f438154cef
Adds metrics to PortForward Websockets
...
Kubernetes-commit: 90d70ed73dd7fcc9465baf452d178eb72f2aaf90
2024-07-17 21:29:31 -07:00
c1c9700b75
CEL: add QuantityDeclType
...
Most functions in k8s.io/apiserver/pkg/cel work with DeclType for type
definitions, which made the existing QuantityType unusable with them. The new
QuantityDeclType fills that gap.
Kubernetes-commit: bcececadfb5b7deb3f6ecb253a73ea98a2fdd80c
2024-07-17 19:36:36 +02:00
5678a8c44d
Remove feature gate CustomResourceValidationExpressions.
...
Kubernetes-commit: 67a171a1422cc5861491aadd69e51ce718196434
2024-07-16 10:39:00 -07:00
132d3e46d6
Add paging tests
...
Kubernetes-commit: 99e69569808cf746262b25a9d9d515c26256c7e5
2024-07-07 16:15:47 +02:00
de0559ec7b
Benchmark storage
...
Kubernetes-commit: fa5008807add2776ff87f346a7b7d3c029d19efc
2024-07-02 22:50:57 +02:00
6c5ca3dcf3
Fixup lint warning
...
Kubernetes-commit: 9f8f36708a0eb1ad78e48beeaf15f2c6ae3e1552
2024-06-27 00:42:01 -04:00
eabf12957a
Add structured labelSelector / fieldSelector to authorization webhook match conditions
...
Kubernetes-commit: a1398a8ccaeb7f881acb65d1276392f4cac259e8
2024-06-26 17:17:43 -04:00
f14fc0f445
Adjust CEL cost calculation and versioning for authorization library
...
Kubernetes-commit: 83bd512861aa11ec00a90e4ac382daa788dccf87
2024-06-26 21:38:24 -04:00
72a449fe98
Define credential IDs for X.509 certificates
...
This commit expands the existing credential ID concept to cover X.509
certificates. We use the certificate's signature as the credential ID,
since this safe and unique.
Kubernetes-commit: 2ad2bd8907d979f709cd924af7986be71c31ce12
2024-06-21 16:21:35 -07:00
efe135c937
Add CEL fieldSelector / labelSelector support to authorizer library
...
Kubernetes-commit: be2e32fa3ed0a06ac9cc59d9966be0b40617c2b2
2024-06-14 14:39:54 -04:00
b338834e91
Move CEL env initialization out of package init()
...
This ensures compatibility version and feature gates can be initialized
before cached CEL environments are created.
Kubernetes-commit: 03d48b76831a3a02d503c3075d818a76afd83cd8
2024-06-29 21:45:55 -04:00
9db3f571d5
Improve CEL cost tests to catch unhandled estimates or types
...
Kubernetes-commit: 1d2ad282cff163e51e5c24569a0ac762ed814e74
2024-06-26 21:38:48 -04:00
f26d4ed894
add field and label selectors to authorization attributes
...
Co-authored-by: Jordan Liggitt <liggitt@google.com>
Kubernetes-commit: 92e3445e9d7a587ddb56b3ff4b1445244fbf9abd
2024-05-23 15:12:26 -04:00
6dd5496a01
Merge pull request #126124 from cici37/feature/validating-admission-policy/metrics-improvement
...
Feature/validating admission policy/metrics improvement
Kubernetes-commit: acaec0c23a7e5f76b98c519d91cdf66cbe4c0263
2024-07-19 18:45:26 +00:00
bf5c64d612
Merge pull request #124736 from MikeSpreitzer/exempt-borrows-more
...
More assertive borrowing by exempt
Kubernetes-commit: d040043edbe8eddd806d9dadd572283e65f8233a
2024-07-18 22:45:52 +00:00
36d8f544a9
Merge pull request #126191 from p0lyn0mial/upstream-revert-promote-watch-list-to-beta
...
Revert "Promote WatchList feature to Beta"
Kubernetes-commit: dda657b5982e8f9102b8df5931344262b0793163
2024-07-18 18:50:57 +00:00
708f0cf46b
Revert "kube-apiserver: promote WatchList feature to beta"
...
This reverts commit 0b15903b35d83ca32833e81997b6257ee4d4f369.
Kubernetes-commit: 88f47b4b4df2f099cc20381fdc0fbcfe0afcee8e
2024-07-18 09:29:24 +02:00
1ae3792914
Merge pull request #126139 from enj/enj/i/revert_list_cache
...
Revert "Move ConsistentListFromCache to Beta default"
Kubernetes-commit: c3bcd4fff06566886f36d6e59536b3d00a69a637
2024-07-17 19:10:06 +00:00
17ba1a9a64
Revert "Move ConsistentListFromCache to Beta default"
...
This reverts commit 0c0e19b343d48d4bea0e7fa735e3781c70298a34.
During stress test for SVM controller, the controller is unable to
make a list call due to following error:
resourceversion.go:155: I0716 21:49:26.973127] storage-version-migrator-controller: Error syncing SVM resource, retrying svm="crdsvm" err="error getting latest resourceVersion for stable.example.com/v1, Resource=testcrds: Timeout: Too large resource version: 28976, current: 20349"
With the feature disabled, the stress test passes.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: aeb51a16e369d5b823a8ae6488d1d5e12c683516
2024-07-16 23:12:16 -04:00
cd492e8b91
Fix the error type, Add into observation, Fix tests.
...
Kubernetes-commit: b7821078b36f1cb25d903774ddf37a97966c2eac
2024-07-16 08:27:36 -07:00
d72b6cca4b
Merge pull request #125769 from siyuanfoundation/api-comp-ver1
...
add emulated-version flag to kube-scheduler to control the feature gate.
Kubernetes-commit: 7bbc891f9b8f278edf2c6376ffe70a94f4c85afb
2024-07-15 18:46:49 +00:00
2e2bf0d328
Merge pull request #126018 from aroradaman/bump-k8s-utils
...
bump k8s.io/utils
Kubernetes-commit: 46aa8959a0659e22c924bb52b38385d441715b2b
2024-07-13 18:50:20 +00:00
74615c52f8
bump k8s.io/utils
...
Signed-off-by: Daman Arora <aroradaman@gmail.com>
Kubernetes-commit: c6a129b715646163ef83f94245c3756cbc191c42
2024-07-12 14:40:22 +05:30
b9f8b0569b
Merge pull request #125802 from mmorel-35/testifylint/len+empty
...
fix: enable empty and len rules from testifylint on pkg and staging package
Kubernetes-commit: 2d4514e1690dc5babb144542da799f6b331afd1b
2024-07-12 06:51:23 +00:00
4f89b2c0e4
Merge pull request #125986 from vinayakankugoyal/typo
...
Fix typo in error message for anonymous field in AuthenticationConfig…
Kubernetes-commit: 0c8b3e5f305bf2bf56d47019199b81330d90c2c3
2024-07-10 06:46:23 +00:00
fd1f3aafaf
Fix typo in error message for anonymous field in AuthenticationConfiguration.
...
Kubernetes-commit: 27e8923c70c8bf95e0db02aeb7a0d45908ae9d62
2024-07-09 21:04:28 +00:00
ad20d53f30
Merge pull request #124730 from tkashem/read-write-deadline-test
...
Add test to document request timeout behavior
Kubernetes-commit: 8c7ee69212fc57e31b4c2dc59737a95576881324
2024-07-09 02:44:07 +00:00
3712259b24
Merge pull request #125922 from dims/update_otel_27
...
Update opentelemetry dependencies to the latest release (Take 2)
Kubernetes-commit: 07cc20a7509e7322e6ebb04e60d8274f27d6fdd7
2024-07-07 02:51:03 +00:00
4f7f407e71
Merge pull request #125920 from siyuanfoundation/bug
...
fix lock bug for componentGlobalsRegistry
Kubernetes-commit: 6432b3db82917b64394ede0379f94aa91be1c94c
2024-07-05 12:25:05 -07:00
73f28c1095
update OpenTelemetry dependencies and grpc
...
This update dropped the otelgrpc → cloud.google.com/go/compute dependency,
among others. This dropped out because genproto cleaned up it's dependencies
on google cloud libraries, and otel updated - details in #113366 .
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Co-Authored-By: David Ashpole <dashpole@google.com>
Kubernetes-commit: ff7942be83ed0c0aaa8c258e8e2b9965d383935c
2024-07-05 12:10:07 -04:00
6f7147fc9d
fix lock bug for componentGlobalsRegistry
...
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: d31aebe57224b678a0c17df7766d8e7f850209e8
2024-07-05 15:50:10 +00:00
aa4d1a9cc7
Merge pull request #125850 from dims/fix-for-typecheck-does-not-notice-compile-errors-in-test-files
...
Fix for typecheck doesn't notice compile errors in test files
Kubernetes-commit: c87c06d7ffb932395f963bc78f03f9d2f0e57698
2024-07-04 22:53:29 +00:00
fc096e5c76
Merge pull request #125848 from jpbetz/fix-auth-selectors
...
Drop removed APIs from etcd data tests, remove special case logic for binaryVersion=0.0 and all usages
Kubernetes-commit: 9ec91e65510d3a04707eb8e2f071476e6b010688
2024-07-03 17:40:32 -07:00
b754d6e7f2
Remove special case logic in apiserver to serve all APIs when binary version is set artifically to 0.0
...
Kubernetes-commit: 1864e7131eca32fc9bebf20641becb467f240eca
2024-07-03 14:16:15 -04:00
e34b81ec0c
Merge pull request #125846 from tkashem/remove-apf-feature-gate
...
Remove APF feature gate APIPriorityAndFairness
Kubernetes-commit: 30ffa521e69197610dfcd8e0c0b1d1db73ccf071
2024-07-03 06:14:39 -07:00
1292729d42
Fix for typecheck doesn't notice compile errors in test files
...
- ensure we add all the staging modules so the _test files in there are "loaded"
- use build tags to skip tests that fail to build in specific os/arch pairs
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Co-Authored-By: Tim Hockin <thockin@google.com>
Kubernetes-commit: c230a45383c372e3861de3d4854cdfe28f4c482f
2024-07-02 16:26:41 -04:00
f553925235
apiserver: remove feature gate APIPriorityAndFairness
...
Kubernetes-commit: ae647032a74bf8f671fa8db0602dee301cf865bf
2024-07-02 12:55:43 -04:00
d3817b1390
Merge pull request #125626 from linxiulei/fix_routine_log
...
Fix httplog not logging watch duration
Kubernetes-commit: e341d5b1aa603ff030b26021ecab3e31972802cf
2024-07-02 14:37:46 +00:00
19c13772cd
Merge pull request #125483 from wojtek-t/storage_readiness_hook
...
Implement resilient watchcache initialization post-start-hook
Kubernetes-commit: 79fee524e65ddc7c1448d5d2554c6f91233cf98d
2024-07-01 22:37:43 +00:00
f9f3bbd8be
Merge pull request #125591 from p0lyn0mial/upstream-promote-watch-list-to-beta
...
Promote WatchList feature to Beta
Kubernetes-commit: d729af9446bf6621d3e916f44cbbc939fa0f9c6d
2024-07-01 10:37:43 +00:00
8705baa8b2
fix: enable empty and len rules from testifylint on pkg package
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Kubernetes-commit: f014b754fb5925dfbca6e27a44d0c3968b157e14
2024-06-28 21:20:13 +02:00
5addfa30ff
Merge pull request #125759 from dims/bump-prometheus/common-v0.55.0
...
Bump `prometheus/common` to v0.55.0
Kubernetes-commit: 4c44efe81c9a26d66cdf88e917aeee75dad12299
2024-06-28 06:43:10 +00:00
9f17e821d7
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
Kubernetes-commit: 522e2e50667f25b759a10183eec1bb7d4683ec27
2024-06-28 06:43:09 +00:00
972f7a599e
Merge pull request #125766 from dims/update-moby/spdystream-to-v0.4.0
...
Update moby/spdystream to v0.4.0
Kubernetes-commit: 742b2f70b9e5c1ec03682ad25dc76fdcc7109310
2024-06-27 22:42:53 +00:00
114ef557b9
Merge pull request #125730 from p0lyn0mial/upstream-bring-back-consistent-read-from-cache-supports-pagination
...
apiserver/storage/cacher: consistent read from cache supports limit
Kubernetes-commit: 010409ad0db507a94d8fd9a0528f27a50e525a47
2024-06-27 22:42:51 +00:00
7f5df11548
add emulated-version flag to kube-scheduler to control the feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com>
Kubernetes-commit: 40cddbe21516122a528e2afb2b1fbcaed1acbe8a
2024-06-27 11:56:49 -07:00
7060e82c96
Update moby/spdystream to v0.4.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 377a3f7ec4dc2b5e09e0aadb651999d400c31538
2024-06-27 13:07:47 -04:00
2243836d03
Bump `prometheus/common to` v0.55.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 35ccdc8b35f1c4346071d4ff0efecdd7a6bcdecc
2024-06-27 07:58:24 -04:00
5e71b4e71d
apiserver/storage/watchcache: WaitUntilFreshAndList supports path prefix
...
Kubernetes-commit: 2f9660db6b0ba37ff383559b1b0324c635f1eb66
2024-06-26 14:34:32 +02:00
5d14d72b5c
Fix httplog not logging watch duration in separate goroutines
...
Signed-off-by: Eric Lin <exlin@google.com>
Kubernetes-commit: 06c7058115e623126884d05c54a30db511a9cb71
2024-06-21 10:03:31 +00:00
Sean Sullivan
Patrick Ohly
Cici Huang
Marek Siarkowicz
Jordan Liggitt
Taahir Ahmed
David Eads
Kubernetes Publisher
Lukasz Szaszkiewicz
Monis Khan
Daman Arora
Vinayak Goyal
Davanum Srinivas
Siyuan Zhang
Joe Betz
Abu Kashem
Matthieu MOREL
Eric Lin