Anish Shah
cb02f4a386
support for resize subresource in ResourceQuota admission.
...
Kubernetes-commit: 1b98fe6079059cb1d7bfda4f4b318f614449fee5
2024-10-24 14:00:57 -07:00
Kubernetes Publisher
04fa4ade1a
Merge pull request #128539 from benluddy/cbor-feature-gates
...
KEP-4222: Add CBOR feature gates.
Kubernetes-commit: a28f14089cfa47ef9c57f9f283e1504a68f616d6
2024-11-06 03:22:48 +00:00
Kubernetes Publisher
7338177523
Merge pull request #128580 from jpbetz/bump-kube-openapi
...
Bump kube-openapi to latest
Kubernetes-commit: 9a2a7537f035969a68e432b4cc276dbce8ce1735
2024-11-05 23:23:51 +00:00
Kubernetes Publisher
4cb4306ed2
Merge pull request #128415 from serathius/watchcache-btree-2
...
Use btree for watch cache storage to serve LIST more efficiently
Kubernetes-commit: 19d6337d593773397164f25fad0ea5daba05333e
2024-11-05 23:23:50 +00:00
Kubernetes Publisher
982944365e
Merge pull request #127134 from jpbetz/mutating-admission
...
KEP-3962: MutatingAdmissionPolicy Alpha
Kubernetes-commit: 2d6c8a129df97caf5bda3a186a8f7f3e41591352
2024-11-05 19:23:26 +00:00
Joe Betz
5fff35ea12
hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e
...
Kubernetes-commit: f2157ff73e3c9b7c2a36bf371e388e8976d93975
2024-11-05 10:18:57 -05:00
Kubernetes Publisher
4605e42ff2
Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
...
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Kubernetes-commit: 7a4d755644e83dfade7bbc4c240c204a9e54d9c0
2024-11-04 23:24:19 +00:00
Kubernetes Publisher
e3e5839136
Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
...
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares
Kubernetes-commit: 6a1a6fd85fb80fd9c4b3f823741853822a4270db
2024-11-04 19:18:06 +00:00
Joe Betz
f7ccc75f9f
Reorganize and expand unit test coverage
...
Also apply reviewer feedback
Kubernetes-commit: 0dc08eded95c2d620de70648dee07254f2e771b3
2024-11-04 10:50:53 -05:00
Ben Luddy
ca9c3d965e
Add CBOR feature gates.
...
For alpha, there is one apiserver feature gate and two client-go feature gates controlling
CBOR. They were initially wired to separate test-only feature gate instances in order to prevent
them from being configurable at runtime via command-line flags or environment variables (for
client-go feature gates outside of Kubernetes components). All of the integration tests required by
the KEP as alpha criteria have been implemented. This adds the feature gates to the usual feature
gate instances and removes the temporary code to support separate test-only feature gate instances.
Kubernetes-commit: 072dfcb416fd4e1ddab0a89ac4faf519e268bc96
2024-11-04 10:40:19 -05:00
Davanum Srinivas
cae3853011
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 2b0592ee77d0a0bb3017df042066ecb8c83d2fb3
2024-11-01 22:19:11 -04:00
Kubernetes Publisher
6df5cd720d
Merge pull request #128481 from carlory/dependencies-ginkgo-gomega
...
dependencies: ginkgo v2.21.0, gomega v1.35.1
Kubernetes-commit: 88a997ac01cd8a386df9318d81b89257307f53fb
2024-11-01 19:24:43 +00:00
carlory
5d1ea16030
dependencies: ginkgo v2.21.0, gomega v1.35.1
...
Kubernetes-commit: 80b1a297865500891bd823005ace761becae5dbf
2024-11-01 11:35:24 +08:00
Kubernetes Publisher
0b45fb4d77
Merge pull request #128416 from jpbetz/reset-filter
...
Add optional ResetFieldsFilterStrategy interface for storage
Kubernetes-commit: b831df733e5cf244331f61fffb0ba86787b27236
2024-11-01 03:55:40 +00:00
Kubernetes Publisher
97c3c25661
Merge pull request #128463 from knrc/fix_vap_elapsed_time_tracking
...
Fix elapsed time tracking for validating admission policies
Kubernetes-commit: 34ce75749e7400b30b0dda6659ad31801d528b2b
2024-10-31 23:02:06 +00:00
Kubernetes Publisher
1ae041730c
Merge pull request #128468 from wojtek-t/fix_miss_events_tests
...
Fix TestCacherDontMissEventsOnReinitialization test
Kubernetes-commit: d76a8fae674c972b5d2e2cfc226c607c9f63a412
2024-10-31 23:02:05 +00:00
Kubernetes Publisher
f1894425ee
Merge pull request #128454 from jpbetz/fix-emulated-storage-version-encoding-config
...
Don't select versions that have a replacement as storage version for APIs
Kubernetes-commit: 7a43edefa13fdaf598eb73380151b8a8b7b49e2d
2024-10-31 19:02:07 +00:00
Wojciech Tyczyński
0679efd5ba
Fix TestCacherDontMissEventsOnReinitialization test
...
Kubernetes-commit: d35ea217fa7541a2b1942aaf533697a2e4e7a222
2024-10-31 12:33:04 +01:00
Kubernetes Publisher
9270d97c6f
Merge pull request #128456 from benluddy/nondeterministic-response-encoding
...
KEP-4222: Allow nondeterministic object encoding in HTTP response bodies.
Kubernetes-commit: dc1d7f41ef4765552193c10cf1c1ed2b0c4e149b
2024-10-30 23:02:04 +00:00
Kubernetes Publisher
2e7093fa33
Merge pull request #128273 from benluddy/cbor-apply
...
KEP-4222: Support CBOR encoding for apply requests.
Kubernetes-commit: 16f9fdc7057e1f69ff1a44e3dbbcf7b994c3cd29
2024-10-30 19:08:47 +00:00
Joe Betz
7d5891a801
Unit test for emulated storage version selection
...
Kubernetes-commit: d5517b7a518c60e8e6f1aadc1806f4e2a254d6a9
2024-10-30 13:15:35 -04:00
Joe Betz
f0baf72379
Don't pick versions that have a replacement as storage version
...
Kubernetes-commit: af811be190b7d04a49ecf47bf55a3858fa7e7e96
2024-10-30 11:47:43 -04:00
Kubernetes Publisher
28f9eed685
Merge pull request #126875 from serathius/watchcache-test-indexers
...
Adding tests for using indexers in tests
Kubernetes-commit: a0e5e244b3fcfc60d2bf2296c63a72e015f5884b
2024-10-30 03:01:53 +00:00
Kubernetes Publisher
d93c90f116
Merge pull request #128274 from eddycharly/fix-cel-type-provider
...
fix: cel type provider should return a type type
Kubernetes-commit: 42b7cfecece002f13b53a293589c3f02595f4d32
2024-10-30 03:01:52 +00:00
Kubernetes Publisher
918f350339
Merge pull request #126754 from serathius/watchcache-btree
...
Reimplement watch cache storage with btree
Kubernetes-commit: c83250d1040af039455ed8a4b030896578a55720
2024-10-29 18:49:42 +00:00
Kubernetes Publisher
14c29cd5d7
Merge pull request #128013 from seans3/admission-configuration-strict
...
AdmissionConfiguration now uses strict validation
Kubernetes-commit: eb5c8965befeefad027d0c1684fe6d34f6f31c19
2024-10-29 18:49:40 +00:00
Kubernetes Publisher
76c064061d
Merge pull request #128122 from aojea/storage_error
...
use same name for package than the folder
Kubernetes-commit: e15d5b9da913a2e7e7d190a8aa1d6c577872f015
2024-10-29 18:49:38 +00:00
Kubernetes Prow Robot
4bece4d457
Merge pull request #128196 from richabanker/move-version
...
Move k8s.io/apiserver/pkg/util/version to component-base
Kubernetes-commit: 119f114f012ae6d1cd851bdb2c3f849307e83258
2024-10-29 18:49:35 +00:00
Kubernetes Publisher
fb9f1a8075
Merge pull request #127898 from modulitos/modulitos/fix-metrics-docs
...
Fix docs for apiserver admission metrics
Kubernetes-commit: 1947bf57ef0635e8764eee25e5726a8ec4189b7f
2024-10-29 18:49:34 +00:00
Kevin Conner
b91c4326ba
Fix elapsed time tracking for validating admission policies
...
Signed-off-by: Kevin Conner <kev.conner@gmail.com>
Kubernetes-commit: 9538747d4d6f7f3bc01e79d2d4781df1d7535f16
2024-10-29 11:26:46 -07:00
Joe Betz
15adc430e7
Add ResetFieldsFilterStrategy
...
Kubernetes-commit: 2bc17d1cf03f2f2bcd683e7e79f01c929951cca3
2024-10-29 12:03:32 -04:00
Joe Betz
125611e8cd
hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v4 v4.4.2
...
Kubernetes-commit: 6fe51403665f1b6e820226004817b92e3118cabc
2024-10-31 21:19:15 -04:00
Ben Luddy
30be0a3c20
Allow nondeterministic object encoding in HTTP response bodies.
...
Kubernetes-commit: dee76a460ec80f15dc199c93e506586687d42291
2024-10-28 12:09:02 -04:00
Joe Betz
9843fd95fb
Rename dispatcher Run to Start to match naming conventions
...
Kubernetes-commit: 0dfbc85cd9f7c0578ed385928e6990a496112e6c
2024-10-25 18:44:10 -04:00
Joe Betz
b738c82d70
Fix comment in mutating webhook dispatcher
...
Kubernetes-commit: 1031e07e8325fc043d741b697c197d5416bfcc98
2024-10-25 14:37:39 -04:00
Joe Betz
c259217340
Improve error messaging for validating admission policy authz
...
Kubernetes-commit: 1ad6fd7a0fa454cc3302b579dc73eb5c9afec49a
2024-10-25 13:52:34 -04:00
Joe Betz
9da95682e0
Add jsonpatch.escapeKey CEL function
...
Kubernetes-commit: 712cc20996aedad5ac525184d76ea581f98d6e35
2024-10-25 13:50:25 -04:00
Joe Betz
a5e93cb37c
Add MutatingAdmissionPolicy plugin to admission chain
...
This expands the generic plugin support to both validating and mutating policies. It also adds the
mutating policy admission plugin using the generics plugin support.
This also implements both ApplyConfiguration and JSONPatch support.
Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
Kubernetes-commit: 25e11cd1c143ef136418c33bfbbbd4f24e32e529
2024-10-25 13:46:58 -04:00
Joe Betz
0e6467b270
Add mutation support into CompositedCompiler and reorganize for clarity
...
Kubernetes-commit: 081353bf8ad963d43c5da6714a24f62cfe0b8401
2024-10-25 14:37:17 -04:00
Joe Betz
9ead80d1bb
Add MutatingAdmissionPolicy API
...
This is closely aligned with ValidatingAdmissionPolicy
except that instead of validations that can fail with
messages, there are mutations, which can be defined
either with as an ApplyConfiguration or JSONPatch.
Co-authored-by: cici37 <cicih@google.com>
Kubernetes-commit: 3a1733f302d0fe9994bcc8e91fa2191c94606c2b
2024-10-25 13:25:46 -04:00
Joe Betz
bd808a01a1
Add feature gate
...
Co-authored-by: cici37 <cicih@google.com>
Kubernetes-commit: 4b13362dda020f80cf961dbeefae750f63f803f9
2024-10-25 13:22:58 -04:00
Joe Betz
8794780f6a
Clean up Object initialization support
...
The initial work of this had been merged before
this PR but was not yet in use. This simplifies
the implementation and adds some basic type
sanity checking.
Co-authored-by: Jiahui Feng <jhf@google.com>
Kubernetes-commit: 9ee1ea9d37c25d8151aad18d5a2a959836dcbe12
2024-10-25 13:22:06 -04:00
Joe Betz
b09b8016b6
Move caching authorizer to shared location to be used by mutating and validating policy
...
Kubernetes-commit: 910c2e2dad58b08d7a5ee6c59a2970454e241e2a
2024-10-25 13:20:14 -04:00
Kubernetes Publisher
78628824cd
Merge pull request #128243 from benluddy/cbor-dynamic-integration
...
KEP-4222: Add CBOR variant of admission webhook integration test.
Kubernetes-commit: 5147eebf224ae41892b736179ca91c47fd794565
2024-10-25 02:15:46 +00:00
Charles-Edouard Brétéché
00c7d5a4e1
use require
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Kubernetes-commit: ea1bd956c57f23b4ac5feb0b24ea79bbbe3b31ff
2024-10-24 22:25:37 +02:00
Charles-Edouard Brétéché
b432ca9bc1
add test
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Kubernetes-commit: 0d825361e6d31171b77a00665fdb63816b8b6e00
2024-10-24 21:57:51 +02:00
Marek Siarkowicz
5913dac984
Implement btree based storage indexer
...
Kubernetes-commit: 50d2fab27903c66837d625b6ff702cf7873e3c7f
2024-10-24 18:17:56 +02:00
Kubernetes Publisher
781f771b86
Merge pull request #125258 from serathius/etcd-kubernetes-interface
...
Etcd kubernetes interface
Kubernetes-commit: cadb1508a99580a3fec27da8d75c432756275fc4
2024-10-24 14:08:46 +00:00
Ben Luddy
f27bb5491e
Wire test-only feature gate for CBOR serving.
...
To mitigate the risk of introducing a new protocol, integration tests for CBOR will be written using
a test-only feature gate instance that is not wired to runtime options. On alpha graduation, the
test-only feature gate instance will be replaced by a normal feature gate in the existing apiserver
feature gate instance.
Kubernetes-commit: 0cad1a89b6721308746cc1a12f12de31a259a0d3
2024-10-23 16:36:25 -04:00
Charles-Edouard Brétéché
15220968e1
fix: cel type provider should return a type type
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Kubernetes-commit: 1518c4ec16d06b7281f0b6c9a0e8c40952475f6b
2024-10-22 22:21:51 +02:00