleaning paths
* support more than 100 disk mounts on Windows
* Support cgroupv2 in node problem detector test
* Update debian, debian-iptables images to pick up CVEs fixes
* Fixing how EndpointSlice Mirroring handles Service selector transitions
* Fix race condition in logging when request times out
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12
* Run storage hostpath e2e test client pod as privileged
* Ignore VMs in vmss delete backend pools
* fix: skip not found nodes when reconciling LB backend address pools
* fix: consolidate logs for instance not found error
* Revert 102925: Fix Node Resources plugins score when there are pods with no requests
* e2e scheduling priorities: do not reference control loop variable
* tests: Wait for the network connectivity first
* \'New\' Event namespace validate failed
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11
* Refine locking in API Priority and Fairness config controller
* kube-controller-manager: properly check generic ephemeral volume feature
* Fix null JSON round tripping
* Propagate conversion errors
* integration test
* fix 104329: check for headless before trying to release the ClusterIPs
* Fix use variables in the loop in vsphere_util
* Address review comments
* Add docs about process of discovering disks from new nodes
* Fix unknown dangling volumes
* fix detach disk issue on deleting node
* fix: ignore the case when comparing azure tags in service annotation
* fix: ignore the case when updating tags
* backported PR#97721 from v1.21 (\"fix slice controller logging for services ipfamily\")
* remove listx from OWNERS, OWNERS_ALIASES
* Add explicit capability for online volume expansion
* Bump golang.org/x/text to v0.3.6
* Thu Sep 16 2021 rbrownAATTsuse.com- Update to version 1.20.11:
* Fix a small regression in Service updates
* Service: Fix semantics for Update wrt allocations
* Fix buckets initialization
* fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs
* fix: skip case sensitivity when checking Azure NSG rules
* Keep MakeMountArgSensitive and add a new signature that receives flags
* Update the unit tests to handle mountFlags
* Add missing interface method in mount_unsupported.go
* Pass additional flags to subpath mount to avoid flakes in certain conditions
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10
* Copy golang license to staging copies
* delete stale UDP conntrack entries for loadbalancer IPs
* job controller: don\'t mutate shared cache object
* Set idle and readheader timeouts
* Wed Aug 25 2021 rbrownAATTsuse.com- Update to version 1.20.10:
* Bump to golang 1.15.15 in build/
*
*
* Bump to golang 1.15.15 in cluster/
*
* and staging/
*
*
* Bump to golang 1.15.15 in test/
*
*
* Avoid spurious calls to update/delete validation
* Fix metrics reporting for the deprecated watch path
* Update configure-helper.sh
* Update configure-helper.sh
* Update configure-helper.sh
* Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools
* feat: Provide IPv6 support for internal load balancer
* Update to using apiserver-network-proxy v1.22
* Make CSR cleaner tolerate objects with invalid status.certificate
* disable aufs module
* update comments and owners file for pkg/util/removeall
* kubelet: do not call RemoveAll on volumes directory for orphaned pods
* APF e2e: wait for steady state before proceeding
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.9
* Updated to use konnectivity client v0.0.21, and implemented placeholder context
* include google/go-cmp in client-go/dynamic/fake/BUILD
* Simplify use of the fake dynamic client
* fix: return empty VMAS name if using standalone VM
* Fix race in attachdetach tests
* Fix frameworkImpl.extenders being not set
* Fix closing of decorated watcher channel on timeout
* update bazel
* (scheduler e2e) Create balanced pods in parallel
* Fri Jul 16 2021 rbrownAATTsuse.com- Update to version 1.20.9:
* Bump to golang 1.15.14 in build/
*
*
* Bump to golang 1.15.14 in cluster/
*
* and staging/
*
*
* Bump to golang 1.15.14 in test/
*
*
* Update debian-iptables image to buster-v1.6.5
* Update debian-base image to buster-v1.8.0
* Bump SMD to v4.1.2 to pick up #102749 fix
* generate scheduler merge patches on the pod status instead of the full pod
* p&f e2e test: log response header for better troubleshooting
* Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default
* Do not throw error when we can\'t get canonical path
* Fix Node Resources plugins score when there are pods with no requests
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8
* Remove error wrap from logs
* staging/publishing: Set default go version to go1.15.13
* build: Update to k/repo-infraAATTv0.1.8 (supports go1.15.13)
* Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13)
* Update to go1.15.13
* feat: remove ephemeral-storage etcd requirement
* endpointslicemirroring controller mirror address status
* sched: fix a bug that a preemptor pod exists as a phantom
* Revert \"Cleanup portforward streams after their usage\"
* Remove unnecessary snapshot ability check
* serviceOwnsFrontendIP shouldn\'t report error when the public IP doesn\'t match
* Fix VolumeAttachment garbage collection for migrated PVs
* Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error
* Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin
* Ignore transient errors when gather stats
* Speed up PV provisioning for vsphere driver
* fix error of setting negative value for containerLogMaxSize
* Upgrade konnectivity-client for GRPC connection fixes
* Update etcd image revision
* Update debian-base to buster-v1.7.0
* Update debian-iptables to buster-v1.6.1
* Respect annotation size limit for SSA last-applied.
* Remove unnecessary quotes from get-kube scripts
* Fix expired unit test certs
* fix: delete non existing disk issue
* Azure: avoid setting cached Sku when updating VMSS and VMSS instances
* Update cos-gpu-installer image
* Ref counting is only applicable to Remote endpoints
* Make watch order conformance test reliable
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7
* fix removing pods from podTopologyHints mapping
* fix: avoid nil-pointer panic when checking the frontend IP configuration
* Use CSI driver to determine unique name for migrated in-tree plugins
* Add jitter to lease controller
* Avoid caching the VMSS instances whose network profile is nil
* chunk target operatation for aws targetGroup
* Fix watchForLockfileContention memory leak
* Fix cleanupMountpoint issue for Windows
* Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY
* Tue May 18 2021 alexandre.vicenziAATTsuse.com- Update to version 1.20.7:
* staging/publishing: Set default go version to go1.15.12
* build: Update to k/repo-infraAATTv0.1.7 (supports go1.15.12)
* Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12)
* Update to go1.15.12
* fix: not tagging static public IP
* Add test create service with ns
* Set namespace when using kubectl create service
* Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428)
* Updating EndpointSlice controllers to avoid duplicate creations
* Update pkg/volume/azure_file/azure_provision.go
* Normalize share name to not include capital letters
* Extend pod start timeout to 5min for storage subpath configmap test
* fix: set \"host is down\" as corrupted mount
* no watch endpointslice in userpace mode
* Ensure service deleted when the Azure resource group has been deleted
* Updating EndpointSlice validation to match Endpoints validation
* Make parallel build memory threshold configurable
* fix: azure file namespace issue in csi translation
* pkg/kubelet: improve the node informer sync check
* Additional CVE-2021-3121 fix
* Fix startupProbe behaviour changed
* Fix test
* staging/publishing: Set default go version to go1.15.10
* build: Update to k/repo-infraAATTv0.1.6 (supports go1.15.11)
* Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11)
* Update to go1.15.11
* add duration encoder to structured logger
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6
* exec test should not run in Parallel as feature gate is not locked
* hack/update-bazel.sh
* respect ExecProbeTimeout
* apf: exempt probes /healthz /livez /readyz
* DelegatingAuthenticationOptions TokenReview request timeout
* list pod list once to avoid timeout
* Cleanup portforward streams after their usage
* fix smb mount issue on Windows
* Thu Apr 15 2021 rbrownAATTsuse.com- Update to version 1.20.6:
* azure: fix node public IP not able to fetch issues from IMDS
* Fix test now that empty struct are tracked in mangaed fields
* make generated_files
* Update bazel and dependencies.
* Update to use cliflag.NamedFlagSets
* Address comments.
* Update NodeIPAM wrapper
* Delete build file based on latest changes.
* Update extension mechanism and related sample.
* Address review comments
* Address review comments
* Modify integration test to fill CCM test gap
* Update test
* Move initialize cloud provider with client builder reference inside controller start func
* Separate example func and add README.md
* Separate func
* Add demonstration of wiring nodeIPAMController config object
* Remove cloud provider name as input parameter.
* Fix flag passing in CCM.
* Use apply to create objects in TestApplyStatus
* Stop skipping APIService in apply test
* Stop clearing OpenAPIConfig for kube-aggregator
* Declare TCP default for service port protocol
* Add ability to skip OpenAPI handler installation
* do not tag user created public IPs
* apf: fix test flake
* update gogo/protobuf to v1.3.2
* Fixed describe ingress causing SEGFAULT
* Update sigs.k8s.io/structured-merge-diff to v4.0.3
* Stop probing a pod during graceful shutdown
* apf: handle error from PollImmediateUntil
* staging/publishing: Set default go version to go1.15.10
* webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup
* update metadata-concealment to 1.6 for removing legacy checking
* slice mirroring controller mirror annotations
* additional subnet configuration for AWS ELB
* Revert \"Automated cherry pick of #97417: fix azure file secret not found issue\"
* Use the correct volum handle format for GCE regional PD.
* Increasing maximum number of ports allowed in EndpointSlice
* Support > 5 ports in L4 ILB.
* build: Update to k/repo-infraAATTv0.1.5 (supports go1.15.10)
* Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10)
* Update to go1.15.10
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.5
* fix a bug where only service with less than 100 ports can have GCE load balancer
* bazel
* deepcopy statefulsets
* full deepcopy on munged pod spec
* remove pod toleration toleration seconds mutation
* add markers for inspected validation mutation hits
* move secret mutation from validation to prepareforupdate
* remove unnecessary mutations in validation
* tweak validation to avoid mutation
* For LoadBalancer Service type don\'t create a HNS policy for empty or invalid external loadbalancer IP
* Moving docker options to daemon.json
* e2e fix: loosen configmap to 10 in resource quota
* api-server add --lease-max-object-count
* apiserver add metric etcd_lease_object_counts
* apiserver add --lease-reuse-duration-seconds to config lease reuse duration
* Bump Cluster Autoscaler to v1.20.0
* Wed Apr 14 2021 Richard Brown - Rebase opensuse-version-checks.patch
* Tue Apr 13 2021 rbrownAATTsuse.com- Update to version 1.20.5:
* Updating EndpointSliceMirroring controller to wait for cache to be updated
* Updating EndpointSlice controller to wait for cache to be updated
* Add tests for populated volumes
* Fix comment on getPodVolumeSubpathListFromDisk
* Fix tests to test for new behavior
* Add warnings after cleanup back
* Automatically remove orphaned pod\'s dangling volumes
* Count pod overhead as an entity\'s resource usage
* Ensure only one LoadBalancer rule is created when HA mode is enabled
* Fix issue in checking domain socket for plugin watcher
* Use Lstat in plugin watcher to avoid Windows problem
* Skip visiting empty secret and configmap names
* Number of sockets is assumed to be same as NUMA nodes
* disables APF if the aggregated apiserver cannot locate the core kube-apiserver
* Fix repeatedly aquire the inhibit lock
* Sync node status during kubelet node shutdown
* remove executable permission bits
* Upgrading vendored dependencies
* Upgrading cAdvisor to 0.38.8
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4
* build/OWNERS: Add Dan and Sascha as reviewers
* OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir
* Bump konnectivity-client to v0.0.15 in release-1.20
* Storage e2e: Remove pd csi driver installation in GKE
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3
* kube-cross: update image to use v1.15.8-legacy-1
* [go1.15] build: Update to k/repo-infraAATTv0.1.4 (supports go1.15.8)
* Use go-runner:buster-v2.3.1 image (built on go1.15.8)
* staging/publishing: Set default go version to go1.15.8
* Update to go1.15.8
* Fix dbus shutdown events not continuing if they are not valid
* Revert \"make hostPort match test linuxonly\"
* Revert \"conformance changes\"
* kube-proxy: clear conntrack entries after rules are in place
* Use -LiteralPath instead of -Path
* Escape the special character in vsphere windows path
* Include unit test
* Adjust defer to correctly call
* do not remove volume dir when saveVolumeData fails
* kubeadm: drop explicit constant override in version test
* kubeadm: get k8s CI version markers from k8s infra bucket
* dockershim hostport respect IPFamily
* dockershim hostport manager use HostIP
* Balance nodes in scheduling e2e
* e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods
* Cherry pick of #98254:Fix the kube-scheduler binary\'s description of the --config parameter is inaccurate
* fix kube-scheduler cannot send event because the Note field is too large
* Fix nil pointer dereference in disruption controller
* Update region_pd e2e test to support PV have GA topology
* Recover CSI volumes from dangling attachments
* IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining \"uncertain\" and \"detached\" into \"false\"
* Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node
* Fix translation of Cinder storage classess to CSI
* OWNERS(CHANGELOG): Add release-engineering-reviewers as reviewers
* OWNERS(CHANGELOG): Add release-engineering-reviewers as approvers
* Resolve IP addresses of host-only in filtered dialer
* Deflake ingress updates
* make podTopologyHints protected by lock
* ignore cgroup driver check in windows node upgrade
* OWNERS(sig-release): Add CHANGELOG aliases
* OWNERS(build-image): Add Release Managers as reviewers
* OWNERS(releng): Sync Release Managers
* OWNERS(sig-release): Remove SIG Release approvers alias
* aggregate errors when putting vmss
* fix azure file migration issue
* kubelet: Fix mirrorPodTerminationMap leak
* kubelet: Delete static pods gracefully
* kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images
* kubelet logs print \'kubelet nodes sync\' frequently
* reduce buckets for etcd_request_duration_seconds
* Merge pull request #96876 from howieyuen/no-execute-taint-missing
* cleanup subnet in frontend ip configs
* conformance changes
* make hostPort match test linuxonly
* Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes
* Add unit test for child scope mismatch with missing parent
* vendor: update cAdvisor to v0.38.7
* Use volumeHandle as PV name when translating EBS inline volume
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2
* kubectl-convert import known versions
* Revert \"Merge pull request #92817 from kmala/kubelet\"
* WIP: node sync at least once
* fixes nil panic for nil delegated auth options
* Lower the frequency of volume plugin deprecation warning
* handle webhook authenticator and authorizer error
* fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable
* Avoid checking the entire backend service URL for FR equality.
* Use non privileged ports
* Wed Jan 20 2021 dmuellerAATTsuse.com- Update to version 1.20.2:
* move all variables in sampleAndWaterMarkHistograms::innerSet
* use default unkown sock for kubeadm cmd if cri detect is not needed
* cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip
* Release reserved GCE IP address after ensure completes.
* Ensure reproducible builds when build through docker
* Fix cadvisor machine metrics
* Create OWNERS for most of the API Priority and Fairness impl
* fix the deadlock in priority and fairness config controller
* Cherry pick 443 and 448 from cloud provider azure
* Fix bug in CPUManager with race on map acccess
* clean up executing request on panic
* fix azure file secret not found issue
* fix: azure file latency issue for metadata-heavy workload
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1
* Add more logging for Mount error
* Tue Jan 05 2021 rbrownAATTsuse.com- Update to version 1.20.1:
* Revert \"Use host IP instead of localhost for control plane component kubeconfig files.\"
* etcd version for 1.19 is 3.4.13 for cve fixes
* Flush FibreChannel devices before deleting
* Fix FibreChannel volume plugin corrupting filesystem on detach
* vendor: update cAdvisor to v0.38.6
* Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0
* Revert \"iAdd host IP to etcd listen client URLs.\"
* fix migration logic
* Add AcceleratorStats to cri_stats_provider