Commit Graph

3197 Commits

Author SHA1 Message Date
wojtekt 6fd9ceb0b8 Eliminate some default conversions
Kubernetes-commit: ccded1494116d6aa1ac3f4612b4a613b56a2044a
2019-11-06 14:02:27 +01:00
Joe Betz ee483f99bc Fix watch test to expect Expired instead of Gone
Kubernetes-commit: 57b451cfb6738fca45fc05cd50c1ff6d7240e3a7
2019-11-05 22:06:10 -08:00
Jordan Liggitt 12b254d1c9 hack/update-vendor.sh
Kubernetes-commit: 297570e06a88db23e16dbdbf6ce3173fe0ae376c
2019-11-05 14:11:10 -05:00
Kubernetes Publisher ab2ea16b19 Merge pull request #84770 from mikedanese/uuid
remove github.com/pborman/uuid

Kubernetes-commit: b01ac96bd439266170f8470ff0f897240a7bc928
2019-11-05 19:12:00 +00:00
Mike Danese 6f0ceeee18 remove github.com/pborman/uuid
Kubernetes-commit: f0d45ee31f93b9f2784a04d4e16167c050d41778
2019-11-04 23:19:25 -08:00
Mike Danese 44b9fc84ab migrate callers to g/g/uuid
Kubernetes-commit: a4ca9e6c93e45b4a97e7d04df37362299088f64a
2019-11-04 23:15:20 -08:00
Kubernetes Publisher 01a4eabd0b Merge pull request #84712 from chendotjs/patch-cc
Refactor the process to get ip address of loopback interface

Kubernetes-commit: 53bb82994a301a42c5d76839944b0fb586d86de9
2019-11-04 19:09:16 +00:00
Kubernetes Publisher 2249edd7cd Merge pull request #84123 from smarterclayton/terminating_cause
Handle namespace deletion more gracefully in built-in controllers

Kubernetes-commit: 6a19261e96b12c83e6c69d15e2dcca8089432838
2019-11-04 19:09:14 +00:00
Kubernetes Publisher 025332b0ce Merge pull request #84483 from zxl381/MU_stopAllD
Fix a double lock bug in staging/.../apiserver

Kubernetes-commit: 6dde01d31494ca8a44c92011a2f7f55af465fd3a
2019-11-02 15:04:44 +00:00
Kubernetes Publisher 49d6d41cba Merge pull request #83671 from yue9944882/flow-control-api-model
Apiserver flowcontrol api models

Kubernetes-commit: 510fb38f275bdfbd61b2ceba5162209e88cf9634
2019-11-02 07:08:43 +00:00
chendotjs 73bcdb7730 Refactor the process to get ip address of loopback interface
Kubernetes-commit: d9cbad7ff197e61fe4ba3a66a7458b1bbaf36f61
2019-11-02 11:14:04 +08:00
Kubernetes Publisher 411c2df45c Merge pull request #84604 from codenrhoden/update-utils-dep
Update k8s.io/utils dependency to latest

Kubernetes-commit: 97e28edb6620568d985f3b03b495a0a373aa8750
2019-11-01 23:07:30 +00:00
Travis Rhoden ca8b4045f0 Update k8s.io/utils dependency to latest
Kubernetes-commit: 81f66ecbb5ff359ac765c7f332289dd8c1737c39
2019-10-31 08:35:01 -06:00
Kubernetes Publisher 8cb875160e Merge pull request #84303 from jackkleeman/dynamic-sni-cert
Dynamic SNI certificates

Kubernetes-commit: c7bb076ade3e91cc13a0e855e155484fb4040191
2019-10-31 11:04:36 +00:00
Kubernetes Publisher 71f1f5686a Merge pull request #84387 from immutableT/interceptor
Move the common logic of checking for kms-plugin's version into gRPC client interceptor.

Kubernetes-commit: 48bc59a997a3490398d0d234d4f60d3121db9b74
2019-10-30 23:04:23 +00:00
Dan Winship 0031a567fa Fix apiserver to advertise IPv6 endpoints if bound to IPv6
Also rename utilnet.ChooseBindAddress() to ResolveBindAddress(), to
better describe its functionality.

Kubernetes-commit: afa0b808f873b515c9d58a9ead788972ea7d2533
2019-10-30 10:46:46 -04:00
Aaron Prindle a222f282e1 fairqueuing implementation with unit tests
Kubernetes-commit: 24065cf5be6bed995da7b7abb37ee78ff95230f0
2019-10-29 21:54:16 -07:00
Ziheng Liu 95180eec68 Change the way of synchronization in staging/.../apiserver
stopAllDelegates will signal other functions to stop updating, instead of acquiring a Mutex and never unlock it

Signed-off-by: Ziheng Liu <zxl381@psu.edu>

Kubernetes-commit: b1c9ae5499b49b5630768050d92bc8ac3553d830
2019-10-28 18:32:27 -04:00
Mike Danese 61dd52533e adjust token cache benchmarks to get more accurate behavior
b.N is adjusted by pkg/testing using an internal heuristic:

> The benchmark function must run the target code b.N times. During
> benchmark execution, b.N is adjusted until the benchmark function
> lasts long enough to be timed reliably.

Using b.N to seed other parameters makes the benchmark behavior
difficult to reason about. Before this change, thread count in the
CachedTokenAuthenticator benchmark is always 5000, and batch size is
almost always 1 when I run this locally. SimpleCache and StripedCache
benchmarks had similarly strange scaling.

After modifying CachedTokenAuthenticator to only adjust iterations based
on b.N, the batch chan was an point of contention and I wasn't able to
see any significant CPU consumption. This was fixed by using
ParallelBench to do the batching, rather than using a chan.

Kubernetes-commit: 43d34882c9b3612d933b97b6e470fd8d36fe492b
2019-10-26 14:12:41 -07:00
Kubernetes Publisher d1b1b64dd9 Merge pull request #84288 from wojtek-t/cleanup_conversions_registrations
Cleanup conversions registrations

Kubernetes-commit: d379ab2697251334774b7bd6f41b26cf39de470d
2019-10-26 07:05:30 +00:00
Kubernetes Publisher b2ee5b48f6 Merge pull request #83987 from wenjiaswe/etcd_client_3_4_2
Update etcd client to v3.4.3 in k8s v1.17

Kubernetes-commit: 09f453ff8322979ed5a7611bc2e5528506c1fc7f
2019-10-25 23:07:27 +00:00
immutablet 29f5d9ba4a Move the common logic of checking for kms-plugin's version into gRPC client interceptor.
Kubernetes-commit: d2b4723302e61efdd942d59801f18ae3ec24887a
2019-10-25 15:08:52 -07:00
Kubernetes Publisher fd43ea72ca Merge pull request #84200 from jackkleeman/dynamic-serving-cert
Dynamic serving certificates

Kubernetes-commit: 04632e84e1348eb298027bae917cfede920c10a2
2019-10-25 03:03:36 +00:00
Jack Kleeman c4dfb52a33 Dynamic SNI certificates
Reload SNI certificate cert and key file from disk every minute and notify
the dynamic certificate controller when they change, allowing serving
tls config to be updated.

Kubernetes-commit: d9adf535f35051be1d79d1309c72762939593d7c
2019-10-24 17:38:21 +01:00
wojtekt 0c1673664a Autogenerated code
Kubernetes-commit: 7b6bcdf780b778af3df5c133686ccb18d8c38fa0
2019-10-24 14:09:51 +02:00
wojtekt 920eb0f6f5 Cleanup explicitly registered functions
Kubernetes-commit: d7011f1bdbee285cdfc9bdb0f5b0716f4e02adfd
2019-10-24 13:18:31 +02:00
Kubernetes Publisher 9fbfc4e2ab Merge pull request #83797 from lavalamp/old_cache
Benchmark for authn cache

Kubernetes-commit: 5b75e8409c64d9cf35fb6100a4b19f23b16ae324
2019-10-24 03:03:24 +00:00
Kubernetes Publisher fea522acfc Merge pull request #83579 from deads2k/dynamic-cert-file-ca-bundle
Dynamic cert file ca bundle

Kubernetes-commit: 0f1a8054f986d205a0202bf9b378c71e7ecc1710
2019-10-23 23:03:47 +00:00
Wenjia Zhang 274180b5c1 Pin dependencies and update vendors
Kubernetes-commit: 660b17d0aeda96af94defd4c5110d9fef523d52b
2019-10-23 13:37:36 -07:00
Kubernetes Publisher 07cd4dd74d Merge pull request #83665 from mars1024/feat/shuffle-sharding
shuffle sharding package for priority and fairness

Kubernetes-commit: cd274ff270dadab3eb73eda85c8dd178668a0563
2019-10-23 19:03:38 +00:00
Wenjia Zhang e518fe04f6 Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle
Kubernetes-commit: 9ead9373f350c7ad438257a9e8b8977a67b900eb
2019-10-23 11:15:43 -07:00
yue9944882 e9a299e168 [generated] ./hack/update-all.sh
generated

generated

generated

rule

generated

generated

Kubernetes-commit: 6db3edff108c568a20688e575be4164768836cd7
2019-10-23 15:17:55 +08:00
yue9944882 0db66ae3d6 non-generated api models misc
rule list

rule

rule 2

Kubernetes-commit: 7c28a4b70eb90977f620ba7374ea0a511fcb9515
2019-10-23 15:17:10 +08:00
Kubernetes Publisher 45ecb17a75 Merge pull request #83627 from jackkleeman/sni-cert-reload
Plumb dynamic SNI certificates

Kubernetes-commit: 43c9c0740180090bb9a0d37dfaf91eb863a2cbde
2019-10-23 07:07:30 +00:00
Jack Kleeman 51b8ce994d Dynamic serving certificate
Reload certificate cert and key file from disk every minute and notify
the dynamic certificate controller when they change, allowing serving
tls config to be updated.

Kubernetes-commit: 3f5fbfbfac281f40c11de2f57d58cc332affc37b
2019-10-22 19:10:40 +01:00
Kubernetes Publisher 0efdb495b4 Merge pull request #84167 from yutedz/health-path-prefix
etcd health check key should have proper prefix

Kubernetes-commit: ea4570a412a918e24a89992c0daa80efda4a7ae5
2019-10-22 11:02:02 +00:00
Kubernetes Publisher 7b8c488e22 Merge pull request #83427 from logicalhan/metrics-timeout
Fix double counting issue for request metrics on timeout.

Kubernetes-commit: aa25739da416b68e966bef3c15e4f5281ebd1e85
2019-10-22 07:02:08 +00:00
Ted Yu 0026dd975b etcd health check key should have proper prefix
Kubernetes-commit: f4941e265e1a41a1b8846eae61a4049785cabb7e
2019-10-21 17:03:24 -07:00
Han Kang 00d376192a rename metric for apiserver request terminations and reword corresponding documentation
Change-Id: I47a9c7b10614afe85bb652fa61984f91848d6d65

Kubernetes-commit: f8f1def5f1d92a588f48ebc01293e142f8dd63fd
2019-10-21 13:26:31 -07:00
Clayton Coleman 3d42d38e70 namespace: Provide a special status cause when a namespace is terminating
Clients should be able to identify when a namespace is being terminated and
take special action such as backing off or giving up. Add a helper for
getting the cause of an error and then add a special cause to the forbidden
error that namespace lifecycle admission returns. We can't change the forbidden
reason without potentially breaking older clients and so cause is the
appropriate tool.

Add `StatusCause` and `HasStatusCause` to the errors package to make checking
for causes simpler. Add `NamespaceTerminatingCause` to the v1 API as a constant.

Kubernetes-commit: a62c5b282fda7c0832d329cde45e5e0a836924e8
2019-10-19 22:57:21 -04:00
Kubernetes Publisher 550b75f0da Merge pull request #84043 from wojtek-t/tweak_serialize_object_once
Don't use CachingObject if the number of watchers is small

Kubernetes-commit: f9acca889cc4248e69d5ee9295a0628f6c2d2b3a
2019-10-18 03:01:44 +00:00
Kubernetes Publisher ced80a6097 Merge pull request #83811 from immutableT/single-kms-mock
Use single kms-plugin mock in unit and integration tests.

Kubernetes-commit: 1f8b3bfd98c8099c5830b2c329867fa29c2b2575
2019-10-18 03:01:43 +00:00
Kubernetes Publisher 9cf86cb032 Merge pull request #83580 from jackkleeman/apiserver-cert-file-reload5
Plumbing for dynamic apiserver serving certificates

Kubernetes-commit: a78a403f63165b470ea234002f8c293e50944c6c
2019-10-17 23:01:35 +00:00
Kubernetes Publisher 26d3e9acc5 Merge pull request #83195 from wojtek-t/watch_bookmarks_ga
Promote WatchBookmarks feature to GA

Kubernetes-commit: 006378fcc1c8db4f7063812b67a59969fc0d09f0
2019-10-17 19:01:26 +00:00
Kubernetes Publisher 620d24168b Merge pull request #83555 from deads2k/dynamic-cert-kube-apiserver-wiring
Dynamic cert kube apiserver wiring

Kubernetes-commit: 7d243bc2a6f20f98763fba4dc7cd69fdb6588a48
2019-10-17 11:05:20 +00:00
Kubernetes Publisher 024f83ef63 Merge pull request #83238 from shturec/fixauditretry
Sending non-blocking audit events to a webhook is retried on any error

Kubernetes-commit: 93586808aa8a50fa5521e4bc89db3980e526e6e9
2019-10-17 11:05:18 +00:00
Kubernetes Publisher f1057d62fb Merge pull request #78541 from deads2k/timeout
choose a more unique request timeout default

Kubernetes-commit: eb2deb66e5220323eac8030cfa923666939ffc61
2019-10-17 07:01:20 +00:00
Kubernetes Publisher b4be7f41c9 Merge pull request #83970 from jpbetz/bbolt-v1.3.3
Bump bbolt to v1.3.3

Kubernetes-commit: 5f43502060552d66a46fedf0997d699026d3593c
2019-10-16 23:09:42 +00:00
wojtekt a76d249b96 Tweak use of caching objects
Kubernetes-commit: c5170dfb66749b60a4a1611dc7b4a39e64b33e2e
2019-10-16 09:05:13 +02:00
Kubernetes Publisher e7b9276b8c Merge pull request #83796 from enj/enj/i/token_cache_memory_limit
Hash keys used in cached token authenticator

Kubernetes-commit: ccf5f7ba36c6ad296c4b0f59f1ed8ed73696fc97
2019-10-15 23:05:59 -07:00