Commit Graph

3127 Commits

Author SHA1 Message Date
yue9944882 0db66ae3d6 non-generated api models misc
rule list

rule

rule 2

Kubernetes-commit: 7c28a4b70eb90977f620ba7374ea0a511fcb9515
2019-10-23 15:17:10 +08:00
Kubernetes Publisher 411c2df45c Merge pull request #84604 from codenrhoden/update-utils-dep
Update k8s.io/utils dependency to latest

Kubernetes-commit: 97e28edb6620568d985f3b03b495a0a373aa8750
2019-11-01 23:07:30 +00:00
Travis Rhoden ca8b4045f0 Update k8s.io/utils dependency to latest
Kubernetes-commit: 81f66ecbb5ff359ac765c7f332289dd8c1737c39
2019-10-31 08:35:01 -06:00
Kubernetes Publisher 8cb875160e Merge pull request #84303 from jackkleeman/dynamic-sni-cert
Dynamic SNI certificates

Kubernetes-commit: c7bb076ade3e91cc13a0e855e155484fb4040191
2019-10-31 11:04:36 +00:00
Kubernetes Publisher 71f1f5686a Merge pull request #84387 from immutableT/interceptor
Move the common logic of checking for kms-plugin's version into gRPC client interceptor.

Kubernetes-commit: 48bc59a997a3490398d0d234d4f60d3121db9b74
2019-10-30 23:04:23 +00:00
Kubernetes Publisher d1b1b64dd9 Merge pull request #84288 from wojtek-t/cleanup_conversions_registrations
Cleanup conversions registrations

Kubernetes-commit: d379ab2697251334774b7bd6f41b26cf39de470d
2019-10-26 07:05:30 +00:00
Kubernetes Publisher b2ee5b48f6 Merge pull request #83987 from wenjiaswe/etcd_client_3_4_2
Update etcd client to v3.4.3 in k8s v1.17

Kubernetes-commit: 09f453ff8322979ed5a7611bc2e5528506c1fc7f
2019-10-25 23:07:27 +00:00
immutablet 29f5d9ba4a Move the common logic of checking for kms-plugin's version into gRPC client interceptor.
Kubernetes-commit: d2b4723302e61efdd942d59801f18ae3ec24887a
2019-10-25 15:08:52 -07:00
Kubernetes Publisher fd43ea72ca Merge pull request #84200 from jackkleeman/dynamic-serving-cert
Dynamic serving certificates

Kubernetes-commit: 04632e84e1348eb298027bae917cfede920c10a2
2019-10-25 03:03:36 +00:00
Jack Kleeman c4dfb52a33 Dynamic SNI certificates
Reload SNI certificate cert and key file from disk every minute and notify
the dynamic certificate controller when they change, allowing serving
tls config to be updated.

Kubernetes-commit: d9adf535f35051be1d79d1309c72762939593d7c
2019-10-24 17:38:21 +01:00
wojtekt 0c1673664a Autogenerated code
Kubernetes-commit: 7b6bcdf780b778af3df5c133686ccb18d8c38fa0
2019-10-24 14:09:51 +02:00
wojtekt 920eb0f6f5 Cleanup explicitly registered functions
Kubernetes-commit: d7011f1bdbee285cdfc9bdb0f5b0716f4e02adfd
2019-10-24 13:18:31 +02:00
Kubernetes Publisher 9fbfc4e2ab Merge pull request #83797 from lavalamp/old_cache
Benchmark for authn cache

Kubernetes-commit: 5b75e8409c64d9cf35fb6100a4b19f23b16ae324
2019-10-24 03:03:24 +00:00
Kubernetes Publisher fea522acfc Merge pull request #83579 from deads2k/dynamic-cert-file-ca-bundle
Dynamic cert file ca bundle

Kubernetes-commit: 0f1a8054f986d205a0202bf9b378c71e7ecc1710
2019-10-23 23:03:47 +00:00
Wenjia Zhang 274180b5c1 Pin dependencies and update vendors
Kubernetes-commit: 660b17d0aeda96af94defd4c5110d9fef523d52b
2019-10-23 13:37:36 -07:00
Kubernetes Publisher 07cd4dd74d Merge pull request #83665 from mars1024/feat/shuffle-sharding
shuffle sharding package for priority and fairness

Kubernetes-commit: cd274ff270dadab3eb73eda85c8dd178668a0563
2019-10-23 19:03:38 +00:00
Wenjia Zhang e518fe04f6 Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle
Kubernetes-commit: 9ead9373f350c7ad438257a9e8b8977a67b900eb
2019-10-23 11:15:43 -07:00
Kubernetes Publisher 45ecb17a75 Merge pull request #83627 from jackkleeman/sni-cert-reload
Plumb dynamic SNI certificates

Kubernetes-commit: 43c9c0740180090bb9a0d37dfaf91eb863a2cbde
2019-10-23 07:07:30 +00:00
Jack Kleeman 51b8ce994d Dynamic serving certificate
Reload certificate cert and key file from disk every minute and notify
the dynamic certificate controller when they change, allowing serving
tls config to be updated.

Kubernetes-commit: 3f5fbfbfac281f40c11de2f57d58cc332affc37b
2019-10-22 19:10:40 +01:00
Kubernetes Publisher 0efdb495b4 Merge pull request #84167 from yutedz/health-path-prefix
etcd health check key should have proper prefix

Kubernetes-commit: ea4570a412a918e24a89992c0daa80efda4a7ae5
2019-10-22 11:02:02 +00:00
Kubernetes Publisher 7b8c488e22 Merge pull request #83427 from logicalhan/metrics-timeout
Fix double counting issue for request metrics on timeout.

Kubernetes-commit: aa25739da416b68e966bef3c15e4f5281ebd1e85
2019-10-22 07:02:08 +00:00
Ted Yu 0026dd975b etcd health check key should have proper prefix
Kubernetes-commit: f4941e265e1a41a1b8846eae61a4049785cabb7e
2019-10-21 17:03:24 -07:00
Han Kang 00d376192a rename metric for apiserver request terminations and reword corresponding documentation
Change-Id: I47a9c7b10614afe85bb652fa61984f91848d6d65

Kubernetes-commit: f8f1def5f1d92a588f48ebc01293e142f8dd63fd
2019-10-21 13:26:31 -07:00
Kubernetes Publisher 550b75f0da Merge pull request #84043 from wojtek-t/tweak_serialize_object_once
Don't use CachingObject if the number of watchers is small

Kubernetes-commit: f9acca889cc4248e69d5ee9295a0628f6c2d2b3a
2019-10-18 03:01:44 +00:00
Kubernetes Publisher ced80a6097 Merge pull request #83811 from immutableT/single-kms-mock
Use single kms-plugin mock in unit and integration tests.

Kubernetes-commit: 1f8b3bfd98c8099c5830b2c329867fa29c2b2575
2019-10-18 03:01:43 +00:00
Kubernetes Publisher 9cf86cb032 Merge pull request #83580 from jackkleeman/apiserver-cert-file-reload5
Plumbing for dynamic apiserver serving certificates

Kubernetes-commit: a78a403f63165b470ea234002f8c293e50944c6c
2019-10-17 23:01:35 +00:00
Kubernetes Publisher 26d3e9acc5 Merge pull request #83195 from wojtek-t/watch_bookmarks_ga
Promote WatchBookmarks feature to GA

Kubernetes-commit: 006378fcc1c8db4f7063812b67a59969fc0d09f0
2019-10-17 19:01:26 +00:00
Kubernetes Publisher 620d24168b Merge pull request #83555 from deads2k/dynamic-cert-kube-apiserver-wiring
Dynamic cert kube apiserver wiring

Kubernetes-commit: 7d243bc2a6f20f98763fba4dc7cd69fdb6588a48
2019-10-17 11:05:20 +00:00
Kubernetes Publisher 024f83ef63 Merge pull request #83238 from shturec/fixauditretry
Sending non-blocking audit events to a webhook is retried on any error

Kubernetes-commit: 93586808aa8a50fa5521e4bc89db3980e526e6e9
2019-10-17 11:05:18 +00:00
Kubernetes Publisher f1057d62fb Merge pull request #78541 from deads2k/timeout
choose a more unique request timeout default

Kubernetes-commit: eb2deb66e5220323eac8030cfa923666939ffc61
2019-10-17 07:01:20 +00:00
Kubernetes Publisher b4be7f41c9 Merge pull request #83970 from jpbetz/bbolt-v1.3.3
Bump bbolt to v1.3.3

Kubernetes-commit: 5f43502060552d66a46fedf0997d699026d3593c
2019-10-16 23:09:42 +00:00
wojtekt a76d249b96 Tweak use of caching objects
Kubernetes-commit: c5170dfb66749b60a4a1611dc7b4a39e64b33e2e
2019-10-16 09:05:13 +02:00
Kubernetes Publisher e7b9276b8c Merge pull request #83796 from enj/enj/i/token_cache_memory_limit
Hash keys used in cached token authenticator

Kubernetes-commit: ccf5f7ba36c6ad296c4b0f59f1ed8ed73696fc97
2019-10-15 23:05:59 -07:00
Wenjia Zhang 41da2ced4c Replace github.com/coreos/etcd by go.etcd.io/etcd
Kubernetes-commit: 3b274fad2a719dc1fd0eaef6c55a0d344db10242
2019-10-15 22:38:43 -07:00
Joe Betz 25accf5baf Bump bbolt to v1.3.3
Kubernetes-commit: 1db282bb3e2a92a704b5a2266b9515b5e73e9c6a
2019-10-15 13:38:16 -07:00
immutablet 3079381054 Use single kms-plugin mock in unit and integration tests.
Kubernetes-commit: 4d24b41410f2253c7b2f9e2b6d56910894016c61
2019-10-11 15:25:05 -07:00
Monis Khan c2289feb1e Hash keys used in cached token authenticator
It is possible to configure the token cache to cache failures.  We
allow 1 MB of headers per request, meaning a malicious actor could
cause the cache to use a large amount of memory by filling it with
large invalid tokens.  This change hashes the token before using it
as a key.  Measures have been taken to prevent precomputation
attacks.  SHA 256 is used as the hash to prevent collisions.

Signed-off-by: Monis Khan <mkhan@redhat.com>

Kubernetes-commit: 9a547bca8e6e15273bfafd3496aa6524fd7d35bd
2019-10-11 15:21:34 -04:00
Kubernetes Publisher 0d1aa698ce Merge pull request #83858 from mrbobbytables/update-apiserver-owners
Prune inactive reviewers from staging/src/k8s.io/apiserver/* OWNERS files.

Kubernetes-commit: 34db57b0071aa62f546020ad4d7cb603196dd0d7
2019-10-14 19:00:47 +00:00
Kubernetes Publisher 28bb4eaefb Merge pull request #83678 from RainbowMango/pr_remove_prometheus_reference_from_storage
Remove prometheus reference from storage

Kubernetes-commit: f7992c7a214cc9ffbf43a4d340c1c3e913f667e3
2019-10-14 15:00:45 +00:00
Bob Killen 01b17215e9 Prune inactive owners from staging/src/k8s.io/apiserver/* OWNERS files.
Kubernetes-commit: 20285dd4608d4dbe7c86a4997c8975bfbf6d1b1c
2019-10-12 19:35:18 -04:00
Bruce Ma 87c35dc179 address some comments
Clean up useless functions, only keep the basic function Deal
and the function DealIntoHand which will be used by Priority
and Fairness.

Improve some comments for constants and functions.

Introduce Dealer to combine parameters and methods into a whole.

Use fixed-size slice to improve performance.

Use math.Ceil and math.Log2 to calculate required entropy bits.

Make the given hand adaptive to handSize in DealIntoHand.

Signed-off-by: Bruce Ma <brucema19901024@gmail.com>

Kubernetes-commit: 7a3ca070cdd9804a22bf5db8a99576b09fc52484
2019-10-11 20:06:31 +08:00
RainbowMango 92ea37b476 Deal with auto-generated files.
- Update bazel by hack/update-bazel.sh
- Update vendor by hack/update-vendor.sh

Kubernetes-commit: 6764bf394856a0d0979131bf985ce73cec4da72a
2019-10-09 22:01:46 +08:00
RainbowMango dfdab3a0c8 Remove direct reference to prometheus from apiserver/pkg/storage/value.
Kubernetes-commit: 78d0f1827acfb8400d6e1622d55bdfed64b047ed
2019-10-09 21:58:51 +08:00
Kubernetes Publisher 357923dfd1 Merge pull request #83801 from jpbetz/etcd-3_3_17_client
Upgrade to etcd client 3.3.17

Kubernetes-commit: 5e2650883af75cfb09eb4a65b4fb0e7d867a104f
2019-10-14 07:20:02 +00:00
Kubernetes Publisher ec095274d0 Merge pull request #83459 from deads2k/cert-reload-subject
dynamic delegated authn header reload

Kubernetes-commit: 527f6e1b4e99efbc9774ffb33487ecd3b8cb666a
2019-10-14 07:20:00 +00:00
Kubernetes Publisher 934c73955b Merge pull request #83785 from yastij/bump-utils-rangesize
bump k8s.io/utils to pickup bug fix for rangesize func

Kubernetes-commit: 677903edc6cfe1fb045a55b0734ee05ce8c3d03c
2019-10-14 07:19:59 +00:00
Kubernetes Publisher 87e106d504 Merge pull request #83610 from SataQiu/metrics-apiserver-20191008
Eliminate direct references to prometheus from apiserver admission

Kubernetes-commit: 30603a8b58e1d14a7a1c1a62ca10f984d15bc083
2019-10-14 07:19:57 +00:00
Kubernetes Publisher 1613cc8dee Merge pull request #83763 from jpbetz/revert-3316
Revert #83735: Update etcd client to 3.3.16

Kubernetes-commit: faad5d52bcefa903a0adf4b1dea9a9413944ca33
2019-10-14 07:19:56 +00:00
Joe Betz 5ebe913d25 Upgrade to etcd 3.3.17
Kubernetes-commit: 41e03d26d56e2d5070b532fd28e68d10b88e15bb
2019-10-11 13:28:41 -07:00
Yassine TIJANI 43f5144852 bump k8s.io/utils to pickup bug fix for rangesize
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>

Kubernetes-commit: 5d49cbd3cae68d7aafdeac7f2ca08208118f09ad
2019-10-11 16:45:21 +02:00