3d5977276b
Promote metrics for VAP and CRD validation rules to beta.
...
Kubernetes-commit: 95dbfa1c3d2f62e5d0f52788a2dd19fc61ca0a36
2024-07-19 20:46:33 +00:00
d681845e4f
Merge pull request #126136 from cici37/removeFG
...
Remove feature gate CustomResourceValidationExpressions
Kubernetes-commit: 8f265b63050739937cd939c05a98def37002f1e8
2024-07-20 10:45:41 +00:00
bd463169af
Merge pull request #125571 from liggitt/filter-auth-02-sar
...
add field and label selectors to authorization
Kubernetes-commit: 64ba17c605a41700f7f4c4e27dca3684b593b2b9
2024-07-20 02:46:10 +00:00
5678a8c44d
Remove feature gate CustomResourceValidationExpressions.
...
Kubernetes-commit: 67a171a1422cc5861491aadd69e51ce718196434
2024-07-16 10:39:00 -07:00
6c5ca3dcf3
Fixup lint warning
...
Kubernetes-commit: 9f8f36708a0eb1ad78e48beeaf15f2c6ae3e1552
2024-06-27 00:42:01 -04:00
eabf12957a
Add structured labelSelector / fieldSelector to authorization webhook match conditions
...
Kubernetes-commit: a1398a8ccaeb7f881acb65d1276392f4cac259e8
2024-06-26 17:17:43 -04:00
f14fc0f445
Adjust CEL cost calculation and versioning for authorization library
...
Kubernetes-commit: 83bd512861aa11ec00a90e4ac382daa788dccf87
2024-06-26 21:38:24 -04:00
efe135c937
Add CEL fieldSelector / labelSelector support to authorizer library
...
Kubernetes-commit: be2e32fa3ed0a06ac9cc59d9966be0b40617c2b2
2024-06-14 14:39:54 -04:00
b338834e91
Move CEL env initialization out of package init()
...
This ensures compatibility version and feature gates can be initialized
before cached CEL environments are created.
Kubernetes-commit: 03d48b76831a3a02d503c3075d818a76afd83cd8
2024-06-29 21:45:55 -04:00
9db3f571d5
Improve CEL cost tests to catch unhandled estimates or types
...
Kubernetes-commit: 1d2ad282cff163e51e5c24569a0ac762ed814e74
2024-06-26 21:38:48 -04:00
f26d4ed894
add field and label selectors to authorization attributes
...
Co-authored-by: Jordan Liggitt <liggitt@google.com>
Kubernetes-commit: 92e3445e9d7a587ddb56b3ff4b1445244fbf9abd
2024-05-23 15:12:26 -04:00
6dd5496a01
Merge pull request #126124 from cici37/feature/validating-admission-policy/metrics-improvement
...
Feature/validating admission policy/metrics improvement
Kubernetes-commit: acaec0c23a7e5f76b98c519d91cdf66cbe4c0263
2024-07-19 18:45:26 +00:00
bf5c64d612
Merge pull request #124736 from MikeSpreitzer/exempt-borrows-more
...
More assertive borrowing by exempt
Kubernetes-commit: d040043edbe8eddd806d9dadd572283e65f8233a
2024-07-18 22:45:52 +00:00
36d8f544a9
Merge pull request #126191 from p0lyn0mial/upstream-revert-promote-watch-list-to-beta
...
Revert "Promote WatchList feature to Beta"
Kubernetes-commit: dda657b5982e8f9102b8df5931344262b0793163
2024-07-18 18:50:57 +00:00
708f0cf46b
Revert "kube-apiserver: promote WatchList feature to beta"
...
This reverts commit 0b15903b35d83ca32833e81997b6257ee4d4f369.
Kubernetes-commit: 88f47b4b4df2f099cc20381fdc0fbcfe0afcee8e
2024-07-18 09:29:24 +02:00
1ae3792914
Merge pull request #126139 from enj/enj/i/revert_list_cache
...
Revert "Move ConsistentListFromCache to Beta default"
Kubernetes-commit: c3bcd4fff06566886f36d6e59536b3d00a69a637
2024-07-17 19:10:06 +00:00
17ba1a9a64
Revert "Move ConsistentListFromCache to Beta default"
...
This reverts commit 0c0e19b343d48d4bea0e7fa735e3781c70298a34.
During stress test for SVM controller, the controller is unable to
make a list call due to following error:
resourceversion.go:155: I0716 21:49:26.973127] storage-version-migrator-controller: Error syncing SVM resource, retrying svm="crdsvm" err="error getting latest resourceVersion for stable.example.com/v1, Resource=testcrds: Timeout: Too large resource version: 28976, current: 20349"
With the feature disabled, the stress test passes.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: aeb51a16e369d5b823a8ae6488d1d5e12c683516
2024-07-16 23:12:16 -04:00
cd492e8b91
Fix the error type, Add into observation, Fix tests.
...
Kubernetes-commit: b7821078b36f1cb25d903774ddf37a97966c2eac
2024-07-16 08:27:36 -07:00
d72b6cca4b
Merge pull request #125769 from siyuanfoundation/api-comp-ver1
...
add emulated-version flag to kube-scheduler to control the feature gate.
Kubernetes-commit: 7bbc891f9b8f278edf2c6376ffe70a94f4c85afb
2024-07-15 18:46:49 +00:00
2e2bf0d328
Merge pull request #126018 from aroradaman/bump-k8s-utils
...
bump k8s.io/utils
Kubernetes-commit: 46aa8959a0659e22c924bb52b38385d441715b2b
2024-07-13 18:50:20 +00:00
74615c52f8
bump k8s.io/utils
...
Signed-off-by: Daman Arora <aroradaman@gmail.com>
Kubernetes-commit: c6a129b715646163ef83f94245c3756cbc191c42
2024-07-12 14:40:22 +05:30
b9f8b0569b
Merge pull request #125802 from mmorel-35/testifylint/len+empty
...
fix: enable empty and len rules from testifylint on pkg and staging package
Kubernetes-commit: 2d4514e1690dc5babb144542da799f6b331afd1b
2024-07-12 06:51:23 +00:00
4f89b2c0e4
Merge pull request #125986 from vinayakankugoyal/typo
...
Fix typo in error message for anonymous field in AuthenticationConfig…
Kubernetes-commit: 0c8b3e5f305bf2bf56d47019199b81330d90c2c3
2024-07-10 06:46:23 +00:00
fd1f3aafaf
Fix typo in error message for anonymous field in AuthenticationConfiguration.
...
Kubernetes-commit: 27e8923c70c8bf95e0db02aeb7a0d45908ae9d62
2024-07-09 21:04:28 +00:00
ad20d53f30
Merge pull request #124730 from tkashem/read-write-deadline-test
...
Add test to document request timeout behavior
Kubernetes-commit: 8c7ee69212fc57e31b4c2dc59737a95576881324
2024-07-09 02:44:07 +00:00
3712259b24
Merge pull request #125922 from dims/update_otel_27
...
Update opentelemetry dependencies to the latest release (Take 2)
Kubernetes-commit: 07cc20a7509e7322e6ebb04e60d8274f27d6fdd7
2024-07-07 02:51:03 +00:00
4f7f407e71
Merge pull request #125920 from siyuanfoundation/bug
...
fix lock bug for componentGlobalsRegistry
Kubernetes-commit: 6432b3db82917b64394ede0379f94aa91be1c94c
2024-07-05 12:25:05 -07:00
73f28c1095
update OpenTelemetry dependencies and grpc
...
This update dropped the otelgrpc → cloud.google.com/go/compute dependency,
among others. This dropped out because genproto cleaned up it's dependencies
on google cloud libraries, and otel updated - details in #113366 .
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Co-Authored-By: David Ashpole <dashpole@google.com>
Kubernetes-commit: ff7942be83ed0c0aaa8c258e8e2b9965d383935c
2024-07-05 12:10:07 -04:00
6f7147fc9d
fix lock bug for componentGlobalsRegistry
...
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: d31aebe57224b678a0c17df7766d8e7f850209e8
2024-07-05 15:50:10 +00:00
aa4d1a9cc7
Merge pull request #125850 from dims/fix-for-typecheck-does-not-notice-compile-errors-in-test-files
...
Fix for typecheck doesn't notice compile errors in test files
Kubernetes-commit: c87c06d7ffb932395f963bc78f03f9d2f0e57698
2024-07-04 22:53:29 +00:00
fc096e5c76
Merge pull request #125848 from jpbetz/fix-auth-selectors
...
Drop removed APIs from etcd data tests, remove special case logic for binaryVersion=0.0 and all usages
Kubernetes-commit: 9ec91e65510d3a04707eb8e2f071476e6b010688
2024-07-03 17:40:32 -07:00
b754d6e7f2
Remove special case logic in apiserver to serve all APIs when binary version is set artifically to 0.0
...
Kubernetes-commit: 1864e7131eca32fc9bebf20641becb467f240eca
2024-07-03 14:16:15 -04:00
e34b81ec0c
Merge pull request #125846 from tkashem/remove-apf-feature-gate
...
Remove APF feature gate APIPriorityAndFairness
Kubernetes-commit: 30ffa521e69197610dfcd8e0c0b1d1db73ccf071
2024-07-03 06:14:39 -07:00
1292729d42
Fix for typecheck doesn't notice compile errors in test files
...
- ensure we add all the staging modules so the _test files in there are "loaded"
- use build tags to skip tests that fail to build in specific os/arch pairs
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Co-Authored-By: Tim Hockin <thockin@google.com>
Kubernetes-commit: c230a45383c372e3861de3d4854cdfe28f4c482f
2024-07-02 16:26:41 -04:00
f553925235
apiserver: remove feature gate APIPriorityAndFairness
...
Kubernetes-commit: ae647032a74bf8f671fa8db0602dee301cf865bf
2024-07-02 12:55:43 -04:00
d3817b1390
Merge pull request #125626 from linxiulei/fix_routine_log
...
Fix httplog not logging watch duration
Kubernetes-commit: e341d5b1aa603ff030b26021ecab3e31972802cf
2024-07-02 14:37:46 +00:00
19c13772cd
Merge pull request #125483 from wojtek-t/storage_readiness_hook
...
Implement resilient watchcache initialization post-start-hook
Kubernetes-commit: 79fee524e65ddc7c1448d5d2554c6f91233cf98d
2024-07-01 22:37:43 +00:00
f9f3bbd8be
Merge pull request #125591 from p0lyn0mial/upstream-promote-watch-list-to-beta
...
Promote WatchList feature to Beta
Kubernetes-commit: d729af9446bf6621d3e916f44cbbc939fa0f9c6d
2024-07-01 10:37:43 +00:00
8705baa8b2
fix: enable empty and len rules from testifylint on pkg package
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Kubernetes-commit: f014b754fb5925dfbca6e27a44d0c3968b157e14
2024-06-28 21:20:13 +02:00
5addfa30ff
Merge pull request #125759 from dims/bump-prometheus/common-v0.55.0
...
Bump `prometheus/common` to v0.55.0
Kubernetes-commit: 4c44efe81c9a26d66cdf88e917aeee75dad12299
2024-06-28 06:43:10 +00:00
9f17e821d7
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
Kubernetes-commit: 522e2e50667f25b759a10183eec1bb7d4683ec27
2024-06-28 06:43:09 +00:00
972f7a599e
Merge pull request #125766 from dims/update-moby/spdystream-to-v0.4.0
...
Update moby/spdystream to v0.4.0
Kubernetes-commit: 742b2f70b9e5c1ec03682ad25dc76fdcc7109310
2024-06-27 22:42:53 +00:00
114ef557b9
Merge pull request #125730 from p0lyn0mial/upstream-bring-back-consistent-read-from-cache-supports-pagination
...
apiserver/storage/cacher: consistent read from cache supports limit
Kubernetes-commit: 010409ad0db507a94d8fd9a0528f27a50e525a47
2024-06-27 22:42:51 +00:00
7f5df11548
add emulated-version flag to kube-scheduler to control the feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: 40cddbe21516122a528e2afb2b1fbcaed1acbe8a
2024-06-27 11:56:49 -07:00
7060e82c96
Update moby/spdystream to v0.4.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 377a3f7ec4dc2b5e09e0aadb651999d400c31538
2024-06-27 13:07:47 -04:00
2243836d03
Bump `prometheus/common to` v0.55.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 35ccdc8b35f1c4346071d4ff0efecdd7a6bcdecc
2024-06-27 07:58:24 -04:00
5e71b4e71d
apiserver/storage/watchcache: WaitUntilFreshAndList supports path prefix
...
Kubernetes-commit: 2f9660db6b0ba37ff383559b1b0324c635f1eb66
2024-06-26 14:34:32 +02:00
5d14d72b5c
Fix httplog not logging watch duration in separate goroutines
...
Signed-off-by: Eric Lin <exlin@google.com>
Kubernetes-commit: 06c7058115e623126884d05c54a30db511a9cb71
2024-06-21 10:03:31 +00:00
8321755755
kube-apiserver: promote WatchList feature to beta
...
Kubernetes-commit: 0b15903b35d83ca32833e81997b6257ee4d4f369
2024-06-19 11:48:20 +02:00
bc659f87fc
flowcontrol/request/list_work_estimator: sync shouldDelegateList
...
Kubernetes-commit: c259fe2342162a0c883845bfbdf8a838697fe085
2024-06-17 16:14:39 +02:00
cici37