Kubernetes - v1.27.6

Changelog since v1.27.5

Changes by Kind

API Change

• Fixed a bug where CEL expressions in CRD validation rules would incorrectly compute a high estimated cost for functions that return strings, lists or maps.
  The incorrect cost was evident when the result of a function was used in subsequent operations. (#119809, @jpbetz) [SIG API Machinery, Auth and Cloud Provider]
• Mark Job onPodConditions as optional in pod failure policy (#120209, @mimowo) [SIG API Machinery and Apps]

Feature

• Kubernetes is now built with Go 1.20.8 (#120494, @cpanato) [SIG Release and Testing]

Bug or Regression

• Fix OpenAPI v3 not being cleaned up after deleting APIServices (#120108, @tnqn) [SIG API Machinery and Testing]
• Fix a concurrent map access in TopologyCache's HasPopulatedHints method. (#120323, @Miciah) [SIG Apps and Network]
• Fixed a 1.26 regression scheduling bug by ensuring that preemption is skipped when a PreFilter plugin returns UnschedulableAndUnresolvable (#119952, @sanposhiho) [SIG Scheduling]
• Fixed a 1.27 scheduling regression that PostFilter plugin may not function if previous PreFilter plugins return Skip (#119943, @Huang-Wei) [SIG Scheduling and Testing]
• Fixed a regression in default 1.27 configurations in kube-apiserver: fixed the AggregatedDiscoveryEndpoint feature (beta in 1.27+) to successfully fetch discovery information from aggregated API servers that do not check Accept headers when serving the /apis endpoint (#120360, @Jefftree) [SIG API Machinery]
• Fixes a bug where images pinned by the container runtime can be garbage collected by kubelet. (#120054, @ruiwen-zhao) [SIG Node]
• Fixes a regression exposed in 1.27 by kubectl switching to openapi v3 by making apiregistration.k8s.io discoverable in openapi/v3 (#119841, @atiratree) [SIG API Machinery]
• Fixes a regression exposed in 1.27 by kubectl switching to openapi v3 by resolving a flake in openapi v3 aggregation (#119839, @atiratree) [SIG API Machinery]
• Fixes issue https://github.com/kubernetes-sigs/cloud-provider-azure/issues/4230 and removes the additional filtering on NotReady nodes by the azure cloud provider code (#119128, @alexanderConstantinescu) [SIG Cloud Provider]
• Fixes regression in 1.27.2 causing running pods with devices to be terminated if kubelet is restarted (#119432, @ffromani) [SIG Node and Testing]
• Ignore context canceled from validate and mutate webhook (#120020, @divyasri537) [SIG API Machinery]
• Kubeadm: fix nil pointer when etcd member is already removed (#120011, @neolit123) [SIG Cluster Lifecycle]

Other (Cleanup or Flake)

• When retrieving event resources, the reportingController and reportingInstance fields in the event will contain values. (#120067, @HirazawaUi) [SIG Instrumentation]

Dependencies

Added

Nothing has changed.

Changed

• github.com/google/cel-go: v0.12.6 → v0.12.7

Removed

Nothing has changed.