Commit Graph

183 Commits

Author SHA1 Message Date
deads2k 01f14fece5 only log stacks on server errors
Kubernetes-commit: b73cddb2278d792c7e07d4e69969df32636ecb6d
2017-04-10 20:35:11 +00:00
Abhishek Dasgupta ba77f4a298 Updated key.pm and cert.pm to remove error in setting up localhostCert pool.
Signed-off-by: Abhishek Dasgupta <a10gupta@linux.vnet.ibm.com>

Kubernetes-commit: 0d42da1b9345e2a649f298ac4f77807143e7befa
2017-04-10 20:35:11 +00:00
Cao Shufeng d08e3dad61 Fix empty RBAC Forbidden message
Kubernetes-commit: 30844541d55b302b06bd85f12d8cf0193e7e4240
2017-04-08 20:35:19 +00:00
deads2k e8e8bbf610 remove ListMetaFor
Kubernetes-commit: 7df37c484dac3438530f2b8cb03cf63f85f2fc29
2017-04-08 20:35:19 +00:00
supereagle 02ca4828ef fix some typos in apiserver
Kubernetes-commit: e35b7d10821bc2c7b4b59e1da3808d46356be69d
2017-04-07 20:35:14 +00:00
Jordan Liggitt fa876f6773 Fix original object mutation on patch retry
Kubernetes-commit: c415e4aeabe5e5514dcdbf2c01c533533c25f4c1
2017-04-06 20:35:16 +00:00
Jordan Liggitt 72998a2b11 Allow disabling specific post-start hooks
Kubernetes-commit: 2c89ff59e22e0d9c825203c4cb94613a3b246d64
2017-03-31 20:37:16 +00:00
Jordan Liggitt b137e92ccf Plumb cipher/tls version serving options
Kubernetes-commit: e156aca4f21331465ba9406be362b9f16b8aba9e
2017-03-31 20:37:15 +00:00
Jordan Liggitt 1d9d56a19e Update godoc for discovery registration
Kubernetes-commit: 85b23bb98a2c80fe631e20785e5e7172cb69e518
2017-03-31 20:37:15 +00:00
Cao Shufeng 1e6400df1f delete etcd socket file for unit tests
This change clean up the environment for etcd3 unit test.
Without this change, "make test" will leave some socket files in
workspace. And these socket files make hack/verify-generated-protobuf.sh
fails.

Kubernetes-commit: 4e9dcf3da536a9b956eb092fe9dbc5b2081cfb9d
2017-03-31 20:37:15 +00:00
p0lyn0mial d711b4901e Admission plugin initializer for the generic API server.
This PR implements a standard admission plugin initializer for the generic API server.
The initializer accepts external clientset, external informers and the authorizer.

Kubernetes-commit: 86e06e2401c3f8d5fc5217858612dcf5db39f27d
2017-03-31 20:37:15 +00:00
deads2k 38fb6e78f7 move legacy insecure options out of the main flow
Kubernetes-commit: cd297546807fc08546905a2b96879d13bcf3a30b
2017-03-31 20:37:15 +00:00
deads2k c2afcd59a6 move insecure options to kubeapiserver
Kubernetes-commit: c2f8ef1b1a4e0e60379b7b7447d59a87b0b0ccf9
2017-03-31 20:37:15 +00:00
deads2k b3af46c0dc wire in aggregation
Kubernetes-commit: 8e26fa25da6d3b1deb333fe2484f794795d1c6b9
2017-03-31 20:37:15 +00:00
deads2k 8c644986dc require codecfactory
Kubernetes-commit: 087a03022106c02f82a497f65b945f3cbab3f643
2017-03-31 20:37:15 +00:00
deads2k 6e5dbf8e26 rewire aggregation handling chain to be normal
Kubernetes-commit: b28966b48ae8e3e10427e0347f33a36053884e0a
2017-03-31 20:37:15 +00:00
deads2k 91f0fac434 force callers to specify the cert dns names
Kubernetes-commit: f31eb0a77f0616a5c4c3477b6d87a5a6726845cc
2017-03-31 20:37:15 +00:00
Andy Goldstein ba9d99da29 React to go-systemd changes
Kubernetes-commit: 085db20a02b222e8a909da02fc5025aeee6ebc57
2017-03-31 20:37:15 +00:00
Jordan Liggitt e314f85f65 Preserve API group order in discovery, prefer extensions over apps
Kubernetes-commit: 707f0fb131b5ff89caae7c45a0e4b59991bd7bc2
2017-03-31 20:37:15 +00:00
Dr. Stefan Schimanski 18fcdcc57b k8s.io/apiserver: make maxRetryWhenPatchConflicts public
Kubernetes-commit: be6be1370b5d1c9b6269c24f663426e3bac93c72
2017-03-31 20:37:15 +00:00
deads2k 43ba6dde7a allow combining API servers
Kubernetes-commit: bccef75d7ae43be333e068748bb6f998dafa6d9d
2017-03-31 20:37:15 +00:00
deads2k 4620c09303 allow fallthrough handling from go-restful routes
Kubernetes-commit: 02efeeaf4087533803299356de1673c8400bc351
2017-03-31 20:37:15 +00:00
Jordan Liggitt 66064e4297 generated files
Kubernetes-commit: 939ca532aadc3c89d6ea40cf45fab44c0537d167
2017-03-31 20:37:15 +00:00
deads2k 1e6581d944 use - to indicate audit log goes to system out
Kubernetes-commit: 91f461283ec25dd43d55db97f981723a94f208b8
2017-03-31 20:37:15 +00:00
Jordan Liggitt 0f41d276a9 Force etcd2 to use application/json, add base64-wrapper decoder as fallback
Kubernetes-commit: 87e32c75321bad09707683cb15d6a0c41f4b6f0d
2017-03-18 19:56:09 +00:00
Jordan Liggitt 8543f589d2 Ensure patched objects are defaulted correctly
Kubernetes-commit: 464db160b410b22dba53af6d11fa097f0fa4fd6b
2017-03-18 19:56:09 +00:00
Maru Newby 48679afa87 apiserver: Add non-blocking run method to simplify testing
Kubernetes-commit: 6f70b977ff6c6f9ba7ba1971d38ce3bd49243266
2017-03-18 19:56:09 +00:00
Dr. Stefan Schimanski 25380b2e8b Support multiple --feature-gates flags in the command line
Kubernetes-commit: faa5b44381ab04d9a4645b949311b70fb00ca60f
2017-03-18 19:56:09 +00:00
Andy Goldstein 33e10a040b Add pprof trace support
Add pprof trace support and --enable-contention-profiling to those
components that don't already have it.

Kubernetes-commit: b011529d8a1486bc2316a049db35759086d2994b
2017-03-18 19:56:09 +00:00
Jordan Liggitt a22f78080a Preserve custom etcd prefix compatibility for etcd3
Kubernetes-commit: 6853e4d71ea128ff955fad32972ad9edcb376dfb
2017-03-18 19:56:09 +00:00
Dominik Schulz 37527becd4 Clean user agent
This commit cleans common browser user-agents to reduce the metrics
cardinality in exported prometheus metrics.

Kubernetes-commit: b5c89a8be68e031e12d6750ed6cc470de4cc3fdf
2017-03-18 19:56:09 +00:00
ymqytw 7306f452f2 switch to k8s json to avoid number conversion issue
Kubernetes-commit: b29f4c26d799dca6606b45a0e03f7f931abcdefc
2017-03-18 19:56:09 +00:00
deads2k 4429450aca make the system:authenticated group adder smarter
Kubernetes-commit: 379a73a8dbd3aa09471eab3994861ad41f548ded
2017-03-18 19:56:09 +00:00
deads2k e8086d93fd show patch error as string not byte slice
Kubernetes-commit: ea887557d36cec45744c11019aa3fd64d44f24f7
2017-03-18 19:56:09 +00:00
Chao Xu a258201e01 registry changes
Kubernetes-commit: 93686da1044ea5396978a9bc86468dd3d1c32190
2017-03-18 19:56:09 +00:00
Clayton Coleman 1c5eb397bb Server timeout returns an incorrect error
Not a valid Status object in JSON

Kubernetes-commit: 60d83657516f63b51e43f5b2350821cb5b6835f0
2017-03-18 19:56:09 +00:00
deads2k 8aacf17ba5 allow incluster authentication info lookup
Kubernetes-commit: 3d039f60cf998746a95181cacf5d3d69b83b46b0
2017-03-18 19:56:09 +00:00
deads2k 9c5ae42f4d add aggregation integration test
Kubernetes-commit: 5cfe26dece13c77bd17fd10e47d2c00bf5da9b6d
2017-03-18 19:56:09 +00:00
Eric Chiang 51e6651c84 apiserver/pkg/server: include scheme in insecure self client config
Kubernetes-commit: 6891505db9c02769b903446946a2506276329eb9
2017-03-18 19:56:09 +00:00
Dr. Stefan Schimanski 07a502d3a2 apimachinery: handle duplicated and conflicting type registration
Kubernetes-commit: 395be3b4010b0eef63e98961a14064360fdca26c
2017-03-18 19:56:08 +00:00
Derek Carr 53343624bb stop spamming logs on restart of api server
Kubernetes-commit: 9211e0380f39f08ff99dcf78f50fefad1d0179b8
2017-03-18 19:56:08 +00:00
Clayton Coleman 55e799bbec Don't log context or full request URI due to security concerns
These lines may contain information that cannot be safely logged to
disk. Only deal with known parameters, also bump to V(2) to be
consistent with other logging.

Kubernetes-commit: f6300555f4c105f60c5a4cb0a0cdfc01899b833d
2017-03-18 19:56:08 +00:00
deads2k 7170396682 tweak defaults for recommended apiserver options
Kubernetes-commit: acba2cbd6d188a34f4c3032c933921ba22a0f77c
2017-03-18 19:56:08 +00:00
Wojciech Tyczynski 63e29dca6f Use new runtime.Object <-> map[string]interface{} converter 2017-02-27 15:10:34 -05:00
Dr. Stefan Schimanski 954f7be538 apiserver: self-signed in-memory cert for loopback 2017-02-27 15:10:34 -05:00
Jordan Liggitt 20015a7f72 Switch watch prefixes to params 2017-02-27 15:10:33 -05:00
deads2k 025f3f79e4 redact detailed errors from healthz and expose in default policy 2017-02-27 15:10:33 -05:00
nikhiljindal 6863c37d24 Update REST Handler to return 202 for cascading deletion 2017-02-27 15:10:33 -05:00
nikhiljindal 01de98ed76 Updating tests for deleted boolean from Delete() 2017-02-27 15:10:33 -05:00
nikhiljindal fee1f0dd8f Updating the registry to return whether the resource was immediately deleted 2017-02-27 15:10:33 -05:00
deads2k 1e2d8fe122 remove cycle that snuck into tests 2017-02-23 09:48:09 -05:00
deads2k 1b0d4c5781 tweak a list to a watch verb when requested 2017-02-23 09:48:09 -05:00
Wojciech Tyczynski 36ad26fdd3 Don't use base64 encoding with etcd v3 2017-02-23 09:48:09 -05:00
Wojciech Tyczynski ecdf2151f8 Revert "Use watch param instead of deprecated /watch/ prefix" 2017-02-23 09:48:09 -05:00
jg Chen 0446eafcdb fix misspell "roughly" in config.go 2017-02-23 09:48:09 -05:00
Jordan Liggitt 167718650d Switch watch prefixes to params 2017-02-23 09:48:09 -05:00
Timothy St. Clair 3c7b74f219 Cleanup work to enable feature gating annotations 2017-02-23 09:48:09 -05:00
Robert Rati d4431d8e63 Feature-Gate affinity in annotations 2017-02-23 09:48:09 -05:00
Dr. Stefan Schimanski 73c30cda7e staging/src/*: run gofmt 2017-02-23 09:48:09 -05:00
fate-grand-order 3890a8e1d0 fix misspell "underlying" in cacher.go 2017-02-23 09:48:09 -05:00
Jordan Liggitt 5d99edcdb1 Support PATCH operation in root proxy 2017-02-23 09:48:08 -05:00
Wojciech Tyczynski bdf67d9749 Revert "Revert "Avoid unnecessary copies in cacher"" 2017-02-16 08:03:04 -05:00
Dr. Stefan Schimanski 585aca0c2c k8s.io/apiserver: straighten EtcdOptions, backend Config and kube RESTOptionsFactory 2017-02-16 08:03:03 -05:00
Dr. Stefan Schimanski 1a57a29c12 k8s.io/apiserver: fixup imports and renamed packages 2017-02-16 08:03:03 -05:00
Dr. Stefan Schimanski 9f1d603944 k8s.io/apiserver: move server storage code into subpackage 2017-02-16 08:03:03 -05:00
Jordan Liggitt 2ad7085dba Create bootstrap system:kube-scheduler role 2017-02-15 07:28:56 -05:00
linyouchong 35b486da95 fix spelling error of type store struct, in store.go 2017-02-14 14:04:06 -05:00
deads2k ef02ebd216 copy pkg/util/logs to apiserver 2017-02-14 14:04:06 -05:00
deads2k 147d3934cf auto-create the loopback token 2017-02-14 14:04:06 -05:00
linyouchong bed500fca9 fix bug of runServer function in server.go 2017-02-13 07:36:42 -05:00
deads2k c2c4ecb2ff create sample-apiserver repo for people to inspect 2017-02-13 07:36:42 -05:00
deads2k 9d21f84d8f streamline etcd options for aggregated api server 2017-02-13 07:36:42 -05:00
deads2k 5566a0ef65 move storage serialization type to etcd options 2017-02-13 07:36:42 -05:00
deads2k 2e34520350 add feature enablement options to recommendedoptions 2017-02-13 07:36:42 -05:00
deads2k 8c39f8c871 move --runtime-config to kubeapiserver 2017-02-13 07:36:42 -05:00
deads2k d3c1c03062 move auditoptions to separate struct 2017-02-13 07:36:42 -05:00
deads2k aed020968e add recommended aggregated api server options 2017-02-13 07:36:42 -05:00
deads2k 284a95797b apiserver command line options lead to config 2017-02-13 07:36:41 -05:00
deads2k 1227857843 move admission read logic 2017-02-13 07:36:41 -05:00
Wojciech Tyczynski 3102519e3a Fix incorrect watch cache sizes 2017-02-13 07:36:41 -05:00
p0lyn0mial 8dc243803d added short names for resources which are exposed during discovery 2017-02-13 07:36:41 -05:00
deads2k 90dc6e098c switch admission serialized config to an apiserver type 2017-02-13 07:36:41 -05:00
deads2k ad39e3715b add apiserver API group for structured configuration 2017-02-13 07:36:41 -05:00
Wojciech Tyczynski c2f76cc51b Revert "Avoid unnecessary copies in cacher" 2017-02-13 07:36:41 -05:00
Clayton Coleman 74dc1360f1 Allow ValueTransformer to indicate resource is stale
Allows a transformer (such as an encrypter) to force an update if a new
key is in use, thus allowing simple writes to the REST layer to
trivially migrate keys.
2017-02-13 07:36:41 -05:00
Clayton Coleman 3d8615c851 Allow values to be wrapped prior to serialization in etcd3 2017-02-13 07:36:41 -05:00
Clayton Coleman 679a2b25d7 Allow values to be wrapped prior to serialization in etcd2
This adds a new value transformer to the etcd2 store that can transform
the value from etcd on read and write. This will allow the store to
implement encryption at rest or otherwise transform the value prior to
persistence.
2017-02-13 07:36:41 -05:00
ymqytw 5598b36661 extract util used by jsonmergepatch and SMPatch 2017-02-13 07:36:41 -05:00
deads2k ac15385364 add liggitt to apimachinery/apiserver packages 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski 0e2b28a48d Update generated files 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski a372fcad62 Mechanical fixup imports: pkg/genericapiserver 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski f3c3e07241 Mechanical move: pkg/genericapiserver -> k8s.io/apiserver 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski 4b46da7a0d Mechanical import fixup: pkg/storage 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski 4a2fe15be7 Mechanical move: pkg/storage -> k8s.io/apiserver 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski 6025c228e6 pkg/storage/etcd: cut off pkg/api scheme 2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski e4699fca43 pkg/genericapiserver/endpoints: cutting off pkg/api deps 2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski 4fbb344378 Update protobufs 2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski 8af0dd2e0a k8s.io/apiserver: add example api group 2017-02-02 09:36:48 -05:00
deads2k c4b078bb1d move apiserver options 2017-02-02 09:36:48 -05:00
deads2k b0801a1423 move swagger route to apiserver 2017-02-02 09:36:48 -05:00