Commit Graph

3176 Commits

Author SHA1 Message Date
David Eads 79c6550889 allow individual ca bundles to be empty in union
Kubernetes-commit: 758f2ce44f82d68a1a67765823179c3f743e199d
2019-11-12 12:44:53 -05:00
Kubernetes Publisher e5d6ff07be Merge pull request #85138 from liggitt/webhook-config-v1
Promote apiserver.config.k8s.io/v1, kind=WebhookAdmissionConfiguration

Kubernetes-commit: f501d8e59a599eaad45a50ee1da075cedc9d0ab9
2019-11-14 10:26:22 +00:00
Kubernetes Publisher 58a8d30b19 Merge pull request #85098 from liggitt/admission-config-v1
Promote apiserver.config.k8s.io/v1, kind=AdmissionConfiguration

Kubernetes-commit: b49afbfa64b6be72779b6deb424d7f0cddd5ccf1
2019-11-14 10:26:21 +00:00
Kubernetes Publisher 926316189b Merge pull request #84718 from yastij/remove-validators
remove system validators package from kubeadm and use k8s.io/system-validators

Kubernetes-commit: ea2750eaa6f54e240172a44c8c968fa2d926cd41
2019-11-14 10:26:19 +00:00
Kubernetes Publisher 47ab678f7f Merge pull request #84813 from deads2k/admission-feature-gates
remove global variable dependency from admission plugins

Kubernetes-commit: 94efa988f403a9f7d1f0c0287673022d6cb3d2c1
2019-11-14 10:26:17 +00:00
Kubernetes Publisher a3ef59b336 Merge pull request #85135 from wojtek-t/delete_unnecessary_conversions_1
Eliminate couple unnecessary conversions

Kubernetes-commit: 402e551ca27499a9dc211dd6e4eca21d9aa9d089
2019-11-14 10:26:16 +00:00
Kubernetes Publisher ed17cc3738 Merge pull request #84768 from liggitt/delegated-authnz-v1
switch delegated authnz to v1 APIs

Kubernetes-commit: 681d22428b2e037163ea11c13a4c066c2058e515
2019-11-14 10:26:14 +00:00
Kubernetes Publisher 66e4e09007 Merge pull request #84423 from mikedanese/tokbench
adjust token cache benchmarks to get more accurate behavior

Kubernetes-commit: 0708eb5903d664f457f9b5fcd02bb0bae303df68
2019-11-14 10:26:12 +00:00
Jordan Liggitt b858bded65 Promote WebhookAdmissionConfiguration to v1
Kubernetes-commit: 71fad812caf6be07be3c5eabe9fdc39c29f7b2a9
2019-11-12 09:43:35 -05:00
wojtekt ca6e794c60 Eliminate couple unnecessary conversions
Kubernetes-commit: 067d173266303c5c9a4281e962d3662c34a78053
2019-11-12 14:19:14 +01:00
Jordan Liggitt 4b9c976f43 AdmissionConfiguration v1
Kubernetes-commit: 1234290adfa11eb3dd34242c296e1f1dbe211c19
2019-11-11 11:57:29 -05:00
Kubernetes Publisher 707298a79a Merge pull request #84692 from smarterclayton/protocol_errors
Fix watch negotiation when using a non-default mime type in the client

Kubernetes-commit: c28921f248a8e6c923096154c6e87efcc188b9f0
2019-11-11 06:20:45 +00:00
David Eads 331894196f add featuregate inspection as admission plugin initializer
Kubernetes-commit: 675c2fb924e82091f7ce4601e48daf4cc7030e72
2019-11-05 14:28:40 -05:00
Jordan Liggitt 41ba987d53 generated
Kubernetes-commit: 7349a824df6487d98903fa71cf2fde9e588ba19f
2019-11-04 23:30:34 -05:00
Jordan Liggitt 52b3bfb8fa Switch kubelet/aggregated API servers to use v1 subjectaccessreviews
Kubernetes-commit: d54a70db5cfc0887e2f5177b0c3f795947be6eb4
2019-11-04 23:29:56 -05:00
Jordan Liggitt 086ad4b0b9 Switch kubelet/aggregated API servers to use v1 tokenreviews
Kubernetes-commit: 5ef4fe959a45e423d2b992e9c21e6e9db4b950c5
2019-11-04 22:41:32 -05:00
Yassine TIJANI 76bb66f0e4 remove system validators package from kubeadm and use k8s.io/system-validators instead
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>

Kubernetes-commit: b9fe59c93e9a2e7808606a180bc35ce574517473
2019-11-04 13:24:59 +01:00
Clayton Coleman 26a8fb1b92 test: Watch should fail immediately on negotiate errors
Instead of returning an error on the watch stream, if we can't properly
negotiate a watch serialization format we should error and return that
error to the client.

Kubernetes-commit: 9aad6aa54d824ba93a6670cd5a0cab6ad337e9f0
2019-11-03 15:08:22 -05:00
Kubernetes Publisher 687a3dde5a Merge pull request #84727 from danwinship/ipv6-bind
fix apiserver to advertise IPv6 endpoints if bound to IPv6

Kubernetes-commit: 49a9b6cadfe6f27045e9ef05179b0af1cb6e9693
2019-11-09 10:40:11 +00:00
Kubernetes Publisher f2672160bd Merge pull request #83840 from liggitt/json-iter
bump json-iterator dependency

Kubernetes-commit: 3387d6cfc73235fd554e5039b85abb7700eaf126
2019-11-09 10:40:08 +00:00
Kubernetes Publisher 8a300abf72 Merge pull request #84963 from liggitt/feature-json-codes
Fix json patch limit check

Kubernetes-commit: 15f586a6c18d7ccbc01f7a1e908dbabcfd146ae2
2019-11-08 19:05:34 +00:00
Kubernetes Publisher 918776919c Merge pull request #84911 from yue9944882/chore/bump-kube-openapi
Pin kube-openapi vendor to 30be4d16710a

Kubernetes-commit: dd6faa5da791c06fa23ff668e4463c3ad2b23340
2019-11-08 07:09:17 +00:00
Kubernetes Publisher 730448e49a Merge pull request #84864 from deads2k/optional-verify-opts
allow a verifyoptionsfunc to indicate that no certpool is available

Kubernetes-commit: 9dfcc369b48f3aae5cd0d2bd0d4c7b9061ed0b0c
2019-11-08 03:05:37 +00:00
Kubernetes Publisher ef4b4944cc Merge pull request #84693 from yutedz/watching-stop
Stop Watching when there is encoding error

Kubernetes-commit: 7c7ae977d5ccc011dc2e1fcb7f06c3da2da09991
2019-11-08 03:05:36 +00:00
Ted Yu 48d357e235 Stop Watching when there is encoding error
Kubernetes-commit: 639af77d463a4d07bc5d7d19366bd98310b55724
2019-11-07 14:32:47 -08:00
Kubernetes Publisher 4dc6b26d2d Merge pull request #84860 from wojtek-t/remove_conversion_funcs_4
Eliminate couple default conversions

Kubernetes-commit: f7c3fa8324e8167aa29df59602ca6e43c55ff2be
2019-11-07 19:08:58 +00:00
attlee-wang 6c2628ccd6 json unmarshal coded error at function applyJSPatch()
Kubernetes-commit: 1da2d00935942a887205f801d4b2acfa227055d2
2019-11-07 20:40:28 +08:00
yue9944882 1d293beddb update k8s.io/kube-openapi to 30be4d16710a
Kubernetes-commit: 8e7606f32898b294fc25152ff8bd34f62d6221d3
2019-11-07 18:39:08 +08:00
Kubernetes Publisher 60260b106f Merge pull request #83520 from jpbetz/reflector-relist-rv
Avoid going back in time in Reflector relist (revived)

Kubernetes-commit: 8ed2f4775a0d2b13c4be790cdfc1f34bc8b6522b
2019-11-07 03:14:16 +00:00
Kubernetes Publisher 1ff272f3f7 Merge pull request #82809 from liggitt/go-1.13-no-modules
update to use go1.13.4

Kubernetes-commit: 695c3061dd92a6b6950f8adf0341ceb4a8dd44d7
2019-11-07 03:14:14 +00:00
David Eads 80b16c1ce7 allow a verifyoptionsfunc to indicate that no certpool is available
Kubernetes-commit: c672affad176c22da66c7ac17cc8805f08533ce9
2019-11-06 10:38:45 -05:00
wojtekt 6fd9ceb0b8 Eliminate some default conversions
Kubernetes-commit: ccded1494116d6aa1ac3f4612b4a613b56a2044a
2019-11-06 14:02:27 +01:00
Joe Betz ee483f99bc Fix watch test to expect Expired instead of Gone
Kubernetes-commit: 57b451cfb6738fca45fc05cd50c1ff6d7240e3a7
2019-11-05 22:06:10 -08:00
Jordan Liggitt 12b254d1c9 hack/update-vendor.sh
Kubernetes-commit: 297570e06a88db23e16dbdbf6ce3173fe0ae376c
2019-11-05 14:11:10 -05:00
Kubernetes Publisher ab2ea16b19 Merge pull request #84770 from mikedanese/uuid
remove github.com/pborman/uuid

Kubernetes-commit: b01ac96bd439266170f8470ff0f897240a7bc928
2019-11-05 19:12:00 +00:00
Mike Danese 6f0ceeee18 remove github.com/pborman/uuid
Kubernetes-commit: f0d45ee31f93b9f2784a04d4e16167c050d41778
2019-11-04 23:19:25 -08:00
Mike Danese 44b9fc84ab migrate callers to g/g/uuid
Kubernetes-commit: a4ca9e6c93e45b4a97e7d04df37362299088f64a
2019-11-04 23:15:20 -08:00
Kubernetes Publisher 01a4eabd0b Merge pull request #84712 from chendotjs/patch-cc
Refactor the process to get ip address of loopback interface

Kubernetes-commit: 53bb82994a301a42c5d76839944b0fb586d86de9
2019-11-04 19:09:16 +00:00
Kubernetes Publisher 2249edd7cd Merge pull request #84123 from smarterclayton/terminating_cause
Handle namespace deletion more gracefully in built-in controllers

Kubernetes-commit: 6a19261e96b12c83e6c69d15e2dcca8089432838
2019-11-04 19:09:14 +00:00
Kubernetes Publisher 025332b0ce Merge pull request #84483 from zxl381/MU_stopAllD
Fix a double lock bug in staging/.../apiserver

Kubernetes-commit: 6dde01d31494ca8a44c92011a2f7f55af465fd3a
2019-11-02 15:04:44 +00:00
Kubernetes Publisher 49d6d41cba Merge pull request #83671 from yue9944882/flow-control-api-model
Apiserver flowcontrol api models

Kubernetes-commit: 510fb38f275bdfbd61b2ceba5162209e88cf9634
2019-11-02 07:08:43 +00:00
chendotjs 73bcdb7730 Refactor the process to get ip address of loopback interface
Kubernetes-commit: d9cbad7ff197e61fe4ba3a66a7458b1bbaf36f61
2019-11-02 11:14:04 +08:00
Kubernetes Publisher 411c2df45c Merge pull request #84604 from codenrhoden/update-utils-dep
Update k8s.io/utils dependency to latest

Kubernetes-commit: 97e28edb6620568d985f3b03b495a0a373aa8750
2019-11-01 23:07:30 +00:00
Travis Rhoden ca8b4045f0 Update k8s.io/utils dependency to latest
Kubernetes-commit: 81f66ecbb5ff359ac765c7f332289dd8c1737c39
2019-10-31 08:35:01 -06:00
Kubernetes Publisher 8cb875160e Merge pull request #84303 from jackkleeman/dynamic-sni-cert
Dynamic SNI certificates

Kubernetes-commit: c7bb076ade3e91cc13a0e855e155484fb4040191
2019-10-31 11:04:36 +00:00
Kubernetes Publisher 71f1f5686a Merge pull request #84387 from immutableT/interceptor
Move the common logic of checking for kms-plugin's version into gRPC client interceptor.

Kubernetes-commit: 48bc59a997a3490398d0d234d4f60d3121db9b74
2019-10-30 23:04:23 +00:00
Dan Winship 0031a567fa Fix apiserver to advertise IPv6 endpoints if bound to IPv6
Also rename utilnet.ChooseBindAddress() to ResolveBindAddress(), to
better describe its functionality.

Kubernetes-commit: afa0b808f873b515c9d58a9ead788972ea7d2533
2019-10-30 10:46:46 -04:00
Ziheng Liu 95180eec68 Change the way of synchronization in staging/.../apiserver
stopAllDelegates will signal other functions to stop updating, instead of acquiring a Mutex and never unlock it

Signed-off-by: Ziheng Liu <zxl381@psu.edu>

Kubernetes-commit: b1c9ae5499b49b5630768050d92bc8ac3553d830
2019-10-28 18:32:27 -04:00
Mike Danese 61dd52533e adjust token cache benchmarks to get more accurate behavior
b.N is adjusted by pkg/testing using an internal heuristic:

> The benchmark function must run the target code b.N times. During
> benchmark execution, b.N is adjusted until the benchmark function
> lasts long enough to be timed reliably.

Using b.N to seed other parameters makes the benchmark behavior
difficult to reason about. Before this change, thread count in the
CachedTokenAuthenticator benchmark is always 5000, and batch size is
almost always 1 when I run this locally. SimpleCache and StripedCache
benchmarks had similarly strange scaling.

After modifying CachedTokenAuthenticator to only adjust iterations based
on b.N, the batch chan was an point of contention and I wasn't able to
see any significant CPU consumption. This was fixed by using
ParallelBench to do the batching, rather than using a chan.

Kubernetes-commit: 43d34882c9b3612d933b97b6e470fd8d36fe492b
2019-10-26 14:12:41 -07:00
Kubernetes Publisher d1b1b64dd9 Merge pull request #84288 from wojtek-t/cleanup_conversions_registrations
Cleanup conversions registrations

Kubernetes-commit: d379ab2697251334774b7bd6f41b26cf39de470d
2019-10-26 07:05:30 +00:00