a02dbeed8d
Merge pull request #113687 from tallclair/path-1.22
...
Fix etcd path construction
Kubernetes-commit: a343f26632dca216475b102af80ad6baee148fd2
2022-11-08 06:32:15 +00:00
c3e7c6ea08
Validate etcd paths
...
Kubernetes-commit: 54269f2b186ea2a37bb4e9a22e797fdc6ebdcb37
2022-10-10 18:15:22 -07:00
e0688e7876
Merge pull request #112401 from shyamjvs/automated-cherry-pick-of-#112299-upstream-release-1.22
...
Automated cherry pick of #112299 : Reduce default gzip compression level from 4 to 1 in
Kubernetes-commit: 70c421a4e6c124ece6b070104ad789b16dff4f10
2022-09-20 15:16:17 +00:00
247b80b082
Reduce default gzip compression level from 4 to 1 in apiserver
...
Kubernetes-commit: e47a54f60495117bb045c4d2cfbcc656723156f0
2022-09-07 13:23:53 -07:00
67bf55eba1
Merge pull request #111650 from negz/automated-cherry-pick-of-#111477-upstream-release-1.22
...
Automated cherry pick of #111477 : Share a single etcd3 client logger across all clients
Kubernetes-commit: d47f137a9a923b231fd05405ebf68e729538a8cb
2022-08-10 16:26:50 +00:00
fe86b824d8
Merge pull request #111227 from vpnachev/automated-cherry-pick-of-#110813-origin-release-1.22
...
Automated cherry pick of #110813 : Ensure the dir of --audit-log-path exists
Kubernetes-commit: 5dd5cf1575bb73663ab06666ecdccb6110c96bef
2022-08-04 16:29:46 -07:00
f97a229290
Copy etcd client debug level logic from upstream
...
Replicated from https://github.com/etcd-io/etcd/blob/v3.5.4/client/v3/logger.go#L47
The logic of this function doesn't make a lot of sense to me, but
copying it will avoid any behaviour change.
Signed-off-by: Nic Cope <nicc@rk0n.org>
Kubernetes-commit: 83d3efb1920ca8398420c9ba6fbf31fccd880b97
2022-07-29 14:26:31 -07:00
ec5bf512c7
Give etcd client logger a name
...
Logic copied from https://github.com/etcd-io/etcd/blob/v3.5.4/client/v3/client.go#L374
Signed-off-by: Nic Cope <nicc@rk0n.org>
Kubernetes-commit: d5b0649ac9f3519bf1426e1c8523c1914c9ac5eb
2022-07-29 14:24:17 -07:00
13850f738e
Share a single etcd3 client logger across all clients
...
Currently the API server creates one etcd client per CRD. If clients
aren't provided a logger they'll each create their own. These loggers
can account for ~20% of API server memory consumption on a cluster with
hundreds of CRDs.
Signed-off-by: Nic Cope <nicc@rk0n.org>
Kubernetes-commit: 3d5a4fd3cbb474ba07b323133f1c81c4ba58ed5d
2022-07-28 19:51:55 -07:00
f80af881af
Disable the etcd3 client logger
...
This logger is responsible for 20% of the API server's memory usage when
many CRDs are installed. See the below issue for more context.
https://github.com/kubernetes/kubernetes/issues/111476
Signed-off-by: Nic Cope <nicc@rk0n.org>
Kubernetes-commit: 6204b37b180f597840d5cdf687ab5411cac6ee3c
2022-07-27 14:44:49 -07:00
fc4e7ec042
Ensure the dir of --audit-log-path exists
...
Signed-off-by: Vladimir Nachev <vladimir.nachev@sap.com>
Kubernetes-commit: e9fecfb80a2a49b6b7cb02fbbdd49abf6fc53e9f
2022-06-27 17:21:02 +03:00
2b54c238e5
Merge pull request #110758 from Abirdcfly/automated-cherry-pick-of-#110652-upstream-release-1.22
...
Automated cherry pick of #110652 : fix: --chunk-size with selector returns missing result
Kubernetes-commit: 8f4b8fafad13ad92e1381c7f7ad12656c321fff3
2022-06-29 22:18:19 -07:00
08a980939d
fix: --chunk-size with selector returns missing result
...
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Kubernetes-commit: e0126e6536725c18796cb0494dbd5805007997a9
2022-06-20 00:54:57 +08:00
3e9d40f22d
Merge pull request #110355 from p0lyn0mial/automated-cherry-pick-of-#105069-upstream-release-1.22
...
Automated cherry pick of #105069 : etcd-client starts retrying transient errors from the etcd
Kubernetes-commit: 9bad3665d281e6b73e40582419d4b705a504680c
2022-06-09 20:22:00 +00:00
8fe706d4f9
Merge pull request #110274 from sxllwx/automated-cherry-pick-of-#110145-upstream-release-1.22
...
Automated cherry pick of #110145 : fix audit union loop variables in closures
Kubernetes-commit: ca661b1fb84cf00ec371aaf0b9e2d8caa138db46
2022-06-09 08:20:36 +00:00
e7bcb5889d
fix audit union loop variables in closures
...
Kubernetes-commit: 72597459f92a17c79a4d9ab3f44910189e6ca9ca
2022-05-20 17:38:26 +08:00
22ea8826ee
Merge pull request #110092 from azylinski/automated-cherry-pick-of-#110009-upstream-release-1.22
...
Automated cherry pick of #110009 : Fix requests scope classification
Kubernetes-commit: 93fbd78aaad47138d5e76f1f17f9f62729bba6de
2022-05-20 00:47:31 +00:00
936e5f15ee
Merge pull request #110006 from enj/automated-cherry-pick-of-#109969-upstream-release-1.22
...
Automated cherry pick of #109969 : authn: fix cache mutation by AuthenticatedGroupAdder
Kubernetes-commit: 1b1046d0845ea32fca7b2db3d0b81d5811b6bdde
2022-05-17 19:10:53 -07:00
511361065f
Fix requests scope classification
...
create (POST) custom resources should be scope:resource
Kubernetes-commit: 45ad1eb32c5492357b9580befd5dc569e89e87b4
2022-05-12 14:27:51 +02:00
e3f68a96b0
authn: fix cache mutation by AuthenticatedGroupAdder
...
The cached token authenticator returns a cache value. The group adder changes it.
Kubernetes-commit: 6436a2239891ff2647c36794a472bed286ae13b6
2022-05-11 16:17:29 +02:00
1b1e761574
Merge pull request #109014 from Argh4k/automated-cherry-pick-of-#108455-upstream-release-1.22
...
Automated cherry pick of #108455 : Copy request in timeout handler
Kubernetes-commit: a1fd7a4d0e5c3ae9a5d26d1c27a77328ced761d4
2022-03-25 06:19:58 -07:00
2ca7229e68
Copy request in timeout handler
...
Kubernetes-commit: fa0e07f01705457f065bb325f14a4e1435ddf2f7
2022-02-24 13:42:32 +00:00
55a4165c99
Merge pull request #108439 from andrewsykim/bump-konnectivity-v0.0.29-1-22
...
[v1.22] bump konnectivity-client@v0.0.30
Kubernetes-commit: 7bc6badff83e162f58630c6c9abb26aa0a3139b3
2022-03-07 14:41:20 +00:00
6ad77a6b60
bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
Kubernetes-commit: e59790ffd727ae972c846cc92314926f23902a2a
2022-03-02 01:57:07 +00:00
158f7df02c
Merge pull request #107637 from gjkim42/cherry-pick-of-#106473-upstream-release-1.22
...
Update k/utils to v0.0.0-20211116205334-6203023598ed
Kubernetes-commit: b2604798aaa65dcecf94a67ede54c2cf0c3c3e63
2022-01-24 17:50:11 +00:00
b023b7ff6f
Update k/utils to v0.0.0-20211116205334-6203023598ed
...
Kubernetes-commit: 723c1b334ecf48c43fb9ddf6abf4b45406f1110b
2022-01-19 20:47:53 +09:00
2bbf3fd625
Merge pull request #107568 from jiahuif-forks/automated-cherry-pick-of-#107565-upstream-release-1.22
...
Automated cherry pick of #107565 : upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
Kubernetes-commit: 487eef699dc8ad07106876e7fb045962606035ec
2022-01-15 13:39:42 +00:00
54deeed900
Merge pull request #106338 from chenlinx17/cherry-pick-106045-1.22
...
Cherry pick #106045 to 1.22: Fix concurrent map writes error in kube-apiserver
Kubernetes-commit: 32360f3794465de0a7bbb57c05f12b539bda58fc
2022-01-15 06:15:48 +00:00
785d5cdf59
generated: ./hack/update-vendor.sh
...
Kubernetes-commit: e0550f5f956b7fac6033bb58c678f733d972c97d
2022-01-14 10:31:44 -08:00
ba956dae6c
upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
...
Kubernetes-commit: fa2db4831f720fcc31139a026cb012130058bca3
2022-01-14 10:30:23 -08:00
97775ce8cf
Merge pull request #107459 from liggitt/automated-cherry-pick-of-#107452-upstream-release-1.22
...
Automated cherry pick of #107452 : Fix header mutation race in timeout filter
Kubernetes-commit: 85369eb77e093fc5cb07fdf5f4b9d2b0bc808490
2022-01-11 02:49:17 -08:00
6534d633bb
Fix header mutation race in timeout filter
...
Kubernetes-commit: 8ccee721d4f18c39f83a163b7f643a0c0d533209
2022-01-04 22:57:29 -05:00
ea77ee46ac
Merge pull request #107187 from kinvolk/rata/anp-1.22
...
cherry pick of anp 0.0.27 for v1.22
Kubernetes-commit: 87283720644ae101c267fcfd82eaaf7e3361067f
2022-01-06 09:43:27 +00:00
8313a1ac7f
Update to apiserver-network-proxy v0.0.27
...
Signed-off-by: Rodrigo Campos <rodrigo@kinvolk.io>
Kubernetes-commit: da1c40cbbd1f370c09363fdbd2157a59fcf2ce96
2021-12-22 15:40:29 -03:00
81d27108e6
Merge pull request #106960 from cpanato/update-xnet-122t
...
dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
Kubernetes-commit: 603c0de6ea0aae0f9c52013702f0a005a2582a13
2021-12-13 22:03:05 +00:00
e8f512a744
dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
...
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
Kubernetes-commit: cd6f99f86a383e0146f5c8a72f13545e2a6e25c6
2021-12-10 17:47:44 +01:00
b4975e494f
Merge pull request #106250 from ulucinar/bump-k-openapi-1.22
...
Manual cherry pick of kube-openapi changes for release-1.22
Kubernetes-commit: b01dafb504ddb82292ba0bd521a5053bacfebc05
2021-11-11 08:13:09 +00:00
ca8a986d4a
Manual cherry pick of kube-openapi changes for release-1.22
...
Bump kube-openapi against kube-openapi/release-1.22 branch
Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
Kubernetes-commit: 0c7332355b4c4fb0d3bf3cf95eb0875e535e7236
2021-11-09 10:53:33 +03:00
5727b2f1f4
Merge pull request #105827 from benluddy/automated-cherry-pick-of-#105511-upstream-release-1.22
...
Automated cherry pick of #105511 : Free APF seats for watches handled by an aggregated
Kubernetes-commit: d2d17d39eee7893c83b90bc9c849ef4bfc068352
2021-11-04 17:05:15 +00:00
463a47ee55
Merge pull request #106112 from marseel/automated-cherry-pick-of-#105734-upstream-release-1.22
...
Automated cherry pick of #105734 : Fix race condition in logging when request times out
Kubernetes-commit: e091d57a462f8d9fa9a2b36dd61a91e2b78bcceb
2021-11-04 05:14:05 -07:00
b97db74b31
Fix concurrent map writes error in kube-apiserver
...
Kubernetes-commit: 8a939a4a1043087d33be4d3fc4e8857c8e3f9e7c
2021-11-04 15:56:10 +08:00
7d3fe956c8
Fix race condition in logging when request times out
...
Kubernetes-commit: 9e778cb6ede97a7b7f6857b883138f7b62a96e78
2021-10-18 14:48:47 +00:00
c322f47b46
Merge pull request #105640 from caesarxuchao/automated-cherry-pick-of-#104985-#105475-#105582-upstream-release-1.22
...
Automated cherry pick of #104985 : Aggregator uses the regular transport even if the request
#105475 : apiserver aggregator upgrade unit test
#105582 : Verifying the auth headers are set for upgraded aggregated
Kubernetes-commit: a6a28f52174f8b008b87e6f7a81e31b667d54ba3
2021-10-14 13:05:29 +00:00
72bb83adb4
Free APF seats for watches handled by an aggregated apiserver.
...
Kubernetes-commit: 6765a52acd914ab2e2b91227bb0cbcdadcb4c91c
2021-10-06 10:16:46 -04:00
b57385a406
apiserver aggregator upgrade unit test
...
Co-authored-by: Chao Xu <xuchao@google.com>
Kubernetes-commit: 0dfe8e33143aceacb2b47d66a967cc5e9cbeb94f
2021-10-05 00:19:43 +02:00
a00f1af772
Merge pull request #105049 from shyamjvs/automated-cherry-pick-of-#104833-upstream-release-1.22
...
Automated cherry pick of #104833 (1.22): Refine locking in API Priority and Fairness config controller
Kubernetes-commit: f3495a86d52772629c08298b4e41108ed0c940a0
2021-09-18 00:16:22 +00:00
987646f420
etcd-client starts retrying transient errors from the etcd cluster
...
This PR enables unaryClientInterceptor in conjunction with Prometheus interceptor.
Previously it was simply overwritten by the Prometheus interceptor.
As a result etcd client didn't attempt to retry certain errors.
The unaryClientInterceptor is important because it knows how to retry all sorts of errors from the etcd cluster. It will make the API server more resilient to failures - end users won't see certain errors.
The full list of retriable (codes.Unavailable) errors can be found at https://github.com/etcd-io/etcd/blob/main/api/v3rpc/rpctypes/error.go#L72
Kubernetes-commit: b03c8983c55ea1cd4da649c8b19ddbaf2909146d
2021-09-15 16:40:44 +02:00
5ecefec6a4
Refine locking in API Priority and Fairness config controller
...
Instead of a plain `Mutex`, use an `RWMutex` so that the common
operations can proceed in parallel.
Kubernetes-commit: 4fa7cdfa93c5a70bf2c6dc2344df026f2a4d4881
2021-09-08 00:34:52 -04:00
08961f2104
Merge pull request #104469 from liggitt/utils-1-22
...
vendor: bump k8s.io/util to get fix for LRU cache
Kubernetes-commit: a2e12354edefc420e829973721030c5cb2a4270d
2021-08-21 16:25:19 +00:00
fa4a6728ea
vendor: bump k8s.io/util to get fix for LRU cache
...
Kubernetes-commit: 5b5fde6e6d31436f793eb19e43a678738ff606a5
2021-08-19 22:06:26 -04:00
Kubernetes Publisher
Tim Allclair
Shyam Jeedigunta
Nic Cope
Vladimir Nachev
Abirdcfly
scott
Artur Żyliński
Dr. Stefan Schimanski
Maciej Wyrzuc
Andrew Sy Kim
Gunju Kim
Jiahui Feng
Jordan Liggitt
Rodrigo Campos
Carlos Panato
Alper Rifat Ulucinar
chenlinx17
Marcel Zięba
Ben Luddy
Antonio Ojea
Lukasz Szaszkiewicz
Mike Spreitzer