Skip to content

NO-JIRA: Rebase release-4.22 to Kubernetes v1.35.8 - #2773

Open
jubittajohn wants to merge 38 commits into
openshift:release-4.22from
jubittajohn:bump-1.35.8
Open

jubittajohn wants to merge 38 commits into
openshift:release-4.22from
jubittajohn:bump-1.35.8

Conversation

@jubittajohn

Copy link
Copy Markdown

Bump 4.22 from v1.35.6 to v1.35.8

wgkingk and others added 30 commits April 21, 2026 10:31
Move isLearner and isStarted variables to the outer var block of
MemberPromote so their values are accessible after the poll loop.
After the poll, if isLearner is false the member was already promoted,
so return nil early without issuing a redundant promote call.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
When manageJob() needs to create replacement pods but defers creation
because a pod-failure backoff is still active, it returned a hardcoded
active=0 to the caller. Because no pods were actually created or deleted,
this left Status.Active=0 while Status.Ready still reflected the running
pods. The apiserver correctly rejects such updates ("cannot set more
ready pods than active") with a 422, which blocks flushing uncounted
terminated pods, removing finalizers, and updating job status, leaving
pods stuck Terminating with stale status.

Return the real active count from both backoff early-returns instead,
since the deferral does not change the number of active pods.

Issue: kubernetes#139428
(cherry picked from commit 2fe49b0)
…c996af

Pins google.golang.org/protobuf to HEAD commit f2248ac996afc39b3df0777cdcc269f6ade50b07
(v1.36.12-0.20260120151049-f2248ac996af) which includes fixes for dead code
elimination issues surfaced by Go 1.26's reflect changes.

Xref: golang/protobuf#1704
Xref: kubernetes#137445
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
During kubeadm join, the mandatory kubeadm-config ConfigMap fetch uses
GetConfigMapWithShortRetry, which has a 350ms polling budget. When the
API server is slow to respond, the single GET attempt blocks for up to
10 seconds (the client timeout), exhausting the polling budget with no
retry. Since this call site has no fallback, the join fails.

Add a shortConfigMapGet parameter to getInitConfigurationFromCluster
and FetchInitConfigurationFromCluster. When false, the kubeadm-config
ConfigMap is fetched using KubernetesAPICallTimeout (default 1 minute,
user-configurable) with retries, matching the pattern used by
getAPIEndpointFromPodAnnotation. When true, the existing
GetConfigMapWithShortRetry is used for callers like kubeadm reset that
don't need a long retry.

Signed-off-by: Damiano Donati <damiano.donati@gmail.com>
…-of-139667-release-1.35

Automated cherry pick of kubernetes#139667: fix(kubeadm): use KubernetesAPICallTimeout for mandatory kubeadm-config fetch during join
…-of-#137451-upstream-release-1.35

Automated cherry pick of kubernetes#137451: Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af to prevent file size explosion in go 1.26
…ck-of-#139964-upstream-release-1.35

[1.35] Automated cherry pick of kubernetes#139964: Restore string JSON encoding of cri-api KeyValue
…erry-pick-of-#139457-upstream-release-1.35

Fix job controller reporting active=0 during pod creation backoff [1.35]
…-pick-of-#139842-upstream-release-1.35

Automated cherry pick of kubernetes#139842: kubeadm: treat already promoted learner as successful
…ck-of-#138390-origin-release-1.35

Automated cherry pick of kubernetes#138390: kubeadm: skip promote call when etcd member is already a voting member
…-pick-of-#138584-upstream-release-1.35

Automated cherry pick of kubernetes#138584: [chore] test/compatibility_lifecycle: resolve feature names from variables
Update ObjectVal.ConvertToNative in dynamic/objects.go to use a switch statement and explicitly support conversion to *structpb.Struct and *structpb.Value.

Prune newly added unit and integration tests in json_patch_test.go and mutatingadmissionpolicy_test.go to remove failing and extraneous test cases, keeping only the tests proving ObjectVal conversion inside JSON Patch operations.
…bles

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
…-pick-of-#140163-upstream-release-1.35

Automated cherry pick of kubernetes#140163: kubelet: stop logging missing optional container annotations
[release-1.35] Bump images and versions to golang 1.25.12 and update distroless-iptables
Update to golang.org/x/text@v0.39.0+ for https://pkg.go.dev/vuln/GO-2026-5970

Update to golang.org/x/net@v0.55.0+ for https://pkg.go.dev/vuln/GO-2026-5026
kubernetes-prow Bot and others added 4 commits August 8, 2026 00:35
…-pick-of-#139162-release-1.35

Automated cherry pick of kubernetes#139162: Fix case where preemptor may be stuck in unschedulable queue
…pick-of-#140419-origin-release-1.35

Automated cherry pick of kubernetes#140419: Fix ConvertToNative for Mutating admission policies
@openshift-ci-robot openshift-ci-robot added the backports/unvalidated-commits Indicates that not all commits come to merged upstream PRs. label Sep 11, 2026
@openshift-ci

openshift-ci Bot commented Sep 11, 2026

Copy link
Copy Markdown

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: e59226ac-6fbb-4ee3-ba45-68b5bb6b06f1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@openshift-ci-robot

Copy link
Copy Markdown

@jubittajohn: the contents of this pull request could not be automatically validated.

The following commits could not be validated and must be approved by a top-level approver:

Comment /validate-backports to re-evaluate validity of the upstream PRs, for example when they are merged upstream.

@openshift-ci openshift-ci Bot added the vendor-update Touching vendor dir or related files label Sep 11, 2026
@openshift-ci

openshift-ci Bot commented Sep 11, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jubittajohn

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 11, 2026
@openshift-ci-robot

Copy link
Copy Markdown

@jubittajohn: the contents of this pull request could not be automatically validated.

The following commits could not be validated and must be approved by a top-level approver:

Comment /validate-backports to re-evaluate validity of the upstream PRs, for example when they are merged upstream.

@jacobsee

Copy link
Copy Markdown
Member

/retest

2 similar comments
@jacobsee

Copy link
Copy Markdown
Member

/retest

@jubittajohn

Copy link
Copy Markdown
Author

/retest

@openshift-ci

openshift-ci Bot commented Sep 15, 2026

Copy link
Copy Markdown

@jubittajohn: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jubittajohn jubittajohn changed the title Rebase release-4.22 to Kubernetes v1.35.8 NO-JIRA: Rebase release-4.22 to Kubernetes v1.35.8 Sep 16, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Sep 16, 2026
@openshift-ci-robot

Copy link
Copy Markdown

@jubittajohn: This pull request explicitly references no jira issue.

Details

In response to this:

Bump 4.22 from v1.35.6 to v1.35.8

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. backports/unvalidated-commits Indicates that not all commits come to merged upstream PRs. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. vendor-update Touching vendor dir or related files

Projects

None yet

Development

Successfully merging this pull request may close these issues.