kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,522 Commits 30 Branches 1,482 Tags 31 MiB
Commit Graph

3522 Commits

Author SHA1 Message Date
Joe Betz dced5f29d8 Bump to latest SMD to pick up performance optimizations 
Kubernetes-commit: d9faaca64738a50455f38dd88845e8b4b5ca37e2
 2020-02-06 15:10:25 -08:00
Antoine Pelisse 977fdf9f57 Add UpdateTwice and UpdateApply benchmarks for fieldmanager 
I've also moved the deserialization of the object outside the benchmark
since we're not trying to benchmark the yaml parser.

Kubernetes-commit: a52776fbfb305374d87bb553739f712e055b2206
 2020-02-06 09:25:52 -08:00
shaloulcy 2c701b633b validate storage cache indexers 
Signed-off-by: shaloulcy <lcy041536@gmail.com>

Kubernetes-commit: fa9ba80a67deeb9089e1be8ebac21063ebc07904
 2020-02-05 12:08:14 +08:00
Davanum Srinivas 487410c5ac Updating dependency sigs.k8s.io/yaml to version v1.2.0 
Kubernetes-commit: 5bb1838c5c197dd06af5f37df6fdaf8093338f67
 2020-02-04 15:45:47 -05:00
Tim Allclair 56dc51d310 Ensure testing credentials are labeled as such 
Kubernetes-commit: 9d3670f3586c98c02cdca93b7c98dd91fc0b87bd
 2020-02-04 10:36:05 -08:00
Jefftree 95ee8d4df4 Support empty root CA for konnectivity 
Kubernetes-commit: 55b89a6451d253532ede0736d7bc8af62f396596
 2020-02-03 19:54:41 -08:00
Kubernetes Publisher 9dae63f1be Merge pull request #87671 from jennybuckley/create-adm 
Move mutating admission step into finishRequest in the create handler

Kubernetes-commit: fc90261e6b4300528d417f97d2d3f545737fa8d2
 2020-01-31 03:35:34 +00:00
Kubernetes Publisher 84c95e5916 Merge pull request #87669 from logicalhan/client-label 
remove client label from apiserver request count metric since it is unbounded

Kubernetes-commit: 5978856c4c7f10737a11c9540fe60b8475beecbb
 2020-01-31 03:35:32 +00:00
Kubernetes Publisher b5db01569a Merge pull request #87517 from odinuge/prom-client_model 
Bump dependency github.com/prometheus/client_model@v0.2.0

Kubernetes-commit: 608ac4e67d2f6991553a6812a7cbe26beb5250f8
 2020-01-31 03:35:30 +00:00
Kubernetes Publisher dfd2b63452 Merge pull request #87677 from jennybuckley/schema-error 
Make schema error log message more useful

Kubernetes-commit: 73409068cd35918fd4c2d4f4d9c422a64116da20
 2020-01-30 15:29:07 +00:00
Kubernetes Publisher 63d2c07ac2 Merge pull request #87597 from mikedanese/rctx 
Refactor context handling in rest.Request

Kubernetes-commit: 60dd5dbd8b2347284b7e9b87a5700f54c185034e
 2020-01-30 07:32:50 +00:00
Kubernetes Publisher f088f19457 Merge pull request #87431 from dprotaso/bump-gofuzz 
bump github.com/google/gofuzz

Kubernetes-commit: fc3b7b6dcde835291bd2103d78df9391b20bba39
 2020-01-30 07:32:47 +00:00
jennybuckley 0fe6670327 Make schema error log message more useful 
Kubernetes-commit: fee77388c6d4cc04731f35055d9dfcdf08b0f874
 2020-01-29 15:01:44 -08:00
Han Kang 08990c3cd6 remove client label from healthz metric test 
Change-Id: I4082ff771e5912c68e2811cab07c4d488ab014ac

Kubernetes-commit: 75cf4d79f2c52a122d786812eaaed8557e928552
 2020-01-29 13:32:12 -08:00
jennybuckley 216aab95f9 Move mutating admission into finishRequest 
Kubernetes-commit: 9bd42287f90feeb0cf1076fcfb180ff6e1d02110
 2020-01-29 13:21:58 -08:00
Han Kang fe6033d4a2 remove client label from apiserver request count metric since it is unbounded 
Change-Id: I3a9eacebc9d9dc9ed6347260d9378cdcb5743431

Kubernetes-commit: cc3190968b1f14ddf4067abef849fc41bd6068dc
 2020-01-29 12:25:55 -08:00
immutablet e6ae7336e6 Factor-out metrics related logic from authentication logic. 
Kubernetes-commit: c0bad80e5b4bf56757e1a4999e831a5341693203
 2020-01-28 15:53:25 -08:00
Monis Khan e9334b2a3a Make oidc authenticator audience agnostic 
This change removes the audience logic from the oidc authenticator
and collapses it onto the same logic used by other audience unaware
authenticators.

oidc is audience unaware in the sense that it does not know or
understand the API server's audience.  As before, the authenticator
will continue to check that the token audience matches the
configured client ID.

The reasoning for this simplification is:

1. The previous code tries to make the client ID on the oidc token
a valid audience.  But by not returning any audience, the token is
not valid when used via token review on a server that is configured
to honor audiences (the token works against the Kube API because the
audience check is skipped).

2. It is unclear what functionality would be gained by allowing
token review to check the client ID as a valid audience.  It could
serve as a proxy to know that the token was honored by the oidc
authenticator, but that does not seem like a valid use case.

3. It has never been possible to use the client ID as an audience
with token review as it would have always failed the audience
intersection check.  Thus this change is backwards compatible.

It is strange that the oidc authenticator would be considered
audience unaware when oidc tokens have an audience claim, but from
the perspective of the Kube API (and for backwards compatibility),
these tokens are only valid for the API server's audience.

This change seems to be the least magical and most consistent way to
honor backwards compatibility and to allow oidc tokens to be used
via token review when audience support in enabled.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 9b23f22472ebba899ea4c3111cdeee3cebdbe478
 2020-01-28 10:27:12 -05:00
Mike Danese f7c2e26715 cleanup req.Context() and ResponseWrapper 
Kubernetes-commit: 968adfa99362f733ef82f4aabb34a59dbbd6e56a
 2020-01-27 18:52:27 -08:00
Mike Danese 5737088b7f refactor 
Kubernetes-commit: d55d6175f8e2cfdab0b79aac72046a652c2eb515
 2020-01-27 18:19:44 -08:00
Kubernetes Publisher d65a85b44b Merge pull request #87528 from MikeSpreitzer/refactor/catch-all 
Make API Priority and Fairness suggested config avoid the mandatory catch-all

Kubernetes-commit: 51bb3238f26ccecd182c48d2a7605089413f3652
 2020-01-27 03:28:55 +00:00
Mike Spreitzer 1c79014daa Added API Priority and Fairness filter and config consumer 
Kubernetes-commit: 73614ddd4e42728a36c7ac6b7b20f27c8032cafb
 2020-01-25 19:47:12 -05:00
Kubernetes Publisher 8ebac2550a Merge pull request #87362 from MikeSpreitzer/limited-cancel2 
Simplified and corrected logic around context cancelation in refactored QueueSet

Kubernetes-commit: 25b4c170f8c4c1a36139f6d171920e5cecd861b5
 2020-01-25 07:31:31 +00:00
Mike Spreitzer fffb0fade5 brushed up according to review 
Added LockingWriteMultipleOnly and LockingWriteOnceOnly interfaces,
so that further extensions are possible (in this package or others).

Moved common SetLocked behavior into promisoid.

Made comments say things that were implied.

Kubernetes-commit: cbdd3a279e6161d73f2c4e8a2b916ae74b258621
 2020-01-24 14:33:15 -05:00
Dao Hoang Son 4a26259a7c Register full object as return type for `DELETE` web services. 
Related to https://github.com/kubernetes/kubernetes/issues/59501

Maybe related to https://github.com/kubernetes/enhancements/pull/1263

Kubernetes-commit: 4d33d837c8be778044d50755de83f8738e957c13
 2020-01-24 21:50:29 +07:00
Odin Ugedal e4a2900ee3 Bump dependency github.com/prometheus/client_model@v0.2.0 
Kubernetes-commit: 292804ae1c8bcffa74e0703f17c85d30c49bc8d5
 2020-01-24 13:27:15 +01:00
Kubernetes Publisher b17b8b7d8c Merge pull request #87500 from jennybuckley/reenable-apply 
Re-enable apply for 50% of requests

Kubernetes-commit: b1cd93a639c98d299bd1f5204e4b732402f09305
 2020-01-24 11:29:48 +00:00
Kubernetes Publisher 4f327b102d Merge pull request #87467 from cjcullen/yaml 
Update gopkg.in/yaml.v2 to v2.2.8

Kubernetes-commit: 07b358b1904c3c16a40a93a18f95e9411d9a2789
 2020-01-24 03:31:44 +00:00
jennybuckley 605316fae2 Re-enable apply for 50% of requests 
Kubernetes-commit: 9b679748239faa4d01f13c32af1956ffdbfff9aa
 2020-01-23 11:27:20 -08:00
Ted Yu d4282ddc2e Return the error from copyInto 
Kubernetes-commit: 5b49d03b8440fbe531b8ebd978c18e7d3809cd50
 2020-01-23 07:48:39 -08:00
Kubernetes Publisher 025966c4b5 Merge pull request #87442 from jennybuckley/smd-3 
Update structured-merge-diff dependency to v3

Kubernetes-commit: 03cb6afc1a7d43e8ea034279a19801d3d3fb17b3
 2020-01-23 07:32:45 +00:00
Kubernetes Publisher d4c3ffcd9e Merge pull request #86816 from deads2k/auto-reload-csr 
add dynamic reloading for CSR signing controllers

Kubernetes-commit: 072487116298ce3692cecf7595ac533cde3f5996
 2020-01-22 18:46:49 -08:00
jennybuckley a87d964ed1 Don't save managedFields if object is too large 
Kubernetes-commit: ccd9e4e2de32b8708f3a7be159f7a4316449c433
 2020-01-22 15:38:27 -08:00
CJ Cullen f2ff205784 update gopkg.in/yaml.v2 to v2.2.8 
Kubernetes-commit: b86df2bec4f377afc0ca03482ffad2f0a49a83b8
 2020-01-22 11:32:39 -08:00
Mike Spreitzer 27a36b04f5 Tweak new names 
Kubernetes-commit: a65f525aed8d9f28f677028f77e2ab41313ae037
 2020-01-21 20:35:45 -05:00
jennybuckley 49d583f0ef Update Structured Merge Diff to V3 
Kubernetes-commit: b33fbc84d9d6e7033c36fa3bc321b8fea28ceed6
 2020-01-21 15:03:56 -08:00
Dave Protasowski 5616a23e78 bump github.com/google/gofuzz 
This includes the ability for the fuzzer to skip certain struct fields

Kubernetes-commit: c8dbde86664170f479dd9a9a55de76d8f186754f
 2020-01-21 13:11:34 -05:00
andrewsykim 9939c99d6a update vendor k8s.io/utils to 5f6fbceb4c31 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>

Kubernetes-commit: 9e5a06c3eddb135a33496e874477a3a64b2421d6
 2020-01-17 22:06:08 -05:00
David Eads 78efdd9c66 rename dynamic cert loading to be more accurate 
Kubernetes-commit: 5c2d2c5ef1ab08eb4dfaec0947e1ce252119c85d
 2020-01-17 15:50:26 -05:00
Kubernetes Publisher 8918110902 Merge pull request #83598 from jktomer/healthz-metrics 
healthz: instrument root healthz requests for metrics

Kubernetes-commit: f10de54bc04bcc7e726e55a232ff1b1718019a65
 2020-01-22 19:30:15 +00:00
Kubernetes Publisher 25e96abb3f Merge pull request #87081 from dims/updating-protobuf-and-grpc 
Updating protobuf (v1.3.1) and grpc (v1.26.0)

Kubernetes-commit: f4b6b751cdf2d46940355359443b263cb883d006
 2020-01-18 23:47:15 +00:00
Kubernetes Publisher efc84667d5 Merge pull request #87313 from MikeSpreitzer/apf-validation 
Update validation for API Priority and Fairness

Kubernetes-commit: c1b696d672cb86c227e02da4e819e1f611b40967
 2020-01-18 11:43:12 +00:00
Mike Spreitzer 05e620fec5 removed excess blank line 
Kubernetes-commit: f1c26bf4362636bcd36fff4663cc87b567bf6603
 2020-01-17 12:30:07 -05:00
Mike Spreitzer f6a6879cc4 Update validation for API Priority and Fairness 
This PR fixes oversights and adds validation that rejects writes
of wrong Spec values for the four mandatory objects.

Kubernetes-commit: ec5321c6a9f23e5ad26cf88a41fda9dba0c5ce89
 2020-01-17 02:43:52 -05:00
Kubernetes Publisher 468c49769d Merge pull request #87158 from dims/pick-closest-tags-for-a-few-packages 
Pick closest tags for a few packages and avoid random SHA

Kubernetes-commit: 5d1c3016103d83df4ae91664639ba7e0a103c7ec
 2020-01-16 03:48:07 +00:00
Jefftree cbcdfbfd72 Network Proxy: GRPC + HTTP Connect with UDS 
Kubernetes-commit: 725d2b6a8fd7733afcbc6822723f4c7e171bcd7f
 2020-01-13 21:23:39 -08:00
Davanum Srinivas cde2338e26 update generated files 
Kubernetes-commit: b3853138a4f1a0637ec3c38a5c59f8228765b261
 2020-01-13 17:56:56 -05:00
Davanum Srinivas f10201be41 Updating dependency google.golang.org/genproto to version v0.0.0-20190819201941-24fa4b261c55 
Kubernetes-commit: 2f78a9480f2f4eabb7698984371df25543312db4
 2020-01-13 17:40:24 -05:00
Davanum Srinivas 7259a048ed Updating dependency github.com/prometheus/client_model to version v0.0.0-20190812154241-14fe0d1b01d4 
Kubernetes-commit: cac0451836ff42a9cf6e52fd10d196fee026fabe
 2020-01-13 18:01:43 -05:00
Davanum Srinivas cf16772dff Updating dependency google.golang.org/grpc to version v1.26.0 
Kubernetes-commit: 3b29bcf52d3f6a73af9830cf55159893899c2b1b
 2020-01-13 17:38:18 -05:00