Commit Graph

6272 Commits

Author SHA1 Message Date
Alexander Zielenski f77de04c6a fix integration test by working around #3030
test uses kind field which is not populated for native types

Kubernetes-commit: 1554e50be43660bc9f03d97cc26b235ad4f94d6c
2023-01-24 12:00:05 -08:00
Patrick Ohly 7f86f7e402 dependencies: update gomega to v1.26.0
If gomega.Eventually/Consistently run into a situation where it observes some
state of e.g. a pod which does not satisfy the condition and then further
polling fails with API server errors, gomega will report both the most recent
pod state and API error instead of just the API error.

Kubernetes-commit: aa1279b5eb79177f5351368d8d9159982b1bfb5e
2023-01-23 15:19:38 +01:00
Abu Kashem cb855a88b8 apiserver: CVE-2022-1996, validate cors-allowed-origins server option
Kubernetes-commit: 841311ada2b0ba58e623a89e2e5ac74de0d94d8c
2023-01-20 13:54:02 -05:00
Alexander Zielenski 1b8963b016 use typedinformer if available
reduces memory and cpu when things like configmap are used as a param

cannot be shared due to limitatoins of sharedinformerfactory

Kubernetes-commit: b969dfec9fd33f8bfff47e54f2995a4865839ea6
2023-01-19 10:04:52 -08:00
Alexander Zielenski 2ea5662b05 use namespacedName for keys in fakeCompiler
Kubernetes-commit: 0c495cb429e54a6d25e9252aca3e32fd9f0aef6b
2023-01-19 10:04:46 -08:00
Dipankar Das ee11899e67 changes to the fatal message generated
Signed-off-by: Dipankar Das <dipankardas0115@gmail.com>

Kubernetes-commit: 50bc46bd8fdc687811b3e4bba6a3d8d0706c8d59
2023-01-11 08:08:25 +05:30
Richa Banker 6bb270e406 Enable ComponentSLIs as beta feature
Kubernetes-commit: 452343367c21c68f325078357c5dfe794169422c
2023-01-09 17:25:50 -08:00
Kubernetes Publisher ea4e287db4 Merge pull request #115327 from jkh52/fix-metrics
Fix konnectivity-client metric registration.

Kubernetes-commit: 301fa8f6333fea5d53aaa3777ce12fb40cc65ecb
2023-01-27 05:14:22 +00:00
Kubernetes Publisher 3bc34155cf Merge pull request #115271 from kevindelgado/field-validation-conformance
Field validation e2e tests and GA graduation

Kubernetes-commit: 0e6f4d3a354e91ec0dec0c4267af5aa7e0bb47cc
2023-01-26 21:14:50 +00:00
Kubernetes Publisher a2dd1697f2 Merge pull request #113121 from aramase/expiring-cache
kmsv2: implement expire cache with clock

Kubernetes-commit: fab126d7f380b36525974ed69621195eb06e0d7e
2023-01-26 05:14:29 +00:00
Joseph Anttila Hall 7fa759edb6 Fix konnectivity-client metric registration.
Kubernetes-commit: 1a428fd1fade54513cb6f609388207ed38d20753
2023-01-25 15:07:48 -08:00
Kubernetes Publisher e952b9f299 Merge pull request #114550 from alexzielenski/apiserver/smd/update-kube-openapi
update kube-openapi dependency

Kubernetes-commit: df03edaf755f71a61f4f817ca374ebe3b6416270
2023-01-25 05:21:54 +00:00
Kevin Delgado c40024ba00 drop Enabled() checks for ServerSideFieldValidation feature gate
Kubernetes-commit: 2d5ceb9b15347b8bb5af360470b6346370157042
2023-01-24 17:48:31 +00:00
Alexander Zielenski efccdc505d update kube-openapi
Kubernetes-commit: 7641ff75412c1d8b547c4fa388d3901aeeda6948
2023-01-23 15:32:33 -08:00
Kubernetes Publisher 4db4a68a3c Merge pull request #115249 from thockin/codegen-13-proto-go-packages
Set go_package in all proto files

Kubernetes-commit: 674eb36f92dcea33e47ac07d71d88ebe9f5c4c6d
2023-01-23 21:14:41 +00:00
Kubernetes Publisher d98f9af9c7 Merge pull request #115267 from enj/enj/i/key_id_flake
Prime KMS v2 key ID inline with transformer construction

Kubernetes-commit: cc60df95959bc4e6422ff05dc3d7c6ba3817bff0
2023-01-23 21:14:39 +00:00
Kubernetes Publisher 97e3e93cfd Merge pull request #115060 from pohly/logcheck-update
hack: update logtools to v0.4.1

Kubernetes-commit: f267dd8340524851e422d70eb19423c0385b401a
2023-01-23 21:14:37 +00:00
Kevin Delgado 3e03fc3433 Graduate field validation to GA
Kubernetes-commit: 3b6c4d307febe24c78099515e45cd51bbba0112d
2023-01-23 18:30:33 +00:00
Monis Khan 54f0629e69 Prime KMS v2 key ID inline with transformer construction
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 345f41f8e5256ea44066aa884f85c161d44ebd0d
2023-01-23 09:49:18 -05:00
Patrick Ohly 8f8c30ff8f logging: fix names of keys
The stricter checking with the upcoming logcheck v0.4.1 pointed out these names
which don't comply with our recommendations in
https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/migration-to-structured-logging.md#name-arguments.

Kubernetes-commit: bc6c7fa91201348d010b638fbadf32007c0ac546
2023-01-16 15:04:01 +01:00
Kubernetes Publisher ce86ff4a7b Merge pull request #115238 from thockin/codegen-8-proto-bindings
Codegen: move all proto-bindings scripts together

Kubernetes-commit: 600e46801dbda854c88019c56bfd5dea85e916fc
2023-01-22 01:13:51 +00:00
Tim Hockin 979698ec2b Set proto go_package: kms API
This creates some diff to the *.pb.go files to note that
in the "options".

You can dump the gzipped blob with the following program (thanks
StackOverflow!):

```go
package main

import (
	"bytes"
	"compress/gzip"
	"encoding/json"
	"fmt"
	"os"

	"io/ioutil"

	proto "github.com/golang/protobuf/proto"
	dpb "github.com/golang/protobuf/protoc-gen-go/descriptor"
)

func main() {
	m := map[string][]byte{
		"before": blobv1,
		"after": blobv2,
	}
	arg := os.Args[1]
	dump(m[arg])
}

func dump(bytes []byte) {
	fd, err := decodeFileDesc(bytes)
	if err != nil {
		panic(err)
	}
	b, err := json.MarshalIndent(fd, "", "  ")
	if err != nil {
		panic(err)
	}
	fmt.Println(string(b))
}

// decompress does gzip decompression.
func decompress(b []byte) ([]byte, error) {
	r, err := gzip.NewReader(bytes.NewReader(b))
	if err != nil {
		return nil, fmt.Errorf("bad gzipped descriptor: %v", err)
	}
	out, err := ioutil.ReadAll(r)
	if err != nil {
		return nil, fmt.Errorf("bad gzipped descriptor: %v", err)
	}
	return out, nil
}

func decodeFileDesc(enc []byte) (*dpb.FileDescriptorProto, error) {
	raw, err := decompress(enc)
	if err != nil {
		return nil, fmt.Errorf("failed to decompress enc: %v", err)
	}

	fd := new(dpb.FileDescriptorProto)
	if err := proto.Unmarshal(raw, fd); err != nil {
		return nil, fmt.Errorf("bad descriptor: %v", err)
	}
	return fd, nil
}
```

Kubernetes-commit: ab11d8a4495aa0ff03b94c8d1a5345abfcca2c59
2023-01-14 10:21:53 -08:00
Alexander Zielenski d816cd004f add openapi typeconverter
Kubernetes-commit: 0c0f524318d0327214580691fd3e060f178caf91
2023-01-09 12:10:16 -08:00
Dipankar Das 41fdf0ebe7 Added fatalf for error handling
Signed-off-by: Dipankar Das <dipankardas0115@gmail.com>

Kubernetes-commit: 526b4b4ce226349b1e0587db14d1321d0b27bbff
2023-01-07 15:45:45 +05:30
Tim Hockin 72929fc438 Call update-proto-bindings from update-codegen
One script to bring them all ...

Kubernetes-commit: 4dae505d531e149881788dc36148602967419c75
2023-01-05 15:41:51 -08:00
Tim Hockin 05e000c1bd Merge 5 fragile proto-bindings scripts into 1
Each of these scripts is basically identical, and all were too brittle.
Now they should be more resilient and easier to manage.  The script
still needs to be updated if we add new ones, which I do not love.

More cleanup to follow.

Kubernetes-commit: e0ecccff3f5148cc167117ac73233b4edc1640d8
2023-01-05 13:53:59 -08:00
Kubernetes Publisher edcec154db Merge pull request #114609 from pohly/log-runtime-verbosity-level
runtime log verbosity level changes

Kubernetes-commit: 92f0818cf2ee9e40b16b76ad5125dd3490d3ec52
2023-01-21 05:13:54 +00:00
Kubernetes Publisher be793fd445 Merge pull request #115191 from jkh52/zero-one-one
Bump konnectivity-client to v0.1.1

Kubernetes-commit: afe936fee5229cfd3d9831f439e8feab98a3fcad
2023-01-21 05:13:52 +00:00
Kubernetes Publisher 23855d3d6c Merge pull request #115113 from smarterclayton/exponential_context
wait: ExponentialBackoffWithContext should take context-aware fn

Kubernetes-commit: b0ed87078e4042c12e456c8427dee0fb947a724c
2023-01-20 17:36:54 +00:00
Kubernetes Publisher 7959088f40 Merge pull request #115211 from apelisse/remove-corev1-from-fieldmanager
Remove corev1 from fieldmanager

Kubernetes-commit: 49cd9f673e04a3767d9c180f63038452bceb1c39
2023-01-20 01:12:54 +00:00
Kubernetes Publisher 31aa16a90d Merge pull request #114544 from ritazh/kmsv2-keyid-staleness
[KMSv2] Use status key ID to determine staleness of encrypted data

Kubernetes-commit: 285e7969b27a6b28b0787fc9abedf11e620c261e
2023-01-19 21:27:27 +00:00
Antoine Pelisse 464161ed52 fieldmanager: Use unstructured rather than built-in types to remove dependency
Kubernetes-commit: bc0962ad809bc5cd0951a1d643f6769459665711
2023-01-19 10:48:46 -08:00
Antoine Pelisse 2a6ed798c7 fieldmanager: Copy LastAppliedAnnotation to remove dependency on corev1
Kubernetes-commit: 577f3d8c9da461da93d4a0b66ca16b2a84f6a4d6
2023-01-19 09:38:04 -08:00
Antoine Pelisse e19154e9ae fieldmanager: Move structured benchmarks to their own file
Kubernetes-commit: 8d40ba73fba3608e76531b1b33230856a58256ed
2023-01-19 09:37:12 -08:00
Kubernetes Publisher 472273b080 Merge pull request #115187 from thockin/codegen-3-examples-cleanup
Fix apiserver example2 to update gen'ed protobufs

Kubernetes-commit: af54e18a4662b18c92b514e5ae9e33171d28fcff
2023-01-19 04:46:23 +00:00
Kubernetes Publisher b51a237e4c Merge pull request #115140 from smarterclayton/wait_context
wait: Use a context implementation for ContextForChannel

Kubernetes-commit: 8bee5dca1d94625aad8a321d3ed4d1dbeeeb0a62
2023-01-19 04:46:14 +00:00
Joseph Anttila Hall 2e9671b92e Bump konnectivity-client to v0.1.1
Fixes memory leaks.
Upgrades GRPC and ProtoBuf versions.

Kubernetes-commit: 5c01971f2ab77eb93fe99c81386faf7ccbfb0d04
2023-01-19 04:29:11 +00:00
Kubernetes Publisher f4be1be367 Merge pull request #115147 from alexzielenski/apiserver/policy/multiple-paramkind-bug
ValidatingAdmissionPolicy: fix bug preventing multiple policies from using same paramKind

Kubernetes-commit: 06ad4258096621190b23c6e41818715e86291989
2023-01-19 01:10:26 +00:00
Kubernetes Publisher 52b3b18b4c Merge pull request #115163 from SataQiu/lock-AdvancedAuditing-gate-20230118
Lock the AdvancedAuditing feature gate to true

Kubernetes-commit: cc68c06f9cb6c70cbb840a8d7b9ca49eb223cb3f
2023-01-18 16:22:34 +00:00
SataQiu 0f00ee135b the AdvancedAuditing featuregate has been GA since v1.12, and is locked to ture in v1.27
Kubernetes-commit: c25095b2231eb64ac938ae8b3d939c76307da340
2023-01-18 18:50:15 +08:00
Kubernetes Publisher 0bff71021b Merge pull request #114586 from andrewsykim/apiserver-lease-rename
Rename apiserver identity lease labels to apiserver.kubernetes.io/identity

Kubernetes-commit: 46f3821bf4ce0e839a698b7f95f1ee9b08e198cf
2023-01-18 08:18:36 +00:00
Kubernetes Publisher fbb8099003 Merge pull request #114446 from lengrongfu/feat/clean_up
clean up master-service-namespace

Kubernetes-commit: 20c17da14210fbc0e144e0f2ed38a3bf9e98b633
2023-01-18 04:26:27 +00:00
Kubernetes Publisher c3d6c800b5 Merge pull request #114527 from alexzielenski/apiserver/policy/lockfree-refactor
refactor policy admission Validator to be lock free

Kubernetes-commit: 7e0923899fed622efbc8679cca6b000d43633e38
2023-01-18 00:16:02 +00:00
Alexander Zielenski 73db86feab fix bug with param controllers being removed if used by more than one policy
Kubernetes-commit: ecd267d097ec7cd26fa5a6343622c3772f66486f
2023-01-17 15:27:45 -08:00
Kubernetes Publisher 6c75d38fe1 Merge pull request #114542 from pacoxu/EphemeralContainers
cleanup: EphemeralContainers feature gate related codes

Kubernetes-commit: c913e6ce62d23b19eebec9beda91d7599bf5099b
2023-01-17 20:36:18 +00:00
Kubernetes Publisher 8f0891c85c Merge pull request #114922 from ibihim/kmsv2-interface-move
[KMSv2] apiserver/kmsv2: mv Service interface into kmsv2

Kubernetes-commit: f7b02260f6a8cc7826040d5fcd265bc15672880f
2023-01-17 20:36:14 +00:00
Clayton Coleman 03e6089ce8 wait: Use a context implementation for ContextForChannel
ContextForChannel uses a goroutine to transform a channel close to
a context cancel. However, this exposes a synchronization issue if
we want to unify the underlying implementation between contextless
and with context - a ConditionFunc that closes the channel today
expects the behavior that no subsequent conditions will be invoked
(we have a test in wait_test.go TestUntilReturnsImmediately that
verifies this expectation). We can't unify the implementation
without ensuring this property holds.

To do that this commit changes from the goroutine propagation to
implementing context.Context and using stopCh as the Done(). We
then implement Err() by returning context.Canceled and stub the
other methods. Since our context cannot be explicitly cancelled
by users, we cease to return the cancelFn and callers that need
that behavior must wrap the context as normal.

This should be invisible to clients - they would already observe
the same behavior from the context, and the existing error
behavior of Poll* is preserved (which ignores ctx.Err()).

As a side effect, one less goroutine is created making it more
efficient.

Kubernetes-commit: 95051a63b323081daf8a3fe55a252eb79f0053aa
2023-01-17 15:01:02 -05:00
Clayton Coleman fbcccd4f68 wait: ExponentialBackoffWithContext should take context-aware fn
The condition methods will eventually all take a context. Since we
have been provided one, alter the accepted condition type and
change the four references in tree.

Collers of ExponentialBackoffWithContext should use a condition
aware function (ConditionWithContextFunc). If the context can be
ignored the helper ConditionFunc.WithContext can be used to convert
an existing function to the new type.

Kubernetes-commit: 34bfdc3635cb621d94eebde5d8f4b9c0b933c68e
2023-01-16 14:57:57 -05:00
Kubernetes Publisher 173011e7a5 Merge pull request #115079 from dims/update-to-newer-moby/ipvs-v1.1.0
Update to new release of moby/ipvs

Kubernetes-commit: 3613ed04b68156957f58635ecee8746e7fcf2a28
2023-01-15 23:40:12 +00:00
Davanum Srinivas 77e53669a3 Update to new release of moby/ipvs
hack/pin-dependency.sh github.com/moby/ipvs v1.1.0

- go to a fixed tag for `vishvananda/netns`
- no more references to `pkg/errors`

Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: d9b98bc36a572045851b059f7c7066addaad5703
2023-01-14 16:02:08 -05:00