69cff1cf51
Update dependencies to v0.30.6 tag
2024-10-23 07:03:11 +00:00
5fe3ee047c
Merge pull request #126984 from dashpole/fix_mem_leak_30
...
Cherrypick of #126957 on 1.30: Fix memory leak from global OpenTelemetry MeterProvider
Kubernetes-commit: a184d0fdebb656628410b59a98cd446c66b61c4b
2024-10-09 18:35:58 +00:00
0c59d4213f
update vendor
...
Kubernetes-commit: caf31c0dc34554d2e1230848527f13a53ab587ad
2024-08-29 00:15:41 +00:00
45413dc53b
fix memory leak from global MeterProvider
...
Kubernetes-commit: 95ebd395403b287fa13b36d6b929c02e62813478
2024-08-28 14:20:46 +00:00
73f0c17349
Merge pull request #126481 from benluddy/automated-cherry-pick-of-#126470-kubernetes-release-1.30
...
Automated cherry pick of #126470 : Move APIServingWithRoutine to alpha and disabled by default.
Kubernetes-commit: d0c02cd2736e52ad466698de81a12fcbae001f56
2024-08-07 16:47:21 +00:00
4af1cd7d3e
Move APIServingWithRoutine to alpha and disabled by default.
...
Kubernetes-commit: b64504d5d4e7ab6dab25bd1f15e2a2a1ffe7ccce
2024-07-30 16:33:31 -04:00
7514fdb6a6
Merge pull request #126153 from xyz-li/cherrpick-125145-130
...
cherry pick of #125145 apiserver fix watch namespace
Kubernetes-commit: 5df0453fb0b29137bb83f4fa78c0d03a451ab056
2024-07-29 14:27:28 +00:00
7616d3682c
apiserver: fix watch namespace
...
For request like '/api/v1/watch/namespaces/*', don't set scope.namespace.
Because the func `addWatcher` add a watcher to allWatchers with the value `scope.namespace` not empty.
But the function `dispatchEvent` dispatch event with an empty namespace.
Signed-off-by: xyz-li <hui0787411@163.com>
Kubernetes-commit: d926cbf5595e9d42699c5024f42db23eeb2cacbf
2024-05-27 17:48:49 +08:00
7a3db50374
Merge pull request #124676 from cici37/automated-cherry-pick-of-#124675-upstream-release-1.30
...
Automated cherry pick of #124675 : Adding a deprecating featurer gate to fix cost
Kubernetes-commit: 4844fb18766bb713587044b244a1c1e5b9363da6
2024-06-04 05:34:20 +00:00
a30c80fce3
Merge pull request #124802 from seantywork/automated-cherry-pick-of-#124662-upstream-release-1.30
...
Automated cherry pick of #124662 : Updated & added visibility to apiserver x509 test
Kubernetes-commit: a7f95d39e0a036e0083003664ae4164919dd11ad
2024-05-21 09:47:58 +00:00
1ce526840f
Updated & added visibility to apiserver x509 test certificates expiring this year
...
Kubernetes-commit: d8c37e8153932979553daebbd0178d8ba6908d82
2024-05-02 23:22:55 +00:00
e025ab4701
Adding the feature gates to fix cost for VAP and webhook matchConditions.
...
Kubernetes-commit: 3d896724760a957e8059ff80e9f399248eacac66
2024-05-01 16:26:41 -07:00
15c77ce1ed
Merge remote-tracking branch 'origin/master' into release-1.30
...
Kubernetes-commit: 698ad6630c56ffc27946f766b5c77e1f16482a77
2024-04-12 07:49:28 +00:00
61d3001820
Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: fb5140f562289f3ffe596b4a3af4650b850a0941
2024-04-11 15:06:03 -04:00
d97582edf4
Merge remote-tracking branch 'origin/master' into release-1.30
...
Kubernetes-commit: 255e7919bcb340043b0d235f883fe070017ce18f
2024-04-05 20:23:21 +00:00
2071c4d479
Update x/net for CVE-2023-45288
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 99fac38d2864e6bc9bb7cd1743d658caa1360c0c
2024-04-03 16:37:18 -04:00
341f6df0e1
Merge pull request #123994 from serathius/undo-double-run-test-watch-semantics
...
Undo double run of the TestWatchSemantics test to avoid hitting timeout
Kubernetes-commit: fe9e4698a33565e9d334439f3a6e494366d8ee8d
2024-03-27 17:11:19 +00:00
7a3a726271
Undo double run of the TestWatchSemantics test to avoid hitting timeout
...
Kubernetes-commit: 225749eb68b3aa3485a1f2dc5d0cafb5dfe53421
2024-03-19 15:16:52 +01:00
e166c44e22
Merge pull request #123785 from seans3/streamtunnel-unit-tests
...
Adds unit tests to `PortForward` streamtunnel
Kubernetes-commit: 065a0f2d5116cc6f66eb8a0c6296e05b90838ec8
2024-03-18 16:10:00 +00:00
ec72042fc5
Merge pull request #123935 from serathius/consistent-watch-from-etcd
...
Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage
Kubernetes-commit: a1605fb3dd2d45474751ec3de30633ac1ec15c41
2024-03-18 05:51:14 -07:00
13a815b7c8
Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage.
...
Kubernetes-commit: 0130072b053f85fb736c24d34552208cdd1bccfe
2024-03-14 15:20:29 +01:00
7661bd2fe3
sync: update go.mod
2024-03-18 12:15:34 +00:00
05c844e2a2
Merge pull request #123676 from serathius/rv0
...
Fix enabling consistent list from watch cache also works for resourceVersion=0
Kubernetes-commit: 89b1db79d75e367f567ea06c0528ef4b8f3fecb4
2024-03-15 21:39:11 +00:00
d5a8607203
Merge pull request #123926 from p0lyn0mial/upstream-deflake-test-get-list-non-recursive-with-consistent-list
...
apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
Kubernetes-commit: 89f03e3988a4e7fed90ffce22f355ff248520ad2
2024-03-14 21:14:25 +00:00
f6a2b2b2cb
Merge pull request #123925 from p0lyn0mial/upstream-cacher-decrease-watch-not-hanging-on-startup-failure
...
apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
Kubernetes-commit: d1a2a134c532109540025c990697a6900c2e62fc
2024-03-14 02:06:09 -07:00
b8c7d7868f
apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
...
Kubernetes-commit: c44cc9a575f3bf1248b2fdc8e3a7ba61ab844618
2024-03-14 09:08:29 +01:00
a2c5722d64
apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
...
before:
go test -v -race -count 1 -run ^TestWatchNotHangingOnStartupFailure$
ok k8s.io/apiserver/pkg/storage/cacher 6.775s
after:
go test -v -race -count 1 -run ^TestWatchNotHangingOnStartupFailure$
ok k8s.io/apiserver/pkg/storage/cacher 2.781s
Kubernetes-commit: f5d945eb43c7bf8036a4bad8c22448e1146a7498
2024-03-14 08:59:47 +01:00
7dbc368d22
Merge pull request #123891 from p0lyn0mial/upstream-cacher-decrease-running-time-of-test-wait-unti-fresh
...
apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
Kubernetes-commit: 3a75a8c8d9e6a1ebd98d8572132e675d4980f184
2024-03-13 16:08:38 +00:00
fb5c182ce6
Merge pull request #123887 from p0lyn0mial/upstream-cacher-decrease-running-time-of-tests
...
apiserver/storage/cacher: decrease the running time of tests in the cacher package.
Kubernetes-commit: 308d664e3fdb73c4436e812d2f1395dcf9e0e2e9
2024-03-13 16:08:37 +00:00
6a24b53962
Merge pull request #123897 from p0lyn0mial/upstream-cacher-decrease-running-time-of-empty-watch-event-cache
...
apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
Kubernetes-commit: 881cc5bc968276b05eba9be9a162873c29c2fda2
2024-03-13 12:20:44 +00:00
342a6b899d
Merge pull request #123674 from serathius/non-recursive
...
Fix non-recursive list returning "resource version too high" error when consistent list from cache is enabled
Kubernetes-commit: 3409f0594c94185010217f3e5156c1de9f08b405
2024-03-12 08:34:06 -07:00
80f9ab2a6a
apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
...
updates the test to wait 300 ms instead of 3s
the watch was established otherwise
we would be blocking on a call to cache.Watch(...)
in addition to that, the tests are serial in nature,
meaning that there is no other actor
that could add items to the database,
which could result in receiving new items.
Before:
go test -race -run TestEmptyWatchEventCache
ok k8s.io/apiserver/pkg/storage/cacher 8.450s
After:
go test -race -run TestEmptyWatchEventCache
ok k8s.io/apiserver/pkg/storage/cacher 2.635s
Kubernetes-commit: 926122c035a4f47a880db24d1a0be7ec129dd44d
2024-03-12 13:34:04 +01:00
c14671349b
apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
...
The individual cases can be safely run in parallel.
Before
go test -race -run TestWaitUntilWatchCacheFreshAndForceAllEvents
ok k8s.io/apiserver/pkg/storage/cacher 10.787s
After:
go test -race -run TestWaitUntilWatchCacheFreshAndForceAllEvents
ok k8s.io/apiserver/pkg/storage/cacher 4.857s
Kubernetes-commit: 3ecbb4dee00a5dd1e43e24a5952c2a90ef507ef1
2024-03-12 10:50:44 +01:00
361687d2ad
apiserver/storage/cacher: decrease the running time of tests in the cacher package.
...
It turns out that kube has a custom timeout for tests of 3 minutes.
The tests in the cacher package are utilizing nearly the
entire time and are being terminated, resulting in failing jobs.
Before the change, the TestWatchSemantics took ~43s to run. With this simple change, it now takes ~18s.
When we created the tests, we didn't measure the running time and assumed that waiting 1 second on a watch channel
to make sure no more events are received was sufficient.
This PR decreases the waiting time to 300 milliseconds.
Modern computers can perform many tasks within that time.
In addition to that, the tests are serial in nature, meaning that there is no other
actor that could add items to the database, which could result in receiving new items.
After the change the total running time decreased by 17%.
Before the tests needed ~176s after they need ~146s.
The changes also improved TestWatchSemanticInitialEventsExtended.
Kubernetes-commit: 5a74c8e2202044b664efce4be5d86d700e74506f
2024-03-12 09:15:55 +01:00
5e1f7568bd
adds portforward streamtunnel unit tests
...
Kubernetes-commit: ffafb2b9ca94c14c07fb6c1fc75fccd3aba26f1f
2024-03-06 16:37:17 -08:00
67b6245fc3
Fix enabling consistent list from watch cache also works for resourceVersion=0
...
Kubernetes-commit: 0b8e79580eb3a63ca7707626b4894adfb9125586
2024-03-04 19:35:34 +01:00
483da2032d
Fix non-recursive list when consistent list from cache is enabled
...
Kubernetes-commit: a527cab9fce0b0234db8b4e1e95a0fc20e135df1
2024-03-04 17:59:04 +01:00
07ca000ce9
Merge pull request #123732 from serathius/parallel-featureflags
...
Fix SetFeatureGateDuringTest handling of Parallel tests
Kubernetes-commit: e062f925aec9137ca3f06704c6adb2883812e657
2024-03-12 00:14:01 +00:00
469611c7d7
Merge pull request #123719 from enj/enj/f/authn_config_beta
...
Mark StructuredAuthenticationConfiguration feature gate as beta
Kubernetes-commit: 8f80e0146726c42edefdfaeda6123872a5ec0981
2024-03-10 04:10:37 +00:00
a4d271c759
Merge pull request #123793 from aramase/aramase/f/authn_config_reload_metrics
...
Add metrics for authentication config reload
Kubernetes-commit: 09093f270aa811c2c49ea45868989ad5b6eb8a53
2024-03-09 15:58:55 -08:00
ee481149d7
Add metrics for authentication config reload
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 62ac88b9ea5dace6a61b784f4654fcf379b958e2
2024-03-09 13:29:56 -08:00
81df735550
Merge pull request #123525 from enj/enj/f/authn_config_reload
...
Add dynamic reload support for authentication configuration
Kubernetes-commit: 77ecfb7800a5ce6f139818828c8eb49af9c44077
2024-03-10 00:12:37 +00:00
3a83dc12eb
Fix SetFeatureGateDuringTest handling of Parallel tests
...
Stop using defer as parallel subtest will might result in main test
finishing before subtest.
Fatal when same flag is set twice.
Kubernetes-commit: 9fcf279e2b91e7549190a433373f256fb5aebe85
2024-03-05 21:56:40 +01:00
aa18faf137
Mark StructuredAuthenticationConfiguration feature gate as beta
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: bc7aa13bf793148b0c6b3b51fd9a8e17bb412712
2024-03-05 10:39:44 -05:00
2c1ad21e66
Add dynamic reload support for authentication configuration
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: b4935d910dcf256288694391ef675acfbdb8e7a3
2024-01-10 12:36:55 -05:00
86ddcb4842
Merge pull request #123737 from enj/enj/i/cel_email_verified
...
Require email_verified to be used when email is set as username via CEL
Kubernetes-commit: 9a160fa7808755fddd5fe8573040bef4d2ba7a0c
2024-03-08 20:12:31 +00:00
5b4b237d07
Require email_verified to be used when email is set as username via CEL
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 121607e80963370c1838f9f620c2b8552041abfc
2024-03-05 17:20:18 -05:00
8763b7fa93
Merge pull request #123431 from aramase/aramase/f/kep_3331_multiple_jwt_authenticator
...
Support multiple JWT authenticators with structured authn config
Kubernetes-commit: c726b2b3a3519309afbac68e0358c99977d1c805
2024-03-07 05:34:55 +00:00
5855c335a1
Merge pull request #123696 from aramase/aramase/f/kep_3331_v1beta1_api
...
Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
Kubernetes-commit: 05cb0a55c88e0cdcfe2fb184328ad9be53e94d5c
2024-03-07 05:34:54 +00:00
4beab40010
Merge pull request #123435 from tallclair/apparmor-ga
...
AppArmor fields API
Kubernetes-commit: bd25605619cbfb46b075002a6db58b4e489fc8cb
2024-03-07 05:34:52 +00:00
Kubernetes Publisher
David Ashpole
Ben Luddy
xyz-li
Taehoon Yoon
Cici Huang
Davanum Srinivas
Marek Siarkowicz
Lukasz Szaszkiewicz
Sean Sullivan
Anish Ramasekar
Marek Siarkowicz
Monis Khan