Commit Graph

1875 Commits

Author SHA1 Message Date
Kubernetes Publisher 69478b14d0 Merge pull request #123721 from enj/enj/i/authn_config_doc_nesting
Fix AuthenticationConfiguration docs around nested claims via CEL

Kubernetes-commit: 7a20def5ba9f8e399f21467a194e85f21cbd6a47
2024-03-05 21:36:06 +00:00
Kubernetes Publisher 8b057c4a4f Merge pull request #123561 from enj/enj/i/validate_jwt_sa_iss
Prevent conflicts between service account and jwt issuers

Kubernetes-commit: 26600b17abcbeadf7f759a66b9b5ea5d8cc7a62a
2024-03-05 05:11:51 +00:00
Kubernetes Publisher 6a1a5d2f87 Merge pull request #123532 from serathius/separate-rpc
Move cacher watch to separate rpc preventing starvation

Kubernetes-commit: 5b6d8a42931fd0eb7ba762cd46ad1655e46018a5
2024-03-05 05:11:39 +00:00
Kubernetes Publisher 70e2d9115d Merge pull request #123413 from seans3/tunneling-spdy-websockets
PortForward: Tunnel SPDY through WebSockets

Kubernetes-commit: f745503112e06d6ff199e929d536c6a29825c01a
2024-03-05 05:11:34 +00:00
Kubernetes Publisher 7092a3d47e Merge pull request #123660 from xigang/cacher/watch
cleanup: if triggerValue has a value fast break

Kubernetes-commit: a4eaf6e1200fa6f2050c71ef7a7e8ab27a8e4947
2024-03-04 13:20:46 +00:00
Sean Sullivan f4bc37078e portforward: tunnel spdy through websockets
Kubernetes-commit: 8b447d8c97e8823b4308eb91cf7d75693e867c61
2024-02-21 08:56:07 +00:00
Kubernetes Publisher e92429c2ad Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric

Kubernetes-commit: 6d2ee131ebd13ce2ec2448300bb99f4ea942f1a9
2024-03-04 01:15:11 +00:00
Kubernetes Publisher 6f43b57386 Merge pull request #123640 from liggitt/authz-beta-config
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1

Kubernetes-commit: 8674282a054d3ae32e2e009dab6f8a0da3689828
2024-03-02 21:03:19 +00:00
Kubernetes Publisher cc00aa34b6 Merge pull request #123611 from ritazh/authz-mcmetrics
Add authz webhook matchcondition metrics

Kubernetes-commit: 3e1da218014b5a4e5c95ee79404093302104438b
2024-03-02 05:50:07 +00:00
Kubernetes Publisher 00ac59edfa Merge pull request #122975 from aramase/aramase/c/cleanup_authn_validation
cleanup structured authn/authz error logic

Kubernetes-commit: 4e8674f4e582c7d33143c42990d9409990d979a3
2024-03-02 05:50:03 +00:00
Kubernetes Publisher 0d2b79b3b6 Merge pull request #122882 from Jefftree/agg-discovery-v2-usage
Use Aggregated Discovery v2 types and promote to GA

Kubernetes-commit: 3f25211d69b4412e3e926835067918f86f629f3e
2024-03-02 01:40:36 +00:00
Kubernetes Publisher 4fa5c0c492 Merge pull request #123529 from thockin/go-workspaces
Go workspaces for k/k and k/staging/*

Kubernetes-commit: df366107d16aa2e2cdd620be41e592184f379da4
2024-03-01 21:19:35 +00:00
Kubernetes Publisher 57928aa72c Merge pull request #123560 from ivelichkovich/master
kep-3716 GA, remove feature gate

Kubernetes-commit: 6cc77a577e56c68e4fde81865e022e05e8e02538
2024-03-01 08:22:12 +00:00
Kubernetes Publisher e3922247fe Merge pull request #123458 from aramase/aramase/i/min_jwt_payload
add min valid jwt payload to API docs for structured authn config

Kubernetes-commit: 5cf4fbe524ca1479607a4880949a032064556f76
2024-03-01 00:40:31 +00:00
Tim Hockin 0f77d82857 Fix up go.mod files after reviews
Because of how the previous 100+ commits were done, so changes snuck
thru that properly belong in earlier commits but it's not really
possible to do that without a lot of effort.

We agreed it was OK to "spackle" these cracks with a final commit.

Kubernetes-commit: 21715e6bbd19c932576ff268843d8ead3edb05e4
2024-02-28 16:50:55 -08:00
Kubernetes Publisher 0a2e73e991 Merge pull request #123562 from jpbetz/bump-cel-go-0_17_8
Bump cel-go to v0.17.8 to pick up CEL estimated cost fix

Kubernetes-commit: fe8a12d264c88ac3cd0fb97d73c936de3fdd9788
2024-02-28 23:18:35 +00:00
Joe Betz 5957e27e51 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
Kubernetes-commit: d49949b64205ca68222d001806d127fc6d7489f9
2024-02-28 10:52:36 -05:00
Tim Hockin 27e765eeff Remove old gengo detritus
Kubernetes-commit: 812d5fff4011df4693dcdace516feec30ebff8ba
2024-02-26 23:31:41 -08:00
Tim Hockin 510f374e58 Re-vendor latest kube-openapi and gengo/v2
./hack/pin-dependency.sh k8s.io/kube-openapi latest
./hack/pin-dependency.sh k8s.io/gengo/v2 latest
./hack/update-vendor.sh

Kubernetes-commit: 6f2f3735e04df5e4822176a2784069634c3c74a3
2024-02-26 17:02:22 -08:00
Kubernetes Publisher 3e22226ac6 Merge pull request #123281 from seans3/remote-command-websocket-beta
RemoteCommand over WebSockets to Beta

Kubernetes-commit: f7ca532472f035db2aedc8a1f86639dfd1dc596f
2024-02-28 12:29:10 +00:00
Kubernetes Publisher f663919323 Merge pull request #123538 from jiahuif-forks/fix/cel/mutation-library-map-support
CEL mutation library: add support for map

Kubernetes-commit: 286cdad32d7967a5f3b84a8924448ea914d44c00
2024-02-28 12:29:05 +00:00
Kubernetes Publisher e79edc2673 Merge pull request #123540 from enj/enj/i/jwt_iss
jwt: strictly support compact serialization only

Kubernetes-commit: 236f1b0f6b4cbb7e372a72d181c6285bdaf74873
2024-02-28 00:35:48 +00:00
Kubernetes Publisher fe1489716d Merge pull request #123348 from hoskeri/update-go-x-crypto-19
Update x/crypto to 0.19.

Kubernetes-commit: 9a9028983806af26e7b48223f3a92922e94725df
2024-02-21 20:38:58 +00:00
Kubernetes Publisher 290f0e4aff Merge pull request #123392 from thockin/depreciate
Cleanup: s/depreciated/deprecated/g

Kubernetes-commit: 11785bb815d58eb553be3a1fa305464c35d860cc
2024-02-21 12:41:17 +00:00
Kubernetes Publisher d23525a070 Merge pull request #123342 from logicalhan/storage-metric
bump the stability level of apiserver_storage_size_bytes to STABLE

Kubernetes-commit: e613eb33885171a0584aa58cfad9e7c157d23326
2024-02-21 12:41:14 +00:00
Abhijit Hoskeri 759c2142c7 Update x/crypto to 0.19.
Main reason is to pick up updated CA roots.

Full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.19.0

Kubernetes-commit: d3a0e296defbb0b55e591e273004e79e7ebfb1fd
2024-02-16 20:18:14 +00:00
Kubernetes Publisher f68fe095ce Merge pull request #120902 from linxiulei/watch_stack
Add handler to run execution in separate goroutine

Kubernetes-commit: 6c046796175de51e33290804a7665db5fa752a80
2024-02-16 12:34:38 +00:00
Kubernetes Publisher 2c41261361 Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
move OWNERS from validating to all new parent policy folder

Kubernetes-commit: 8a57e3cc2b57ff6889643a0900324996c52eaac0
2024-02-15 20:34:51 +00:00
Kubernetes Publisher 53b26606c5 Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
Add integration test for multiple audience in structured authn

Kubernetes-commit: 50bf3a2060ea798600af1a4c125e0b62d08e9680
2024-02-15 16:34:53 +00:00
Kubernetes Publisher f980dbe8f0 Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0
Bump github.com/fxamacker/cbor/v2 to v2.6.0.

Kubernetes-commit: e305e773bbfe8c5bdf9c57881a875e168b004b8c
2024-02-15 01:39:12 +00:00
Kubernetes Publisher 503dabd7e9 Merge pull request #123179 from aramase/aramase/f/encryption_config_reload_metric
Add `apiserver_encryption_config_controller_automatic_reloads_total` metric and deprecate success/failure counter

Kubernetes-commit: 7abb063b42c7770628ee2b69e25370cf6334882a
2024-02-13 17:30:58 +00:00
Ben Luddy 137045a592 Bump github.com/fxamacker/cbor/v2 to v2.6.0.
Kubernetes-commit: aac43dc96f2b679f0ab030fd3512c7e03b0f2df4
2024-02-12 15:46:17 -05:00
Kubernetes Publisher 9d6ad00bf4 Merge pull request #121486 from benluddy/cbor-stub
KEP-4222: Add stub CBOR serializer.

Kubernetes-commit: 48228bf9dbac308f43abd59a53fdc069fbddee0f
2024-02-10 01:48:31 +00:00
José Carlos Chávez f099bff723 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642)
* chore: drops update vanity imports from script.

* chore: changes copyright year to 2024.

* chore: makes lint happy.

Kubernetes-commit: 6d6398ef9266abce3518a4c9a3d4e4d8feeffdc1
2024-02-08 14:10:27 +00:00
Kubernetes Publisher 7b91578b43 Merge pull request #122557 from liangyuanpeng/anp_0.29
Bump konnectivity-client to v0.29.0

Kubernetes-commit: 6972fd7d0be4f85b98737aaf8c2e105b42c0de6e
2024-02-05 17:30:47 +00:00
Kubernetes Publisher 0dd0e74922 Merge pull request #122886 from jiahuif-forks/feature/cel/mutating-library
[CEL Library] Unstructured Object Construction Support

Kubernetes-commit: 2363cdcc399cbf428210efb2c51575ddcad2b84a
2024-01-27 01:29:38 +00:00
Kubernetes Publisher 9d32b8c86a Merge pull request #120631 from liyuerich/ptrderef
Drop deprecated pointer package

Kubernetes-commit: fb1aea9a289e155fa21a57e9512acd61ed1b786b
2024-01-24 21:29:42 +00:00
Lan Liang d24017c506 Update konnectivity to 0.29.0
update konnectivity server&agent images to 0.29.0

  bump konnectivity deps to 0.29.0

Signed-off-by: Lan Liang <gcslyp@gmail.com>

Kubernetes-commit: d3b8eba690f8eeaf41b4fdf56c943004be501e4e
2024-01-02 05:52:55 +00:00
Ben Luddy f9391f6b1d Update vendoring to take new CBOR library dependency.
Kubernetes-commit: 09a1abda998fc37e2e29a120a82be7c6271656e0
2023-10-17 16:51:52 -04:00
Kubernetes Publisher 888034e53f Merge pull request #122518 from cici37/celEnv29
Update env version, add cost for previous added func, add tests, etc.

Kubernetes-commit: 31197eba75040cb0b88f488caf18a4c87182abed
2024-01-23 21:29:53 +00:00
Kubernetes Publisher 338910dbd7 Merge pull request #122873 from p0lyn0mial/upstream-reflector-usewatchlist-pointer
client-go/reflector: make UseWatchList a pointer

Kubernetes-commit: 445869a59bdbd1c587b72b52c5da94c1d1c316a1
2024-01-22 21:32:29 +00:00
Kubernetes Publisher 9f9c32c4ac Merge pull request #122842 from pohly/klog-update
dependencies: klog v2.120.1

Kubernetes-commit: b27b56a46c4c1e6be0dc2b1a0230d86223a7e903
2024-01-18 21:34:52 +00:00
Kubernetes Publisher da46024a72 Merge pull request #122839 from pohly/ginkgo-gomega-update
dependencies: ginkgo v2.15.0, gomega v1.31.0

Kubernetes-commit: c82da711b0e2184f851675aac4596bbd0f74763f
2024-01-18 21:34:51 +00:00
Patrick Ohly 3a9c95f3b6 dependencies: klog v2.120.1
Kubernetes-commit: e2222f1e304831cbbc57b61afa373612297055fb
2024-01-18 16:58:40 +01:00
Patrick Ohly 78fd4a492b dependencies: ginkgo v2.15.0, gomega v1.31.0
The main reason for updating is support for reporting the cause of context
cancellation: Ginkgo provides that information when canceling a context and
Gomega polling code includes that when generating a failure message.

Kubernetes-commit: 18f0af1f000f95749ca1ea075d62ca89e86bb7da
2024-01-18 12:45:55 +01:00
Vandit Singh ff6a2dc722 Negative index regression test for json-patch (#122625)
* add testcase with negative index

* exercise successful negative index patching

* use different values for testing

Co-authored-by: Chris Bandy <bandy.chris@gmail.com>

---------

Co-authored-by: Chris Bandy <bandy.chris@gmail.com>

Kubernetes-commit: 83ff8a2f49f820fb355b24c65b8629710dca8a54
2024-01-18 09:31:12 +00:00
Kubernetes Publisher 496d7e7b8b Merge pull request #122701 from carlory/fix-quota
Fix resource deletion failure caused by quota calculation error when InPlacePodVerticalScaling is turned on

Kubernetes-commit: 5ad2c12a6951deffe5394abc48c65417553dd214
2024-01-18 09:31:10 +00:00
Kubernetes Publisher 8ad2e288d6 Merge pull request #122706 from pacoxu/klog-upgrade
bump klog to  v2.120.0

Kubernetes-commit: 823ecb58f68fbe0a4b37b32e11e75c6f2e0f467c
2024-01-11 21:35:26 +00:00
Paco Xu 3574aabfdd bump klog to v2.120.0
Kubernetes-commit: 3c86d21316c25b52a1cf3f9703a0bc2cbe97131c
2024-01-11 17:35:07 +08:00
Kubernetes Publisher 303f36b718 Merge pull request #122689 from enj/enj/r/ec_hash_cleanup
Clean up encryption config reading and hashing logic

Kubernetes-commit: 741fd84d1570caecc533152d3c6c9da6f5de8c4e
2024-01-10 21:34:48 +00:00
Kubernetes Publisher 85936b5b6e Merge pull request #121602 from bzsuni/cleanup/goleak
Update goleak from v1.2.1 to v1.3.0

Kubernetes-commit: c1c68acf29247479c870116d6539c49687ddefdc
2024-01-02 21:28:45 +00:00
bzsuni 86207adac1 Update goleak from v1.2.1 to v1.3.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>

Kubernetes-commit: 5405dd0f9b801a94f0e74c140231dc0ec7a85499
2024-01-03 00:20:48 +08:00
Kubernetes Publisher a6c31ce504 Merge pull request #122412 from MadhavJivrajani/bump-go-tools
[go1.22] .*: bump golang.org/x/tools to v0.16.1

Kubernetes-commit: 8a4403a9e5127d2ec3f596c4ce75663e5392cb18
2023-12-20 17:55:00 +00:00
Madhav Jivrajani 4aaa1a6f81 .*: bump golang.org/x/tools to v0.16.1
Bumping tools to include the fix for a nil pointer
deref error in go/types. See golang/go#64812
for more details.

This fix is needed for when we bump to go1.22.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: a8da4202c0ac785d57b545e6e310fd754888b50e
2023-12-20 14:31:31 +05:30
Kubernetes Publisher f53b05f4c1 Merge pull request #122395 from pohly/ginkgo-gomega-update
dependencies: gomega v1.30.0 + ginkgo v2.13.2

Kubernetes-commit: 7897910469aa091ebf6576740d055a7137fa147c
2023-12-20 09:35:14 +00:00
Patrick Ohly 7b55e6215d dependencies: gomega v1.30.0 + ginkgo v2.13.2
The new gomega.BeTrueBecause and gomega.BeFalseBecause are going to be useful
for https://github.com/kubernetes/kubernetes/issues/105678.

Kubernetes-commit: c8f9ebfb72b6569b4e2ec9733f6998afc6602135
2023-12-19 16:16:02 +01:00
Kubernetes Publisher 8635466196 Merge pull request #122310 from weilaaa/use_buildin_max_min_instead
use build-in max and min func to instead of k8s.io/utils/integer funcs

Kubernetes-commit: 2b5c0c281d7d3b75ed7df683f09339147c4a17e9
2023-12-18 21:31:53 +00:00
Kubernetes Publisher 0492dacbde Merge pull request #121684 from jmhbnz/fix-etcd-repo
Fix etcd repository path to prevent redirects

Kubernetes-commit: b46e436e18b9318e0a7e3ca971c5b89df8d2f087
2023-12-18 13:29:45 +00:00
Kubernetes Publisher 748f6de880 Merge pull request #121912 from JoelSpeed/cel-ip-addr
CEL library extensions for IP Address and CIDR network parsing

Kubernetes-commit: 76cd7521aa6216fb069dbd2d1f0f2c7a37fba32f
2023-12-16 13:29:47 +00:00
Kubernetes Publisher 3fcf3290fc Merge pull request #121773 from pohly/zapr-update
dependencies: zapr v1.3.0, zap v1.26.0

Kubernetes-commit: e12d4b63d64a1dd3497cb8063efb2588c04abdc1
2023-12-14 21:35:30 +00:00
Kubernetes Publisher fe55dafb2d Merge pull request #122027 from wojtek-t/sort_outside_critical_loop
Don't sort in the critical section

Kubernetes-commit: 2a1c78e5011445db21e7bf7481ed93d5aaa9054e
2023-12-14 13:35:47 +00:00
Kubernetes Publisher e60c36451c Merge pull request #122115 from wojtek-t/cleanup_watch_handler
Minor cleanups in watch handler toward unification between http and websockets

Kubernetes-commit: 3c8241f4f32b55ab319cf09b38c201efedb2547d
2023-12-14 09:38:29 +00:00
Kubernetes Publisher 7b4812e806 Merge pull request #121914 from siyuanfoundation/health-rf
k8s.io/apiserver: refactor GenericAPIServer healthz code.

Kubernetes-commit: 888b99f6dcbe0c966eb3fa938d1af625e4ee6c7c
2023-12-14 01:33:20 +00:00
Kubernetes Publisher 6e1838f4b1 Merge pull request #121906 from ahutsunshine/namespace-indexer
support namespace indexer for namespaced resources like pods

Kubernetes-commit: 2eb2a62e154d806af59cae9084e3846e7fc215d5
2023-12-14 01:33:19 +00:00
Kubernetes Publisher 627bf4c0ce Merge pull request #121815 from HirazawaUi/decode-respect-timeout-context
make the decode function respect the timeout context

Kubernetes-commit: 91655922197276ced2e4e36114bb753e384dbd83
2023-12-14 01:33:18 +00:00
Kubernetes Publisher 36a3042e29 Merge pull request #121759 from thockin/fix_api_violations
Fix "list_type_missing" API violations in meta/v1

Kubernetes-commit: 8a22571ebb7628b2dd2c2faf453293040b7efaef
2023-12-14 01:33:16 +00:00
Kubernetes Publisher 00f757bfc4 Merge pull request #121624 from jiahuif-forks/fix/cel/lazy-map-context-eval
CEL lazy map: use context for lazy evaluation.

Kubernetes-commit: f7def00e6635366847a3a121881991b9cb341692
2023-12-14 01:33:14 +00:00
Tim Hockin 9863f526b5 Re-vendor k8s.io/kube-openapi
./hack/pin-dependency.sh k8s.io/kube-openapi 778a5567bc1edaed92a4de9c07f90199c67953fa

./hack/update-vendor.sh

Kubernetes-commit: 1f55357d9937f076f532a2c1aa104593b9f6c49a
2023-11-13 10:59:57 -08:00
Kubernetes Publisher 59c9103d07 Merge pull request #121808 from cpanato/go-update-main
[go] Bump images, dependencies and versions to go 1.21.4

Kubernetes-commit: 6ba7258a0f3f73629560fc30016b2e35c8e7ae9c
2023-11-13 17:32:39 +00:00
cpanato 7bd75806d6 update go.mod
Signed-off-by: cpanato <ctadeu@gmail.com>

Kubernetes-commit: 9e5b8402bb95eb82541099e77c3a8b0ccd31297f
2023-11-08 08:46:15 -06:00
Kubernetes Publisher 10c70bebf9 Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed
fix test store delete collection function failed

Kubernetes-commit: f927d5b385c9d6f8870cf9ae6c38cb96d54c23df
2023-11-07 21:25:39 +00:00
Patrick Ohly c86c46c279 dependencies: zapr v1.3.0, zap v1.26.0
The new zapr adds support for slog. The new zap has various improvements. It no
longer depends on go.uber.org/atomic which enables dropping it from the
Kubernetes dependencies. github.com/pkg/errors is also no longer needed.

Kubernetes-commit: 166b71757b95de9a9898fcca79d60518e66a6813
2023-11-07 11:31:45 +01:00
Kubernetes Publisher b20a2d3074 Merge pull request #121705 from liggitt/authz-config-webhook-test
Add multi-webhook integration test

Kubernetes-commit: fb9c94b3a50aa9f95a6153fb04d844decedbcf33
2023-11-03 01:25:01 +00:00
Kubernetes Publisher 798e645af6 Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
bump etcd newest version: v3.5.10

Kubernetes-commit: 974735854b7fdfba2d0a67dbc15457c259e40aff
2023-11-01 17:29:14 +00:00
Kubernetes Publisher d0f0eebe8c Merge pull request #121552 from pohly/klog-update
klog v2.110.1 update

Kubernetes-commit: da61382068671c3e16782a9b45e7f2159ac0feb9
2023-11-01 17:29:12 +00:00
guangli.bao 09fd766b6a bump to newest etcd: v3.5.10
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>

Kubernetes-commit: bc1df9e7dab085b0d6301ac96f6b7e3ff90836ee
2023-11-01 10:44:07 +08:00
Patrick Ohly e2d4a4f3e2 dependencies: klog v2.110.1
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378)

Kubernetes-commit: 878d037d3ba8fc4f11bf45a6cf5a66301ba89d82
2023-10-16 10:03:54 +02:00
Kubernetes Publisher c78de1fe6c Merge pull request #121575 from apelisse/update-smd
Update sigs.k8s.io/structured-merge-diff to v4.4.0

Kubernetes-commit: 593a17d3b6381bfdbf3bc3b36f56cad30d1531df
2023-11-01 01:32:06 +00:00
Kubernetes Publisher 31543f677a Merge pull request #121651 from jiahuif-forks/fix/cel/type-resolver-safe-guard
CEL type resolvers: avoid infinite recursion for type resolvers.

Kubernetes-commit: 3631efd85c1a772b518ad49fb20bb5b5454e6b90
2023-10-31 21:29:01 +00:00
Kubernetes Publisher 0f520bf96f Merge pull request #121577 from cici37/celFixPick
Bump cel-go to v0.17.7 and introduce set ext library with new options

Kubernetes-commit: d1113c9a00b3cd1c791f43b15280d4ebba2a7663
2023-10-31 21:28:54 +00:00
Kubernetes Publisher a0b1b995d0 Merge pull request #121089 from tkashem/apf-v1
Promote APF API to v1

Kubernetes-commit: f5a5d83d7c027aba86e18c52da8ec4cd14179be3
2023-10-31 05:27:57 +00:00
Kubernetes Publisher 2253cd2628 Merge pull request #121311 from nilekhc/validation-doc
chore: updates api doc

Kubernetes-commit: 07515c0021436b2550bf5a826f818fda677f62e0
2023-10-31 01:25:30 +00:00
Kubernetes Publisher 943a60e3a4 Merge pull request #121524 from carlory/gomega
bump gomega to 1.29.0

Kubernetes-commit: ec297aa13a03f53f04023cd897af50dbfed31e0f
2023-10-27 17:57:33 +00:00
Antoine Pelisse dfe5e25e6b Update sigs.k8s.io/structured-merge-diff to v4.4.1
Kubernetes-commit: dec443b305a0240f2a9d7726c6a0c46beec19a1a
2023-10-27 10:21:06 -07:00
carlory 8f87db3f06 bump gomega to 1.29.0
Kubernetes-commit: 760abc2a82130d45607eeead4011afa8b0f81e6d
2023-10-26 09:47:49 +08:00
Kubernetes Publisher 4f7fff8661 Merge pull request #121485 from ritazh/kmsv2-ga
[KMSv2] promote KMSv2 and KMSv2KDF to GA

Kubernetes-commit: ebf46ce1b45b8617d280b0aa12ebf6c18f25dea6
2023-10-27 01:23:54 +00:00
Kubernetes Publisher b62f732b85 Merge pull request #121338 from dims/working-otel-bump
Bump otel and other dependencies for CVE-2023-45142

Kubernetes-commit: d0084356b3cabdafcfc140d19ad8d544b2fc9b5d
2023-10-26 09:27:25 +00:00
Kubernetes Publisher 20066af78e Merge pull request #121095 from aramase/aramase/f/kmsv2_tracing
[KMSv2] Add tracing

Kubernetes-commit: ae603d5260a32d85e96a1e57caf61865f51cb29d
2023-10-25 21:23:33 +00:00
Kubernetes Publisher 0e3cbbf0fb Merge pull request #121430 from bzsuni/cleanup/fsnotify
Bump the fsnotify from version v1.6.0 to v1.7.0

Kubernetes-commit: dd61cd037d4e6fb449b43875d02eb022007be0d7
2023-10-25 05:24:16 +00:00
Kubernetes Publisher 1bb4d2d2c3 Merge pull request #121455 from cici37/test_cost
CRD validation rule: Add stability tests for CEL cost estimation

Kubernetes-commit: 03ba7efb85c337249cc8e87c84b616c2c3602515
2023-10-24 21:24:08 +00:00
Kubernetes Publisher 618d6a3eb7 Merge pull request #119186 from seans3/stream-translator-proxy
Stream Translator Proxy and FallbackExecutor for WebSockets

Kubernetes-commit: 87981480f33790225628824943217bd6bb7564bb
2023-10-24 17:29:22 +00:00
Kubernetes Publisher 0244e95438 Merge pull request #120397 from ty-dc/StaticCheck
cleanup: omit comparison with bool constants

Kubernetes-commit: 441d4b54aec4eebbe55d9c3519691eb9833fa486
2023-10-24 04:08:58 +00:00
Kubernetes Publisher 611ba24d58 Merge pull request #121325 from benluddy/check-apiserver-serializers
KEP-4222: Restrict supported media types for new apiservers.

Kubernetes-commit: 2014ce2313591b3bbf217587cbaf62e4c44e1217
2023-10-23 16:25:34 +00:00
bzsuni e742f2b47c Bumped the fsnotify from version v1.6.0 to v1.7.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>

Kubernetes-commit: d5085c9cbe54151069f2b63f9348e9f14bfb482f
2023-10-23 10:32:35 +08:00
Kubernetes Publisher 7089867c00 Merge pull request #121364 from sxd/update_grpc
bump golang.org/grpc to v1.56.3

Kubernetes-commit: 239537e74d956aaf1ff1395adb602696405088ce
2023-10-21 00:07:30 +00:00
Kubernetes Publisher 40b9c4e124 Merge pull request #120757 from alexzielenski/apiserver/openapi/invalid-default
Update `kube-openapi` to Remove invalid defaults from fields with custom marshalling

Kubernetes-commit: 31c679f65cbf62efec7597133e6d8e78d8473c4d
2023-10-21 00:07:28 +00:00
Jonathan Gonzalez V def3258f0f bump golang.org/grpc to v1.56.3
Bumping golang.org/grpc in light of CVE-2023-44487.

Signed-off-by: Jonathan Gonzalez V <jonathan.abdiel@gmail.com>

Kubernetes-commit: a7adde53be415d5609288b3998ab67ee18be76a3
2023-10-19 14:58:49 -03:00
Davanum Srinivas 7bd34035e7 working-config-otel
Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: 702d911e22604aa69b42f77804c27caaab7e4def
2023-10-18 18:47:37 -04:00
Alexander Zielenski 4e501586ef pin openapi
Kubernetes-commit: 4d21a23be35a03852e0e7b188de11d9f8dc6bc57
2023-10-17 16:48:10 -07:00
Cici Huang 557d4cf4a0 Bump cel-go to v0.17.7
Kubernetes-commit: 70c1f2143fc0309177168ba7db0ebd8d47d5917f
2023-10-30 16:46:27 +00:00
Kubernetes Publisher 2a6d038562 Merge pull request #121010 from Jefftree/decouple-openapi-v2v3-config
Decouple openapi v2v3 config

Kubernetes-commit: ac66f3d466caee27bcc0f66a04ceec9bf63750bd
2023-10-16 23:26:30 +00:00
Kubernetes Publisher c5b253644c Merge pull request #121118 from alexzielenski/apiserver/apiextensions/ratcheting-factor-correlation
CRDValidationRatcheting: Factor object correlation and comparison into reusable component

Kubernetes-commit: 3a3dc870a24645bb7114c0217aa743bd10c6122e
2023-10-16 23:26:27 +00:00
Kubernetes Publisher 56aa0e9a59 Merge pull request #120503 from dgrisonnet/body-size
Rename request body size metric to conform with Prometheus best practices

Kubernetes-commit: c40bc8c7d896ac14dee79571ba1ec143ca239401
2023-10-15 07:22:14 +00:00
Kubernetes Publisher c183390d3f Merge pull request #121120 from enj/enj/i/h2_dos
Prevent rapid reset http2 DOS on API server

Kubernetes-commit: cb713c15e99d59cb5b2f9015d1d978fee8142965
2023-10-12 23:36:45 +00:00
Kubernetes Publisher 01f2ec510d Merge pull request #120735 from Jefftree/request-body
Bump kube-openapi with v3 marshal and requestBody required marking

Kubernetes-commit: e93e8eac0ef1b26384e5481b67c7d04fe211a243
2023-10-12 23:36:43 +00:00
Jefftree 0c4ec7694a bump kube-openapi
Kubernetes-commit: e3098225eaf7b5bb9d5de1f259c2dbdc2062faa8
2023-10-12 18:22:05 -04:00
Kubernetes Publisher c453b3b056 Merge pull request #120976 from tengqm/fix-audit-apidoc
Fix API docs for audit APIs

Kubernetes-commit: d4a6a674de061ef57558f0a5996fc5f2106c52a6
2023-10-12 19:30:35 +00:00
Kubernetes Publisher a98816fb0a Merge pull request #121111 from dashpole/update_otel_deps
Update OpenTelemetry Dependencies

Kubernetes-commit: eafebcc9e368d6aeaab0ce5ec4fd56b94174d0c4
2023-10-11 07:26:19 +00:00
John Howard 6e80c0dfa4 dependencies: update otel-go dependencies
Kubernetes-commit: dc334b953d99f233b56ec2cd78bff218a00152a0
2023-10-05 12:52:33 -07:00
Kubernetes Publisher e7db207bf4 Merge pull request #121117 from MadhavJivrajani/bump-x-net
[CVE-2023-39325] .: bump golang.org/x/net to v0.17.0

Kubernetes-commit: 7ee2af5cc5fee6a6f837975a70a35ce681a8e9d4
2023-10-10 19:27:11 +00:00
Madhav Jivrajani bdde7b6248 .: bump golang.org/x/net to v0.17.0
Bumping golang.org/x/net in light of CVE-2023-39325 and CVE-2023-44487.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: fc7c951d5a5b8b75dfa105e3bea7bbddaf4c792e
2023-10-10 23:07:19 +05:30
Kubernetes Publisher fef0d75638 Merge pull request #121082 from pohly/ginkgo-gomega-update
dependencies: ginkgo v2.13.0, gomega v1.28.0

Kubernetes-commit: 755644a169ad495a34bc5e1db502962fc6dd3750
2023-10-10 15:27:37 +00:00
Patrick Ohly b82dc081b8 dependencies: ginkgo v2.13.0, gomega v1.28.0
Besides simply staying up-to-date, ginkgo v2.13.0 adds a `PreviewSpecs` which
will be used for introspection of the E2E test suites.

Kubernetes-commit: 79355caa565cc34e8726c427562c9f109ebe0e34
2023-10-09 19:27:06 +02:00
Kubernetes Publisher 6ec195f3b2 Merge pull request #120985 from palnabarun/3221/fix-authorizer-name
[StructuredAuthorizationConfiguration] Fix the level at which authorizer name is surfaced

Kubernetes-commit: 6f5fa2eb2f4dc731243b00f7e781e95589b5621f
2023-10-05 03:42:16 +00:00
Kubernetes Publisher 22545bb551 Merge pull request #120222 from tkashem/apf-queue-wait-ctx
apf: manage request queue wait with context in APF Filter

Kubernetes-commit: 6a84edb2cee68fc60d3f4bd15eb461a184303236
2023-10-03 10:31:18 +00:00
Kubernetes Publisher 3acfc3ce16 Merge pull request #119865 from charles-chenzz/bump_deps
bump github.com/emicklei/go-restful/v3 to v3.11.0

Kubernetes-commit: bf1fa0c6691bb3bc6c5c03f900c53ed609e580a4
2023-09-28 14:57:16 +00:00
Kubernetes Publisher 6bff95ab99 Merge pull request #120908 from sttts/sttts-optional-authz
controlplane/apiserver: don't crash if authz or other options are explicitly disabled in options

Kubernetes-commit: 1020678366f741834f06b9f0087e57e48f93ffba
2023-09-27 18:31:56 +00:00
Kubernetes Publisher a8f5357696 Merge pull request #120490 from p0lyn0mial/upstream-watch-list-cache-metrics
collect watch-list requests latency metric

Kubernetes-commit: bdedc21fd9579d2838f1e330bb4a93d4cb8b5cbd
2023-09-27 18:31:54 +00:00
Jefftree 5bfa063b10 bump kube-openapi
Kubernetes-commit: 555c1b8091c2312e7b3f9002fc8a4787e759ef31
2023-09-27 14:02:53 -04:00
Kubernetes Publisher 10be293530 Merge pull request #120836 from jkh52/knp-0.28.0
Bump Konnectivity to 0.28.0

Kubernetes-commit: c5cf0ac1889f55ab51749798bec684aed876709d
2023-09-23 14:33:03 +00:00
Joseph Anttila Hall ec568d7c18 Bump Konnectivity to 0.28.0
Kubernetes-commit: 1b602ffd9a412fccf87de9658da56a30e1ec1a0b
2023-09-22 11:42:00 -07:00
Kubernetes Publisher c52221aa17 Merge pull request #120388 from HirazawaUi/add-group-to-apiserver-tracing
Add group, version, namespace, name, and subresource to apiserver tracing

Kubernetes-commit: 1e862b0fec39999fd55b42cf592ab5249b2651e8
2023-09-21 22:30:46 +00:00
Kubernetes Publisher c1b34a994c Merge pull request #120797 from p0lyn0mial/upstream-refactor-generic-watch-semantic-tests
storage/testing/watcher_tests: refactor RunWatchSemantics tests

Kubernetes-commit: 0a2a56863965987d5c0058f4aaa9fb8f0180c851
2023-09-21 18:37:18 +00:00
Kubernetes Publisher a4c66a9ba7 Merge pull request #120747 from p0lyn0mial/upstream-refactor-watch-error-test
storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc

Kubernetes-commit: ef1aed8cd80a6955dd6ef9e59e8e2f378336cf4f
2023-09-19 10:30:36 +00:00
Kubernetes Publisher 78af3642d2 Merge pull request #119099 from palnabarun/authz-config
[StructuredAuthorizationConfiguration] Implement API types and wire kube-apiserver to use them

Kubernetes-commit: 9d6180559ba84cbaf00bcb2a51e387d9591f9687
2023-09-18 14:33:26 +00:00
Kubernetes Publisher 8fe7663421 Merge pull request #119526 from sttts/sttts-idiomatic-cached
kube-openapi/cached: bump and adapt to more go-idiomatic caching library

Kubernetes-commit: f551940626532e790c05094293e0d8bb5b76e3d5
2023-09-15 22:42:22 +00:00
Dr. Stefan Schimanski 05796f0944 hack/update-vendor.sh
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>

Kubernetes-commit: 6c59e8be5e2bc97c8e850070ffb3025199c05df2
2023-09-13 08:23:06 +02:00
Kubernetes Publisher 269930186a Merge pull request #120574 from logicalhan/cslis
promote component SLIs to GA; remove feature gates for component slis

Kubernetes-commit: d393d4e1514711e89b310d4578214c8c383e015c
2023-09-15 06:31:30 +00:00
Kubernetes Publisher becc660198 Merge pull request #120583 from ritazh/kms-livezchecks
kms: remove livez check

Kubernetes-commit: e897483713a94c512222683d36bc28df550c27ce
2023-09-12 22:32:21 +00:00
Han Kang bd7db816d7 promote component SLIs to GA; remove feature gates for component slis
Kubernetes-commit: e6435e98eda93fbf96e94110af6ca5a10ad1e926
2023-09-11 08:52:50 -07:00
Kubernetes Publisher 157f52a614 Merge pull request #120008 from skitt/drop-intstr-ptr-wrappers
Use ptr.To to retrieve intstr addresses

Kubernetes-commit: 33c5bd631d990f907f89f66cdf8088d252ab251b
2023-09-09 18:40:16 +00:00
Kubernetes Publisher 4fc7cd1579 Merge pull request #120499 from tukwila/gorilla/websocket_v1.5.0
bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0

Kubernetes-commit: f6a87aebe6f83336b1dc7d4ca6e69b19ca55cd94
2023-09-08 18:46:22 +00:00
guangli.bao 7821c860a3 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
Kubernetes-commit: 93d93258b19ff3d2e85b5dc60e89df1ebdc689ca
2023-09-07 22:27:58 +08:00
Kubernetes Publisher ea59eb3455 Merge pull request #119334 from kmala/serverapply
update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag

Kubernetes-commit: cf8f9a8d07770352ec0e976ebac77dffa92f0b04
2023-09-07 03:21:02 +00:00
Kubernetes Publisher 7e9df1cc2d Merge pull request #120365 from aramase/aramase/c/kms_scheme_cleanup
register API types only once for encryption config

Kubernetes-commit: 10d257889d2fc71572a9fb13044e56c3bb915fef
2023-09-06 02:38:48 +00:00
Kubernetes Publisher e663c84384 Merge pull request #119142 from aramase/aramase/f/kep_3331_add_feature_flag
[StructuredAuthenticationConfig] Add feature flag and wire up `--authentication-config` flag

Kubernetes-commit: f68c66f96dc7efd86c43bc6ca34bfdaa552a0892
2023-09-05 22:29:48 +00:00
Kubernetes Publisher 9998872cea Merge pull request #120304 from p0lyn0mial/upstream-storage-options-progress-notification
storage: document ProgressNotify from storage.ListOptions

Kubernetes-commit: a42f4f61c2c46553bfe338eefe9e81818c7360b4
2023-09-01 18:13:43 +00:00
Kubernetes Publisher e74fcfcb78 Merge pull request #120327 from liggitt/json-patch
Revert to json-patch 4.12.0

Kubernetes-commit: 34aaf2b972c95c7a3591d8d49c798dba348ee5c9
2023-09-01 05:45:18 +00:00
Kubernetes Publisher 1e20ddcb59 Merge pull request #119801 from wojtek-t/refactor_watch_encoders
Refactor apiserver endpoint transformers to more natively use Encoders

Kubernetes-commit: def694bbe02b81c2b034e151ed86f1d30d23814b
2023-09-01 05:45:15 +00:00
Jordan Liggitt 5f5ff7deb5 Revert to json-patch 4.12.0
Kubernetes-commit: 741f1461571007fcf4cf3edbd121d6ef0c596c72
2023-08-31 19:01:37 -04:00
Kubernetes Publisher f4c85a1be0 Merge pull request #120218 from rakshitgondwal/feat/protobuf-version-update
feat: update google.golang.org/protobuf to v1.31.0

Kubernetes-commit: 8b4f5bb54b3c2f0e671e87f5038bf3257109edd4
2023-08-29 16:13:28 +00:00
Kubernetes Publisher cf1a15a1c5 Merge pull request #120212 from p0lyn0mial/upstream-etcd-watcher-validation
storage/etcd3: error when progressNotify option set and newFunc was not provided for a registry

Kubernetes-commit: 6eca14208217ebb72fc4e690357b4c41ddd22436
2023-08-29 12:04:18 +00:00
Rakshit Gondwal 87018d6669 feat: update google.golang.org/protobuf to v1.31.0
Signed-off-by: Rakshit Gondwal <rakshitgondwal3@gmail.com>

Kubernetes-commit: 709721e0df1940f0316f6b81e8ceaeb493634400
2023-08-28 23:38:32 +05:30
Kubernetes Publisher c1ab2b8033 Merge pull request #120060 from jpbetz/cel-features-1_29
Bump cel version to 1.17.5 and bump CEL strings library to version 2

Kubernetes-commit: dd3b1de79251f4105b33f0beae9c505afff41eff
2023-08-24 10:56:37 +00:00
Kubernetes Publisher 3780c610f6 Merge pull request #119503 from wojtek-t/pagination_ga
Graduate APIListChunking to GA

Kubernetes-commit: 2e6eafca3f466b072f23aff4ff4d6d8a973f5606
2023-08-23 21:40:56 +00:00
Kubernetes Publisher 6ab39bb78f Merge pull request #120090 from MikeSpreitzer/fix-120032
Handle edge cases in seat demand stats

Kubernetes-commit: 2792d913674ae44983505a3265df2ac6408b85b9
2023-08-22 20:02:09 +00:00
Kubernetes Publisher 08f8ff0d3f Merge pull request #119790 from seantywork/added-comment
added comment for clarifying steps related to kubernetes mutual (2-wa…

Kubernetes-commit: 55c86d6ad930d437931079318d740bdf8dac34f0
2023-08-21 20:27:23 +00:00
Kubernetes Publisher ba70a1768a Merge pull request #119824 from aojea/deflake_TestCreateHealthcheck
fix race creating etcd client for healthchecks

Kubernetes-commit: f46583dcaafc1b5d47b79ceb17ea78e7781f7014
2023-08-21 12:27:13 +00:00
Kubernetes Publisher 5711af83ff Merge pull request #119878 from ritazh/kmsv2-metrics-dekcachesize
kmsv2: add metric for DEK cache filled

Kubernetes-commit: 16310c959dfc5fefc70e9041e0029feffa62d791
2023-08-19 04:02:53 +00:00
Joe Betz 0c5d0edf6d Bump cel-go to v0.17.6
Kubernetes-commit: 1a850a00630ebefcef6ba56349277ca127983c11
2023-08-18 14:20:35 -04:00
Stephen Kitt 2b65530afd Use ptr.To to retrieve intstr addresses
This uses the generic ptr.To in k8s.io/utils to replace functions and
code constructs which only serve to return pointers to intstr
values. Other uses of the deprecated pointer package are updated in
modified files.

Signed-off-by: Stephen Kitt <skitt@redhat.com>

Kubernetes-commit: aa89e6dc978bf88653d893284248039b776aed54
2023-08-17 12:12:12 +02:00
Kubernetes Publisher 9d077dc364 Merge pull request #119800 from jpbetz/cost-fix
Fixes CEL estimated cost to propagate result sizes correctly

Kubernetes-commit: 210a97e48bc6caac338663cfb917f60e61c84962
2023-08-17 00:17:04 +00:00
Kubernetes Publisher 3981055a63 Merge pull request #119844 from enj/enj/i/upgrade_regex
wsstream: use a single approach to detect connection upgrade

Kubernetes-commit: 1ebb5e608b34b02d466181866d2fe64bac8565a4
2023-08-16 08:13:04 +00:00
Kubernetes Publisher 41188ea6a1 Merge pull request #119825 from Jefftree/add-gv
Move adding GroupVersion log until after an update is confirmed

Kubernetes-commit: 47f75709326a737ea1880c9fd148ab32771d797c
2023-08-16 08:13:03 +00:00
Kubernetes Publisher 1f19e00d1c Merge pull request #119795 from sttts/sttts-httplog-impersonation
apiserver/httplog: pretty up impersonation output

Kubernetes-commit: 19f6d5be8269d4051acffc5709ec4bee7274268a
2023-08-16 08:12:58 +00:00
Kubernetes Publisher a11da9bae8 Merge pull request #119577 from jiahuif-forks/tests/validating-admission-policy/lazy-map-short-circuiting
CEL lazy map: add test for boolean short-circuiting

Kubernetes-commit: 112a4726a4af33b5e3d7cb3f6d51547262587669
2023-08-16 04:21:03 +00:00
Kubernetes Publisher 6b6cfe5d12 Merge pull request #119385 from andrewsykim/current_inqueue_seats_metric
Add apiserver flowcontrol metric `current_inqueue_seats`

Kubernetes-commit: 338d68bbc2b5e69c18fed5eea11cc683e72dcbdf
2023-08-16 00:32:47 +00:00
Kubernetes Publisher 9ece5c3b70 Merge pull request #118399 from skitt/ioutil-sig-api-machinery
api-machinery: stop using deprecated io/ioutil

Kubernetes-commit: 10beda334e360b6b2988d5d2d30c011cc50d4aa8
2023-08-16 00:32:44 +00:00
Kubernetes Publisher e78a7391c4 Merge pull request #119888 from dgrisonnet/panic-storage-metric
Fix segfault during storage size metric collection

Kubernetes-commit: 8a7df727820bafed8cef27e094a0212d758fcd40
2023-08-11 04:46:45 +00:00
Kubernetes Publisher e7a7329b64 Merge pull request #119835 from liggitt/mitigate-aggregated-discovery-npe
Avoid returning nil responseKind in v1beta1 aggregated discovery

Kubernetes-commit: 3d941afece97b284c764e5320cc8c80b0e88cba8
2023-08-10 01:27:20 +00:00
charles-chenzz dc592c6f7e bump github.com/emicklei/go-restful/v3 to v3.11.0.
Kubernetes-commit: 409b46576ff7848bf51b9d70165b693018173ebc
2023-08-09 23:31:06 +08:00
Kubernetes Publisher cc544e7bf1 Merge pull request #119725 from MadhavJivrajani/bump-net-dep
[CVE-2023-3978] .*: bump golang.org/x/net to v0.13.0

Kubernetes-commit: 1620473a9a01dd6bbef3398c0acb2e581d0a13c3
2023-08-07 21:21:27 +00:00
Joe Betz a1fc973692 Bump cel-go to v0.16.1
Kubernetes-commit: 69a5a528967500199a6748d0b7fac2a0fcc6df6d
2023-08-07 15:51:36 -04:00
Madhav Jivrajani 499e610e3d .*: bump golang.org/x/net to v0.13.0
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: 1b90dff5276f3cb37236b446f1821175dad802c4
2023-08-02 11:11:22 +05:30
Kubernetes Publisher 62fa4fb0fe Merge pull request #118644 from alexzielenski/apiserver/policy/namespaceParamRef
KEP-3488: Promote ValidatingAdmissionPolicy to Beta

Kubernetes-commit: 18f8cb83989ff64beb0c7f47cdd3ad9df7bdbbeb
2023-07-22 03:29:38 +00:00
Kubernetes Publisher 1b09d3c04f Merge pull request #118828 from enj/enj/f/kms_v2_hkdf_expand
kmsv2: KDF based nonce extension

Kubernetes-commit: 773a6b1e460360538ce4d85a7c0d009efed81836
2023-07-22 03:29:36 +00:00
Kubernetes Publisher 06c891133c Merge pull request #119215 from alexzielenski/apiserver/policy/namespaceParamRef-alpha
KEP-3488: Per namespace policy params

Kubernetes-commit: 8a053c700a3abc30717860e0b6a13243a7250743
2023-07-20 23:08:43 +00:00
Keerthan Reddy Mala a94f726abf update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
Kubernetes-commit: d2df65ba6c91c1337e07373c254c2118aec3700a
2023-07-14 09:47:59 -07:00
Sean Sullivan 10cbfd9a3c StreamTranslator and FallbackExecutor for WebSockets
Kubernetes-commit: 168998e87bfd49a1b0bc6402761fafd5ace3bb3b
2023-07-06 21:22:07 -07:00
Kubernetes Publisher 0e9644ed24 Merge pull request #117740 from Richabanker/uvip-impl
Unknown Version Interoperability Proxy Impl

Kubernetes-commit: 66e99b3ff1649fc9bd3d9ef36affa1b16c5e2e21
2023-07-19 06:04:00 +00:00
Richa Banker 8a38d429d8 Add impl for uvip
Kubernetes-commit: cd5f3d9f9d5ae3153206178e6114d573dc24ad73
2023-03-29 17:20:25 -07:00
Kubernetes Publisher f100f84ac4 Merge pull request #119009 from MikeSpreitzer/track-executing-requests
Track executing requests

Kubernetes-commit: 31d662e58e9679ada73208fe63759c06793b013c
2023-07-18 21:53:00 +00:00
Kubernetes Publisher 8e2b0eca2e Merge pull request #118204 from sttts/sttts-openapi-v2-parameter-refs
openapi: reference shared parameters

Kubernetes-commit: f42ff8687026f8e12fb3d3b0da0760525d8d8ab2
2023-07-18 06:14:21 +00:00
Kubernetes Publisher b2ff4347db Merge pull request #119380 from A-Hilaly/api-server/webhooks/match-conditions-beta-graduations
Graduate `AdmissionWebhookMatchCondition` to beta

Kubernetes-commit: 704970877e827908fc231d76f545feaa376bb6ed
2023-07-18 02:20:14 +00:00
Kubernetes Publisher 90b43d6784 Merge pull request #119312 from pacoxu/prometheus/common-v0.44
upgrade prometheus common to v0.44.0

Kubernetes-commit: d627c4b41cdd9ef08b13604ce1c460eca26684f8
2023-07-18 02:20:08 +00:00
Kubernetes Publisher 085dadbea3 Merge pull request #118959 from MikeSpreitzer/fix-118957b
Fix, deprecate apiserver_flowcontrol_request_concurrency_limit

Kubernetes-commit: af33d7a5af49cc841f8b58466b59e8dfdfe185ed
2023-07-17 22:22:43 +00:00
Kubernetes Publisher 6704aba021 Merge pull request #119110 from andrewsykim/apf-metrics-beta
Promote kube-apiserver flowcontrol metrics to Beta

Kubernetes-commit: 4f60a8d493ab9571eb328b9d98da477a50bc7446
2023-07-17 18:29:55 +00:00
Cici Huang 04b26c4697 ValidatingAdmissionPolicy: support namespace access (#118267)
* Support namespace access from cel expression in validatingadmissionpolicy.

* Whitelist the exposed fields in namespace object and add test

* better handling of cluster-scoped resources.

* [API REVIEW] namespaceObject in Expression doc.

* compatibility with composition.

* generated: ./hack/update-codegen.sh && ./hack/update-openapi-spec.sh

* workaround namespace of namespace is unexpectedly set.

* basic test coverage for namespaceObject.

---------

Co-authored-by: Jiahui Feng <jhf@google.com>

Kubernetes-commit: 13172cba5c0e1c6a076dbda4aeebbccaf658c7f1
2023-07-15 01:33:59 +00:00
Kubernetes Publisher eb9d761704 Merge pull request #119272 from deads2k/resources
add list of served versions to storage version

Kubernetes-commit: 47aeec63a839703e962ebd97e26edbc86fe6d99c
2023-07-14 21:44:27 +00:00
Kubernetes Publisher e725ece543 Merge pull request #119330 from bertinatto/fix-conn-reuse-test
Proactively bump golang.org/x/net to v0.12.0

Kubernetes-commit: c79be34fba3ad20532c9648216924afaa8434e06
2023-07-14 21:44:24 +00:00
Kubernetes Publisher 616472f02a Merge pull request #118782 from MikeSpreitzer/exempt-borrowing-impl
Exempt borrowing implementation

Kubernetes-commit: 2a91bd1dfdd2e293b9ec017ea3a976ecc2ecd545
2023-07-14 17:45:44 +00:00
Fabio Bertinatto c0cdd97787 Proactively bump golang.org/x/net to v0.12.0
Proactively bump to v0.12.0 to avoid v0.10.0 and v0.11.0, which contain
a regression added by commit
82780d606d.
This commit was later reverted in v0.12.0.

Generated with:

hack/pin-dependency.sh golang.org/x/net v0.12.0 && hack/update-vendor.sh

Kubernetes-commit: d9bd413f991958492602c4bf51c43d6edca0e5cd
2023-07-14 10:25:23 -03:00
Paco Xu 7d09f203d9 upgrade prometheus common to v0.44.0
Kubernetes-commit: 9b6af80a631f5659ea62d552d595b3dd137525a0
2023-07-14 11:05:46 +08:00
Jiahui Feng 7eadaa66c4 ValidatingAdmissionPolicy: Variable Composition (#118642)
* [API REVIEW] Variable Composition

* lazy map.

* variable composition implementation.

* check variables during VAP validation.

* generated: ./hack/update-vendor.sh

* generated: UPDATE_COMPATIBILITY_FIXTURE_DATA

(cd staging/src/k8s.io/api/ && env UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test)

* cost calucation.

* tests for cost calculations.

* e2e test for variables.

* fix doc for Validation.Expression.

* generated: ./hack/update-codegen.sh

* fix missing utilruntime import.

* generated: ./hack/update-openapi-spec.sh

Kubernetes-commit: b635f2a401fd03715f6a33c4a19f11c509c0ce03
2023-07-14 01:49:55 +00:00
Kubernetes Publisher a3799aea9e Merge pull request #118804 from benluddy/authz-deferred-errors
CEL lib: Expose errors on authz decisions instead of raising them from check()

Kubernetes-commit: 1d846a12da5b05e9b9e50b30fdaae2ea269822a0
2023-07-13 22:03:57 +00:00
Dr. Stefan Schimanski de579d1823 Bump kube-openapi
Kubernetes-commit: 961c1503b5bd2b0f83d6b6b98e0c8f29525ca9cb
2023-06-26 13:09:30 +02:00
Kubernetes Publisher 6c99c223c9 Merge pull request #119252 from serathius/flakes
Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes

Kubernetes-commit: da2d500c80968aacf4dfa9e32f5e6ccc06dc33c7
2023-07-12 17:19:51 +00:00
Kubernetes Publisher 8f12a0306b Merge pull request #116443 from benluddy/secondary-authz-decision-caching
Cache authz decisions within the scope of validating policy admission.

Kubernetes-commit: 6ffca501361adadfb133ec1b8f76a2c2a23836dc
2023-07-11 21:25:40 +00:00
Kubernetes Publisher 6e247788f7 Merge pull request #119198 from jadhaj/fix-115385
Document address family of listening INET sockets

Kubernetes-commit: 50782ce5abfd75c644564dcfd2e96c2ae49921d5
2023-07-11 13:21:18 +00:00
Kubernetes Publisher 0d62f07a5d Merge pull request #119127 from Mskxn/fix_leak
use stopCh to avoid goroutine leak in tests

Kubernetes-commit: 4c7cda3e55736822bdee4c2ac93f989cf8f1501c
2023-07-06 23:55:51 +00:00
Anish Ramasekar 5d08b1abe9 [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
* add feature gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* add validation and warning in load config

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* mark v1beta1 proto message deprecated

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 1acdb4ae86e0e43475c31f108a6106b1f5ea5027
2023-07-06 23:55:47 +00:00
Kubernetes Publisher 24d5ac4b98 Merge pull request #118960 from MikeSpreitzer/add-seat-occupancy-metric
Introduce apiserver_flowcontrol_current_executing_seats metric

Kubernetes-commit: fbb2f89668bd07a96adc8a1f4f0819e769255703
2023-07-06 11:25:19 +00:00
Kubernetes Publisher 73ba48c7f9 Merge pull request #118386 from Richabanker/enhance-storage-version
Add servedVersions info in StorageVersion API

Kubernetes-commit: cd32adebd9d52ae46827054350c17de085a4eb23
2023-07-06 07:32:27 +00:00
Tim Allclair 2a8bc69060 Initialize the AuditEvent with the AuditContext (#113611)
* Initialize the AuditEvent with the AuditContext

* Squash: Address PR feedback

* Squash: address PR feedback

Kubernetes-commit: 2b03f04ce589a57cf80b2153c7e5056c53c374d3
2023-07-03 18:28:13 +00:00
Kubernetes Publisher f807a349b2 Merge pull request #118945 from andrewsykim/update-request-filter-duration-buckets
Introduce larger buckets for request_filter_duration_seconds and request_wait_duration_seconds

Kubernetes-commit: 2ee01fb673213c80cb8afc79c60c32adeadb413c
2023-06-29 15:00:55 +00:00
Kubernetes Publisher 98133773bf Merge pull request #118182 from seans3/wsstream-refactor
Refactor wsstream library from apiserver to apimachinery

Kubernetes-commit: 056f3a56b821a063210c2c4a67cc7a4d0a361afe
2023-06-28 22:37:20 +00:00
Kubernetes Publisher 7d79c570c7 Merge pull request #118888 from enj/enj/i/kms_interface_split
kmsv2: no-op: split transformer interface

Kubernetes-commit: 5e85f21e5be69d9e941771138002fdcfc48afbf2
2023-06-27 01:18:39 +00:00
Kubernetes Publisher 2b176f025d Merge pull request #118763 from Shubham82/remove_AdvancedAuditing_featuregate
Remove AdvancedAuditing feature gate.

Kubernetes-commit: 5a1c62b9d121e23d411fdc84255521d1dc231bf2
2023-06-21 01:17:40 +00:00
Kubernetes Publisher 15b83e4482 Merge pull request #118689 from bzsuni/clean
[dependencies] update prometheus/client_golang v1.14.0 to v1.16.0

Kubernetes-commit: 0004ce8684bd9c6be0af4ad8fc9b076f4a04e23e
2023-06-19 01:21:49 +00:00
bzsuni 35bb75daf4 update prometheus/client_golang v1.14.0 to v1.16.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>

Kubernetes-commit: 5aa5f1abc9c9d83ccc34382ae2a8e0241ec1d866
2023-06-15 11:24:32 +00:00