Commit Graph

3993 Commits

Author SHA1 Message Date
Kubernetes Publisher 02be957545 Merge pull request #95810 from ruiwen-zhao/staticcheck_fix
Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, auth…

Kubernetes-commit: 17312ea4a92a0bba31272a6709b37a88aa383b2d
2020-10-28 16:52:51 +00:00
Patrik Cyvoct 29daf09387 fix case when HC timeout is 0
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>

Kubernetes-commit: 6af838c3d1027f41d286ef21b2e52ae60315a358
2020-10-28 11:45:50 +01:00
Kubernetes Publisher 38827994ed Merge pull request #95736 from Jefftree/reuse-parser
Reuse SSA type converter for resources in the same API Group

Kubernetes-commit: 8456a514f18925a4406e385f32b0a9fc659b7966
2020-10-28 04:30:42 +00:00
Kubernetes Publisher f954d844b9 Merge pull request #95874 from tkashem/webhook-handle-error
Webhook: handle error when calling wait.ExponentialBackoff

Kubernetes-commit: 56069e4f9dc00a1652b242bd26d841d060531686
2020-10-27 20:27:23 +00:00
Kubernetes Publisher a630b5b7f4 Merge pull request #95918 from wojtek-t/fix_cacher_test_again
Fix cacher test after bumping fakeBudget timeout to 2 seconds

Kubernetes-commit: 6352f01e662b089b8a2fb3b367c0cc5d844afd85
2020-10-27 08:17:59 -07:00
wojtekt 0f83389bec Fix cacher test after bumping fakeBudget timeout to 2 seconds
Kubernetes-commit: f62e61c28f11a39c1fb4cfda5842bb648ee24eb9
2020-10-27 15:25:31 +01:00
Kubernetes Publisher 8aaf24bf08 Merge pull request #95869 from wojtek-t/debug_watchcache_test
Fix cacher test flakiness

Kubernetes-commit: b4258ec1384618c8147e7c492f7ff1341a1f3ad7
2020-10-27 12:27:05 +00:00
Kubernetes Publisher c78cc36417 Merge pull request #95725 from p0lyn0mial/delegated-authz-sar-timeout
sets explicit timeout for SubjectAccessReview client

Kubernetes-commit: 4df8d97af05ba562537efe5a0399c1a55206d49c
2020-10-27 12:27:04 +00:00
Kubernetes Publisher 9b5d4be311 Merge pull request #95235 from andrewsykim/controlplane-egress-selector
apiserver: support 'controlplane' as an egress selector type

Kubernetes-commit: 3d6026499b674020b4f8eec11f0b8a860a330d8a
2020-10-27 00:27:10 +00:00
Kubernetes Publisher a4c432c998 Merge pull request #95836 from nodo/yaml-unmarshal-number
Add yaml util to unmarshal numbers into int/float

Kubernetes-commit: 2e1d903b13edab9a446ab0e13bef3e8d3700e856
2020-10-26 20:27:25 +00:00
Haowei Cai 8e0bbdb835 add kube-apiserver-lease-controller poststart hook
Kubernetes-commit: 3761a00e5b4bd1fab01f0b6682830aa1ef86a131
2020-10-26 13:17:00 -07:00
Haowei Cai b82c17781d add an APIServerIdentity feature gate
Kubernetes-commit: 742ba5f24a21e325eb41448df933dfab8153eadf
2020-10-26 10:25:13 -07:00
Abu Kashem 67f1bb6022 Webhook: handle error when calling wait.ExponentialBackoff
- Inside WithExponentialBackoff function, handle error returned
by wait.ExponentialBackoff.
- Ensure that the wait time is bound to the given context.

Kubernetes-commit: f8e35de156f212b6989b465e608dd99b525bd5dc
2020-10-26 11:37:11 -04:00
wojtekt e0edc885d5 Fix cacher test flakiness
Kubernetes-commit: 6eb71c4089f69c7cc35ef2fd13bba4329b5716b9
2020-10-26 15:29:51 +01:00
Andrew Sy Kim 5f8147ed4e apiserver: use canonical egress selection names in EgressSelectorConfiguration API docs
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

Kubernetes-commit: e4b45d944d54c239e1ad40af17221420f349c4f8
2020-10-26 10:24:16 -04:00
Andrew Sy Kim 48a554c31a apiserver: update TestReadEgressSelectorConfiguration to use 'controlplane' egress selector name
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

Kubernetes-commit: 5a0932586484b8d5e261cfcbd587fb3ce0c72b27
2020-10-26 10:24:16 -04:00
Andrew Sy Kim d544684a3d apiserver: add validation for EgressSelection names in EgressSelectorConfiguration API
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

Kubernetes-commit: 30d43806c3fe283c8a0b02f050a7ad93dcb1a759
2020-10-26 10:24:16 -04:00
Andrew Sy Kim 6746ccadda apiserver: support egress selection name 'controlplane' and deprecate 'master'
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

Kubernetes-commit: a0aebf96ec2eef6517e2611335f0e6c9375dd807
2020-10-26 10:24:16 -04:00
Kubernetes Publisher edaf00d2d0 Merge pull request #95259 from tkashem/apf-workload-low
Increase the concurrency share of workload-low priority level

Kubernetes-commit: 6578517aa7a7afd480d6efdb92d42f4dbd5777a3
2020-10-23 20:27:32 +00:00
Andrea Nodari b4becfdb04 Add yaml util to unmarshal numbers into int/float
Kubernetes-commit: 04d972cb4bab108b12f181f86b7c0f0854a1037a
2020-10-23 17:26:10 +02:00
Kubernetes Publisher 390912d241 Merge pull request #85480 from tnozicka/apiserver-better-error
Add certificate identification to error message when x509 auth fails

Kubernetes-commit: 44f5a75e6c785b314a4f248c7540d7536c334b5f
2020-10-23 08:31:04 +00:00
Kubernetes Publisher 382fdc0a3f Merge pull request #91474 from cici37/pkgController
Cleanup CCM dependencies

Kubernetes-commit: 1257bc5acb080e529549c3c0393f58d394e8c4c2
2020-10-23 08:31:02 +00:00
ruiwen-zhao 3951aa5897 Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, authorizer}
Kubernetes-commit: bdedc4ce34c6ed5453efa2fb7427b8f00d94fc16
2020-10-22 21:47:17 +00:00
Jefftree c13cd1f0d3 Make versionconverter functions private
Kubernetes-commit: 1f986cc69d8ac5b579ccc2e6817fd0a07903692b
2020-10-22 13:21:38 -07:00
Kubernetes Publisher 2ae8708a58 Merge pull request #95692 from markusthoemmes/bump-azure-adal
Bump github.com/Azure/go-autorest/autorest/adal to 0.9.5

Kubernetes-commit: af1c8935d9f1f42767c6f5211a668e44a15946b4
2020-10-20 20:15:55 +00:00
Jefftree ce4c2eff1a Reuse SSA type converter for resources in the same API Group
Kubernetes-commit: 7182d84b109bb1c928bd5bf92d8c175432b9eeae
2020-10-20 11:16:51 -07:00
Lukasz Szaszkiewicz 972d12cb5f DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client
previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.

Kubernetes-commit: 2160cbc53fdd27a3cbc1b361e523abda4c39ac42
2020-10-20 14:39:45 +02:00
Kubernetes Publisher a52c016b2a Merge pull request #95629 from roycaihw/fix/storageversion-manager
storageversion manager: fix slice allocation

Kubernetes-commit: 6f1288f58c2a810a33ac0cf990483aa601ddc61d
2020-10-20 10:44:16 +00:00
Kubernetes Publisher db465cf42d Merge pull request #95562 from wojtek-t/fix_metrics
Fix metrics reporting in kube-apiserver

Kubernetes-commit: cd8b87f25a25a647eb5818dc42af4ac64448646b
2020-10-20 10:44:14 +00:00
Markus Thömmes d6ec37e179 Fix dependency linting
Kubernetes-commit: 34b9d115051a987442dfaf3bd12002c0843f8297
2020-10-19 11:33:30 +02:00
Markus Thömmes 1d74a651f4 Bump github.com/Azure/go-autorest/autorest/adal to 0.9.5
Kubernetes-commit: e1fd0bd0ebdfee973403a8eeb71a9ec0fc8a23de
2020-10-19 09:46:46 +02:00
Haowei Cai 149a38b22e fix a nil pointer ref in slice allocation
Kubernetes-commit: 904d5c45de4e3a5a21eb2eaa648d3ce0b70938ba
2020-10-15 17:02:50 -07:00
wojtekt 6fc1d642b6 Fix metrics reporting in kube-apiserver
Kubernetes-commit: 3d2a80643aec08be1e50193aeed08aad0d7f886b
2020-10-14 17:34:33 +02:00
Kubernetes Publisher 968a41a8a7 Merge pull request #92459 from roycaihw/storage-version/manager
Add storageversion manager interface

Kubernetes-commit: 6d01c5a58996d1619ac049c2b3077274299eb2d0
2020-10-20 10:44:11 +00:00
Abu Kashem 130dbfbda2 Enable filter latency tracking for request filters
Enable filter latency tracking for the following request filters:
- apf (priority and fairness)
- authentication
- authorization
- impersonation
- audit

Kubernetes-commit: 62431047b46c5949eaf592825712098d7280c4c0
2020-10-13 18:22:49 -04:00
Abu Kashem 9b40000eaa Measure how much time a request spends in server filter(s):
- A: the timestamp a particular filter starts executing for a request.
- B: the timestamp the particular filter has completed and the next handler
     in the chain has started executing.

We define filter latency as `B - A`. Introduce a new metric to track filter latency:
"apiserver_request_filter_duration_seconds"
This measures request filter latency distribution in seconds, for each filter type.

Kubernetes-commit: 99df0b15816cd59ed548235f33c7ab2add940eba
2020-10-13 18:05:44 -04:00
bjrara 7498f28769 Add multi request test
Kubernetes-commit: 833ce487b9fab1650d5aaba2a8b295f8a90e07bd
2020-10-09 16:51:19 +08:00
staebler a541a1b602 do not allow inflight watermark histograms to fall too far behind
The MaxInFlight and PriorityAndFairness apiserver filters maintain
watermarks with histogram metrics that are observed when requests
are handled. When a request is received, the watermark observer
needs to fill out observations for the entire time period since the
last request was received. If it has been a long time since a
request has been received, then it can take an inordinate amount of
time to fill out the observations, to the extent that the request
may time out. To combat this, these changes will have the filters
fill out the observations on a 10-second interval, so that the
observations never fall too far behind.

This follows a similar approach taken in
9e89b92a92c02cdd2c70c0f52a30936e9c3309c7.

https://github.com/kubernetes/kubernetes/issues/95300

The Priority-and-Fairness and Max-in-Flight filters start goroutines to
handle some maintenance tasks on the watermarks for those filters. Once
started, these goroutines run forever. Instead, the goroutines should
have a lifetime tied to the lifetime of the apiserver.

These changes move the functionality for starting the goroutines to
a PostStartHook. The goroutines have been changed to accept a stop channel
and only run until the stop channel is closed.

Kubernetes-commit: 6c9b86646871f13a4431361310ba6a0785372053
2020-10-05 11:26:48 -04:00
Kubernetes Publisher 8dc7971548 Merge pull request #93901 from jpbetz/atomic-structs
Treat LabelSelectors as atomic by Server Side Apply to fix #92913

Kubernetes-commit: 90c9f7b3e198e82a756a68ffeac978a00d606e55
2020-10-04 00:09:15 +00:00
Kubernetes Publisher 196e9757a2 Merge pull request #95240 from apelisse/no-field-update-on-nop
Do not update managedFields timestamp when they don't change

Kubernetes-commit: 3005b6d767cc8f2d4e6ec558f8ee601a5ee4311e
2020-10-03 00:05:46 +00:00
Abu Kashem 3b4921fd00 allocate service-account flowschema to global-default
Kubernetes-commit: fd7bf9a5dc3b4a0ba51b041fc721de719d1b2e69
2020-10-02 13:58:46 -04:00
Kubernetes Publisher 860e865715 Merge pull request #95012 from nodo/add-namespace-to-post-based-namespace-creation
Make the creation of namespace using POST and PATCH consistent

Kubernetes-commit: 5549a0d9bb1bc9d285487412e5440ee8a384e06a
2020-10-02 04:05:41 +00:00
Antoine Pelisse d0b4a78e16 Do not update managedFields timestamp when they don't change
Kubernetes-commit: fedc0b7093e396aaf1fca7fd6f145a0f3cfd5c47
2020-10-01 10:53:16 -07:00
Kubernetes Publisher fd42eacc6e Merge pull request #95145 from wojtek-t/send_bookmarks_on_changes
Watch bookmarks may contain version of objects of other types

Kubernetes-commit: b9d2df810c89bde69cd790905ec937caf1c36d19
2020-09-29 20:04:29 +00:00
Kubernetes Publisher fcb86defb8 Merge pull request #95148 from wojtek-t/graduate_indexes_to_ga
Graduate SelectorIndex to GA

Kubernetes-commit: a8e96c82de258e620572dc82464b40d163db6aa7
2020-09-29 16:18:23 +00:00
wojtekt 0a1c9314fa Graduate SelectorIndex to GA
Kubernetes-commit: fea3042f1f84129ab1cb6e481bd51343061673b7
2020-09-29 14:06:41 +02:00
wojtekt cdc93483b8 Watch bookmarks may contain version of objects of other types
Kubernetes-commit: 0bd8104809922aae504fc9be2e853650ecd17b8a
2020-09-29 12:27:20 +02:00
Kubernetes Publisher e8e1ea4393 Merge pull request #95123 from lavalamp/fix-95064
fix goroutine that lives too long

Kubernetes-commit: 55be3c063a96a5358621e2aecba05f55cab08e71
2020-09-29 01:39:25 -07:00
Daniel Smith 7e305c53b5 fix goroutine that lives too long
Kubernetes-commit: 9a2e0fcb18bc9feb327122edc95a968a8d423af7
2020-09-28 10:50:47 -07:00
Kubernetes Publisher 3f80aac972 Merge pull request #94766 from sttts/sttts-healthz-name
apiserver: fix healthz vs. livez vs. readyz log output

Kubernetes-commit: f448dc54bd2f7f7e56debd97c2467cd1a5a3c9fa
2020-09-26 04:04:24 +00:00