Commit Graph

4151 Commits

Author SHA1 Message Date
Abu Kashem 026eb846a4 apiserver: plumb context with request deadline
- as soon as a request is received by the apiserver, determine the
  timeout of the request and set a new request context with the deadline.
- the timeout filter that times out non-long-running requests should
  use the request context as opposed to a fixed 60s wait today.
- admission and storage layer uses the same request context with the
  deadline specified.

we use the default timeout enforced by the apiserver:
- if the user has specified a timeout of 0s, this implies no timeout on the user's part.
- if the user has specified a timeout that exceeds the maximum deadline allowed by the apiserver.

Kubernetes-commit: e416c9e574c49fd0190c8cdac58322aa33a935cf
2020-11-26 23:53:20 -05:00
Kubernetes Publisher d4c9a19592 Merge pull request #98456 from SataQiu/fix-apiserver-log-20210127
Fix the bug that network proxy logging http-connect mode in all cases

Kubernetes-commit: b3dd01da497f4f9f81ffb2ebf275ff08cbfebaa2
2021-01-28 08:17:30 +00:00
Kubernetes Publisher c80f95d0b2 Merge pull request #98138 from lala123912/log_format_admission
staging/src/k8s.io/apiserver/pkg/admission: migrate to structured logs

Kubernetes-commit: e0bba105cca88c897c60ad80d4aa0a54c984dbb5
2021-01-27 12:17:06 +00:00
SataQiu ae6d1f2a91 fix the bug that network proxy logging http-connect mode in all cases
Signed-off-by: SataQiu <1527062125@qq.com>

Kubernetes-commit: 1690d6d011dd00360f2bbd1ae85897a726b60c85
2021-01-27 12:09:11 +08:00
Kubernetes Publisher a142cfc6bd Merge pull request #98355 from MikeSpreitzer/smaller-sharding-test
Less demanding test cases in TestUniformDistribution

Kubernetes-commit: f4250198eac34e1adae7c627b9cb0cb4252bdb1e
2021-01-26 16:28:48 +00:00
Kubernetes Publisher bbf6fde382 Merge pull request #97882 from ialidzhikov/staticcheck/x509
Fix staticcheck in staging/src/k8s.io/apiserver/pkg/authentication/request/x509

Kubernetes-commit: f5bb2c19b9b6a4138e67c6da82e477e50a1ce5ae
2021-01-25 19:20:33 +00:00
Kubernetes Publisher aa1a78426c Merge pull request #98312 from deads2k/finish-export-option-removal
finish removal of exportoptions

Kubernetes-commit: b7fc3f91ea64eff4be673449e08df581eeddf42c
2021-01-25 19:20:32 +00:00
Mike Spreitzer 5d4804815d Less demanding test cases in TestUniformDistribution
Also a bug fix in the evaluation.

Kubernetes-commit: 1f1e8e21d81c4ff75078adc163bf2872d1b4650e
2021-01-25 01:44:08 -05:00
Kubernetes Publisher 502c59e0f0 Merge pull request #98273 from wenjiaswe/patch-2
Remove unused expectedRV in store_test TestGet

Kubernetes-commit: 308aa1a87ac24355858746877726824de64290c8
2021-01-23 15:20:19 +00:00
David Eads 67507290ad finish removal of exportoptions
Kubernetes-commit: 37cc89ed8d5194f288bc9f9633e6142647631a07
2021-01-22 09:21:56 -05:00
Kubernetes Publisher 864a7c9c18 Merge pull request #97814 from deads2k/podlogs-metrics
add metrics for insecure backend proxy

Kubernetes-commit: 661eae7c7c8226a3f7bed3a24acf1c22861477b7
2021-01-21 23:19:50 +00:00
Wenjia 15c145e78b Remove unused expectedRV in store_test TestGet
expectedRV is defined in tests struct  but not set in test cases, removing the unnecessary checking

Kubernetes-commit: f8f36c672776bb00b2d53c5d49e92b1bfb608516
2021-01-21 11:27:57 -08:00
Kubernetes Publisher 99942e1cc3 Merge pull request #98252 from lala123912/log_format_audit
staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go: migrate logs to structured logging

Kubernetes-commit: 5856883274a52c0d7db0a7f4fa81d55778b2c844
2021-01-21 11:20:30 +00:00
lala123912 cebcef9fb1 staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go migrate logs to structured logging
Kubernetes-commit: eb8f8368bc33a46c0ec595e3f015979420b49a5c
2021-01-21 11:43:30 +08:00
Kubernetes Publisher 5c8a24e0c5 Merge pull request #97953 from mborsz/deflog
Add trace to SerializeObject

Kubernetes-commit: 60146fd08cae97d3eff3aed594b493f65b1730f8
2021-01-20 23:31:00 +00:00
Kubernetes Publisher d9c484cb1c Merge pull request #98093 from lala123912/log_format
staging\src\k8s.io\apiserver\pkg\endpoints: migrate to structured logs

Kubernetes-commit: b99fc0bb3afbb431b0bf3cf93b6fa23f074f4c48
2021-01-20 15:20:10 +00:00
Kubernetes Publisher eb676eb91b Merge pull request #98208 from mborsz/patch-14
Print queue lengths on watch termination

Kubernetes-commit: 28f713a19d5b20de0444fcdc6754644a3255ef28
2021-01-20 15:20:08 +00:00
Kubernetes Publisher c469c23398 Merge pull request #98196 from YoyinZyc/add_context_to_apiserver
Apply WithContext to metrics in apiserver admission webhook

Kubernetes-commit: 17f040034a0c4ca18fa6140be3d8ccb03369918f
2021-01-20 04:25:59 -08:00
Maciej Borsz 5d1582cdd6 Print queue lengths on watch termination
Kubernetes-commit: 8f8beeabb7deb04624c70444012ebc8ba59d990f
2021-01-20 09:32:00 +01:00
lala123912 887895128f staging/src/k8s.io/apiserver/pkg/admission: migrate to structured logs
Kubernetes-commit: 2dc8cadd00962512fa90c460b9fa86a175ca73fc
2021-01-18 17:19:32 +08:00
lala123912 5d990a9e20 staging\src\k8s.io\apiserver\pkg\endpoints:migrate to structured logs
Kubernetes-commit: 12076ff3e587be00f1ef52e546fa3a3a85d41e7b
2021-01-15 15:23:55 +08:00
Maciej Borsz 78e27f49d3 Add trace to SerializeObject
Kubernetes-commit: e93836d9b35f5ec231da91807f00dab3d1a28fd9
2021-01-12 09:45:43 +01:00
ialidzhikov 1b82145bb1 Fix staticcheck in staging/src/k8s.io/apiserver/pkg/authentication/request/x509
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: 5771ea733ffbcff823517a4c51ebcadf11122578
2021-01-10 00:32:42 +02:00
David Eads 2ea61962bd add metrics for insecure backend proxy
Kubernetes-commit: 782a7a54269cba12bd16f90347127c9efd41fa36
2021-01-07 11:25:43 -05:00
yoyinzyc 4c292300d7 add context to metrics in apiserver admission webhook
Kubernetes-commit: b3aeaa4ed7bf8d419a96b4456a97bdf4c29e4330
2020-12-09 16:46:15 -08:00
Kubernetes Publisher cbff8a83d7 Merge pull request #96552 from pandaamanda/klog_fmt
use klog.Info and klog.Warning when had no format

Kubernetes-commit: 8bf42039e62d001f5d0331753bd99790b70d51eb
2021-01-16 05:09:18 +00:00
Kubernetes Publisher a588cec107 Merge pull request #98023 from tkashem/fix-test
fix apf controller unit test

Kubernetes-commit: e059af640627c7be36b00c1d10a4d511e283d9b4
2021-01-14 01:09:14 +00:00
Kubernetes Publisher a01efc7338 Merge pull request #97957 from yue9944882/aa-server-apf-optionality
Disables APF if the aggregated apiserver cannot locate the core kube-apiserver

Kubernetes-commit: 5c58b222516c0c8547d2f699b7582db9df09df8d
2021-01-13 17:06:38 +00:00
Kubernetes Publisher f297286279 Merge pull request #96502 from 249043822/br-hsts
Fix HSTS Missing From HTTPS Server(Nessus Scanner)

Kubernetes-commit: 33518271f3f97733a52369713769746f78cc4f1a
2021-01-13 17:06:34 +00:00
Abu Kashem 84ce907827 fix apf controller unit test
- don't expose the internal states of the apf controller to the caller
- return a boolean, instead of the priority level states

Kubernetes-commit: f20c6cb2d9060920cae9ff5cade1739c7e0b7f7a
2021-01-13 11:06:17 -05:00
Kubernetes Publisher fbd608a836 Merge pull request #97786 from pacoxu/staticcheck/apiserver-storage
fix static check for vendor/k8s.io/apiserver/pkg/storage/etcd3/

Kubernetes-commit: ef3337a443b402756c9f0bfb1f844b1b45ce289d
2021-01-12 17:05:38 +00:00
Kubernetes Publisher 2100cfae2d Merge pull request #97954 from yue9944882/fixes-nil-panic-for-delegated-auth-options
Fixes nil panic for nil delegated auth options

Kubernetes-commit: 564b0e55c7007745500d579356897848aaacb9dd
2021-01-12 17:05:36 +00:00
yue9944882 9db9b5f556 disables APF if the aggregated apiserver cannot locate the core kube-apiserver
Kubernetes-commit: 02df343437ca9331ab6b0a0de65858c68ba47a54
2021-01-12 18:08:46 +08:00
yue9944882 54481aaf0e fixes nil panic for nil delegated auth options
Kubernetes-commit: 9ade821baab1fa5573f4a36eb7d7098b033ec17c
2021-01-12 17:12:33 +08:00
Kubernetes Publisher 5a2668eee5 Merge pull request #97843 from mborsz/watcher-log
Improve logging in cacheWatcher

Kubernetes-commit: 97d7e50a4baac7efdb14ea771bfdd1673775dd05
2021-01-11 17:10:00 +00:00
Kubernetes Publisher fafe41b7ff Merge pull request #97480 from lingsamuel/etcd-lease-max-size
apiserver add lease object count metric

Kubernetes-commit: e054aa268e86808c381226b2eded83a3f84834f8
2021-01-11 17:09:58 +00:00
Maciej Borsz 8313c177f0 Improve logging in cacheWatcher
Kubernetes-commit: b78f0b31063b7d47781a1ce9ee4ed6c118fb949f
2021-01-11 12:33:52 +01:00
Kubernetes Publisher 202c033ed5 Merge pull request #96887 from sttts/sttts-unexpected-error-string
apiserver: print unknown responsewriter error strings, not only %#+v

Kubernetes-commit: 94b082550e57d06d251735e8d36f4333617e80d9
2021-01-10 05:06:33 +00:00
Kubernetes Publisher ba0503fa77 Merge pull request #96393 from thockin/rest-hooks
Add BeginCreate and BeginUpdate REST hooks

Kubernetes-commit: 67541a1bcc153861e9781f6a08d58da46dbdd5fc
2021-01-09 09:05:55 +00:00
Kubernetes Publisher f343cfc213 Merge pull request #97860 from MikeSpreitzer/rejigger-quantize-4
move all variables in sampleAndWaterMarkHistograms::innerSet

Kubernetes-commit: d9a26fb69bcb194c1b56a93eca0735a8fdf3bd63
2021-01-09 01:11:47 +00:00
Kubernetes Publisher 996b873a3d Merge pull request #96754 from tkashem/fix-etcd-metric
Reduce number of  buckets for etcd_request_duration_seconds metric

Kubernetes-commit: 2b8cac754c88900ea3ad91d6c3f0997b602a3051
2021-01-08 21:06:09 +00:00
Kubernetes Publisher 7e2afe673c Merge pull request #97820 from tkashem/webhook-error
prevent panic on webhook authenticator and authorizer timeout before response

Kubernetes-commit: cfc96c7db7489fa76172187035468e4d918631e3
2021-01-08 21:06:07 +00:00
Mike Spreitzer 16288a4d61 move all variables in sampleAndWaterMarkHistograms::innerSet
to tiptoe around https://github.com/golang/go/issues/43570 for #97685

Kubernetes-commit: 611184aa59d0cd40466bc3bc4b40a3712a038171
2021-01-08 13:32:38 -05:00
Kubernetes Publisher 8d68b7dd0d Merge pull request #97845 from mborsz/cacher-metrics2
Add 'apiserver_terminated_watchers_total'

Kubernetes-commit: 9a386cdd5d703d310ef82e892501621665c5eb00
2021-01-08 17:25:10 +00:00
Maciej Borsz 255da953aa Add 'apiserver_terminated_watchers_total'
Kubernetes-commit: 342ad48feb2629ebc832c0b85c52b4eb04d81498
2021-01-08 10:55:44 +01:00
Kubernetes Publisher 80777f1353 Merge pull request #97693 from enj/enj/i/oidc_fast_init
oidc authenticator: attempt to immediately initialize verifier

Kubernetes-commit: d1db90ba579e9c01194f92ba6daff852e3b4c6e7
2021-01-08 05:05:22 +00:00
Kubernetes Publisher afe6e553ea Merge pull request #96657 from KobayashiD27/staticcheck_server-storage
fix staticcheck error in vendor/k8s.io/apiserver/pkg/server/storage

Kubernetes-commit: 0dfa4419a05318ffcfb7a34a7e599bed87ce4a37
2021-01-08 01:05:51 +00:00
Abu Kashem 3ba02b7f93 handle webhook authenticator and authorizer error
webhook.WithExponentialBackoff returns an error, and the priority is:
- A: if the last invocation of the webhook function returned an error
  that error should be returned, otherwise
- B: the error associated with the context if it has been canceled or
  it has expired, or the ErrWaitTimeout returned by the wait package
  once all retries have been exhausted.

caller should check the error returned by webhook.WithExponentialBackoff
to handle both A and B. Currently, we only handle A.

Kubernetes-commit: ae2b353fbf519b29d168c534f88c373fd67a1c31
2021-01-07 16:14:18 -05:00
Kubernetes Publisher 83c2f3afa5 Merge pull request #97370 from MikeSpreitzer/relax-apf-controller
Relax apf_controller's reaction to certain errors

Kubernetes-commit: e765ab2e7ea5b411eae7ba3be570f3170ded74c8
2021-01-07 17:05:47 +00:00
Kubernetes Publisher 8bcb42fe50 Merge pull request #97451 from pacoxu/fix/cluster-ip-quota
bugfix: nodeport quota check failure result into failing to create a clusterip service

Kubernetes-commit: f9c7c59e25d2ae82bf7b3d72ec65e41c712f24bd
2021-01-07 17:05:45 +00:00