Commit Graph

2234 Commits

Author SHA1 Message Date
Christoph Blecker 8a84fb6e8c Update github.com/json-iterator/go to 1.1.4
Kubernetes-commit: c7d39519279937693e654149eb6b67af46836135
2018-11-20 18:13:01 -08:00
Yang Li b6d1828116 Fix unreachable code
Kubernetes-commit: 267425667f45f37b0fb70a6e6904efb995cb4924
2018-11-18 04:16:25 +08:00
Kubernetes Publisher 509339a012 Merge pull request #65763 from x13n/audit-logging
Add option to k8s apiserver to reject incoming requests upon audit failure

Kubernetes-commit: 46ebebcc4f5c22ef518c32874a1be8883ce06819
2018-11-17 15:17:57 +00:00
Kubernetes Publisher 3e2f22f253 Merge pull request #62692 from mikedanese/trev2
authn: extend authenticator.Token to support audience validation

Kubernetes-commit: f38cc9550574171055567288aca8b2cc64a67ed1
2018-11-17 11:21:13 +00:00
Kubernetes Publisher c574ba2672 Merge pull request #71158 from liggitt/revert-openapi-publish
Revert openapi publish

Kubernetes-commit: 39c8219999876047632fe0e9dd952d0510ecca92
2018-11-17 03:17:25 +00:00
Kubernetes Publisher 181d27f0aa Merge pull request #67383 from stlaz/enc_config_promotion
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file

Kubernetes-commit: 1e22f080ec6fd4440d1650b80d9cd48a877a63d4
2018-11-17 03:16:34 +00:00
Kubernetes Publisher 9236e3e2ea Merge pull request #71120 from WanLinghao/audit_log_fix
fix a description error in DynamicAuditing feature

Kubernetes-commit: c418e2a04f1cf52e58749224a27a3ce19d07c5c3
2018-11-16 23:17:15 +00:00
Jordan Liggitt a7180e74a2 Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec"
This reverts commit 54ee58b2d613c636f972312ca80357563292b57d, reversing
changes made to 9e2820e4c9541a7718e9d5b7a0ee62429552023a.

Kubernetes-commit: 8799eb4e2e12e5d144871a35c6288b8433a74c9b
2018-11-16 16:36:24 -05:00
Kubernetes Publisher a1320ac826 Merge pull request #71100 from liggitt/feature-gate-testing
ensure feature gate changes don't escape unit tests

Kubernetes-commit: d0c3cd182cffb3e722b14322fd1ca854a8bf62b0
2018-11-16 10:31:21 -08:00
WanLinghao f78d7e624c fix a description error in DynamicAuditing feature
Kubernetes-commit: 84aa00c03df00eade6615ca009fa9b2943a98b8c
2018-11-17 01:49:02 +08:00
Kubernetes Publisher 28bc4f3147 Merge pull request #71076 from liggitt/preserve-stack
Propagate panics up handler chain

Kubernetes-commit: f1e4ec8e4843b5a5088bad6b97de69d6bc8e53d3
2018-11-16 15:17:21 +00:00
Kubernetes Publisher 2cb01dce2b Merge pull request #67205 from roycaihw/crd-openapi-spec
Serve OpenAPI spec for registered CRDs

Kubernetes-commit: 54ee58b2d613c636f972312ca80357563292b57d
2018-11-16 15:16:32 +00:00
Kubernetes Publisher 6d415cfade Merge pull request #71067 from sttts/sttts-handler-panic
apiserver: preserve stack trace in handler panic beyond timeout handler

Kubernetes-commit: 9e2820e4c9541a7718e9d5b7a0ee62429552023a
2018-11-16 15:16:31 +00:00
Kubernetes Publisher a501de0afe Merge pull request #71020 from saad-ali/updateCSI10
Bump CSI Spec to 1.0.0 and gRPC to 1.13.0

Kubernetes-commit: 6fc60428a7534193b9c4a4f61f4060f769ade557
2018-11-16 11:16:49 +00:00
Jordan Liggitt 2a34c94d31 Add tests to ensure storage feature gate changes don't escape packages
Kubernetes-commit: 248d66132702c152de0bd90f90f9eb0bd4b34e72
2018-11-15 22:08:01 -05:00
Haowei Cai fb85d83a4b generated
Kubernetes-commit: 94e3c2899fb209a5e969cfb06863adee874ec102
2018-11-15 11:03:04 -08:00
Haowei Cai 3c9d1f5b21 Apiextensions-apiserver aggregates CRD schemas
efficiently without checking conflicts, and wire up CRD discovery
controller to serve OpenAPI spec.

Kubernetes-commit: 3222a7033cf9128b76c0677887f4e383821d0475
2018-11-15 11:02:11 -08:00
Kubernetes Publisher bef3d356de Merge pull request #68576 from jennybuckley/openapi-optimize
Build OpenAPI Definitions per group instead of per resource

Kubernetes-commit: b7e2980a57289a32a7dbc5165584a0b1a56c9dd9
2018-11-15 15:16:48 +00:00
Jordan Liggitt 67a9161222 apiserver: propagate panics from REST handlers correctly
Kubernetes-commit: 0952c9ee9692dea46b7e1456f984bafa5cdb56ed
2018-11-15 10:07:49 -05:00
Kubernetes Publisher 6d2d9fc96f Merge pull request #67257 from pbarker/audit
dynamic audit configuration

Kubernetes-commit: b1a52a38e9e3651680655416cc7afbec5e119854
2018-11-15 11:17:03 +00:00
Dr. Stefan Schimanski bb8c155568 apiserver: preserve stack trace in handler panic beyond timeout handler
Kubernetes-commit: 96fd0482f41ff34ef7d9b7de07ded38152a35141
2018-11-15 09:56:49 +01:00
Dr. Stefan Schimanski 0837aa9e3a apiserver: in timeout_test separate out handler
Kubernetes-commit: e43e5e2e4547c7cfb50190d67556352ef0aee9e8
2018-11-15 09:26:02 +01:00
Kubernetes Publisher 1073fba42b Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params

Kubernetes-commit: ca338b91f533ecadb5ca481f3ef551785fcb2aa3
2018-11-14 23:16:45 +00:00
Hannes Hörl 3b3fa3810b Bump k8s.io/uitls to 8e7ff06
The reason for the bump is the new functionality of the
k8s.io/utils/exec package which allows
- to get a hold of the process' std{out,err} as `io.Reader`s
- to `Start` a process and `Wait` for it

This should help on addressing #70890 by allowing to wrap std{out,err}
of the process to be wrapped with a `io.limitedReader`.

It also updates
- k8s.io/kubernetes/pkg/probe/exec.FakeCmd
- k8s.io/kubernetes/pkg/kubelet/prober.execInContainer
- k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet.fakeCmd
to implement the changed interface.

The dependency on 'k8s.io/utils/pointer' to the new version has also
been bumped in some staging repos:
- apiserver
- kube-controller-manager
- kube-scheduler

Kubernetes-commit: 0d4b5c98f81a3e04b18610f983eb1b68e5fa11bf
2018-11-14 23:10:07 +00:00
jennybuckley eb2fbcad73 Update generated
Kubernetes-commit: d02a543f372c25e2eb536b812b63925659f0784d
2018-11-14 12:50:11 -08:00
jennybuckley 7cc3f112fb Build OpenAPI Definitions per group instead of per resource
Kubernetes-commit: 758e8623e9b08065f053bedf4474626696b6346c
2018-11-14 12:50:02 -08:00
saad-ali e3e8e9df6d Bump grpc from 1.7.5 to 1.13.0
Kubernetes-commit: 9d4810f25a787ef5cd78b9885033aecbfe59e701
2018-11-13 17:37:19 -08:00
Kubernetes Publisher cf5eff4f5e Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0
Use watch cache when rv=0 even when limit is set

Kubernetes-commit: 1777be5fbee3c2adc390b0c41ef725b291c6fe3d
2018-11-13 23:16:42 +00:00
Kubernetes Publisher 2db45c53aa Merge pull request #70322 from mikedanese/audoidc
make oidc authenticator (more?) audience aware

Kubernetes-commit: 27cf50d85edb91357d56fd762271974e7a7254bc
2018-11-13 03:20:19 +00:00
Han Kang f61020971c add ability to exclude health checks from failing healthz by passing in a query param
Kubernetes-commit: f1f1bc83fd07450a191ecf94b945f1b772d1dc7c
2018-11-12 16:17:36 -08:00
Mike Spreitzer ee7fb67d6e Clarified syntax doc on --watch-cache-sizes
Noted that group must be omitted for resources of apiVersion v1 (the
legacy core API) and included for others.

Fixes #65393

Kubernetes-commit: fc20359fed5e3d0e89a60653b9b0d638d4d757d8
2018-11-12 14:45:45 -05:00
Kubernetes Publisher 9f75573343 Merge pull request #68054 from stewart-yu/stewart-controller-manager-codeclean#02
kube-scheduler: output flags in logical sections

Kubernetes-commit: 8307fb2fb3ddd48cd8447e54978166f0c1123583
2018-11-11 04:02:48 -08:00
stewart-yu 03079e08cf auto-generated file
Kubernetes-commit: 529dbd27ac03d8a33b0b3a24fca15ad93196e5cc
2018-11-11 14:29:33 +08:00
Kubernetes Publisher b8915a5609 Merge pull request #70889 from dims/update-cadvisor-and-other-repos-for-klog-take-2
Update cadvisor and other repos for klog

Kubernetes-commit: a3ccea9d8743f2ff82e41b6c2af6dc2c41dc7b10
2018-11-10 19:17:21 +00:00
Davanum Srinivas 5dfe5ac061 s/glog/klog/ - keep up with master
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235

Kubernetes-commit: e558e291d1a41728da23f517e51b71038e3ba93e
2018-11-10 07:53:25 -05:00
Kubernetes Publisher c45349c923 Merge pull request #67006 from mbohlool/crd_webhook_conversion
CRD webhook conversion

Kubernetes-commit: 97baad34a7146dd7a80f296c62706dce61eb9b3f
2018-11-10 11:16:30 +00:00
Kubernetes Publisher 81499b5be2 Merge pull request #70021 from pbarker/audit-plugins
dynamic audit plugins

Kubernetes-commit: 413ccb15c669d0b4301633c6877db872e4f5d282
2018-11-10 03:16:09 +00:00
Kubernetes Publisher ace16cbf26 Merge pull request #70753 from logicalhan/healthz-test
fix healthz checkerNames test so that it tests against the expected output

Kubernetes-commit: daea190bee5972fe3960cf363a2992d11e0d21d9
2018-11-10 02:04:09 +00:00
Mehdy Bohlool 26065df432 CRD Conversion
Kubernetes-commit: e2ca575d0f40d94578c7c0babce543ab5199d2d0
2018-11-09 14:55:06 -08:00
Davanum Srinivas 202f96eed8 Update all the staging Godeps.json
Change-Id: I64b30c68a606b4f5c095a66496a1e48c4d62ea88

Kubernetes-commit: 68ce375d0039738df5a2a837122215f3224f1fde
2018-11-09 16:41:26 -05:00
Davanum Srinivas 2710b17b80 Move from glog to klog
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135

Kubernetes-commit: 954996e231074dc7429f7be1256a579bedd8344c
2018-11-09 13:49:10 -05:00
Kubernetes Publisher c8132c133c Merge pull request #69663 from sttts/sttts-scheduler-secure-serving
scheduler: enable secure port and authn/z

Kubernetes-commit: be800e623a06068397387786ff3d91229c86deb3
2018-11-09 03:37:51 +00:00
Kubernetes Publisher 166471a918 Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml
Switch to sigs.k8s.io/yaml from ghodss/yaml

Kubernetes-commit: f212b9db236344d3121879e609d53b79f9f106f9
2018-11-08 19:44:24 +00:00
Kubernetes Publisher 92634e4423 Merge pull request #70718 from cblecker/godep-round-a-million
Fork godep to fix inconsistent abbreviation size

Kubernetes-commit: e998d6c2bc83385d98186a87e95a0f947e121ec1
2018-11-08 05:19:23 +00:00
Kubernetes Publisher 6c4dbd3004 Merge pull request #70670 from deads2k/default-healthz
Add `With` method for allowed paths on delegated authorization

Kubernetes-commit: 66989e8bf35cbde4b499337cffa8cfd9fce9d677
2018-11-08 05:18:35 +00:00
stewart-yu 0639bdeeb1 kube-scheduler: output flags in logical sections
Kubernetes-commit: a77652e9ab25382706e98e24f6026e28a9fbe621
2018-11-08 12:49:19 +08:00
Kubernetes Publisher f1dab8c342 Merge pull request #70663 from wenjiaswe/gonet110
Upgrade golang.org/x/net image to release-branch.go1.10

Kubernetes-commit: 471aff6673ebe4ac9c9219a7579d23831e1146be
2018-11-07 21:27:33 +00:00
Han Kang 85a1725c91 fix healthz checkerNames test so that it tests against the expected output
Kubernetes-commit: 0623f630ab37ad75961bf836195e190e6bcf560e
2018-11-07 09:26:11 -08:00
wojtekt d0a6ca6003 Use watch cache when rv=0 even when limit is set
Kubernetes-commit: 4242d1b760314adc69498b1f523a4759c446d7c0
2018-11-07 10:38:31 +01:00
Kubernetes Publisher da1d732cee Merge pull request #70600 from liggitt/sig-auth-subprojects
Add owners/approvers aliases for sig-auth subprojects

Kubernetes-commit: 0aba5577412ea9b2fd89a0c0843e9b0c94e8848d
2018-11-07 05:04:05 +00:00