34b7cc90dd
Merge remote-tracking branch 'origin/master' into release-1.32
...
Kubernetes-commit: 22b14e54a4caac0a20428e51ba874b1af8b0e4cb
2024-12-06 19:02:31 +00:00
5945d46eab
Drop use of winreadlinkvolume godebug option
...
Kubernetes-commit: 3046fe23d4fe4ba86713ffd61bf0e07156b2b7c3
2024-12-06 02:40:53 -05:00
adee2595b3
Merge remote-tracking branch 'origin/master' into release-1.32
...
Kubernetes-commit: 6f3c354fb52d02435360111f418a5a678878e677
2024-12-05 04:45:41 +00:00
fbba927c00
Merge pull request #129081 from stlaz/fg_remote_uid
...
featuregate UID in RequestHeader authenticator
Kubernetes-commit: 1504f10e7946f95a8b1da35e28e4c7453ff62775
2024-12-05 06:34:38 +00:00
b3c0cb68b5
Merge remote-tracking branch 'origin/master' into release-1.32
...
Kubernetes-commit: f5900aab680c34bea040b39ac83dfc48f466b573
2024-12-05 02:55:40 +00:00
bf14697875
Revert to go1.22 windows filesystem stdlib behavior
...
Kubernetes-commit: 3878a3a6de64660e356a35f70471c27a09698090
2024-12-04 09:52:56 -05:00
f76e4047a3
featuregate UID in RequestHeader authenticator
...
Kubernetes-commit: a051b067cdffc92fbe40bcc5a8e8f1bf974348c4
2024-12-04 15:44:45 +01:00
1f546eec45
Possible fix for alpha CI jobs failing with AllowUnsafeMalformedObjectDeletion switched on
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 9c6126e29c2dd63668c5d2320a4c26ff173fc499
2024-11-27 18:01:11 +00:00
3423727e46
Merge pull request #127581 from richabanker/flagz-apiserver
...
Add flagz endpoint for apiserver
Kubernetes-commit: 4d91d502832ce55204343d7864fe28019d87b2bb
2024-11-08 13:01:39 +00:00
b8357e72dd
Merge pull request #128618 from knrc/error-check-fix
...
Fix error check
Kubernetes-commit: e1e92bc40373fa01be05c64e1aee3bdee5d74040
2024-11-08 13:01:37 +00:00
0b01a72aa3
Merge pull request #127513 from tkashem/delete-undecryptable
...
KEP-3926: unsafe deletion of corrupt objects
Kubernetes-commit: 4d10ae8fdc579e2bb09789507cae7b8d32cbd306
2024-11-08 13:01:36 +00:00
f983148f8c
Merge pull request #125577 from richabanker/statusz
...
Add statusz endpoint for apiserver
Kubernetes-commit: 60651eb17257356a2be70ac8d2c14218c1af0834
2024-11-08 13:01:33 +00:00
fbb5ab0d70
handle watch for unsafe delete
...
Kubernetes-commit: 25efc8f2d136a9574166be02789ac727c5b4a3fd
2024-11-05 20:36:56 -05:00
8b8b5c0f78
add access control check for unsafe delete
...
add access control check to ensure that the user has permission to do
'unsafe-delete-ignore-read-error' on the resource being deleted
Kubernetes-commit: 9932dbef5787bfdc88d8ae35e90dc0965bbc6c80
2024-10-31 16:01:58 -04:00
a69b1ea2d5
Fix error check
...
Signed-off-by: Kevin Conner <kev.conner@gmail.com>
Kubernetes-commit: e7e1fb7234264b6f0785ad9fdd29e90c5da36002
2024-10-21 08:09:55 -07:00
1f27993c44
implement unsafe deletion, and wire it
...
- implement unsafe deletion, and wire it
- aggregate corrupt object error(s) from the storage LIST operation
- extend storage error:
a) add a new type ErrCodeCorruptObj to represent a corrupt object:
b) add a new member 'InnerErr error' to StorageError to hold
the inner error
- add API status error
Kubernetes-commit: 5d4b4a160dc551dc8979012eeabea1a098945603
2024-09-20 17:36:27 -04:00
4ce1c97be7
api: add a new field to meta/v1 DeleteOptions
...
- add a new boolean field
IgnoreStoreReadErrorWithClusterBreakingPotential to meta/v1 DeleteOptions
- add validation for the new delete option
add validation for the new field in the delete options
ignoreStoreReadErrorWithClusterBreakingPotential
- prevent the pod eviction handler from issuing an unsafe pod delete
prevent the pod eviction handler from enabling the
'ignoreStoreReadErrorWithClusterBreakingPotential' delete option
Kubernetes-commit: b6773f15897dc31190b2be7cb49dd02015440465
2024-09-23 12:22:53 -04:00
d520e75de3
add statusz implementation and enablement in apiserver
...
Kubernetes-commit: 8bf6eecedffaa85c6d06ef2c8ad412ded77cb309
2024-06-18 20:30:43 -07:00
43b9e23f22
Merge pull request #127360 from knight42/feat/split-stdout-stderr-server-side
...
API: add a new `Stream` field to `PodLogOptions`
Kubernetes-commit: 9660e5c4cd41700eae41a316dd236090bd7bf6e9
2024-11-08 13:01:31 +00:00
67b987f568
Merge pull request #128637 from jpbetz/fix-mutating-admission-defaulting
...
Bug fix: MutatingAdmissionPolicy should default builtin types after each mutation
Kubernetes-commit: 9729ac8c6f233850b0624b8663577647bf4c37b2
2024-11-08 13:01:27 +00:00
a16a110639
Merge pull request #128166 from yongruilin/test-allow-label
...
test: add integration test for allow-metric-label
Kubernetes-commit: 154b756e2ed850d2e64baea269dbb749ac02a77d
2024-11-08 13:01:25 +00:00
3a2942bdff
Merge pull request #128593 from jpbetz/bump-cel-123
...
Introduce CEL two variable comprehensions
Kubernetes-commit: dc01fa9d2b6632dc932eb760573659608add1b8f
2024-11-07 03:24:36 +00:00
b5e6c92c1d
Merge pull request #128503 from benluddy/cbor-codecs-featuregate
...
KEP-4222: Wire serving codecs to CBOR feature gate.
Kubernetes-commit: 6399c32669c62cfbf7c33b14b77d6781ce1cce27
2024-11-07 03:24:34 +00:00
490aa4761a
Add defaulting to tests
...
Kubernetes-commit: a6e0a7b17bfd8e95e7cc1206f6c5e67aebec6495
2024-11-06 21:45:55 -05:00
6b49c2289e
Fix defaulting for native types
...
Kubernetes-commit: fd6900131446465bb6f1216b0de53279c5b84209
2024-11-06 20:42:27 -05:00
accfd98e20
Wrap unversioned CEL library initializer calls with guard
...
Kubernetes-commit: dc5e2f3fa295276029535359246154021861fdd6
2024-11-06 15:32:15 -05:00
ba14b9c42a
Add cost testing for two variable comprehensions
...
Kubernetes-commit: 3d4a5dac4e7921c5e41824dd130b646580a7c3f5
2024-11-05 20:57:13 -05:00
454f4fe2a7
hack/pin-dependency.sh github.com/google/cel-go v0.22.0
...
Kubernetes-commit: b0180a9a376caee4a12cbf549b3187d21cbdc07d
2024-11-05 19:21:09 -05:00
0b5852eb9a
Wire serving codecs to CBOR feature gate.
...
Integration testing has to this point relied on patching serving codecs for built-in APIs. The
test-only patching is removed and replaced by feature gated checks at runtime.
Kubernetes-commit: 439d2f7b4028638b3d8d9261bb046c3ba8d9bfcb
2024-11-01 16:05:32 -04:00
88f051a068
Merge pull request #128554 from ritazh/webhookmatchcondition-doc-comment
...
Add WebhookMatchCondition doc comment
Kubernetes-commit: 7a1f8aaa5256bf6ff8afca322e2cf0935c21dbd2
2024-11-06 23:25:00 +00:00
be81d72259
Merge pull request #128501 from benluddy/watch-cbor-seq
...
KEP-4222: Use cbor-seq content-type for CBOR watch responses.
Kubernetes-commit: a885e446d6f6f5530da4923a3872eb27ca47bdc0
2024-11-06 23:24:59 +00:00
882c7896e7
Add webhookmatchcondition doc comment
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 151599d47a9b866a7d7b8dffc5714557817bbcf2
2024-11-04 16:26:42 -08:00
dc2e401d84
Use application/cbor-seq media type in streaming CBOR responses.
...
The media type application/cbor describes exactly one encoded item. As a new (to Kubernetes) format
with no existing clients, streaming/watch responses will use the application/cbor-seq media
type. CBOR watch responses conform to the specification of CBOR Sequences and are encoded as the
concatenation of zero or more items with no additional framing.
Kubernetes-commit: 504f14998e920ca8837b3310094b3da11c62a070
2024-11-01 13:14:06 -04:00
e906dc9707
Merge pull request #128266 from AnishShah/resize-subresource
...
[FG:InPlacePodVerticalScaling] Introduce /resize subresource to request pod resource resizing
Kubernetes-commit: 648717cc740cafbce778e983f195dc6879bf22e3
2024-11-06 11:24:06 +00:00
15884a5fd0
feat: Add function to reset label allow list for apiserver endpoints metrics
...
Kubernetes-commit: d3795eaf76e5ecc632325cfb598533c4e3c31704
2024-10-30 09:28:24 -07:00
cb02f4a386
support for resize subresource in ResourceQuota admission.
...
Kubernetes-commit: 1b98fe6079059cb1d7bfda4f4b318f614449fee5
2024-10-24 14:00:57 -07:00
04fa4ade1a
Merge pull request #128539 from benluddy/cbor-feature-gates
...
KEP-4222: Add CBOR feature gates.
Kubernetes-commit: a28f14089cfa47ef9c57f9f283e1504a68f616d6
2024-11-06 03:22:48 +00:00
7338177523
Merge pull request #128580 from jpbetz/bump-kube-openapi
...
Bump kube-openapi to latest
Kubernetes-commit: 9a2a7537f035969a68e432b4cc276dbce8ce1735
2024-11-05 23:23:51 +00:00
4cb4306ed2
Merge pull request #128415 from serathius/watchcache-btree-2
...
Use btree for watch cache storage to serve LIST more efficiently
Kubernetes-commit: 19d6337d593773397164f25fad0ea5daba05333e
2024-11-05 23:23:50 +00:00
982944365e
Merge pull request #127134 from jpbetz/mutating-admission
...
KEP-3962: MutatingAdmissionPolicy Alpha
Kubernetes-commit: 2d6c8a129df97caf5bda3a186a8f7f3e41591352
2024-11-05 19:23:26 +00:00
5fff35ea12
hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e
...
Kubernetes-commit: f2157ff73e3c9b7c2a36bf371e388e8976d93975
2024-11-05 10:18:57 -05:00
4605e42ff2
Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
...
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Kubernetes-commit: 7a4d755644e83dfade7bbc4c240c204a9e54d9c0
2024-11-04 23:24:19 +00:00
e3e5839136
Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
...
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares
Kubernetes-commit: 6a1a6fd85fb80fd9c4b3f823741853822a4270db
2024-11-04 19:18:06 +00:00
f7ccc75f9f
Reorganize and expand unit test coverage
...
Also apply reviewer feedback
Kubernetes-commit: 0dc08eded95c2d620de70648dee07254f2e771b3
2024-11-04 10:50:53 -05:00
ca9c3d965e
Add CBOR feature gates.
...
For alpha, there is one apiserver feature gate and two client-go feature gates controlling
CBOR. They were initially wired to separate test-only feature gate instances in order to prevent
them from being configurable at runtime via command-line flags or environment variables (for
client-go feature gates outside of Kubernetes components). All of the integration tests required by
the KEP as alpha criteria have been implemented. This adds the feature gates to the usual feature
gate instances and removes the temporary code to support separate test-only feature gate instances.
Kubernetes-commit: 072dfcb416fd4e1ddab0a89ac4faf519e268bc96
2024-11-04 10:40:19 -05:00
cae3853011
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 2b0592ee77d0a0bb3017df042066ecb8c83d2fb3
2024-11-01 22:19:11 -04:00
6df5cd720d
Merge pull request #128481 from carlory/dependencies-ginkgo-gomega
...
dependencies: ginkgo v2.21.0, gomega v1.35.1
Kubernetes-commit: 88a997ac01cd8a386df9318d81b89257307f53fb
2024-11-01 19:24:43 +00:00
5d1ea16030
dependencies: ginkgo v2.21.0, gomega v1.35.1
...
Kubernetes-commit: 80b1a297865500891bd823005ace761becae5dbf
2024-11-01 11:35:24 +08:00
0b45fb4d77
Merge pull request #128416 from jpbetz/reset-filter
...
Add optional ResetFieldsFilterStrategy interface for storage
Kubernetes-commit: b831df733e5cf244331f61fffb0ba86787b27236
2024-11-01 03:55:40 +00:00
97c3c25661
Merge pull request #128463 from knrc/fix_vap_elapsed_time_tracking
...
Fix elapsed time tracking for validating admission policies
Kubernetes-commit: 34ce75749e7400b30b0dda6659ad31801d528b2b
2024-10-31 23:02:06 +00:00
Kubernetes Publisher
Jordan Liggitt
Stanislav Láznička
Davanum Srinivas
Abu Kashem
Kevin Conner
Richa Banker
Joe Betz
Ben Luddy
Rita Zhang
yongruilin
Anish Shah
carlory