a5356f425d
pluralize error metric name
...
Change-Id: I12eb94f41ded20ed5a16332ada13a7b34f75de18
Kubernetes-commit: 5e652fe12605027509870d5d7f821390f20b1cee
2019-10-08 15:49:12 -07:00
344ca1b3a8
increase auth cache size
...
Kubernetes-commit: 236112c6af9b22b02e35914fe8fbbdbfe856f975
2019-10-08 14:27:28 -07:00
168addcfe5
Add an authn cache benchmark
...
Kubernetes-commit: 420a44da0138cb64fa5d4e9fab79d8be3527ffd8
2019-10-08 13:34:51 -07:00
40fefa1b37
Plumb dynamic SNI certificates
...
We create and use a dynamic certificate provider for the SNI serving
certificates. Currently we only use static serving certificate
providers, so the files are not reloaded, but we should be able to move
to a provider that is able to reload later on.
Kubernetes-commit: 84bc6b151d0726db0c737443874577f044e0e9c8
2019-10-08 19:03:56 +01:00
c29386a605
Merge pull request #83527 from odinuge/runc-rc9
...
Bump dependency opencontainers/runc@v1.0.0-rc9
Kubernetes-commit: 3f8f0a32fa980d977a8aa05c229097cddf5e6e38
2019-10-08 12:02:33 +00:00
1e8e896aec
Merge pull request #83121 from sftim/20190925_fix_apiserver_help_readyz_typo
...
Fix typo in API server help for shutdown-delay-duration
Kubernetes-commit: 0956acbed17fb71e76e3fbde89f2da9f8ec8b603
2019-10-08 00:01:31 +00:00
5035dae3d5
Replace deprecated methods in the logic involved in the construction of gRPC connection to kms-plugin.
...
Kubernetes-commit: e50c264c35a32200febde3b10838b2ef2f986c39
2019-10-07 15:57:47 -07:00
84d21cfff4
wire up a means to dynamically reload ca bundles for kube-apiserver
...
Kubernetes-commit: 6beb96261e29754f2b7d0e44829eb6d15422cebf
2019-10-07 14:06:42 -04:00
8da4640a3d
Plumb dynamic serving certificates
...
We create and use a dynamic certificate provider for the main apiserver
serving certificates: SNI will be handled separately later. Currently we
only use static serving certificate providers, so the files are not
reloaded, but we should be able to move to a provider that is able to
reload later on.
Kubernetes-commit: 6f89f1027488aeba4af0786988c2fd2ace9a6f1d
2019-10-07 18:49:24 +01:00
f0a6fac13c
add dynamic cabundle from file
...
Kubernetes-commit: b0c272e1fb6782ca0b755294c6f9046995769553
2019-10-07 12:58:15 -04:00
1d2083ab95
Bump dependency github.com/coreos/go-systemd@v19 (95778df)
...
Kubernetes-commit: c07408380de0e430fd94df1b1d03b672b1801b6e
2019-10-05 14:28:46 +02:00
279a76350f
Merge pull request #81816 from jennybuckley/apply-cap-managers
...
[server-side apply] Cap the number of managedFields entries for updates at 10
Kubernetes-commit: a8e8e54f7a6e3267c7c47bb2037a2dc0ffce8976
2019-10-05 12:05:00 +00:00
85b7c497d8
Merge pull request #82176 from pohly/ginkgo-stack-fix
...
Ginkgo update + stack fix
Kubernetes-commit: b140b431073ae4d84ce9ef5e01a1f27058178ead
2019-10-05 12:04:58 +00:00
c060079d41
Merge pull request #83500 from deads2k/tls-config
...
refactor tlsConfig creation for secure serving
Kubernetes-commit: c4383c9aa17217f011fc508dd598f720c44f7765
2019-10-05 08:01:29 +00:00
9f20cfae34
Merge pull request #82662 from jpbetz/api-machinery-jpbetz-reviewer
...
Add jpbetz as reviewer of api-machinery code
Kubernetes-commit: 108e8a6a4a035623456002a82ffa5f360a3b9854
2019-10-05 04:01:29 +00:00
b1066a01e9
Merge pull request #83452 from wojtek-t/avoid_unnecessary_identifier_computations
...
Avoid unnecessary identifier computations
Kubernetes-commit: 386a27fd447acbd18fc6169afb66bba4d4959f1c
2019-10-05 00:01:47 +00:00
dd282eb3a3
Merge pull request #82371 from deads2k/cert-reload-delegated
...
add ability to authenticators for dynamic update of certs for delegated authn
Kubernetes-commit: 7ac65858bb9fdf41bb0cf3b257a4943ea8457ed6
2019-10-04 16:05:24 +00:00
11d75d5283
refactor tlsConfig creation for secure serving
...
Kubernetes-commit: e7b41d08270f0b8035b423050e96c7affd4bd8e1
2019-10-04 09:52:49 -04:00
695d42bf49
wire dynamic tlsconfig up to apiserver
...
Kubernetes-commit: abddbd87cdcf69053e9fc6e752ade7d92c6b9fd7
2019-10-04 08:37:26 -04:00
703545a3db
add the ability for dynamic header names in delegated authentication
...
Kubernetes-commit: 58256346693717fd12f121f0cf74fe1e003edb0f
2019-10-03 12:56:42 -04:00
32db273e32
Merge pull request #82077 from deads2k/poststart
...
add ability to pre-configure poststarthooks for apiservers
Kubernetes-commit: 5fbda60c149e63cc13d51e5dbf94581c3c320b25
2019-10-03 16:01:24 +00:00
ebc87b1ba1
Cache encoder for auditlog backend
...
Kubernetes-commit: 3ad42fb8ca6398ae17882a2b53cf3b65ba9fe1e7
2019-10-03 16:38:47 +02:00
4f72a4b585
Merge pull request #72170 from jpbetz/stale-read-2
...
Make resourceVersion parameter semantics consistent across all storage.Interface implementations
Kubernetes-commit: 54d49bd785ba6fe8eb651e8a73ce3580f8c0ec41
2019-10-03 08:02:02 +00:00
fc290d8208
Merge pull request #83261 from liggitt/yaml-limits
...
limit yaml/json decode size
Kubernetes-commit: 4afcba42bed2bb7c36e5209a90d87343f32a0efa
2019-10-03 04:06:07 +00:00
4a680138c0
Fix double counting issue for request metrics on timeout.
...
Currently we record request metrics during the normal request flow and
we also manually invoke `Record` in the timeout handler to record
timeouts. This means that we effectively double count whenever we
timeout. This PR renames the `Record` function to `RecordRequestError`
to more accurately reflect the intended side-effect of the function
call.
Change-Id: Ie37fd0c1e501bd525640a434433d364a5fd6dde2
Kubernetes-commit: 4c6e7247878477a1f2efc26df7f141258010374f
2019-10-02 15:04:29 -07:00
4bf0fda364
Merge pull request #83333 from lavalamp/unbufferedchannel
...
Don't leak a go routine on panic
Kubernetes-commit: acd9141e76d3453c08700f22b24bdc320718d5dc
2019-10-02 00:01:25 +00:00
2d792f34c6
Merge pull request #82105 from logicalhan/admission-test
...
Explicitly handle returned error values in admission metrics_test
Kubernetes-commit: 5219ad7be209b31cdfdae2eda1cd435aff4a3cd2
2019-10-01 20:05:01 +00:00
99a0cf54d3
Merge pull request #81914 from wojtek-t/cache_serializations_across_watchers
...
Cache serializations across watchers
Kubernetes-commit: 7878160a9747c0c2d4f2cc16a7401407253d578b
2019-10-01 20:05:00 +00:00
e9c3082263
vendor: update gomega to v1.7.0
...
Updated to keep both Ginkgo and Gomega at the latest releases.
Kubernetes-commit: 27b9a9c2381fab195f2db1bc709e46d0b83fc729
2019-10-01 20:25:05 +02:00
92d2515aca
Don't leak a go routine on panic
...
Kubernetes-commit: a4ae7b9081f3ddedd0d588688215ddbe26274f75
2019-09-30 11:34:15 -07:00
586fbfe74a
Merge pull request #72535 from tallclair/content-type
...
Always set content-type & nosniff
Kubernetes-commit: 74d282266251fcfb64784b42298ef327460e029f
2019-09-28 04:01:10 +00:00
00a7b50aba
Merge pull request #83131 from apelisse/remove-extra-yaml-parsing
...
Apply currently parses the yaml object 3 times, please remove 2
Kubernetes-commit: fe29e0f444142cf9d66768cfac77acfba24db07d
2019-09-28 00:01:06 +00:00
f7fbf2eee4
Limit YAML/JSON decode size
...
Kubernetes-commit: 8ef4566cefebf49f9a806a36df2105c9149785a1
2019-09-27 16:36:48 -04:00
3653eff0ed
bump gopkg.in/yaml.v2 v2.2.4
...
Kubernetes-commit: 8aeffa8716dcf986544df74444264ef639d61a7a
2019-10-02 14:46:08 -04:00
8215c258ed
Merge pull request #83071 from chendotjs/bytes-equal
...
replace bytes.Compare() with bytes.Equal()
Kubernetes-commit: cd95e57c71a194a80064b00a44e42a222003dac8
2019-09-27 20:08:43 +00:00
b054ff44ee
custom retry strategy in GenericWebhook
...
Kubernetes-commit: 4877b0b7b50bdc3eaaadd3f968fd846c1396b708
2019-09-27 13:04:10 +03:00
4f9778fb9d
replace bytes.Compare() with bytes.Equal()
...
Kubernetes-commit: 66be69bb0e7fd147be650385d272ae14ee2857c8
2019-09-27 10:06:50 +08:00
dd401ce564
Merge pull request #82847 from apelisse/improve-managed-fields
...
Improve fieldmanager tests and benchmarks
Kubernetes-commit: 112ed56f1a5d6596bb297c599030b849cedfa6eb
2019-09-27 00:02:04 +00:00
72d976a445
Cap the number of managedFields entries for updates at 10
...
Kubernetes-commit: 61b19c729892a150b61dde19359f6fb19e8d61f1
2019-09-26 12:53:28 -07:00
b950ddfb46
Promote WatchBookmarks feature to GA
...
Kubernetes-commit: a22a4ed3c54d6e30edc972f501fbfddc789bea9b
2019-09-26 15:29:52 +02:00
1890e0832b
Merge pull request #80465 from answer1991/remove-apiserver-loopback-client-qps-limit
...
remove apiserver loopback client QPS limit
Kubernetes-commit: 45f7f70479424a04029e4c437cff1d54385d6c39
2019-09-26 04:00:45 +00:00
06edc56075
Merge pull request #83113 from yastij/bump-utils
...
bump k8s.io/utils to pickup ipallocator changes
Kubernetes-commit: 28bcf55accc52dfd4fde5f603a5784c40c485528
2019-09-26 00:04:23 +00:00
9f67cf5e4c
Merge pull request #82409 from RainbowMango/pr_add_authentication_overall_latency_metrics
...
Add authentication overall latency metrics
Kubernetes-commit: 07025a5d9ed1e697e765f725b5e9023199c41ad1
2019-09-25 20:04:06 +00:00
da05cd4ad6
Merge pull request #83064 from liggitt/propagate-context
...
Propagate context to remote authorize/authenticate webhook calls
Kubernetes-commit: 327f53ba57aeaa4b7e7c20b1ef98c42b26b7ea7f
2019-09-25 20:04:04 +00:00
3e0b6a7493
Apply current parses the yaml object 3 times
...
This is super expensive and not needed at all since we don't have to
reparse the entire object. Remove all allocations but the first one.
Kubernetes-commit: 31c644a1e79c685b52683ed1e84964186a37f3ff
2019-09-25 12:38:38 -07:00
9e2288c881
Fix typo
...
Kubernetes-commit: bbccdcd8531a6377c1fe2937aef24f61caef43c4
2019-09-25 18:02:40 +01:00
389b7581fd
bump k8s.io/utils to pickup ipallocator changes
...
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
Kubernetes-commit: 16fe4d76271f6330c2837462a40edf95dde95942
2019-09-25 16:15:30 +02:00
f4d60f9c20
Plumb context to webhook calls
...
Kubernetes-commit: b78edd86b8766b96278bcb46301f751d9e6e3631
2019-09-24 11:07:33 -04:00
0ca78287c0
Propagate context to ExponentialBackoff
...
Kubernetes-commit: 4c686ddc1c5f9bc5c28d711dd56551b1ac003faa
2019-09-24 09:43:04 -04:00
d1d66bda16
Propagate context to Authorize() calls
...
Kubernetes-commit: 92eb072989eba22236d034b56cc2bf159dfb4915
2019-09-24 10:06:32 -04:00
Han Kang