627bf4c0ce
Merge pull request #121815 from HirazawaUi/decode-respect-timeout-context
...
make the decode function respect the timeout context
Kubernetes-commit: 91655922197276ced2e4e36114bb753e384dbd83
2023-12-14 01:33:18 +00:00
36a3042e29
Merge pull request #121759 from thockin/fix_api_violations
...
Fix "list_type_missing" API violations in meta/v1
Kubernetes-commit: 8a22571ebb7628b2dd2c2faf453293040b7efaef
2023-12-14 01:33:16 +00:00
ce4326191e
Merge pull request #121625 from siyuanfoundation/refactor2
...
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
Kubernetes-commit: 09c5396607111c6540f61eeba88b124c77687057
2023-12-14 01:33:15 +00:00
00f757bfc4
Merge pull request #121624 from jiahuif-forks/fix/cel/lazy-map-context-eval
...
CEL lazy map: use context for lazy evaluation.
Kubernetes-commit: f7def00e6635366847a3a121881991b9cb341692
2023-12-14 01:33:14 +00:00
88c6f038a0
Address comment
...
Kubernetes-commit: 44898f7909940e786aeed701e87af0c799f4a660
2023-12-07 22:39:00 +00:00
fb788ccf7f
Keep presence cost to 0 to ensure backward compatibility.
...
Kubernetes-commit: 048cb8b2ed38febdb7cbbf719b6badbed8f0044c
2023-12-05 23:27:51 +00:00
fdd26489db
Fix etcd storage_events_received_total metric not being registered
...
Kubernetes-commit: ceb7ca93875cd74bea60500812cf7f024d3b1f2d
2023-12-04 09:12:21 +00:00
697d456e35
Minor cleanup in watch handlers
...
Kubernetes-commit: d907062308563b1a9e52152c48f4240a6e11aade
2023-11-29 22:31:05 +01:00
442cc39449
Unify watch handler across http and websockets
...
Kubernetes-commit: 55e60db88b126013f00135f49df3296f52b2572a
2023-11-29 21:57:39 +01:00
16536b9b63
support pod namespace indexer
...
fix comments
optimize code
small optimization for the namespace scope check
Kubernetes-commit: d8bd150784bb4825ae891dd0ec84625bdba0f2b8
2023-11-29 15:51:24 +08:00
2b59a3f14c
Don't sort under lock
...
Kubernetes-commit: 3e1dbccf4d3de59b31596f1664ff5ac9c02d1eea
2023-11-23 18:13:43 +01:00
7674c1a859
Fix list_type_missing in k8s.io/apiserver
...
Kubernetes-commit: eddf65849dfa1b3c351597d7018a2700371d8955
2023-11-17 11:46:28 -08:00
06103a07ae
k8s.io/apiserver: refactor GenericAPIServer healthz code.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: 12c9bfc21d6c9799c2cd6bf0e9dcca6f1534812d
2023-11-15 12:36:04 -08:00
d6876a0600
Merge pull request #121822 from ritazh/webhookauthz-benchmark
...
[StructuredAuthz] Webhookauthz benchmark
Kubernetes-commit: 68e3cedce2085c4476fca17770eab9203b6fbc58
2023-11-14 17:26:23 +00:00
9863f526b5
Re-vendor k8s.io/kube-openapi
...
./hack/pin-dependency.sh k8s.io/kube-openapi 778a5567bc1edaed92a4de9c07f90199c67953fa
./hack/update-vendor.sh
Kubernetes-commit: 1f55357d9937f076f532a2c1aa104593b9f6c49a
2023-11-13 10:59:57 -08:00
59c9103d07
Merge pull request #121808 from cpanato/go-update-main
...
[go] Bump images, dependencies and versions to go 1.21.4
Kubernetes-commit: 6ba7258a0f3f73629560fc30016b2e35c8e7ae9c
2023-11-13 17:32:39 +00:00
c4ab5aa41a
add false matchCondition benchmark
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 7c5dfceff8a4de3387b48e941d098a3957de2870
2023-11-13 09:22:24 -08:00
e319da4264
split compile and eval
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 11cdb8fd011a931d34506ade65e966f7c5208ae7
2023-11-08 16:37:10 -08:00
f0d5068944
authz: add benchmark for webhook authorizer
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: fe53db0dbdc25c9b2f87adbd53f1ebe4b6c1169d
2023-11-08 15:38:11 -08:00
88cd5253fa
make the decode function respect the timeout context
...
Kubernetes-commit: 3fb16abfca43f53048a28758f2366cb52e31d2b7
2023-11-08 23:39:10 +08:00
7bd75806d6
update go.mod
...
Signed-off-by: cpanato <ctadeu@gmail.com>
Kubernetes-commit: 9e5b8402bb95eb82541099e77c3a8b0ccd31297f
2023-11-08 08:46:15 -06:00
10c70bebf9
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed
...
fix test store delete collection function failed
Kubernetes-commit: f927d5b385c9d6f8870cf9ae6c38cb96d54c23df
2023-11-07 21:25:39 +00:00
f834404133
fix test store delete collection function failed
...
Kubernetes-commit: b12db6d9b55e02b232b716683a2d516e1788a9ce
2023-11-08 00:07:45 +08:00
c86c46c279
dependencies: zapr v1.3.0, zap v1.26.0
...
The new zapr adds support for slog. The new zap has various improvements. It no
longer depends on go.uber.org/atomic which enables dropping it from the
Kubernetes dependencies. github.com/pkg/errors is also no longer needed.
Kubernetes-commit: 166b71757b95de9a9898fcca79d60518e66a6813
2023-11-07 11:31:45 +01:00
dab5ebce44
Merge pull request #121709 from aramase/aramase/f/authn_user_info_fix
...
[StructuredAuthn] Ensure empty fields of user object are accessible by CEL
Kubernetes-commit: c3eebb233d000ac2dbbd559725124a79bf40d0f0
2023-11-03 05:24:07 +00:00
b20a2d3074
Merge pull request #121705 from liggitt/authz-config-webhook-test
...
Add multi-webhook integration test
Kubernetes-commit: fb9c94b3a50aa9f95a6153fb04d844decedbcf33
2023-11-03 01:25:01 +00:00
17a9a816ec
[StructuredAuthn] Ensure empty fields of user object are accessible by
...
CEL
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: b693f09d544b17c82af4437bd93ea0b165e2622e
2023-11-02 22:20:06 +00:00
2a9f8b8d15
Include empty string attributes for CEL authz evaluation
...
Kubernetes-commit: 44d89c8cf8c1ba883029e1244492a523d6b50b92
2023-11-02 15:14:06 -04:00
4eacc8425d
Plumb failure policy from config to webhook construction
...
Kubernetes-commit: 2e2f51a4417d93b5505091d28b319365dc95e137
2023-11-02 13:55:35 -04:00
374f72b704
Require match condition version only if matchConditions are specified
...
Kubernetes-commit: a000af25ff3bcc79fe7d8da299225ad252c9894a
2023-11-02 13:54:39 -04:00
b6487a8ac1
Fix etcd repository path to prevent redirects.
...
Signed-off-by: James Blair <mail@jamesblair.net>
Kubernetes-commit: b6c1f8ef08c3451f17048447e107c509a8ed950e
2023-11-02 09:31:37 +13:00
798e645af6
Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
...
bump etcd newest version: v3.5.10
Kubernetes-commit: 974735854b7fdfba2d0a67dbc15457c259e40aff
2023-11-01 17:29:14 +00:00
d0f0eebe8c
Merge pull request #121552 from pohly/klog-update
...
klog v2.110.1 update
Kubernetes-commit: da61382068671c3e16782a9b45e7f2159ac0feb9
2023-11-01 17:29:12 +00:00
09fd766b6a
bump to newest etcd: v3.5.10
...
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
Kubernetes-commit: bc1df9e7dab085b0d6301ac96f6b7e3ff90836ee
2023-11-01 10:44:07 +08:00
59297e78dd
use context for lazy evaluation.
...
Kubernetes-commit: 4fa3247a61e21abcb31778f8bfb85af844a6bd03
2023-10-30 11:29:57 -07:00
cef6db2cfb
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
...
Extract the logic to determine withRev to a separate method for better readability.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: 624169c5b50ee8a6e9a761e9488134985334817e
2023-10-20 12:59:46 -07:00
e2d4a4f3e2
dependencies: klog v2.110.1
...
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378 )
Kubernetes-commit: 878d037d3ba8fc4f11bf45a6cf5a66301ba89d82
2023-10-16 10:03:54 +02:00
c78de1fe6c
Merge pull request #121575 from apelisse/update-smd
...
Update sigs.k8s.io/structured-merge-diff to v4.4.0
Kubernetes-commit: 593a17d3b6381bfdbf3bc3b36f56cad30d1531df
2023-11-01 01:32:06 +00:00
caeb7958ad
Merge pull request #121078 from aramase/aramase/f/kep_3331_cel_integration
...
Implement CEL for StructuredAuthenticationConfig
Kubernetes-commit: fafccc0c9a514caa72e5a16ea0d6213081081e19
2023-11-01 01:32:05 +00:00
a5e47d114d
Merge pull request #121645 from p0lyn0mial/upstream-fix-race-in-test-forget-watcher
...
bring back: cacher: when forgeting a watcher, call stopWatcherLocked multiple times
Kubernetes-commit: 715cd17c0d050174a7268360378f69cda2df3184
2023-11-01 01:32:03 +00:00
31543f677a
Merge pull request #121651 from jiahuif-forks/fix/cel/type-resolver-safe-guard
...
CEL type resolvers: avoid infinite recursion for type resolvers.
Kubernetes-commit: 3631efd85c1a772b518ad49fb20bb5b5454e6b90
2023-10-31 21:29:01 +00:00
d463ec4cab
avoid infinite recursion for type resolvers.
...
Kubernetes-commit: e4776e0f85b8aceb8f1da7a87822b0d086045a8a
2023-10-31 10:23:50 -07:00
4909d085b8
Merge pull request #121649 from enj/enj/c/ec_controller_ctx
...
encryptionconfig/controller: run unit tests faster
Kubernetes-commit: 029452198566a41bc39d04a1ec5bad3f37621a1c
2023-10-31 21:28:57 +00:00
347a598452
Merge pull request #121647 from aojea/fixrace
...
Revert "cacher: when forgeting a watcher, call stopWatcherLocked mult…
Kubernetes-commit: 3570075e4f6d3cdb2aa8273004ea6ec336b33abd
2023-10-31 21:28:56 +00:00
9e76120f1e
Merge pull request #121646 from kubernetes/revert-121614-decode-respect-timeout-context
...
Revert "Make the decode function respect the timeout context"
Kubernetes-commit: be636a436b7b4c21b79eca17ff3e681920e54f31
2023-10-31 21:28:55 +00:00
0f520bf96f
Merge pull request #121577 from cici37/celFixPick
...
Bump cel-go to v0.17.7 and introduce set ext library with new options
Kubernetes-commit: d1113c9a00b3cd1c791f43b15280d4ebba2a7663
2023-10-31 21:28:54 +00:00
8acc6c6568
Merge pull request #121638 from tkashem/apf-ga
...
apiserver: set APF featuregate to stable
Kubernetes-commit: 74fefd877f0ee9445735a756270f8eac44a96d0b
2023-10-31 21:28:52 +00:00
3097e77b18
encryptionconfig/controller: run unit tests faster
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 6ac7da1da87bb0e739806cad94676da915be6d9c
2023-10-31 11:59:37 -04:00
bdad50b280
Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
...
This reverts commit bbca4a4b9add0f6c58e132500fd89dd39ee077f4.
Kubernetes-commit: c2cb3209138d852520da2743b9bd3a9795b2b7fb
2023-10-31 15:28:01 +00:00
6caf326620
Revert "Make the decode function respect the timeout context"
...
Kubernetes-commit: 98a2f22e740ccd2c30711f1b21d6383f1b91595e
2023-10-31 16:27:17 +01:00
Kubernetes Publisher
Cici Huang
Robert Svarinskis
Wojciech Tyczyński
ahutsunshine
Tim Hockin
Siyuan Zhang
Rita Zhang
HirazawaUi
cpanato
Patrick Ohly
Anish Ramasekar
Jordan Liggitt
James Blair
guangli.bao
Jiahui Feng
Monis Khan
Antonio Ojea