Commit Graph

2517 Commits

Author SHA1 Message Date
Kubernetes Publisher b663bdd6e2 Merge pull request #75270 from justincormack/uuid4
Use UUIDv4 not UUIDv1

Kubernetes-commit: 83d467c22e428fdb685fff3608e467531615d143
2019-03-22 10:55:51 +00:00
Joe Betz 4cc45f82fc Add resourceVersion=0 paginated list integration test for disabled and enabled watch cache
Kubernetes-commit: e5a4f09ab3ac15815ceb039fbc7f546266855fd6
2019-03-21 11:25:07 -07:00
fansong.cfs c302cc97dd delivery event non blocking firstly
Kubernetes-commit: 8910abfdf3d13faf2bf415dc1019006fb06cbc9f
2019-03-21 17:11:58 +08:00
Kubernetes Publisher be70ee9701 Merge pull request #75264 from smarterclayton/optimize_rbac_visit
Avoid allocating when performing VisitRulesFor on service accounts

Kubernetes-commit: ed4258e5c0d722425b1c7744b2bf09ad0d9fbfea
2019-03-21 02:58:03 +00:00
Kubernetes Publisher e401ca3b79 Merge pull request #75279 from danielqsj/admission-metrics
remove the deprecated admission metrics

Kubernetes-commit: 5229bce04fc7d632f9349480267807a1d41fedf8
2019-03-20 14:53:29 +00:00
Kubernetes Publisher d5ae2df97a Merge pull request #71548 from smarterclayton/watch_converted
Support Table and PartialObjectMetadata on watch

Kubernetes-commit: 6f9bf5fe98bcc3b436fea4d6dd345a1502d20778
2019-03-20 06:55:11 +00:00
Kubernetes Publisher 7845c0df69 Merge pull request #73409 from yue9944882/bugfix/compatible-with-nil-authorizer
Fixes authz compatibility w/ nil authorizer in apiserver

Kubernetes-commit: a6677d6f3e2bf66299bf96a8737f2babf0327212
2019-03-20 02:51:46 +00:00
Joe Betz f90442e3fb Paginate List call performed by Reflector's ListAndWatch call
Kubernetes-commit: 84723c2d3ef5ff5d30aadd1ad72068bf2254358c
2019-03-14 13:26:19 -07:00
Kubernetes Publisher 39e839dff0 Merge pull request #75289 from dims/update-http2-dep-go-1.12
Update golang.org/x/net/... dependencies to release-branch.go1.12

Kubernetes-commit: e7d09ceb5019153831b4921ff35a170e46f634d2
2019-03-13 12:07:55 +00:00
Kubernetes Publisher 12dc5a8c75 Merge pull request #75277 from jennybuckley/fix-ints
Fix server side apply int/float bug

Kubernetes-commit: 93402fc8e85dd980af2ca2007232065bb9cf0d5d
2019-03-13 04:00:33 +00:00
Kubernetes Publisher 91bbfdf08d Merge pull request #74040 from ajatprabha/issue_73648
add ResourceVersion to DeleteOptions.Preconditions

Kubernetes-commit: cc8afb25fcfbb2a12ef43300db89d724b284e3e3
2019-03-13 00:00:49 +00:00
Kubernetes Publisher 71c2b3645e Merge pull request #75157 from aaron-prindle/version-check-apply
Added version check between patch and live object in server side apply

Kubernetes-commit: 0977ab69ade1fb9e286fe8cc6075fe1ac00ef3ca
2019-03-12 23:59:57 +00:00
Davanum Srinivas aa150a0715 Update to go 1.12 version of golang.org/x/net
Change-Id: I3f2fa5d7b6811c9eca58992318d19e44ec9131fd

Kubernetes-commit: 2aa1348e6cf4d51f91025c41d41bb7e3b9b9384d
2019-03-12 09:16:45 -04:00
Kubernetes Publisher c1d3c7c86e Merge pull request #72942 from caesarxuchao/expose-storage-version-hash
Populate the storage version hash

Kubernetes-commit: eb6a1b651c43aa74d2dfcf2ca6115f77cb06b6ce
2019-03-12 07:58:40 +00:00
jennybuckley aabe804197 Fix int/float apply bug
Kubernetes-commit: 10259c959e9f20668659f7e20251a217b51c6355
2019-03-11 23:07:21 -07:00
danielqsj 1de9bb3580 remove the deprecated admission metrics
Kubernetes-commit: b31a3403c4b60d421900d9ddef3a27d23ea9c4c6
2019-03-12 14:06:38 +08:00
Justin Cormack bd2409decf Use UUIDv4 not UUIDv1
UUIDv1 has several disadvantages:
 - it encodes the MAC address of the host, which is a potential privacy issue
 - it uses the clock of the host, which reveals time information
 - the clock is very coarse, hence the complex code handling duplicates

UUIDv4 is simply a 122 bit random number encoded into the UUID format, which
has no problems with duplicates or locking.

Use the google/uuid library, as newer versions of pborman/uuid just wrap the
Google upstream.

Note that technically a random UUID might fail, but Go ensures that this
should not take place, as it will block if entropy is not available.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>

Kubernetes-commit: 0fb4b81c3f5139d09208b63a62574d0eb85e0390
2019-03-11 20:30:20 +00:00
Clayton Coleman 49ac3bd853 Avoid allocating when performing VisitRulesFor on service accounts
Service account authorization checks are done frequently and were
observed to perform 7% of allocations on a system running e2e tests.
The allocation comes from when we walk the authorization rules to
find matching service accounts.

Optimize the check for service account names to avoid allocating.

Kubernetes-commit: 4c87a14e6b1809359fcb6566d883a169ff0db259
2019-03-11 11:50:44 -04:00
David Eads 121f70dcfd provide verbose output when health check fails
Kubernetes-commit: 3874e43550385c0f4adddc4ccbedf12478233692
2019-03-08 15:49:29 -05:00
Aaron Prindle a595f8c602 Added version check between patch and live object in server side apply
What is the problem being solved?
https://github.com/kubernetes/kubernetes/pull/75135
Currently version compatibility is not being checked in server side apply between the patch object and the live object.  This is causing a merge that will error to be run and the apiserver returns a 500 error.  The request should fail if the apiVersion provided in the object is different from the apiVersion in the url, but it should fail before trying to merge, and be a 4xx error. Probably a bad request error.

Why is this the best approach?
The approach of serializing the patch byte array and then checking for version equality with the already serialized live object is the simplest and most straightforward solution.

Kubernetes-commit: d5bd17cda0c134e5ef5c03c3eac79a9ce4e18003
2019-03-07 16:52:26 -08:00
ajatprabha 9f2ef664a0 update testDeleteWithResourceVersion
Kubernetes-commit: fe3b9f486fe988cf6b6cd83c54c2be77892fa123
2019-02-25 22:43:28 +05:30
Yassine TIJANI 72bd8c7a64 use cache size to signal undecorated storage
Kubernetes-commit: 8261d3d9a63f0972453f6503b62299a96ecee657
2019-02-20 22:15:24 +01:00
wojtekt 6ef883ed27 Reduce critical sections in watchache
Kubernetes-commit: 010cb4480825b54afb85c9fa97e2edc950a6d185
2019-02-20 10:41:50 +01:00
ajatprabha ad205f8388 add ResourceVersion check to Preconditions#Check
Kubernetes-commit: 3135cea2cce02bc8c6796e97f4579d538f357f74
2019-02-15 12:30:34 +05:30
ajatprabha e6793285a2 check for ResourceVersion conflict in separate if block
Kubernetes-commit: 42f0a36f44bac33f4230fdea9f3dcc4bfb645a0a
2019-02-15 04:37:18 +05:30
ajatprabha 10074505ca add ResourceVersion to DeleteOptions.Preconditions
Kubernetes-commit: 8f48d762717dfe1f479cfabaabc4fb9261a1bc8f
2019-02-14 04:09:12 +05:30
yue9944882 95755841db fixes compatibility w/ nil authorizer in apiserver
Kubernetes-commit: 2486174142023ef785f196afee69bbcb78ae1f52
2019-01-29 00:38:57 +08:00
Chao Xu 22170dcd1d generated BUILD
generated proto

Kubernetes-commit: 887cb93d8d74ac6491df850edef051bf607fceb6
2019-01-15 13:41:53 -08:00
Chao Xu d99ef88606 Expose storage version hash
Kubernetes-commit: 3b618af0d435628feedf06f97bd1c69340d07d95
2019-01-14 19:31:25 -08:00
Kubernetes Publisher 7ec69625ac sync: update godeps 2019-03-11 16:10:03 +00:00
Kubernetes Publisher a7b2fc7349 Merge pull request #75151 from jennybuckley/fix-conversion-bug
Fix apply conversion bug

Kubernetes-commit: 92b66c5c0251a2258c5a7092086306570fc0085b
2019-03-09 15:15:26 -08:00
jennybuckley 2deaad0322 Fix version converter
Kubernetes-commit: f9e57744d3e760b1473cb22e655d20c254af03b6
2019-03-07 17:44:21 -08:00
Kubernetes Publisher e0e99f3706 Merge pull request #74760 from apelisse/add-mangerfield-flag
Add "fieldManager" to flag to PATCH/CREATE/UPDATE

Kubernetes-commit: 0b4275b6c7ecd55cfd9916dbef8fe48ae4a8c733
2019-03-09 17:27:41 +00:00
Antoine Pelisse 46d98f52ff Add "fieldManager" to flag to PATCH/CREATE/UPDATE
And add a corresponding flag in kubectl (for apply), even though the
value is defaulted in kubectl with "kubectl".

The flag is required for Apply patch-type, and optional for other PATCH,
CREATE and UPDATE (in which case we fallback on the user-agent).

Kubernetes-commit: eb904d8fa89da491f400614f99458ed3f0d529fb
2019-02-16 20:16:11 -08:00
Kubernetes Publisher d80a467281 Merge pull request #75201 from joelsmith/secdoc
Update embargo doc link in SECURITY_OWNERS and change PST to PSC

Kubernetes-commit: 8bde75e63f9313fdc1d4f9a806b4b3a8ea128565
2019-03-08 23:56:52 +00:00
Kubernetes Publisher ad70cc83d4 Merge pull request #74997 from jennybuckley/apply-metrics
Track dry-run and apply in metrics

Kubernetes-commit: 81e8401127db6cc98bb591074d7bd4f2c560fb2a
2019-03-08 23:55:58 +00:00
Kubernetes Publisher 4834761c7e Merge pull request #75075 from kwiesmueller/fix-fieldmanager-sorting
fix handling of nil times in managedFields sorting

Kubernetes-commit: 8634ebed22e08e085901d0b5a789723933c5b5f9
2019-03-08 23:55:57 +00:00
Joel Smith 48fee91373 Also update SECURITY_CONTACTS from staging
Kubernetes-commit: 7fd6ea47e8fd53dd4e152e59094628ad794e7d4a
2019-03-08 11:23:24 -07:00
Kubernetes Publisher 7b53d00e2c Merge pull request #74998 from mbohlool/pippin
Webhook configurations can choose which version of Review request they accept

Kubernetes-commit: e318642946daab9e0330757a3556a1913bb3fc5c
2019-03-08 16:01:50 +00:00
Kubernetes Publisher 87d65d9bc7 Merge pull request #74433 from tallclair/runtimeclass-internal
Migrate RuntimeClass from a CRD to an internal API

Kubernetes-commit: 183e6cc1902c2088a40e60cf4138bd829d4ad80f
2019-03-08 08:00:24 +00:00
jennybuckley 638c313e5b Feature-gate the APPLY metric value
Kubernetes-commit: 6e512eb8758fb32878d7baa33daf3c49561086c0
2019-03-07 15:14:43 -08:00
jennybuckley 4a5bf1da2a use utilsets.NewString
Kubernetes-commit: 077dd28df4025c69b89e75b0f32cb0954401ec80
2019-03-07 14:20:10 -08:00
Kevin Wiesmüller a2d254807d fix handling of nil times in managedFields sorting
Kubernetes-commit: 186761efee887cee019bc92a85b3207474b42185
2019-03-07 00:02:52 +00:00
jennybuckley ac3850113b handle validation errors correctly
Kubernetes-commit: 51b75460aa356a6b07cd5d727cc3ad6c00a13f20
2019-03-06 15:57:18 -08:00
Tim Allclair d12d3f4d2a generated files
Kubernetes-commit: 428e9fa3299161be420fcfa7987d0e37aca3ea01
2019-03-06 14:36:30 -08:00
Kubernetes Publisher e4bad3d1f2 Merge pull request #74904 from sttts/sttts-proto-tests
Rework proto generation scripts and add tests

Kubernetes-commit: f8024ab087b321190a3bdcd29e0d22ef7cbb4b45
2019-03-08 03:57:48 +00:00
Kubernetes Publisher 3504460940 Merge pull request #71192 from roycaihw/crd-publish-openapi
Publish CRD openapi

Kubernetes-commit: 0b48018a39c26f86c4f04fe0b5544d7624d4495f
2019-03-07 16:33:00 +00:00
Kubernetes Publisher 089a1f5e17 Merge pull request #74837 from mtaufen/godep-klog
Update klog dependency

Kubernetes-commit: eb95c27a5574e6ac2b166f9a6942226087c351e0
2019-03-07 16:32:20 +00:00
Kubernetes Publisher f665a4ee74 Merge pull request #74981 from jennybuckley/update-vendor
Update sigs.k8s.io/structured-merge-diff version

Kubernetes-commit: 83f6b8869f4430d9698077ea26f98d3fbadb17e7
2019-03-07 16:31:39 +00:00
Kubernetes Publisher 9bdc2ccc5b Merge pull request #74959 from deads2k/hook-reg
track poststarthook registration stacks for debugging

Kubernetes-commit: db87da1c7699f04c08f78297de3fd00097e64b20
2019-03-07 16:30:00 +00:00