Commit Graph

3595 Commits

Author SHA1 Message Date
Marek Siarkowicz b43a2467d5 Add etcd kubernetes interface package to vendor
Kubernetes-commit: 249ad2a6137cc8f1e0ccb7f0aef9ff4ba38927b9
2024-05-31 10:27:51 +02:00
Mangirdas Judeikis 3e52ced45d fully remove StopCh
Signed-off-by: Mangirdas Judeikis <mangirdas@judeikis.lt>

Kubernetes-commit: fd76176811654c409cd6799de4a174bcb051a90d
2024-09-13 12:08:57 +03:00
Omer Aplatony 965243019f Use PollUntilContextTimeout in flowcontrol
Signed-off-by: Omer Aplatony <omerap12@gmail.com>

Kubernetes-commit: 9fe3f368b1813b491f9b1265547235f309ff87e9
2024-10-08 10:25:15 +03:00
Abhijit Hoskeri b4437b251e Remove unused field from APIGroupVersion
RootScopedKinds is only present in unit tests, and
is not referenced anywhere else.

Kubernetes-commit: 90c49ab2eda2f786d143117f6f2133f1fa90af34
2024-05-18 12:47:42 -07:00
Devesh Goyal b2a5ee84cf Updated width.go
Kubernetes-commit: ed0c2b4f3d33fe7f165ff2c39034ca062c75f964
2024-08-25 02:12:29 +05:30
Jordan Liggitt 08766af90d KEP-3221: Promote StructuredAuthorizationConfiguration to GA
Kubernetes-commit: ad808e609a599723cf17f7fcdfb73ca37bcf78fc
2024-10-17 21:48:30 -04:00
Jordan Liggitt 1e62dc23aa KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
Kubernetes-commit: 9caca7312645b5ffba964cc8170484b4e7f7b602
2024-10-17 19:51:07 -04:00
Vinayak Goyal 9da53c5ba3 KEP-2862: Fine-grained Kubelet API Authorization
Signed-off-by: Vinayak Goyal <vinaygo@google.com>

Kubernetes-commit: b1f290d444f75b351f77f4d3292bbf557ae1cc45
2024-09-29 04:02:55 +00:00
Dr. Stefan Schimanski bf20cce32f apiserver/validation: fix some sets.NewString deprecations
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>

Kubernetes-commit: c44fc280871f1c4de177ed70367afcc9a9b06175
2024-09-25 11:39:53 +02:00
Dr. Stefan Schimanski 4b46916a7b apiserver/authconfig: wire CEL compiler through lower layers to allow sharing
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>

Kubernetes-commit: 4024390d8c8a19056ab7ced95eef5cce43c8096d
2024-09-20 12:34:08 +02:00
Antonio Ojea 402e1cdd43 use same name as the folder for the package
Kubernetes-commit: 62bdb27420bbc3c45b0232612acf9ecf3816c805
2024-10-16 09:55:10 +00:00
Lukasz Szaszkiewicz aeae19662f Promote WatchList feature to Beta (#128053)
* e2e/apimachinery/watchlist: always run WatchList e2e tests

* kube-controller-manager: enable WatchListClient

* kube-apiserver: promote WatchList feature to beta

Kubernetes-commit: 06a15c5cf96131faaf44f93f1be228a013ae5c0d
2024-10-17 12:39:53 +00:00
Monis Khan 4f8e2cfe4c kmsv2: run KDF tests in parallel
This change updates the KDF "feature flag" to be per KMS provider
instead of global to the API server.  This allows integration tests
that use distinct provider names to run in parallel.

Locally this change reduced the runtime of
test/integration/controlplane/transformation by 3.5 minutes.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 43740c0def10f22a0ab7f522c1569188913b35a3
2024-10-16 15:01:35 -04:00
AmarNathChary 54c7d50dd6 removed_comments_from_kube_feature_of_alpha_beta_ga
Kubernetes-commit: ff7c708207738c80c7a1185faa20f7f84afe5fb3
2024-10-16 15:36:34 +05:30
Sean Sullivan e6b796812a TracingConfiguration is now validated strictly
Kubernetes-commit: a9c8061b1e4c2ac38c223fa6bf9c5c1bf8b01606
2024-10-14 18:09:16 -07:00
Abu Kashem 14881364b3 refactor: extract decode functions into an interface for etcd3 store
Kubernetes-commit: 1d1a656d8de1cdb99deaa6ec771aa354616eaa16
2024-09-24 07:19:19 -04:00
Sean Sullivan 15f8ad59da Enable strict validation for ResourceQuotaConfiguration
Kubernetes-commit: a95c0c5499c54c16d561d0ad4537d4b43d500184
2024-10-13 17:50:18 -07:00
Sean Sullivan 285603b2d8 EgressSelectorConfiguration now uses strict validation
Kubernetes-commit: 32b2eea50d6457b4b1abf50e8e03be52e81d30c2
2024-10-11 16:17:09 -07:00
Abu Kashem 33cfd964ef refactor: storage.InternalError should retain the inner error
This is so we can do proper error handling, at the same time
we want to maintain backward compatibility

Kubernetes-commit: f24ec7e00dfd133780b3e6519a19f646c0dbde63
2024-09-26 09:44:09 -04:00
Abu Kashem 3a0975b22c refactor: add delete options for Delete method in storage interface
Kubernetes-commit: bc0ea34bc380e073a7278216fe6690a1b9aee48c
2024-09-19 10:31:08 -04:00
Abu Kashem f28acc6161 refactor etcd store conditional delete
Kubernetes-commit: fecab0713b96bb0d528aea58900942ae0cb52260
2024-09-19 13:14:52 -04:00
Abu Kashem 7b1424d930 fixup! add test to document behavior of net/http read/write deadline
Kubernetes-commit: f91cdf768dcd893e2d18a5705071b899f979374d
2024-08-30 11:05:23 -04:00
Abu Kashem 85ab93cd5f add test to document behavior of net/http read/write deadline
Kubernetes-commit: 2abe3a5dfab04d22362aafd8a8e9f0da80c419b0
2024-06-18 16:33:52 -04:00
Cici Huang 0381d1eed6 Promote cost enforcement feature gates to GA
Kubernetes-commit: 4c64aa7a4eda6c379a3dec061dfef5beb311d66a
2024-09-26 16:39:18 +00:00
Richa Banker 50dafb8926 reset err in resolveServingLocation() when the req can be served by local apiserver
Kubernetes-commit: 6e66a359822a988f9acd7062c3731559535abcd5
2024-09-27 16:54:08 -07:00
Cici Huang f79926bf43 Revert pr 127400
Kubernetes-commit: 95ec1637253c2458d0ed41f257df932907602ca4
2024-10-07 16:11:30 +00:00
Lukasz Szaszkiewicz 3257d91a56 server/config: assing system:apiserver user to system:authenticated group
Kubernetes-commit: dfeb560d4a2294c7a9a6233e2acb6b27039ed37a
2024-10-07 17:39:10 +02:00
Richa Banker df45eb6de5 refactor peerproxy_handler and add unit test
Kubernetes-commit: 9c65b79ea3b81859698f0f2613c82de99154755d
2024-01-24 19:48:51 -08:00
Jefftree f900b71720 Move inmemoryresponsewriter into own package
Kubernetes-commit: f67e15a26f5958b1ebf07a2590e98889a987677d
2024-09-30 21:11:53 +00:00
Richa Banker 8c1054e51e use structured logging wherever possible
Kubernetes-commit: 45a47d634569acad9022733ba35131088e9575e6
2024-09-27 16:54:08 -07:00
Richa Banker 40680bab4c Do not mark errorFetchingAddressFromLease, in case when the there's no address being fetched from the lease object
Kubernetes-commit: ac3fd5c634d2d9fd2e4011294f152e64f72d205b
2024-09-27 16:37:46 -07:00
Lukasz Szaszkiewicz 36e57697d1 apiserver/handlers/watch: encode initialEventsListBlueprint with watchEncoder (#127587)
* apiserver/handlers/get: construct versionedList

* storage/cacher: document caching the serialization of bookmark events

* endpoints/handlers/response: add watchListTransformer

* endpoints/handlers/watch: wire watchListTransformer

Kubernetes-commit: fbf1a0dc181ccbeb9925ad9c284d913a25c16562
2024-10-01 11:55:50 +00:00
Jefftree 38adb499b0 Port the rest of unversioned features
Kubernetes-commit: a8390dcddda14274e5ce24dd517a19587118a198
2024-09-27 19:04:47 +00:00
Abu Kashem 4483cc97cf apiserver: all bookkeeping must complete before apf handler returns
all bookkeeping must complete before the apf handler returns,
whether it panics or returns normally

Kubernetes-commit: 71d9307eaeda86d6a205548ecdeb7fbf226d7d82
2024-09-05 12:01:36 -04:00
Abu Kashem a785076ef7 apiserver: fix apf watch test
the assert to verify that 'atomicReadOnlyExecuting' is zero
should be executed if the apf handler panics, all apf
bookkeeping must be completed before the handler returns

Kubernetes-commit: 0c8632de57075191e6c4e34897fb7871034c7081
2024-09-05 11:57:47 -04:00
Matthieu MOREL e32a42cf11 fix: enable expected-actual rule from testifylint in module `k8s.io/apiserver`
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Kubernetes-commit: fbd773ecb82aa0afef3c02274db901afe1788220
2024-09-27 07:49:07 +02:00
Matthieu MOREL aaeee2a449 fix: enable error-nil and nil-compare rules from testifylint in module `k8s.io/apiserver`
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Kubernetes-commit: 09274182e225fcf4df9e4a3d54fd96fc03de3bdf
2024-09-27 07:29:09 +02:00
Matthieu MOREL 17d29da911 fix: use `ErrorContains(t, err` instead of `Contains(t, err.Error()`
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Kubernetes-commit: f777addb05aed8c2861c423fb29946e85151ecf6
2024-09-26 22:22:20 +02:00
Matthieu MOREL c6ba9681f7 fix: enable contains rule from testifylint in module `k8s.io/apiserver`
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Kubernetes-commit: 3b92b9f84d62550a62890d8d3f6a57d96fc70ccc
2024-09-22 11:57:24 +02:00
CasperLiu 1bb7b2e6ab introduce a proper trace context
Signed-off-by: carlory <baofa.fan@daocloud.io>
Co-authored-by: CasperLiu <qiuyuzhe521@gmail.com>

Kubernetes-commit: 5b2632f70763aeadfc334df1364946fe39fc10bb
2024-04-07 17:58:59 +08:00
Chaunceyctx f7eddd4bda send bookmark right now after sending all items in watchCache store
Kubernetes-commit: 723920253349ee3c272c5b5a77e9d19548c1533c
2024-08-29 17:31:36 +08:00
Omer Aplatony 6dc6d8d7fa chore: moving apiserver featuregates to versioned
Signed-off-by: Omer Aplatony <omerap12@gmail.com>

Kubernetes-commit: ade730594005f93ac18e102ba54d61dbf23b616f
2024-09-24 23:36:30 +03:00
Lukasz Szaszkiewicz 8cb411e993 adds watchListEndpointRestrictions for watchlist requests (#126996)
* endpoints/handlers/get: intro watchListEndpointRestrictions

* consistencydetector/list_data_consistency_detector: expose IsDataConsistencyDetectionForListEnabled

* e2e/watchlist: extract common function for adding unstructured secrets

* e2e/watchlist: new e2e scenarios for convering watchListEndpointRestrict

Kubernetes-commit: ae35048cb0b9b177891aab41346b6d6cc504582f
2024-09-25 12:48:33 +00:00
Joe Betz a84f81807f Preserve testing of RetryGenerateName feature disablement
Kubernetes-commit: 0d14bac9a606cd49e6c346c1220ebdbf1b18fa09
2024-09-19 11:34:59 -04:00
Joe Betz 91a4bf232d Promote RetryGenerateName to GA
Kubernetes-commit: e3cae09e63d72edef9cf841979418291acc31b17
2024-09-10 12:34:36 -04:00
Lukasz Szaszkiewicz cdd40a3d24 pkg/storage/testing/watcher_tests: RunWatchSemantics checks if the storage has been primed with init data
Kubernetes-commit: e7e2123feb2f1957be490a21aa606cb2dc718432
2024-09-20 09:37:53 +02:00
Lukasz Szaszkiewicz eb3a20ad8b storage/cacher/cache_watcher: processInterval sets RV from the snapshot
Kubernetes-commit: de735be512767dd2eced78530693d2e3ae997e6e
2024-09-20 08:48:31 +02:00
Lukasz Szaszkiewicz 743b5776f9 storage/cacher/cache_watcher: add RV to watchCacheInterval
Kubernetes-commit: f87e4a19c88fa908eb176ee7925f211bafba9b45
2024-09-20 08:47:49 +02:00
Vadim Rutkovsky 7da1f042b3 tracing: add span for cacher.Get
Also updates tracing integration tests for cacher.GetList

Kubernetes-commit: dff0075e7cd687f77fd38337e9ba487bb2437ecc
2024-09-12 14:18:40 +02:00
Matthieu MOREL b489c4ea4e fix: enable error-is-as rule from testifylint in module `k8s.io/apiserver`
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Kubernetes-commit: 0dfc6e2843f913b26c9382144fd2381f4b536bf0
2024-09-22 12:21:19 +02:00