kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
7,400 Commits 30 Branches 1,482 Tags 31 MiB
Commit Graph

83 Commits

Author SHA1 Message Date
Cici Huang 92ee9330ce Allowing direct CEL reserved keyword usage in CRD (#126188) 
* automatically escape reserved keywords for direct usage

* Add reserved keyword support in a ratcheting way, add tests.

---------

Co-authored-by: Wenxue Zhao <ballista01@outlook.com>

Kubernetes-commit: a48a92c72ec7d4e2a8da396309abff9360faae75
 2024-07-24 01:23:51 +00:00
Patrick Ohly c1c9700b75 CEL: add QuantityDeclType 
Most functions in k8s.io/apiserver/pkg/cel work with DeclType for type
definitions, which made the existing QuantityType unusable with them. The new
QuantityDeclType fills that gap.

Kubernetes-commit: bcececadfb5b7deb3f6ecb253a73ea98a2fdd80c
 2024-07-17 19:36:36 +02:00
cici37 3d5977276b Promote metrics for VAP and CRD validation rules to beta. 
Kubernetes-commit: 95dbfa1c3d2f62e5d0f52788a2dd19fc61ca0a36
 2024-07-19 20:46:33 +00:00
Jordan Liggitt f14fc0f445 Adjust CEL cost calculation and versioning for authorization library 
Kubernetes-commit: 83bd512861aa11ec00a90e4ac382daa788dccf87
 2024-06-26 21:38:24 -04:00
David Eads efe135c937 Add CEL fieldSelector / labelSelector support to authorizer library 
Kubernetes-commit: be2e32fa3ed0a06ac9cc59d9966be0b40617c2b2
 2024-06-14 14:39:54 -04:00
Jordan Liggitt 9db3f571d5 Improve CEL cost tests to catch unhandled estimates or types 
Kubernetes-commit: 1d2ad282cff163e51e5c24569a0ac762ed814e74
 2024-06-26 21:38:48 -04:00
Jiahui Feng 2ae742ecb6 make Err wrap one or zero error. 
Kubernetes-commit: ce45a82346623d19168b0b85cbba5ba4ff164417
 2024-04-25 17:59:32 -07:00
Jiahui Feng 8be90f624a errors improvement. 
Kubernetes-commit: b846c39047289e69d932ea9d5d4dadc6856ad0c7
 2024-04-23 16:54:47 -07:00
Siyuan Zhang c80af88d21 Add composition flags for emulation version and feature gate. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>

Kubernetes-commit: 701e5fc3744c2b21ba5b1ca3399b71c9becf06d0
 2024-05-30 12:08:52 -07:00
Siyuan Zhang 22612a3528 apiserver: Add API emulation versioning. 
Co-authored-by: Siyuan Zhang <sizhang@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
Co-authored-by: Alex Zielenski <zielenski@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Kubernetes-commit: 403301bfdf2c7312591077827abd2e72f445a53a
 2024-01-19 16:07:00 -08:00
Cici Huang 73c903e9cd Update cel env to 1.30 
Kubernetes-commit: 6980cda87d548824a7cf33260096357ab3764bbe
 2024-05-09 15:39:30 -07:00
Cici Huang d44012e895 Adding the feature gates to fix cost for VAP and webhook matchConditions. 
Kubernetes-commit: d6e4115ead6b93d2accf688876471231b365ceae
 2024-05-01 16:26:41 -07:00
Alexander Zielenski 1412222ded feature: add name formats library to CEL 
Kubernetes-commit: 0ed65fca7a2e5fc643102952b5361fdeeedde4b5
 2024-02-28 18:04:33 -08:00
Alexander Zielenski 26d34beacd test: typecheck cel test cases 
Kubernetes-commit: 11a6edfc887f3bc983165d19b05fca566ed82ba7
 2024-04-19 13:52:22 -07:00
Jiahui Feng 63c6cc2b91 add trivial FindStructFieldNames to TypeProvider. 
Kubernetes-commit: 73d67d86132702795685bf43f47ad167c0108b5a
 2024-04-15 14:02:36 -07:00
Jiahui Feng 6f6178ef97 refit cost estimator with ast.Expr 
Kubernetes-commit: ac5391fa21fc80559f70b72c42e64d3fa7569a42
 2024-04-15 13:50:04 -07:00
Patrick Ohly 561da9109f cel: fix conversion of quantity to quantity 
The code in ConvertToType checked for conversion into typeValue (=
"kubernetes.URL") instead of conversion into quantityTypeValue (=
"kubernetes.Quantity") and thus most likely failed with an incorrect "type
conversion error".

Kubernetes-commit: 02b4e99c9f0afa4ef9fa0283670c1515e40a5278
 2024-03-04 12:23:54 +01:00
Jiahui Feng 8485f72a96 add support for map 
to CEL mutation library.

Kubernetes-commit: dc4c92f5a5646ed8d131a8bb8ff96b5e6b3e4bb8
 2024-02-27 13:55:08 -08:00
Jiahui Feng 95a53374a5 convert the expectedValues to be cel.Val. 
Kubernetes-commit: c89dcf52b12bf5e32f71f3ed600315242f7e44f6
 2024-01-25 13:52:39 -08:00
Jiahui Feng f0c47558ed extra case for affirmative has(map) test. 
Kubernetes-commit: d6991638029be493e5c197b6cd0d268d8ce55457
 2024-01-25 13:36:42 -08:00
Jiahui Feng eb407cc3dd fix convertField and its comments. 
Kubernetes-commit: d0c323fb8fbfa5c1b91ae445cbda60a416e85e65
 2024-01-23 16:47:33 -08:00
Jiahui Feng 3a5a43790e add support for equality check. 
Kubernetes-commit: df9620c9f6f6a60f7cbcacb3ad9fa40d79d1d73e
 2024-01-23 16:07:39 -08:00
Jiahui Feng 8b89a41f3f mutation library for CEL. 
- TypeRef, TypeProvider interfaces.
- TypeRef, TypeProvider, ObjectVal, FieldType implementations
   for unstructured.
- Tests for using optional in mutation.

Kubernetes-commit: 9bbdbc510ebf8e2dcb243d6fbbf57449f895196e
 2024-01-19 17:03:34 -08:00
Cici Huang 8b49df5c88 Update env version, Add cost for previous func, add tests, etc. 
Kubernetes-commit: 3fb679016423e80b87cf3e540d296471223460e6
 2023-12-05 23:26:13 +00:00
Joel Speed ccc28d3f49 Add tests for CIDR type 
Kubernetes-commit: b3285fa8df494ef174bbee1ccffcc5e3a58afcdd
 2023-12-15 11:01:55 +00:00
Joel Speed f16e0c2a18 Add tests for IP type 
Kubernetes-commit: 31f9384646a5cfd001f176454feb9c1040591e96
 2023-12-08 18:16:30 +00:00
Joel Speed e5f605855d Add costing estimations for IP and CIDR 
Kubernetes-commit: e1f9aa450b7ecd62ce7284486a159d14f66c1761
 2023-11-17 17:34:46 +00:00
Joel Speed e4fb1f737e Add IP and CIDR libraries to CEL environment for 1.30 
Kubernetes-commit: 4710f085b3d4dbf242085f4cb53708efc7ebbefd
 2023-11-17 13:57:29 +00:00
Joel Speed f4ae0b7ca6 Add CIDR network CEL extension 
This adds new CEL functions to the library for validating if a string is a CIDR notation.

This will work in conjunction with the IPAddr to allow checking if an IPAddr exists within a particular network.

Kubernetes-commit: 2f585b451232814d6563329241e96f09bfd1cb73
 2023-11-15 19:04:48 +00:00
Joel Speed 3fe1439ba9 Add special IP validations to IP CEL type 
Kubernetes-commit: 13b22b23a1a5f8976fa608c7bc8b3048470b5c51
 2023-11-17 12:51:32 +00:00
Joel Speed ccfdc9aba1 Add IP address CEL extension 
This adds new CEL functions to the library for validating if a string is an IP address,
and, if it can be parsed as an IP address, adds additional accessors to get properties
of the IP address.

Kubernetes-commit: c6aa360d3ef9895323b239686719dd9223ee4f37
 2023-11-15 18:35:34 +00:00
Cici Huang 88c6f038a0 Address comment 
Kubernetes-commit: 44898f7909940e786aeed701e87af0c799f4a660
 2023-12-07 22:39:00 +00:00
Cici Huang fb788ccf7f Keep presence cost to 0 to ensure backward compatibility. 
Kubernetes-commit: 048cb8b2ed38febdb7cbbf719b6badbed8f0044c
 2023-12-05 23:27:51 +00:00
Jiahui Feng d463ec4cab avoid infinite recursion for type resolvers. 
Kubernetes-commit: e4776e0f85b8aceb8f1da7a87822b0d086045a8a
 2023-10-31 10:23:50 -07:00
Cici Huang 4cd5207f69 Add set ext library into Kubernetes and pick up the new option cel provides 
Kubernetes-commit: 8d804078f9707297d1edfa26a3295d75c4f3bf40
 2023-10-17 20:27:55 +00:00
Jiahui Feng a026b6fcf5 extend SchemaResolver for more types of schemas. 
Kubernetes-commit: 3f73cdcf2ad00d3200a216a9f19090950fea12f5
 2023-10-26 10:25:41 -07:00
Cici Huang cd938d26a7 Add cel new validator into Kubernetes. 
Kubernetes-commit: 04b21126e589cebf888a8839a69c81761e558861
 2023-10-17 20:27:55 +00:00
Alexander Zielenski 618cf622c1 add time tracking to CorrelatedObject 
Kubernetes-commit: d0328df04e06384a0456606c708e5b62ec18d9c2
 2023-10-18 19:31:39 -07:00
Jiahui Feng ec8ba61837 allow empty object to be CEL value. 
Kubernetes-commit: c6b3a2f477c9ed051ace8ae1c479424e4a5c066d
 2023-10-23 15:30:17 -07:00
Cici Huang 00ae118a76 Add stability tests for CEL cost estimation. 
Kubernetes-commit: 93951bc00d3656c42bec050b82f2fc364b1cad31
 2023-10-22 23:12:44 -07:00
Jiahui Feng 140ffa083d set maxLength to longest enum. 
Kubernetes-commit: 302d350e88eac519e1df020b82256371c171b861
 2023-10-09 11:00:45 -07:00
Alexander Zielenski 8a3fe0e45c ratcheting: disable correlation by index 
discussion: https://github.com/kubernetes/kubernetes/pull/121118#discussion_r1358865893

Kubernetes-commit: fb1fc8b4a72758688d1251278579b2b0ac666fc7
 2023-10-13 14:36:46 -07:00
Alexander Zielenski b5ac4f9a61 comments: clear up correlateOldValueForChildAtNewIndex godoc 
Kubernetes-commit: d991ed56c29e646c0c5c51ce1ebd2376f34fce28
 2023-10-13 14:11:02 -07:00
Alexander Zielenski fbd7474961 cleanup: use swtich in CachedDeepEqual and add more comments 
Kubernetes-commit: 0ed67c9e41dcfc3eef6953ca63082454c189443b
 2023-10-13 14:05:47 -07:00
Alexander Zielenski a504910cff cleanup: consistently support nil receiver and document 
Kubernetes-commit: 60c90fc0854eb04b95e74d445d88f45c212900fe
 2023-10-13 13:57:55 -07:00
Alexander Zielenski 541189e16c cleanup: clarify correlatedOldValueForChildAtNewIndex comment 
Kubernetes-commit: abb68591afd30cf263b0d6bb2942f9693eb420d7
 2023-10-13 13:54:53 -07:00
Alexander Zielenski 2970233dd7 cleanup: consistent interface{} and any 
Kubernetes-commit: e1fa1df3ae8414104f3710c064014e323e45aade
 2023-10-13 13:50:52 -07:00
Alexander Zielenski fecc880526 cleanup: add godoc 
Kubernetes-commit: 0495616230a13dcc19c9da8ec7b8b2a38e2b6a33
 2023-10-13 13:50:19 -07:00
Alexander Zielenski 662079f048 test: fix boilerplate 
Kubernetes-commit: 4dedabf2a659ee702cbcd93a482c63296910d5c6
 2023-10-12 15:51:25 -07:00
Alexander Zielenski e501fcbbf6 test: few more correlatedobject test cases 
Kubernetes-commit: 0149c1f8b315d704d6d80c00861526e2899001e5
 2023-10-11 15:45:48 -07:00