Commit Graph

6217 Commits

Author SHA1 Message Date
Monis Khan 6ab879299d token/cache: use go 1.20's approach for no-copy string/bytes conversions
Note that this fixes a bug in the existing `toBytes` implementation
which does not correctly set the capacity on the returned slice.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: aa80f8fb856bb2b645c90457f9b1dd75e4e57c73
2023-02-21 12:24:21 -05:00
Kubernetes Publisher a8f9a38ca8 Merge pull request #116155 from enj/enj/f/dek_reuse
kmsv2: re-use DEK while key ID is unchanged

Kubernetes-commit: 4950f519039918c5f247a4cec7cf5b824bb16c92
2023-03-15 07:35:29 +00:00
Andrew Sy Kim 53a2449e3c apiserver: exclude APF queue wait time from SLO latency metrics (#116420)
* apiserver: add latency tracker for priority & fairness queue wait time

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: exclude priority & fairness wait times to SLO/SLI latency metrics

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: update TestLatencyTrackersFrom to check latency from PriorityAndFairnessTracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add helper function observeQueueWaitTime to consolidate metric and latency tracker calls

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: replace time.Now() / time.Since() with clock.Now() / clock.Since() for better testability

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add unit test TestQueueWaitTimeLatencyTracker to validate queue wait times recorded by latency tracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

---------

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: ee18f602523e11a80823a659bed8f70f98a12914
2023-03-15 07:35:21 +00:00
Kubernetes Publisher d3d464578a Merge pull request #115668 from jiahuif-forks/feature/validating-admission-policy/type-system
Type System for ValidatingAdmissionPolicy

Kubernetes-commit: 152876a3eb9c6211c48bb159c87e2bf834e4eedc
2023-03-15 07:35:12 +00:00
Jiahui Feng fc16fc2926 implmementing type checking
with multi-type support.

Kubernetes-commit: feb18b3f5f9d443c27dd8cccb6358f271f887744
2023-03-07 15:49:19 -08:00
Kubernetes Publisher 194b6423a9 Merge pull request #116397 from jiahuif-forks/feature/validating-admission-policy/message-expression
MessageExpression for ValidatingAdmissionPolicy

Kubernetes-commit: 6b3e2b7873f8518b95f5b09fa04f5f316669c7b2
2023-03-14 05:47:52 +00:00
Jiahui Feng 52ca13e6fc implement message expression.
Kubernetes-commit: d8be7aa9ca99070e42cdef37b8c4af07b754520e
2023-03-08 17:36:11 -08:00
Kubernetes Publisher 5fe8da4de2 Merge pull request #116542 from enj/enj/f/go1.20
Explicit bump to go 1.20

Kubernetes-commit: de9ce03f19e8b1ace1e79fae17119820c4232b67
2023-03-13 21:38:00 +00:00
Monis Khan b01238ab32 Explicit bump to go 1.20
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: ba471884fba92246e1547ce4a27f9d5e735afc60
2023-03-13 12:47:36 -04:00
Kubernetes Publisher 7a11b7b1b3 Merge pull request #116436 from wojtek-t/fix_watch_cache_2
Fix incorrect watch events when watch is initialized simultanously with reinitializing watchcache

Kubernetes-commit: 36b29b38bb3f38db3439bdf568cad1f856998b0a
2023-03-11 02:01:45 +00:00
Kubernetes Publisher a45b9813bc Merge pull request #114497 from dgrisonnet/pod-logs-metrics
Remove redundant subsystem in kube-apiserver pod logs metrics name

Kubernetes-commit: 94e30facdbe4d21234a07da0b7998b4b8a3b1414
2023-03-11 02:01:38 +00:00
Kubernetes Publisher 5494077b73 Merge pull request #111372 from HeavenTonight/master
code cleanup

Kubernetes-commit: 7529178924a997708fa1ad93b32d00326cc27fb0
2023-03-10 21:07:01 +00:00
Kubernetes Publisher 0202e4e14e Merge pull request #116108 from Jefftree/agg-discovery-enb
Enable Aggregated Discovery for Beta

Kubernetes-commit: d8fe8454157cfcc79dba292e67c6919be36b6266
2023-03-10 21:06:59 +00:00
Kubernetes Publisher 07f0d43ace Merge pull request #115630 from Jefftree/agg-discovery-metrics
Add metrics for aggregated discovery

Kubernetes-commit: 2e3c5003b96aef29e87ee24c9086ff7f06cb8886
2023-03-10 17:21:06 +00:00
Kubernetes Publisher 4bde4d74d6 Merge pull request #110772 from p0lyn0mial/upstream-reflector-gets-stream
client-go: Add support for API streaming to the reflector

Kubernetes-commit: 90c3232de77aa0dd09b948ffdd27c575688fba8a
2023-03-10 17:21:04 +00:00
Kubernetes Publisher 8b3d5d0ea8 Merge pull request #116349 from apelisse/use-smarter-cache
Update kube-openapi to 15aac26d736a

Kubernetes-commit: a034962173e2b481d59e81178e3897870511ec7d
2023-03-10 09:06:47 +00:00
Kubernetes Publisher 860d453bc1 Merge pull request #115969 from DangerOnTheRanger/messageExpression-for-crd
Add messageExpression field for CRD validation

Kubernetes-commit: 16d2d55bc06158124a41f3ee8cf567e63ddd9d21
2023-03-10 09:06:40 +00:00
Kubernetes Publisher 7a3a376fee Merge pull request #115065 from apelisse/apimachinery-managed-fields
managedfields: Move most of fieldmanager package to managefields

Kubernetes-commit: e8ae6658ed13fb7dbeb595cf29418f74a523d895
2023-03-10 09:06:35 +00:00
Kubernetes Publisher e97010c727 Merge pull request #115149 from nilekhc/encrypt-all
Allow encryption for all resources

Kubernetes-commit: 30ee6914c54269c5898582c984a3f21f9c6710e9
2023-03-09 04:00:56 +00:00
Kubernetes Publisher 2fa0308197 Merge pull request #116393 from liggitt/etcd-cancel-error
Recognize etcd/grpc cancel errors correctly

Kubernetes-commit: 7fe0fb7fbfd3d6a8e07d6cc732d963767b2b0c58
2023-03-09 04:00:50 +00:00
Kubernetes Publisher 629c615880 Merge pull request #116235 from Jefftree/oas-ga
Promote OpenAPI V3 to GA

Kubernetes-commit: 4a896644de963d87bd863efc4e3ebd9984161e8d
2023-03-08 23:55:40 +00:00
Jordan Liggitt 8ea1930d95 Recognize etcd/grpc cancel errors correctly
Kubernetes-commit: 267eb25e60955fe8e438c6311412e7cf7d028acb
2023-03-08 15:51:25 -05:00
Kubernetes Publisher fce9e57448 Merge pull request #116144 from dashpole/apiserver_tracing_beta_round_2
Graduate API Server tracing to beta

Kubernetes-commit: 548e856b5820bb19a08f48211bad6d010b77de10
2023-03-07 19:31:12 -08:00
Kermit Alexander II fb14f0e553 Implement MessageExpression.
Kubernetes-commit: 4e26f680a9e10f0da94830bbaba9633807e22aba
2023-03-07 23:24:23 +00:00
David Ashpole fd3a7591f6 graduate API Server tracing to beta
Kubernetes-commit: 4014d0fbbf93f3bb9002b1e37a125840f7be131b
2023-03-07 21:39:39 +00:00
Kubernetes Publisher 8e839569be Merge pull request #116264 from ivelichkovich/versionedattrrefactor
migrate versionedattr to avoid circular dependency

Kubernetes-commit: 323ad355b43d408aafc164544be0ef002cf8eb5e
2023-03-07 23:47:26 +00:00
Kubernetes Publisher 8c3361fbd6 Merge pull request #116302 from p0lyn0mial/upstream-cacher-initial-events-rv-gt-zero
cacher: WaitUntilWatchCacheFreshAndForceAllEvents

Kubernetes-commit: 05f9e2a3aab47aaea9a2ebfedc7ac6db516e18c4
2023-03-07 19:54:32 +00:00
Kubernetes Publisher f09ba7dd91 Merge pull request #116103 from cici37/context
Apply context cancellation to ValidatingAdmissionPolicy

Kubernetes-commit: 1030693d4eeceb63df0e060e9c68c7bcbcf01fec
2023-03-07 16:03:02 +00:00
Lukasz Szaszkiewicz 515ef372fb cache/controller: Add ENABLE_CLIENT_GO_WATCH_LIST_ALPHA
Kubernetes-commit: 966b26d55c22f7fbf20841a3a993de4f984d88db
2023-03-07 12:34:11 +01:00
Cici Huang 19b3ccef1c Rebase changes.
Kubernetes-commit: 1445e0371f83895c19b740bead95d1cd1c81f5a2
2023-03-07 06:50:33 +00:00
Joe Betz 0670e5fe76 Add test for context cancellation.
Kubernetes-commit: 92e5b09471933bcdd6836c725939896c1d0cc0e6
2023-03-06 23:32:29 +00:00
Lukasz Szaszkiewicz 04eaa5f0f0 cacher: Add WaitUntilWatchCacheFreshAndForceAllEvents method
this method waits until cache is at least
as fresh as given requestedWatchRV if sendInitialEvents was requested.
Additionally, it instructs the caller whether it should ask for
all events from the cache (full state) or not.

Kubernetes-commit: 21fb98105043d1a15ef48089ef231931851d2d15
2023-03-06 14:58:31 +01:00
Igor Velichkovich 9608de14c4 migrate versionedattr to avoid circular dependency
Kubernetes-commit: 64c426a90232e34853d9b9cfdaad5409371c191a
2023-03-03 14:04:29 -06:00
Wojciech Tyczyński 6cab3e1a4b Fix setting resource version after init events for RV=0 case
Kubernetes-commit: 6fb59e94a31cc0288c861e791e5b6e3d9903ca84
2023-03-03 13:22:13 +01:00
Wojciech Tyczyński 50f153f229 Fix the bug of returning future data in watch
Kubernetes-commit: 0bc0ad01c9d91fe4baebcef449bdd538a0e91728
2023-03-03 13:10:42 +01:00
Cici Huang f58819aa69 Apply context cancellation to ValidatingAdmissionPolicy.
Kubernetes-commit: c400002facd01a8b0fc10ca4f5a66c8b8abd94c4
2023-03-03 00:18:47 +00:00
Kubernetes Publisher e289f0d9a0 Merge pull request #115973 from jpbetz/enforcement-actions
KEP-3488: Implement Enforcement Actions and Audit Annotations

Kubernetes-commit: 04675428bbfc9bf7ba4c9e1abfc427b6228069d9
2023-03-07 07:59:23 +00:00
Joe Betz 265820879d Implement validationActions and auditAnnotations
Kubernetes-commit: d221ddb89a5dde5a6f55674dc38aa71cc842d481
2023-03-06 17:29:28 -05:00
Kubernetes Publisher 1e9e30ec0b Merge pull request #115747 from cici37/rc
Apply cost constraints to ValidatingAdmissionPolicy

Kubernetes-commit: 8c61473f1ce7734bd9399c55d0b057b1f21f97d6
2023-03-07 04:01:07 +00:00
Kubernetes Publisher 389f90177b Merge pull request #116309 from jiahuif-forks/feature/validating-admission-policy/skip-reconcile-unchanged-spec
skip reconcile for if Spec is unchanged.

Kubernetes-commit: 5ce7038488da8bc4cf5b3b45983b6a3a49f68922
2023-03-06 23:55:12 +00:00
Kubernetes Publisher 304a6405ad Merge pull request #116267 from jiahuif-forks/feature/cel/multi-type-provider
composited type systems for CEL.

Kubernetes-commit: c7c22ada758f0a37cbe34a19629630e3f36e061e
2023-03-06 23:55:07 +00:00
Kubernetes Publisher 044de75c61 Merge pull request #116054 from jpbetz/secondary-authz
KEP-3488: Implement secondary authz for ValidatingAdmissionPolicy

Kubernetes-commit: 64259b43b8e5b7c086bf2b74743dc7e73ebe37e3
2023-03-06 23:55:01 +00:00
Cici Huang e7c00895a3 Fix CI
Kubernetes-commit: 6d082116520ad96a4406f90383513551b7caaa68
2023-03-06 22:37:52 +00:00
Jiahui Feng e0113f0429 skip reconcile for unchanged Spec
for ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding.

Kubernetes-commit: bb0070754826e8073820752c3e9ba51fab11155b
2023-03-06 09:29:57 -08:00
Joe Betz f094db0dd5 Implement secondary authz
Kubernetes-commit: 7bbda746fee7ae4e50647099b72c02327525ef7a
2023-03-06 12:08:14 -05:00
Kubernetes Publisher 4e95c2b23c Merge pull request #116294 from p0lyn0mial/upstream-flaky-getcurrentrvfromstorage
cacher: deflake TestGetCurrentResourceVersionFromStorage

Kubernetes-commit: b6acf6f8056533c2d9bf6aa74d055a3fd071b94f
2023-03-06 16:00:39 +00:00
Lukasz Szaszkiewicz 96eac616a4 cacher: deflake TestGetCurrentResourceVersionFromStorage
Kubernetes-commit: 8fd9d573f03b80cb6fa9b300ae7286039ef73517
2023-03-06 11:22:31 +01:00
Cici Huang 16f5e2148c Update CRD validation rules path accordingly.
Kubernetes-commit: 1f4a9dd9187899a46a4fb86b52af50198da59aaf
2023-03-05 20:43:58 +00:00
Kubernetes Publisher 1cdc9eb33b Merge pull request #116166 from pohly/test-go-vet
fix "go vet" issues, check as part of golangci-lint

Kubernetes-commit: ff735dff85367c2a096c4065b8b3c1fbbeecabc4
2023-03-04 00:23:51 +00:00
Kubernetes Publisher 4d04ac1ed0 Merge pull request #116162 from apelisse/update-openapi
Update kube-openapi to afdc3dddf62d31f5e3868d699379c571a6007920

Kubernetes-commit: 253ab3eda71f250ad6692bb16f035cebaf0651c9
2023-03-04 00:23:44 +00:00