779d3eda81
Fix DeleteCollection API decode DeleteOptions fail
...
The reason for the issue is that the apiserver uses the Scheme in the
global variable pkg/api/legacyscheme/scheme.go, and registers the
DeleteOptions corresponding to each APIGroup in the Scheme. But
DeleteOptions in meta.k8s.io/v1 is not registered, resulting
in a notRegisteredErr.
Use metainternalversionscheme.Codecs as Serializer
Kubernetes-commit: e7d7f4a9e56fe5d9c10da437787118fe9ea9e5af
2022-10-18 16:47:50 +08:00
a207e9f270
Merge pull request #111706 from tallclair/audit-error
...
More useful audit error logs
Kubernetes-commit: fc4344a74875a867c844394a8cc9857fe3b51598
2022-10-20 12:02:39 +00:00
de12c77c9c
Merge pull request #112858 from alexzielenski/cel-admission-hook
...
CEL Admission Plugin
Kubernetes-commit: 0a689af469de0b2095c70d53bfbb920ce7f4f9fb
2022-10-20 04:02:27 +00:00
ee01efa95d
Merge pull request #112546 from oscr/the-the
...
grammar: replace all occurrences of "the the" with "the"
Kubernetes-commit: bf14677914cd7cef75deeb3ba136febe194d6ef4
2022-10-19 20:02:56 +00:00
90614109fc
Merge pull request #113077 from lixiaobing1/WithTransportCredentials
...
replace WithInsecure() with WithTransportCredentials()
Kubernetes-commit: 3eeb7cb57f388a594ce24e5a97f81029caad61f8
2022-10-19 20:02:54 +00:00
6fe4f87105
add superuser fallback to authorizer ( #111558 )
...
* add superuser fallback to authorizer
* change the order of authorizers
* change the order of authorizers
* remove the duplicate superuser authorizer
* add integration test for superuser permissions
Kubernetes-commit: f86acbad68baf1a99d6fa153f6f0cdc7b93932e4
2022-10-19 04:02:04 +00:00
f3d3ed915e
Merge pull request #112979 from dashpole/fix_tracing_crash
...
Fix bug in which APIServerTracing did not work with some egress selectors
Kubernetes-commit: 859ada198f51a73d2ce48fafdf7ab9153e653f3b
2022-10-19 00:11:14 +00:00
c144979a82
replace WithInsecure() with WithTransportCredentials()
...
Kubernetes-commit: 7892175acdb329d44cf1f34230f78e608b3cb736
2022-10-15 16:41:53 +08:00
e25b9399a5
add cel admission controller tests
...
84% coverage
Kubernetes-commit: 8b74e73e3825e725d05376de717ad96506a52eec
2022-10-12 18:03:44 -07:00
cd8f0b6cf7
add cel admission plugin and initializer
...
Kubernetes-commit: a41a536dbdb72877fa48f85272e479eb628e68f8
2022-10-12 10:21:31 -07:00
b154760894
add generics tests
...
84.1% coverage
Kubernetes-commit: 74b103cd52da3b0149aa9e50a569a89bdd46e1db
2022-10-13 13:44:03 -07:00
b1196b949c
add cel admission controller
...
Kubernetes-commit: 2286501e227ead064e95880a6f28904526f887a6
2022-10-12 10:21:08 -07:00
bf7388424e
add OWNERS
...
Kubernetes-commit: c52fae186a60f0d480f26628c55656c76c7ccac0
2022-10-12 16:11:11 -07:00
73fdf7e37b
Fix bug in which APIServerTracing did not work with some egress selectors
...
Kubernetes-commit: 00bcd6cf01b719d0fddc8331ffecd3de35e8896f
2022-10-11 16:22:33 +00:00
f1ba5b4065
Merge pull request #113118 from enj/enj/i/prefix_transformers_alloc
...
prefixTransformers: allocate after transformation length is known
Kubernetes-commit: 1ab1b0af6e3c6c0527543a72a796045afbdfe887
2022-10-18 20:05:05 +00:00
ed0f95e9c9
Merge pull request #113120 from enj/enj/i/value_owners
...
k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval
Kubernetes-commit: 715e975afbabb770f205ba8e27c04977feb7af9a
2022-10-18 20:05:03 +00:00
b1d724086f
Merge pull request #113107 from dims/bump-apiserver-healthz-upper-log-verbosity
...
Bump log level for health check warning for missing components
Kubernetes-commit: 7c6821978da83bbb46412606b08871fb8665d12f
2022-10-18 20:05:01 +00:00
a9ade696e6
Merge pull request #113115 from logicalhan/x509
...
actually resolve the computations for buckets for static analysis
Kubernetes-commit: 5075ca03dd0e0d7ebe6b239231d8d619e618f475
2022-10-18 04:05:58 +00:00
e1e4344679
Merge pull request #110173 from tkashem/apf-use-ssa
...
apf: change controller to use SSA for patches
Kubernetes-commit: b87802bcd7de5e937fbd449806ef78322c2b4b1e
2022-10-18 00:13:20 +00:00
9768ba70d8
Merge pull request #112953 from tkashem/fix-typo
...
apiserver: fix typo in graceful termination test
Kubernetes-commit: 44e33fd74b3f42d9fbc5c2cd658c5601d55e260b
2022-10-18 00:13:18 +00:00
be9579fc15
k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: b68bc0678d5876e4c11c7d5289f777b6e37c4917
2022-10-17 17:07:56 -04:00
f4ac8fc8bb
prefixTransformers: allocate after transformation length is known
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 59e1a32fc8ed35e328a3971d3a1d640ffc28ff55
2022-10-17 16:56:40 -04:00
c3dab8f04e
Merge pull request #113106 from pohly/dep-ginkgo-gomega
...
dependencies: update to gomega v1.22.1 and ginkgo v2.3.1
Kubernetes-commit: 4216ad3542ff5defcfdb303945772a8e1663a7f6
2022-10-17 20:08:32 +00:00
96eda3624c
Bump log level for health check warning for missing components
...
Default api server manifest whose liveness check looks like:
"/livez?exclude=etcd&exclude=kms-provider-0&exclude=kms-provider-1"
Which causes spurious messages in apiserver logs every 10 mins:
```
W1017 00:03:39.938956 9 healthz.go:256] cannot exclude some health checks, no health checks are installed matching "kms-provider-0","kms-provider-1"
```
Let's not log excessive messages especially at warning level. We should
do this at a higher level (6 instead of 4).
NOTE: we don't change the message returned to the http request, we keep
that as-is (does not change on log level)
Also see:
https://github.com/aws/eks-distro/blob/v1-19-eks-12/projects/kubernetes/kubernetes/1-19/patches/0016-EKS-PATCH-apiserver-healthz-upper-log-verbosity-for-.patch
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 20de240d5bdb7fc50de3fe9b8cdd95f81bf47034
2022-10-17 09:42:09 -04:00
4ae2cd3dc6
actually resolve the computations for buckets for static analysis
...
Change-Id: Icafe84e165cc14087a2811f9a3e5d5e69ef3f178
Kubernetes-commit: a07718258aef5cd20a356b4657f1054b6baeb03b
2022-10-13 13:44:51 -07:00
c4de3f516b
apiserver: fix typo in graceful termination test
...
Kubernetes-commit: 0af2306a9a1c867fc374eb740b3be2b5a00675e7
2022-10-10 10:47:27 -04:00
ad8c5c7734
dependencies: update to gomega v1.22.1 and ginkgo v2.3.1
...
This adds support for timeouts and intermediate reports in Eventually and
Consistently.
Kubernetes-commit: d1dbf7ae3e223d5d93d0b3d875e4f03ff38e6de0
2022-10-07 17:19:09 +02:00
1ff02d7067
Merge pull request #112374 from Argh4k/no-stack-timeout
...
do not print status stack in case of timeout from timeout handler
Kubernetes-commit: 8fb8bb4e9ae2d2cb2b7cdb4c79c73be344fdc164
2022-10-15 04:06:27 +00:00
7de07a574c
Merge pull request #112988 from alexzielenski/update-kube-openapi
...
update kube-openapi
Kubernetes-commit: 353e00796ef4c1e8fcea1cb51bcc62fc3acac3c8
2022-10-15 04:06:24 +00:00
e23582d755
Merge pull request #109590 from twilight0620/mytest
...
code check modify
Kubernetes-commit: cf18b5098e4da734c7846de671ed1f4e7ebf971f
2022-10-15 00:00:32 +00:00
6ea0849c6d
Merge pull request #113037 from pacoxu/fsnotify-v1.6.0
...
update fsnotify to v1.6.0
Kubernetes-commit: 542ec977054c16c7981606cb1590cc39154ddf01
2022-10-14 08:10:21 +00:00
ca9a4855d3
update kube-openapi
...
hack/pin-dependency.sh k8s.io/kube-openapi 172d655c2280350c77cf05962948fc67ff043492
hack/update-vendor.sh
Kubernetes-commit: f622dd918ab5d3bc902a8c625a0a89b21e8afe43
2022-10-13 19:51:22 -07:00
f928c72a9f
Merge pull request #112153 from harshanarayana/feature/GIT-111923/enable-UID-logs-for-kmsv2
...
kmsv2: enable logging for kmsv2 enc/dec operations
Kubernetes-commit: 77d5dc7efc9c34eddd1137a938a0614f7e7e3274
2022-10-13 20:23:09 +00:00
fd5dbbca89
Merge pull request #112789 from enj/enj/r/kms_load_once_v2
...
Load encryption config once (second approach)
Kubernetes-commit: 01019770cfa6674099504050c47792d8770a2f7e
2022-10-13 20:23:07 +00:00
318e3ec469
Merge pull request #113011 from jpmcb/cobra-1.6.0
...
Bumps cobra from 1.5.0 to 1.6.0
Kubernetes-commit: 79b4f1e77ae98ede37fd117f36158e88116a8a15
2022-10-13 20:23:05 +00:00
c23bbb6aae
fsnotify: use event.Has instead of "event.Op&h == h"
...
Kubernetes-commit: 2ce7a8116902a47c0b859dff1f546e194d468064
2022-10-13 13:42:11 +08:00
cc4fd0eb1c
update fsnotify to v1.6.0
...
Kubernetes-commit: 3fee9d27355afe64dec7fa264e1faf209712f169
2022-10-13 13:14:43 +08:00
6cb436527c
Bumps cobra from 1.5.0 to 1.6.0
...
- Upgrades mousetrap license to latest Apache 2.0
Signed-off-by: John McBride <jpmmcbride@gmail.com>
Kubernetes-commit: dfb55ba48a3d7bcf8efad080de822c57a3d8670f
2022-10-12 14:53:32 +00:00
db8c02bd35
Merge pull request #112926 from jiahuif-forks/refactor/cel-out-of-apiextensions
...
split and move CEL package
Kubernetes-commit: 61ca612cbb85efa13444a6d8ae517cd5e9c151a4
2022-10-13 00:00:33 +00:00
848d0394b3
Merge pull request #112989 from ameukam/bump-golang.org/x/text-to-v0.3.8
...
Bump golang.org/x/text to v0.3.8
Kubernetes-commit: 054d86feb42b67bb13608d9aa9a7c986750da753
2022-10-12 04:05:21 +00:00
d68a43391d
Bump golang.org/x/text to v0.3.8
...
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
Kubernetes-commit: 0d19690a54e480923e8222ce79566e6879667a1f
2022-10-11 23:30:39 +02:00
ac0ce38abe
use DefaultMaxRequestSizeBytes for maxRequestSizeBytes.
...
Kubernetes-commit: 755f41a185e828d9c64ae3ac37ce829e60592ad1
2022-10-10 14:42:24 -07:00
56d5416474
generated: ./hack/update-vendor.sh
...
Kubernetes-commit: 5b8a5b37d5b2031f5733396613d781f8967c25ed
2022-10-07 15:36:19 -07:00
870da5a58e
move CEL package to apiserver package.
...
only anything that does not require Structural
Kubernetes-commit: 0dd316a5c11261c0e5fc7928d8697754b16ad461
2022-10-07 15:02:47 -07:00
3504a6fe60
Merge pull request #112884 from logicalhan/slis
...
wire up feature-gate for component slis
Kubernetes-commit: e11e226b23c0213021a6678002132ad102d488e7
2022-10-07 04:11:18 +00:00
a433b219b9
Move celopenapi/model to staging/src/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/ ( #109959 )
...
Co-authored-by: Manish Kumar <manish.kumar1@india.nec.com>
Kubernetes-commit: 39ffd45175876fe7c846c6239d89613d31a28fa1
2022-10-07 05:43:52 +05:30
2c46875bb7
Merge pull request #112875 from pohly/update-yaml
...
dependencies: update to sigs.k8s.io/yaml v1.3.0
Kubernetes-commit: 93d1c43b491a39740297cf1e76782b99d8739865
2022-10-06 16:07:04 +00:00
d022845da0
Merge pull request #112792 from cici37/celAd
...
Add feature gate CelValidatingAdmission
Kubernetes-commit: b4eec3c2ad8d0645a10b4e911738627b7ecb2809
2022-10-05 23:59:00 +00:00
a26df69931
wire up feature-gate for component slis
...
Change-Id: Iba6ffbcac9dba4f4be3023ada6ac31691c1ae17b
Kubernetes-commit: 01bfbdff2dee3be93d286a8ff53f9e52a1ee9724
2022-10-05 15:56:06 -07:00
025851852a
Update feature gate name to CELValidatingAdmission
...
Kubernetes-commit: d8ab3fea0d5f91e273fcb3b49cffb71d1b70f7e3
2022-10-05 19:40:50 +00:00
scott