Commit Graph

7896 Commits

Author SHA1 Message Date
Anish Shah cb02f4a386 support for resize subresource in ResourceQuota admission.
Kubernetes-commit: 1b98fe6079059cb1d7bfda4f4b318f614449fee5
2024-10-24 14:00:57 -07:00
Kubernetes Publisher 04fa4ade1a Merge pull request #128539 from benluddy/cbor-feature-gates
KEP-4222: Add CBOR feature gates.

Kubernetes-commit: a28f14089cfa47ef9c57f9f283e1504a68f616d6
2024-11-06 03:22:48 +00:00
Kubernetes Publisher 7338177523 Merge pull request #128580 from jpbetz/bump-kube-openapi
Bump kube-openapi to latest

Kubernetes-commit: 9a2a7537f035969a68e432b4cc276dbce8ce1735
2024-11-05 23:23:51 +00:00
Kubernetes Publisher 4cb4306ed2 Merge pull request #128415 from serathius/watchcache-btree-2
Use btree for watch cache storage to serve LIST more efficiently

Kubernetes-commit: 19d6337d593773397164f25fad0ea5daba05333e
2024-11-05 23:23:50 +00:00
Kubernetes Publisher 982944365e Merge pull request #127134 from jpbetz/mutating-admission
KEP-3962: MutatingAdmissionPolicy Alpha

Kubernetes-commit: 2d6c8a129df97caf5bda3a186a8f7f3e41591352
2024-11-05 19:23:26 +00:00
Joe Betz 5fff35ea12 hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e
Kubernetes-commit: f2157ff73e3c9b7c2a36bf371e388e8976d93975
2024-11-05 10:18:57 -05:00
Kubernetes Publisher 4605e42ff2 Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru

Kubernetes-commit: 7a4d755644e83dfade7bbc4c240c204a9e54d9c0
2024-11-04 23:24:19 +00:00
Kubernetes Publisher e3e5839136 Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares

Kubernetes-commit: 6a1a6fd85fb80fd9c4b3f823741853822a4270db
2024-11-04 19:18:06 +00:00
Joe Betz f7ccc75f9f Reorganize and expand unit test coverage
Also apply reviewer feedback

Kubernetes-commit: 0dc08eded95c2d620de70648dee07254f2e771b3
2024-11-04 10:50:53 -05:00
Ben Luddy ca9c3d965e Add CBOR feature gates.
For alpha, there is one apiserver feature gate and two client-go feature gates controlling
CBOR. They were initially wired to separate test-only feature gate instances in order to prevent
them from being configurable at runtime via command-line flags or environment variables (for
client-go feature gates outside of Kubernetes components). All of the integration tests required by
the KEP as alpha criteria have been implemented. This adds the feature gates to the usual feature
gate instances and removes the temporary code to support separate test-only feature gate instances.

Kubernetes-commit: 072dfcb416fd4e1ddab0a89ac4faf519e268bc96
2024-11-04 10:40:19 -05:00
Davanum Srinivas cae3853011 Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: 2b0592ee77d0a0bb3017df042066ecb8c83d2fb3
2024-11-01 22:19:11 -04:00
Kubernetes Publisher 6df5cd720d Merge pull request #128481 from carlory/dependencies-ginkgo-gomega
dependencies: ginkgo v2.21.0, gomega v1.35.1

Kubernetes-commit: 88a997ac01cd8a386df9318d81b89257307f53fb
2024-11-01 19:24:43 +00:00
carlory 5d1ea16030 dependencies: ginkgo v2.21.0, gomega v1.35.1
Kubernetes-commit: 80b1a297865500891bd823005ace761becae5dbf
2024-11-01 11:35:24 +08:00
Kubernetes Publisher 0b45fb4d77 Merge pull request #128416 from jpbetz/reset-filter
Add optional ResetFieldsFilterStrategy interface for storage

Kubernetes-commit: b831df733e5cf244331f61fffb0ba86787b27236
2024-11-01 03:55:40 +00:00
Kubernetes Publisher 97c3c25661 Merge pull request #128463 from knrc/fix_vap_elapsed_time_tracking
Fix elapsed time tracking for validating admission policies

Kubernetes-commit: 34ce75749e7400b30b0dda6659ad31801d528b2b
2024-10-31 23:02:06 +00:00
Kubernetes Publisher 1ae041730c Merge pull request #128468 from wojtek-t/fix_miss_events_tests
Fix TestCacherDontMissEventsOnReinitialization test

Kubernetes-commit: d76a8fae674c972b5d2e2cfc226c607c9f63a412
2024-10-31 23:02:05 +00:00
Kubernetes Publisher f1894425ee Merge pull request #128454 from jpbetz/fix-emulated-storage-version-encoding-config
Don't select versions that have a replacement as storage version for APIs

Kubernetes-commit: 7a43edefa13fdaf598eb73380151b8a8b7b49e2d
2024-10-31 19:02:07 +00:00
Wojciech Tyczyński 0679efd5ba Fix TestCacherDontMissEventsOnReinitialization test
Kubernetes-commit: d35ea217fa7541a2b1942aaf533697a2e4e7a222
2024-10-31 12:33:04 +01:00
Kubernetes Publisher 9270d97c6f Merge pull request #128456 from benluddy/nondeterministic-response-encoding
KEP-4222: Allow nondeterministic object encoding in HTTP response bodies.

Kubernetes-commit: dc1d7f41ef4765552193c10cf1c1ed2b0c4e149b
2024-10-30 23:02:04 +00:00
Kubernetes Publisher 2e7093fa33 Merge pull request #128273 from benluddy/cbor-apply
KEP-4222: Support CBOR encoding for apply requests.

Kubernetes-commit: 16f9fdc7057e1f69ff1a44e3dbbcf7b994c3cd29
2024-10-30 19:08:47 +00:00
Joe Betz 7d5891a801 Unit test for emulated storage version selection
Kubernetes-commit: d5517b7a518c60e8e6f1aadc1806f4e2a254d6a9
2024-10-30 13:15:35 -04:00
Joe Betz f0baf72379 Don't pick versions that have a replacement as storage version
Kubernetes-commit: af811be190b7d04a49ecf47bf55a3858fa7e7e96
2024-10-30 11:47:43 -04:00
Kubernetes Publisher 28f9eed685 Merge pull request #126875 from serathius/watchcache-test-indexers
Adding tests for using indexers in tests

Kubernetes-commit: a0e5e244b3fcfc60d2bf2296c63a72e015f5884b
2024-10-30 03:01:53 +00:00
Kubernetes Publisher d93c90f116 Merge pull request #128274 from eddycharly/fix-cel-type-provider
fix: cel type provider should return a type type

Kubernetes-commit: 42b7cfecece002f13b53a293589c3f02595f4d32
2024-10-30 03:01:52 +00:00
Kubernetes Publisher 918f350339 Merge pull request #126754 from serathius/watchcache-btree
Reimplement watch cache storage with btree

Kubernetes-commit: c83250d1040af039455ed8a4b030896578a55720
2024-10-29 18:49:42 +00:00
Kubernetes Publisher 14c29cd5d7 Merge pull request #128013 from seans3/admission-configuration-strict
AdmissionConfiguration now uses strict validation

Kubernetes-commit: eb5c8965befeefad027d0c1684fe6d34f6f31c19
2024-10-29 18:49:40 +00:00
Kubernetes Publisher 76c064061d Merge pull request #128122 from aojea/storage_error
use same name for package than the folder

Kubernetes-commit: e15d5b9da913a2e7e7d190a8aa1d6c577872f015
2024-10-29 18:49:38 +00:00
Kubernetes Prow Robot 4bece4d457 Merge pull request #128196 from richabanker/move-version
Move k8s.io/apiserver/pkg/util/version to component-base

Kubernetes-commit: 119f114f012ae6d1cd851bdb2c3f849307e83258
2024-10-29 18:49:35 +00:00
Kubernetes Publisher fb9f1a8075 Merge pull request #127898 from modulitos/modulitos/fix-metrics-docs
Fix docs for apiserver admission metrics

Kubernetes-commit: 1947bf57ef0635e8764eee25e5726a8ec4189b7f
2024-10-29 18:49:34 +00:00
Kevin Conner b91c4326ba Fix elapsed time tracking for validating admission policies
Signed-off-by: Kevin Conner <kev.conner@gmail.com>

Kubernetes-commit: 9538747d4d6f7f3bc01e79d2d4781df1d7535f16
2024-10-29 11:26:46 -07:00
Joe Betz 15adc430e7 Add ResetFieldsFilterStrategy
Kubernetes-commit: 2bc17d1cf03f2f2bcd683e7e79f01c929951cca3
2024-10-29 12:03:32 -04:00
Joe Betz 125611e8cd hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v4 v4.4.2
Kubernetes-commit: 6fe51403665f1b6e820226004817b92e3118cabc
2024-10-31 21:19:15 -04:00
Ben Luddy 30be0a3c20 Allow nondeterministic object encoding in HTTP response bodies.
Kubernetes-commit: dee76a460ec80f15dc199c93e506586687d42291
2024-10-28 12:09:02 -04:00
Joe Betz 9843fd95fb Rename dispatcher Run to Start to match naming conventions
Kubernetes-commit: 0dfbc85cd9f7c0578ed385928e6990a496112e6c
2024-10-25 18:44:10 -04:00
Joe Betz b738c82d70 Fix comment in mutating webhook dispatcher
Kubernetes-commit: 1031e07e8325fc043d741b697c197d5416bfcc98
2024-10-25 14:37:39 -04:00
Joe Betz c259217340 Improve error messaging for validating admission policy authz
Kubernetes-commit: 1ad6fd7a0fa454cc3302b579dc73eb5c9afec49a
2024-10-25 13:52:34 -04:00
Joe Betz 9da95682e0 Add jsonpatch.escapeKey CEL function
Kubernetes-commit: 712cc20996aedad5ac525184d76ea581f98d6e35
2024-10-25 13:50:25 -04:00
Joe Betz a5e93cb37c Add MutatingAdmissionPolicy plugin to admission chain
This expands the generic plugin support to both validating and mutating policies.  It also adds the
mutating policy admission plugin using the generics plugin support.

This also implements both ApplyConfiguration and JSONPatch support.

Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>

Kubernetes-commit: 25e11cd1c143ef136418c33bfbbbd4f24e32e529
2024-10-25 13:46:58 -04:00
Joe Betz 0e6467b270 Add mutation support into CompositedCompiler and reorganize for clarity
Kubernetes-commit: 081353bf8ad963d43c5da6714a24f62cfe0b8401
2024-10-25 14:37:17 -04:00
Joe Betz 9ead80d1bb Add MutatingAdmissionPolicy API
This is closely aligned with ValidatingAdmissionPolicy
except that instead of validations that can fail with
messages, there are mutations, which can be defined
either with as an ApplyConfiguration or JSONPatch.

Co-authored-by: cici37 <cicih@google.com>

Kubernetes-commit: 3a1733f302d0fe9994bcc8e91fa2191c94606c2b
2024-10-25 13:25:46 -04:00
Joe Betz bd808a01a1 Add feature gate
Co-authored-by: cici37 <cicih@google.com>

Kubernetes-commit: 4b13362dda020f80cf961dbeefae750f63f803f9
2024-10-25 13:22:58 -04:00
Joe Betz 8794780f6a Clean up Object initialization support
The initial work of this had been merged before
this PR but was not yet in use. This simplifies
the implementation and adds some basic type
sanity checking.

Co-authored-by: Jiahui Feng <jhf@google.com>

Kubernetes-commit: 9ee1ea9d37c25d8151aad18d5a2a959836dcbe12
2024-10-25 13:22:06 -04:00
Joe Betz b09b8016b6 Move caching authorizer to shared location to be used by mutating and validating policy
Kubernetes-commit: 910c2e2dad58b08d7a5ee6c59a2970454e241e2a
2024-10-25 13:20:14 -04:00
Kubernetes Publisher 78628824cd Merge pull request #128243 from benluddy/cbor-dynamic-integration
KEP-4222: Add CBOR variant of admission webhook integration test.

Kubernetes-commit: 5147eebf224ae41892b736179ca91c47fd794565
2024-10-25 02:15:46 +00:00
Charles-Edouard Brétéché 00c7d5a4e1 use require
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Kubernetes-commit: ea1bd956c57f23b4ac5feb0b24ea79bbbe3b31ff
2024-10-24 22:25:37 +02:00
Charles-Edouard Brétéché b432ca9bc1 add test
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Kubernetes-commit: 0d825361e6d31171b77a00665fdb63816b8b6e00
2024-10-24 21:57:51 +02:00
Marek Siarkowicz 5913dac984 Implement btree based storage indexer
Kubernetes-commit: 50d2fab27903c66837d625b6ff702cf7873e3c7f
2024-10-24 18:17:56 +02:00
Kubernetes Publisher 781f771b86 Merge pull request #125258 from serathius/etcd-kubernetes-interface
Etcd kubernetes interface

Kubernetes-commit: cadb1508a99580a3fec27da8d75c432756275fc4
2024-10-24 14:08:46 +00:00
Ben Luddy f27bb5491e Wire test-only feature gate for CBOR serving.
To mitigate the risk of introducing a new protocol, integration tests for CBOR will be written using
a test-only feature gate instance that is not wired to runtime options. On alpha graduation, the
test-only feature gate instance will be replaced by a normal feature gate in the existing apiserver
feature gate instance.

Kubernetes-commit: 0cad1a89b6721308746cc1a12f12de31a259a0d3
2024-10-23 16:36:25 -04:00
Charles-Edouard Brétéché 15220968e1 fix: cel type provider should return a type type
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Kubernetes-commit: 1518c4ec16d06b7281f0b6c9a0e8c40952475f6b
2024-10-22 22:21:51 +02:00