5d131b7a78
Merge pull request #126523 from enj/enj/i/ssa_authz_create_err
...
SSA: improve create authz error message
Kubernetes-commit: 114900ab1f678a03e5c1bc63fe92b0892d2a9238
2024-08-16 18:23:10 +00:00
25d7e88901
Merge pull request #126553 from aramase/aramase/c/kep_3331_disallow_k8s_io_prefix
...
Disallow `k8s.io` and `kubernetes.io` namespaced extra key in structured authn config
Kubernetes-commit: f26cf38a50bb38689b7674d228d004bff7a65899
2024-08-15 18:32:46 +00:00
38586e5d94
Merge pull request #126685 from enj/enj/i/kms_resouce_logs
...
Ensure transformers have access to the resource via request info
Kubernetes-commit: 026c55e40de835464e769bad65c8a19940b61459
2024-08-15 10:52:00 +00:00
11b0e0730d
Merge pull request #126698 from enj/enj/i/del_kms_v2_gates
...
Remove KMSv2 and KMSv2KDF feature gates
Kubernetes-commit: cd5f2083155bed7006b218ade85b584d53dfaae8
2024-08-15 02:43:25 +00:00
272e9eba82
Remove KMSv2 and KMSv2KDF feature gates
...
These have been GA since v1.29 and can be safely removed.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 6398b8a19fe0e113cf250c13b0639dea258a174f
2024-08-14 15:59:01 -04:00
cd5bba1780
Ensure transformers have access to the resource via request info
...
This guarantees that logs and metrics that rely on this information
work as expected.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 49d7b4c97e4f7ee5c664b068c207a39b8c3f759e
2024-08-14 10:33:36 -04:00
b157511c42
Merge pull request #126649 from 0x5457/fix-panic
...
apiserver: declare kubeClient and dynamicClient as interface types to avoid panic
Kubernetes-commit: 19175396280537af75d20c5ea22e877f16b40792
2024-08-14 10:22:41 +00:00
13f78e0e7e
Merge pull request #126665 from liggitt/version-build-id
...
Restore honoring --version build ID overrides
Kubernetes-commit: 69dbf2eee96f1c95c097370ddcb1d5c30f86bec8
2024-08-14 06:30:43 +00:00
be949676bf
Merge pull request #126565 from Adarsh-verma-14/remove-duplicate-call
...
remove duplicate call for ServeMux
Kubernetes-commit: 54691fdc21a84a6ac3a8e052d92f81a43a19139c
2024-08-14 06:30:41 +00:00
cb239f8776
Merge pull request #126354 from liangyuanpeng/celtest_update
...
Using NewExpressions for CEL lazy test.
Kubernetes-commit: bc3d6fd491aec44138086e5ece4e706041761398
2024-08-14 06:30:38 +00:00
c84ae4a3d4
Merge pull request #126316 from aramase/aramase/f/kep_3331_tighter_validation
...
Validate structured authn feature is enabled for discovery url/multiple audiences
Kubernetes-commit: c06ea0fc81168cee6d8055182aa4b3d38bc5bb58
2024-08-14 06:30:36 +00:00
77331233f8
Restore honoring --version build ID overrides
...
Kubernetes-commit: c181912dc5d8559834857e69ea34ee1729c43c6b
2024-08-13 18:48:56 -04:00
27c3ca736b
apiserver: declare kubeClient and dynamicClient as interface types to avoid panic
...
Kubernetes-commit: 81824b7c2e673f64f70a6e99180bb6bfc6b738d9
2024-08-13 11:25:11 +08:00
fac4f5d2a0
Remove feature gate ValiatingAdmissionPolicy after stable.
...
Kubernetes-commit: 0f19faf9be562f3d18880ed2ae12d6b9d059476c
2024-08-12 12:11:02 -07:00
e312f49d45
fix short circuit if the compaction request from apiserver is disabled
...
Kubernetes-commit: 9fef30117f89830cc8b17610c359141b663844f1
2024-08-12 10:21:49 +08:00
9d542feed9
apiserver: improve logging for apf tests in server/filters package
...
Kubernetes-commit: 8fa3e61399b85d534566dca6566ddb287873839c
2024-08-07 07:49:54 -04:00
41e1af4df2
remove duplicate call for ServeMux
...
Kubernetes-commit: 838d7c9049439b5997f0947258e183d677788475
2024-08-07 02:56:49 +05:30
fed75d52d6
Disallow k8s.io and kubernetes.io namespaced extra key in structured authn config
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 89c619f4fe698bf5b208ce86bce5da6833ca77b6
2024-08-05 16:09:00 -07:00
cc8ff8f965
ForbiddenStatusError: make linter happy on error construction
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: bff6ce4a38077c29cdf2e1ac2fce1a551082ebfe
2024-08-05 10:50:51 -04:00
757565c389
SSA: improve create authz error message
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 857127f7c44a029f6f8dd44b0b40364aa00aa13d
2024-08-02 17:20:53 -04:00
fcf807e7b4
add resource to the transformation metrics
...
Kubernetes-commit: 3a8df1efdd83015773be4afd409b0f4cb7eab654
2024-08-01 15:46:50 -07:00
fb0703a685
Merge pull request #126329 from serathius/concurrent-transformation-chan-of-chan
...
[chan of chan] Make object transformation concurrent to remove watch cache scalability issue for conversion webhook
Kubernetes-commit: c19d9edfdee7b4ff39041f0254c92ebf66af332f
2024-07-31 10:41:42 -07:00
28d9c91abf
Add basic panicOnUnknown support for kubernetes types
...
Kubernetes-commit: f6995740a6fe4b90103131516c3318f158209d21
2024-07-25 15:53:39 -04:00
65a6ca8228
support opaque kinds
...
Kubernetes-commit: 953fbaca487c45e3e1fc655d212008a2be01ac53
2024-07-25 15:04:09 -04:00
cbc488649b
Fix estimated cost for Kubernetes defined CEL types
...
Kubernetes-commit: 0a4e863373abc1b84372b0a93c8bcd32a24d07fb
2024-07-25 14:14:20 -04:00
552e7d7170
Using NewExpressions for cel lazy test.
...
Signed-off-by: Lan Liang <gcslyp@gmail.com>
Kubernetes-commit: 9a8d6b72e4f1e33e6a30fd281fd0972fdce93f78
2024-07-25 10:08:15 +00:00
f434fbf0c7
init a common apiserver for TestAuthorizationDecisionCaching testcases
...
Kubernetes-commit: 4acedb5132b2c3a7d61bd9e088c964af3fcfee3d
2024-07-23 22:19:02 -07:00
1d26753b4b
split Test_ValidateNamespace_NoParams into successes and failures tests, init a common apiserver for all testcases
...
Kubernetes-commit: 9df04b7c782cccc5fb068554152b4dcd9baf408b
2024-07-23 21:41:32 -07:00
febd487238
Validate structured authn feature is enabled for discovery url/multiple
...
audiences
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: f80c73248f872769d72b620e567747a1018f8a2b
2024-07-23 15:04:02 -07:00
fed8dfe736
dynamiccertificates: denoise Kubelet logs by skipping removal of non-existent file watchers
...
This commit updates the DynamicFileCAContent controller to skip the removal
of non-existent file watchers. Previously, the controller attempted to remove
a file watch even if it didn't exist, which resulted in a flood of error messages
being logged in the Kubelet logs.
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Kubernetes-commit: 17ad4b39f8b6b299d20fb94f99083ea84083b6b2
2024-07-23 10:55:16 -04:00
3adae5fd46
Make object transformation concurrent to remove watch cache scalability issue for conversion webhook
...
Test by enabling consistent list from cache in storage version migrator stress test that uses
conversion webhook that bottlenects events comming to watch cache.
Set concurrency to 10, based on maximum/average transform latency when
running stress test. In my testing max was about 60-100ms, while average
was 6-10ms.
Kubernetes-commit: bb686f203308481bcd7808f767171cdef27e12a0
2024-07-22 11:24:37 +02:00
9aa7a6ac61
Introduce ConcurrentWatchObjectDecode feature gate disabled by default
...
Kubernetes-commit: 93a10a75698075e86344ee4fdb56701309468b95
2024-07-30 16:28:48 +02:00
bd44a99f50
Merge pull request #126469 from serathius/beta2
...
Move ConsistentListFromCache to Beta default again
Kubernetes-commit: eb729d1db72fc27f495ddf397289678b180926f1
2024-07-31 18:05:06 +00:00
1b569bf504
Merge pull request #126470 from benluddy/apiservingwithroutine-alpha-disabled
...
Move APIServingWithRoutine to alpha and disabled by default.
Kubernetes-commit: f9d2297298909c9f3a2be2e88f3c84df43f3a376
2024-07-31 05:33:58 +00:00
bebf7ae9a1
Merge pull request #126467 from serathius/fallback
...
Implement fallback for consistent reads from cache
Kubernetes-commit: 974f3d3d8ff6bfb33a375f7207c34c69b3e8b932
2024-07-30 21:33:25 +00:00
c470f38c60
Move ConsistentListFromCache to Beta default again
...
This reverts commit aeb51a16e369d5b823a8ae6488d1d5e12c683516.
Kubernetes-commit: 2ca56aab87d0927e568f1d896d49692433d5d93a
2024-07-30 22:49:47 +02:00
788e7ee758
Move APIServingWithRoutine to alpha and disabled by default.
...
Kubernetes-commit: c8380040848fcbd0a0cc06600b9d4531b65098d2
2024-07-30 16:33:31 -04:00
6c5ee08ccf
Implement fallback for consistent reads from cache
...
Kubernetes-commit: 35962561e44425fe5e23f19aeccba9269fab3a56
2024-07-30 18:57:22 +02:00
c8097e3f30
Merge pull request #124012 from Jefftree/le-controller
...
Coordinated Leader Election
Kubernetes-commit: 5f5c02da51cd3146f30c6ee56013c983f4999d9c
2024-07-25 21:25:59 +00:00
e749b346fa
CLE feature gate
...
Kubernetes-commit: 9b16b0dc97c3f353f60eb935a8a532ec82b5e18e
2024-07-21 20:04:36 +00:00
92ee9330ce
Allowing direct CEL reserved keyword usage in CRD ( #126188 )
...
* automatically escape reserved keywords for direct usage
* Add reserved keyword support in a ratcheting way, add tests.
---------
Co-authored-by: Wenxue Zhao <ballista01@outlook.com>
Kubernetes-commit: a48a92c72ec7d4e2a8da396309abff9360faae75
2024-07-24 01:23:51 +00:00
c90207143c
Merge pull request #124061 from Jefftree/conversion-webhook-invalidca
...
Validate CABundle when writing CRD
Kubernetes-commit: 04d2f336419b5a824cb96cb88462ef18a90d619d
2024-07-23 21:06:59 +00:00
2b2a4b0fa8
Merge pull request #126187 from seans3/portforward-websockets-metrics
...
Adds metrics to PortForward Websockets
Kubernetes-commit: 04cc0a1034ed75982b124f65648bf737f2e39eb4
2024-07-23 03:02:33 +00:00
3319859ad0
Merge pull request #125488 from pohly/dra-1.31
...
DRA for 1.31
Kubernetes-commit: d21b17264e5a554724aa3ad032536630bcfd5b3f
2024-07-22 23:02:25 +00:00
4c07daf63d
Merge pull request #126237 from cici37/promoteMetrics
...
Promote metrics for VAP and CRD validation rules to beta.
Kubernetes-commit: 887def08b66c31b2f8bc260ea74d6c94671d474e
2024-07-22 18:45:28 +00:00
d681845e4f
Merge pull request #126136 from cici37/removeFG
...
Remove feature gate CustomResourceValidationExpressions
Kubernetes-commit: 8f265b63050739937cd939c05a98def37002f1e8
2024-07-20 10:45:41 +00:00
bd463169af
Merge pull request #125571 from liggitt/filter-auth-02-sar
...
add field and label selectors to authorization
Kubernetes-commit: 64ba17c605a41700f7f4c4e27dca3684b593b2b9
2024-07-20 02:46:10 +00:00
3d5977276b
Promote metrics for VAP and CRD validation rules to beta.
...
Kubernetes-commit: 95dbfa1c3d2f62e5d0f52788a2dd19fc61ca0a36
2024-07-19 20:46:33 +00:00
f438154cef
Adds metrics to PortForward Websockets
...
Kubernetes-commit: 90d70ed73dd7fcc9465baf452d178eb72f2aaf90
2024-07-17 21:29:31 -07:00
c1c9700b75
CEL: add QuantityDeclType
...
Most functions in k8s.io/apiserver/pkg/cel work with DeclType for type
definitions, which made the existing QuantityType unusable with them. The new
QuantityDeclType fills that gap.
Kubernetes-commit: bcececadfb5b7deb3f6ecb253a73ea98a2fdd80c
2024-07-17 19:36:36 +02:00
Kubernetes Publisher