6e1838f4b1
Merge pull request #121906 from ahutsunshine/namespace-indexer
...
support namespace indexer for namespaced resources like pods
Kubernetes-commit: 2eb2a62e154d806af59cae9084e3846e7fc215d5
2023-12-14 01:33:19 +00:00
627bf4c0ce
Merge pull request #121815 from HirazawaUi/decode-respect-timeout-context
...
make the decode function respect the timeout context
Kubernetes-commit: 91655922197276ced2e4e36114bb753e384dbd83
2023-12-14 01:33:18 +00:00
36a3042e29
Merge pull request #121759 from thockin/fix_api_violations
...
Fix "list_type_missing" API violations in meta/v1
Kubernetes-commit: 8a22571ebb7628b2dd2c2faf453293040b7efaef
2023-12-14 01:33:16 +00:00
ce4326191e
Merge pull request #121625 from siyuanfoundation/refactor2
...
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
Kubernetes-commit: 09c5396607111c6540f61eeba88b124c77687057
2023-12-14 01:33:15 +00:00
00f757bfc4
Merge pull request #121624 from jiahuif-forks/fix/cel/lazy-map-context-eval
...
CEL lazy map: use context for lazy evaluation.
Kubernetes-commit: f7def00e6635366847a3a121881991b9cb341692
2023-12-14 01:33:14 +00:00
16536b9b63
support pod namespace indexer
...
fix comments
optimize code
small optimization for the namespace scope check
Kubernetes-commit: d8bd150784bb4825ae891dd0ec84625bdba0f2b8
2023-11-29 15:51:24 +08:00
7674c1a859
Fix list_type_missing in k8s.io/apiserver
...
Kubernetes-commit: eddf65849dfa1b3c351597d7018a2700371d8955
2023-11-17 11:46:28 -08:00
d6876a0600
Merge pull request #121822 from ritazh/webhookauthz-benchmark
...
[StructuredAuthz] Webhookauthz benchmark
Kubernetes-commit: 68e3cedce2085c4476fca17770eab9203b6fbc58
2023-11-14 17:26:23 +00:00
9863f526b5
Re-vendor k8s.io/kube-openapi
...
./hack/pin-dependency.sh k8s.io/kube-openapi 778a5567bc1edaed92a4de9c07f90199c67953fa
./hack/update-vendor.sh
Kubernetes-commit: 1f55357d9937f076f532a2c1aa104593b9f6c49a
2023-11-13 10:59:57 -08:00
59c9103d07
Merge pull request #121808 from cpanato/go-update-main
...
[go] Bump images, dependencies and versions to go 1.21.4
Kubernetes-commit: 6ba7258a0f3f73629560fc30016b2e35c8e7ae9c
2023-11-13 17:32:39 +00:00
c4ab5aa41a
add false matchCondition benchmark
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 7c5dfceff8a4de3387b48e941d098a3957de2870
2023-11-13 09:22:24 -08:00
e319da4264
split compile and eval
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 11cdb8fd011a931d34506ade65e966f7c5208ae7
2023-11-08 16:37:10 -08:00
f0d5068944
authz: add benchmark for webhook authorizer
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: fe53db0dbdc25c9b2f87adbd53f1ebe4b6c1169d
2023-11-08 15:38:11 -08:00
88cd5253fa
make the decode function respect the timeout context
...
Kubernetes-commit: 3fb16abfca43f53048a28758f2366cb52e31d2b7
2023-11-08 23:39:10 +08:00
7bd75806d6
update go.mod
...
Signed-off-by: cpanato <ctadeu@gmail.com>
Kubernetes-commit: 9e5b8402bb95eb82541099e77c3a8b0ccd31297f
2023-11-08 08:46:15 -06:00
10c70bebf9
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed
...
fix test store delete collection function failed
Kubernetes-commit: f927d5b385c9d6f8870cf9ae6c38cb96d54c23df
2023-11-07 21:25:39 +00:00
f834404133
fix test store delete collection function failed
...
Kubernetes-commit: b12db6d9b55e02b232b716683a2d516e1788a9ce
2023-11-08 00:07:45 +08:00
dab5ebce44
Merge pull request #121709 from aramase/aramase/f/authn_user_info_fix
...
[StructuredAuthn] Ensure empty fields of user object are accessible by CEL
Kubernetes-commit: c3eebb233d000ac2dbbd559725124a79bf40d0f0
2023-11-03 05:24:07 +00:00
b20a2d3074
Merge pull request #121705 from liggitt/authz-config-webhook-test
...
Add multi-webhook integration test
Kubernetes-commit: fb9c94b3a50aa9f95a6153fb04d844decedbcf33
2023-11-03 01:25:01 +00:00
17a9a816ec
[StructuredAuthn] Ensure empty fields of user object are accessible by
...
CEL
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: b693f09d544b17c82af4437bd93ea0b165e2622e
2023-11-02 22:20:06 +00:00
2a9f8b8d15
Include empty string attributes for CEL authz evaluation
...
Kubernetes-commit: 44d89c8cf8c1ba883029e1244492a523d6b50b92
2023-11-02 15:14:06 -04:00
4eacc8425d
Plumb failure policy from config to webhook construction
...
Kubernetes-commit: 2e2f51a4417d93b5505091d28b319365dc95e137
2023-11-02 13:55:35 -04:00
374f72b704
Require match condition version only if matchConditions are specified
...
Kubernetes-commit: a000af25ff3bcc79fe7d8da299225ad252c9894a
2023-11-02 13:54:39 -04:00
798e645af6
Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
...
bump etcd newest version: v3.5.10
Kubernetes-commit: 974735854b7fdfba2d0a67dbc15457c259e40aff
2023-11-01 17:29:14 +00:00
d0f0eebe8c
Merge pull request #121552 from pohly/klog-update
...
klog v2.110.1 update
Kubernetes-commit: da61382068671c3e16782a9b45e7f2159ac0feb9
2023-11-01 17:29:12 +00:00
09fd766b6a
bump to newest etcd: v3.5.10
...
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
Kubernetes-commit: bc1df9e7dab085b0d6301ac96f6b7e3ff90836ee
2023-11-01 10:44:07 +08:00
59297e78dd
use context for lazy evaluation.
...
Kubernetes-commit: 4fa3247a61e21abcb31778f8bfb85af844a6bd03
2023-10-30 11:29:57 -07:00
cef6db2cfb
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
...
Extract the logic to determine withRev to a separate method for better readability.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: 624169c5b50ee8a6e9a761e9488134985334817e
2023-10-20 12:59:46 -07:00
e2d4a4f3e2
dependencies: klog v2.110.1
...
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378 )
Kubernetes-commit: 878d037d3ba8fc4f11bf45a6cf5a66301ba89d82
2023-10-16 10:03:54 +02:00
c78de1fe6c
Merge pull request #121575 from apelisse/update-smd
...
Update sigs.k8s.io/structured-merge-diff to v4.4.0
Kubernetes-commit: 593a17d3b6381bfdbf3bc3b36f56cad30d1531df
2023-11-01 01:32:06 +00:00
caeb7958ad
Merge pull request #121078 from aramase/aramase/f/kep_3331_cel_integration
...
Implement CEL for StructuredAuthenticationConfig
Kubernetes-commit: fafccc0c9a514caa72e5a16ea0d6213081081e19
2023-11-01 01:32:05 +00:00
a5e47d114d
Merge pull request #121645 from p0lyn0mial/upstream-fix-race-in-test-forget-watcher
...
bring back: cacher: when forgeting a watcher, call stopWatcherLocked multiple times
Kubernetes-commit: 715cd17c0d050174a7268360378f69cda2df3184
2023-11-01 01:32:03 +00:00
31543f677a
Merge pull request #121651 from jiahuif-forks/fix/cel/type-resolver-safe-guard
...
CEL type resolvers: avoid infinite recursion for type resolvers.
Kubernetes-commit: 3631efd85c1a772b518ad49fb20bb5b5454e6b90
2023-10-31 21:29:01 +00:00
d463ec4cab
avoid infinite recursion for type resolvers.
...
Kubernetes-commit: e4776e0f85b8aceb8f1da7a87822b0d086045a8a
2023-10-31 10:23:50 -07:00
4909d085b8
Merge pull request #121649 from enj/enj/c/ec_controller_ctx
...
encryptionconfig/controller: run unit tests faster
Kubernetes-commit: 029452198566a41bc39d04a1ec5bad3f37621a1c
2023-10-31 21:28:57 +00:00
347a598452
Merge pull request #121647 from aojea/fixrace
...
Revert "cacher: when forgeting a watcher, call stopWatcherLocked mult…
Kubernetes-commit: 3570075e4f6d3cdb2aa8273004ea6ec336b33abd
2023-10-31 21:28:56 +00:00
9e76120f1e
Merge pull request #121646 from kubernetes/revert-121614-decode-respect-timeout-context
...
Revert "Make the decode function respect the timeout context"
Kubernetes-commit: be636a436b7b4c21b79eca17ff3e681920e54f31
2023-10-31 21:28:55 +00:00
0f520bf96f
Merge pull request #121577 from cici37/celFixPick
...
Bump cel-go to v0.17.7 and introduce set ext library with new options
Kubernetes-commit: d1113c9a00b3cd1c791f43b15280d4ebba2a7663
2023-10-31 21:28:54 +00:00
8acc6c6568
Merge pull request #121638 from tkashem/apf-ga
...
apiserver: set APF featuregate to stable
Kubernetes-commit: 74fefd877f0ee9445735a756270f8eac44a96d0b
2023-10-31 21:28:52 +00:00
3097e77b18
encryptionconfig/controller: run unit tests faster
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 6ac7da1da87bb0e739806cad94676da915be6d9c
2023-10-31 11:59:37 -04:00
bdad50b280
Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
...
This reverts commit bbca4a4b9add0f6c58e132500fd89dd39ee077f4.
Kubernetes-commit: c2cb3209138d852520da2743b9bd3a9795b2b7fb
2023-10-31 15:28:01 +00:00
6caf326620
Revert "Make the decode function respect the timeout context"
...
Kubernetes-commit: 98a2f22e740ccd2c30711f1b21d6383f1b91595e
2023-10-31 16:27:17 +01:00
c6b93e573e
Merge pull request #121615 from p0lyn0mial/upstream-cacher-forget-watcher
...
cacher: when forgeting a watcher, call stopWatcherLocked multiple times
Kubernetes-commit: 5bac451d1f0f36eab857b60d08bfa9d992cce19a
2023-10-31 13:24:00 +00:00
f89f0b61d3
Merge pull request #121223 from ritazh/authz-cel
...
[StructuredAuthorizationConfig] - CEL integration
Kubernetes-commit: 064e86b3d03470f515b1adb34cac1cfacb285239
2023-10-31 13:23:59 +00:00
89717616cb
Merge pull request #121049 from siyuanfoundation/refactor
...
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
Kubernetes-commit: e8d45596dfbdf69fd42aa6881dfdeb089a20ab33
2023-10-31 13:23:58 +00:00
b3499eec62
apiserver: set APF featuregate to ga
...
Kubernetes-commit: c7fcef187562e1b3ffdaa2e2109c65d800b8f5d5
2023-10-31 08:35:52 -04:00
a0b1b995d0
Merge pull request #121089 from tkashem/apf-v1
...
Promote APF API to v1
Kubernetes-commit: f5a5d83d7c027aba86e18c52da8ec4cd14179be3
2023-10-31 05:27:57 +00:00
71515a8a0a
Merge pull request #120780 from munnerz/bound-token-improvements
...
Including JTI & node reference in issued service account tokens (kep 4193)
Kubernetes-commit: ab13d0b47c790cfcf8b623a10ea08336a458a5b6
2023-10-31 01:25:35 +00:00
96ed0730bb
Merge pull request #120300 from wojtek-t/refactor_streaming_watch_encoder
...
Refactor streaming watch encoder to enable caching
Kubernetes-commit: 2a4d5c5fd52492ceac500555579a28701d1092ce
2023-10-31 01:25:34 +00:00
82eb11670e
Merge pull request #121614 from HirazawaUi/decode-respect-timeout-context
...
Make the decode function respect the timeout context
Kubernetes-commit: 2a1140305cf602190012748a163534dfe4364be2
2023-10-31 01:25:32 +00:00
Kubernetes Publisher
ahutsunshine
Tim Hockin
Rita Zhang
HirazawaUi
cpanato
Anish Ramasekar
Jordan Liggitt
guangli.bao
Jiahui Feng
Siyuan Zhang
Patrick Ohly
Monis Khan
Antonio Ojea
Wojciech Tyczynski
Abu Kashem