Cici Huang
464de72d97
Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control
...
Kubernetes-commit: 0486e062618f2181857ae7b235dcd4b8be0964e4
2022-10-04 04:46:55 +00:00
Anish Ramasekar
525c6769a4
[KMS]: validate duplicate kms config name for v1 and v2 when reload=true
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 47f8c4bec63a2c4d6406cd615b41cd16f12be434
2022-11-07 20:16:04 +00:00
Anish Ramasekar
9adc12f501
[KMSv2]: add validation for duplicate kms config name
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 176919c4cfb0dc7ecc4987442c6d70b676cea156
2022-10-26 21:18:01 +00:00
Paweł Banaszewski
e21a3f224f
Added simple tests and changed lazyVerb String method to the same as httplog uses
...
Kubernetes-commit: b31339231314ae8a72481cfda45539e35097450a
2022-11-07 17:13:26 +00:00
Paweł Banaszewski
490f0b7444
Added Verb and Resource to request trace attributes
...
Kubernetes-commit: fad094cb70c26f962c49d615b1f48326aa25181d
2022-11-07 14:33:40 +00:00
Andrew Sy Kim
c4a89b8fc6
apiserver identity : use SHA256 hash in lease names
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
Kubernetes-commit: 5b3a9e2d758650ff2919b8343d2a34ba8ca84b2b
2022-11-05 13:52:07 -04:00
Monis Khan
e137a3da77
kms: add wiring to support automatic encryption config reload
...
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime. While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible. This single healthz check handles
checking all configured KMS providers. When reloading is enabled
but no KMS providers are configured, it is a no-op.
k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime. Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 22e540bc48d9bf698c4f381ccb56ed57dea0dae2
2022-11-02 01:08:42 -04:00
Wojciech Tyczyński
0ed87195b0
Standardize naming in generic storage tests
...
Kubernetes-commit: e49c225eb9e7c428aca97e8031089e7ad91ca7c4
2022-11-05 12:14:56 +01:00
Wojciech Tyczyński
82397f8421
Fix naming in storage test setup
...
Kubernetes-commit: 1bc95675b19c68807ed3ae45a24701fc5c2fb935
2022-11-04 15:37:47 +01:00
SataQiu
b683f5d16a
kube-apiserver: print supported media types on failure to find a serializer
...
Kubernetes-commit: 56b46e13c21b483ebc70bd6e151eea0a45b399e8
2022-11-05 23:03:23 +08:00
Nick Turner
e1dde980a4
Fix formatting of API server diagram
...
Kubernetes-commit: 02e3fbfeff5c3044321fc59f0427b64fbcfec70d
2022-11-06 16:41:11 -08:00
Wojciech Tyczyński
c51bbc3183
Parallelize tests cases in some storage tests
...
Kubernetes-commit: 6d85f947bf86d12e4459d31029c41d6049d40c0e
2022-11-04 10:23:40 +01:00
Wojciech Tyczyński
44c802979e
Reuse generic ListNonRecurisve test for cacher
...
Kubernetes-commit: e301306d89a69ff1a328a4ae3fa39a9e3deb022e
2022-11-03 14:58:34 +01:00
Wojciech Tyczyński
b312c7eb5b
Stop exporting storage testing utility functions
...
Kubernetes-commit: 37db332298fc6d14a798f610ce6049792299f0b1
2022-11-03 08:47:38 +01:00
Tim Hockin
b304fee293
Clarify a few validation messages
...
Kubernetes-commit: 6d4241fe5dc7341e3207b8ab96513ab1ddeae8a2
2022-08-12 12:33:41 -07:00
David Ashpole
0cf3af5b9f
add otel tracing to latency filters
...
Kubernetes-commit: ed1610ad15f91b72017c5d69dc4f7d59a17c270f
2022-10-20 16:17:02 +00:00
Andrew Sy Kim
0a5efb307f
apiserver identity: use persistent identity format based on hostname
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
Kubernetes-commit: 21507902ba123c5c60eaa73436b95c4ae9b75908
2022-10-24 11:24:26 -04:00
Mike Spreitzer
084f1abd96
apiserver: define metrics for API Priority and Fairness borrowing
...
Kubernetes-commit: ba5ec78916ae5fe9e400a298da6879515029a12f
2022-10-31 15:09:39 -07:00
Mike Spreitzer
17134f6412
apiserver: remove redundant field from seatDemandStats
...
Kubernetes-commit: 4ad1c0f9cb8aa54efa127975aaa9d5bd3080e8d0
2022-11-03 10:41:50 -07:00
kidddddddddddddddddddddd
0547548a94
strict decode policy first
...
Kubernetes-commit: 5dcfaae7b90c4838e488eace376e05c9e807f23b
2022-11-02 16:17:52 +08:00
Wojciech Tyczyński
a47bbc6347
Minor cleanup in etcd3 tests
...
Kubernetes-commit: 83399ccfb8822cc31a6a3a66e8352591d88feaa8
2022-10-31 18:02:40 +01:00
Wojciech Tyczyński
a24d8963d1
Refactor remaining etcd3 tests to make them generic
...
Kubernetes-commit: e6ddb69e6fd06bf9a02fa731f12472f3c375762d
2022-10-31 18:02:19 +01:00
Wojciech Tyczyński
c38aa93533
Reuse generic TestGet in cache tests.
...
Kubernetes-commit: 75a1ef87b32213a7d3d1c2027dd515e4f74c1777
2022-10-27 16:00:30 +02:00
David Ashpole
0b88ce8f83
shut down tracerprovider when stopping the kube-apiserver
...
Kubernetes-commit: 2342721c157e8a715747187b44af2bd9bacd432f
2022-11-02 13:15:27 +00:00
Joseph Anttila Hall
12ce665c8d
egress_selector.go: Add a dial starts metric.
...
Emit this metric before any potentially blocking dial work.
Kubernetes-commit: f89bcffd55e205c610746c418062a305456cf29f
2022-10-31 12:59:26 -07:00
Wojciech Tyczyński
07db92af49
Fix setting resource version on deletion
...
Kubernetes-commit: bbcf5e38776f2b18026539a0fbcf3aa505386c1f
2022-10-26 21:37:19 +02:00
Marcel Zięba
6887520e10
Fix APF width estimate for creating service account's token
...
Kubernetes-commit: 2f7b4ca6851aa3d479c9af3c14a168b4974f2fee
2022-10-18 12:27:50 +00:00
Max Smythe
95fe36122a
Fix canonical imports
...
Signed-off-by: Max Smythe <smythe@google.com>
Kubernetes-commit: 003fbae25bf4c76b8b71d56206b51e1ee6e80812
2022-10-25 20:40:27 -07:00
Max Smythe
73e7490c2b
Make interface for webhook predicates more specific
...
Signed-off-by: Max Smythe <smythe@google.com>
Kubernetes-commit: 00ebe0bf623295dc589e43e8c299003f9e939f65
2022-10-25 16:34:06 -07:00
Max Smythe
3dc8d71b8a
Move webhook scoping rules into a predicates directory
...
Signed-off-by: Max Smythe <smythe@google.com>
Kubernetes-commit: b4ee0c0574932b99a9e877c84d880a5f00fdd3cc
2022-10-25 16:28:16 -07:00
Wojciech Tyczyński
499bbb88dc
Refactor WatchError test to make it generic
...
Kubernetes-commit: b3f9272d57a71a9c50b38754b7309ddf68adb93f
2022-10-28 11:35:58 +02:00
Kermit Alexander II
9129598e13
Add metrics for validation admission control.
...
Kubernetes-commit: ac324cb30c938a6e8eb533feaba4bb4503416e26
2022-10-11 20:04:13 +00:00
Mike Spreitzer
413be63b46
Add instrumentation for seat borrowing
...
Kubernetes-commit: 9b684579e230f105bcaa743f06bc07c39af703df
2022-10-20 15:21:09 -04:00
Maciej Borsz
49647f7386
Add benchmark for caching object
...
Kubernetes-commit: e577a77eb8160a5f70668a5d538ab5a1498ba0db
2022-10-25 12:57:24 +00:00
Wojciech Tyczyński
3f5a3e0ae0
Refactor etcd3 list consistency test
...
Kubernetes-commit: cd5da36c92f3ed52debc22c39a7cd9d369b0eecd
2022-10-27 10:19:09 +02:00
Wojciech Tyczyński
c527f6432a
Minor cleanup of etcd3 tests
...
Kubernetes-commit: bbe1ebc82aa019118c91e8447517f91b9d036c1e
2022-10-27 09:48:06 +02:00
Wojciech Tyczyński
f6802e074e
Refactor storage tests using compaction
...
Kubernetes-commit: b02f172cbdf7e824d13a6a9c3a9b9fe4f3f92afb
2022-10-26 20:47:19 +02:00
Wojciech Tyczyński
834cf0fc14
Refactor compaction in etcd3 tests
...
Kubernetes-commit: 7da7ddd779f9ea835f0c57deae05e050c543066b
2022-10-26 16:34:28 +02:00
David Ashpole
aa161f2fc0
migrate apiserver utiltrace usage to component-base/tracing
...
Kubernetes-commit: de26b9023f2872c5cd7e15fad5dd5ab649222c13
2022-10-20 18:15:38 +00:00
Tim Allclair
4b329cff47
Rename WithAuditID to WithAuditInit
...
Kubernetes-commit: ea28a21a6790d40c1fe540c64a296c8f0db17c65
2022-07-12 14:46:27 -07:00
Tim Allclair
bd7c7f52c2
Consolidate AuditContext
...
Kubernetes-commit: f1d684b7b60b39b7dc1eb4156307c593f0ba74e1
2022-07-12 11:53:57 -07:00
Wojciech Tyczyński
3afe8ebf5f
Minor cleanup of etcd3 tests
...
Kubernetes-commit: e04fe81dfcff189ef5162b9b26b55760f613a010
2022-10-26 13:05:49 +02:00
Wojciech Tyczyński
73a664638b
Refactor pagination tests
...
Kubernetes-commit: 6c8ce894e18a2e2cae20edd2f6e79db9407ebce3
2022-10-26 12:18:21 +02:00
Wojciech Tyczyński
dec6f492e8
Refactor GetReads
...
Kubernetes-commit: 8472e1bc13b0fa8aa3a67e5fcf2f13bfd7974cd3
2022-10-26 11:30:32 +02:00
Wojciech Tyczyński
5a8fdf8480
Move GuaranteedUpdateChecksData test to generic package
...
Kubernetes-commit: afc5ded83931cdb8a2643486d6834eb8d9b04588
2022-10-25 14:31:20 +02:00
Wojciech Tyczyński
d9a3685d6f
Minor cleanup of storage tests
...
Kubernetes-commit: 5344bc5e1b7e50d5ff359c714d522b421b28bd12
2022-10-25 14:09:36 +02:00
Wojciech Tyczyński
1960fa837f
Move GuaranteedUpdate test to generic test package
...
Kubernetes-commit: 012676acc3dd2b235bd601e4105294d2715f155b
2022-10-25 14:04:00 +02:00
Han Kang
e9f139f163
swap name for storage metric for underlying storage db
...
Change-Id: Ic7cd9bf5ef29d9c51a728ef37c94d77172fbf678
Kubernetes-commit: 3a2d1bab26bfb9e7d887207dec0c51645c7017fe
2022-10-24 15:27:05 -04:00
Shihang Zhang
7b63db277d
track legacy service account tokens
...
Kubernetes-commit: 569cd70a52359a294a608fb256693445a89a9dab
2022-03-21 14:21:41 -07:00
Mike Spreitzer
b6fd67c2a7
Introduce constants for the two parameters of seat borrowing
...
Kubernetes-commit: 8d826ee9f8e19f499f5c0a982bb256ae268a9010
2022-10-20 00:47:01 -04:00