David Eads
6a7c6a0940
Revert "Add an option to conditionally disable compression based on client ip."
...
This reverts commit 023583a15586328569ccab505db2f57f398e04b3.
Kubernetes-commit: 2f3ffbed2cffaaba63304318bc1d09b0144600ff
2022-08-17 15:08:39 -04:00
Sally O'Malley
4f9e133507
kubelet tracing
...
Signed-off-by: Sally O'Malley <somalley@redhat.com>
Co-authored-by: David Ashpole <dashpole@google.com>
Kubernetes-commit: 47e7d8034ff3be8e198dde6a671d05a11c30e333
2021-10-10 09:17:27 -04:00
Maciej Borsz
40280f9889
Add an option to conditionally disable compression based on client ip.
...
Kubernetes-commit: 023583a15586328569ccab505db2f57f398e04b3
2022-07-29 08:44:14 +00:00
Abirdcfly
3fde82e2dd
clean Unreachable code
...
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Kubernetes-commit: f71718d6448418d0289b9649905a16bfb1962b68
2022-07-19 00:58:17 +08:00
Davanum Srinivas
7e94033a61
Generate and format files
...
- Run hack/update-codegen.sh
- Run hack/update-generated-device-plugin.sh
- Run hack/update-generated-protobuf.sh
- Run hack/update-generated-runtime.sh
- Run hack/update-generated-swagger-docs.sh
- Run hack/update-openapi-spec.sh
- Run hack/update-gofmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: a9593d634c6a053848413e600dadbf974627515f
2022-07-19 20:54:13 -04:00
Alexander Zielenski
43763b31c6
use more apt name for flag
...
Kubernetes-commit: c2cbc460f2c5be07b0f5762005642625b06b6a75
2022-07-20 10:45:21 -07:00
Alexander Zielenski
feb8f08b78
guard usage of timestamp transformer under fieldManager non nil
...
not strictly necessary for correctness, but it is not needed unless SSA is enabled
Kubernetes-commit: 48786d90da794bd1a0ef588f6393a0dddffcc400
2022-07-20 08:58:28 -07:00
Alexander Zielenski
c2e73305f9
add envar to disable non semantic updates feature
...
enabled by default. can easily be changed in backports
Kubernetes-commit: 076051135d16b70c08d8d6382e73ef983614240f
2022-07-14 11:28:10 -07:00
Alexander Zielenski
48eb70e1d1
benchmark and metrics for new timestamp transformer comparison
...
add proper metrics
rename & improve documentation for path metric dimension
Kubernetes-commit: 40343793f7b9787b2d4b88f0a0439ce9e538075a
2022-03-01 14:24:12 -08:00
Alexander Zielenski
81749c6ee9
revert timestamp updates to object if non-managed fields do not change
...
add short-circuiting logic for long comaprison
replace timestamps rather than doing a full managed fields deepcopy
add guard
Kubernetes-commit: 7233538008489c189d09bb042fbabca97d9cdbaf
2022-07-14 11:40:20 -07:00
twilight0620
9c84b3466c
add test case for ToValidOperationID method: TestToValidOperationID
...
Kubernetes-commit: 2ca7c8d82b4844afbcd8b6859166cf7f6c23d7b9
2022-04-27 11:48:44 +08:00
Artur Żyliński
e34c622d49
Add audit-id to storage traces
...
Refactor GetAuditIDTruncated to use context instead of request
Kubernetes-commit: b1e12b01b6c578da3eb593805b48e9d4a69efe54
2022-06-20 17:09:32 +02:00
Abirdcfly
dde070e1ff
cleanup: remove duplicate import
...
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Kubernetes-commit: 00b9ead02c37921011ebe5293558cea5277cd295
2022-04-24 20:58:04 +08:00
zk
ad01c712d9
Update etcdRequestLatency metrics bucket size
...
Kubernetes-commit: fb372d07982463984dfdab7cf24d937b91b0bb83
2022-01-09 23:45:09 +08:00
21kyu
a31219e583
Change reflect.Ptr to reflect.Pointer
...
Kubernetes-commit: df168d5b5c2dab7414fc00ead1a51257ec326a98
2022-06-26 01:23:43 +09:00
Tim Hockin
970b3ee9bb
Initialize UID earlier in the Create process
...
Before:
Create()
BeginCreate()
BeforeCreate()
init UID <---------------------
strategy code
After:
Create()
init UID <-------------------------
BeginCreate()
BeforeCreate()
strategy code
This also wipes UID early (suggested by David) and asserts it is set in
BeforeCreate().
Kubernetes-commit: 5615de51f9e768dd01d7fe49a48e8db756bd8ac8
2022-06-17 15:32:25 -07:00
scott
91c6c18439
Fix issue that Audit Server could not correctly encode DeleteOption
...
Kubernetes-commit: 286a67d78c5be2b9ee39ed9fe26aa5a232058832
2022-05-18 20:23:16 +08:00
Davanum Srinivas
30571358f5
Switch to v3 of github.com/emicklei/go-restful
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: ab690750df1d27409d31fd270d77b4390bac4431
2022-06-02 10:03:29 -04:00
Han Kang
a414002089
cleanup deprecated metrics and usages
...
Kubernetes-commit: f223b900907b71431d7b6ceefa1642bb44fd9d84
2022-06-01 11:55:14 -07:00
Davanum Srinivas
8a97d520ab
Move from k8s.gcr.io to registry.k8s.io
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 50bea1dad89930ad565526910aadc314b9e9f38b
2022-05-10 08:30:09 -04:00
Han Kang
5e26f39c93
remove deprecated metric and promote the replacement to STABLE
...
Kubernetes-commit: 731397086b763b9a951a414d37018f7e4f03b99c
2022-05-31 09:05:31 -07:00
Guillaume Le Biller
e6f50ae491
Update managedFields time when value is modified
...
Kubernetes-commit: f681821fcf028e0e8082be6a9daf0a8ff9392a66
2022-05-15 17:30:36 +02:00
Artur Żyliński
62aa70cd37
Fix requests scope classification
...
create (POST) custom resources should be scope:resource
Kubernetes-commit: 690c912369a6ca7f35363a307a843e91cadd7f6e
2022-05-12 14:27:51 +02:00
Daniel Smith
088283fa36
Remove ClusterName
...
Kubernetes-commit: 331525670b772eb8956b7f5204078c51c00aaef3
2022-04-20 23:50:27 +00:00
Maciej Borsz
17c48c0f65
Improve Create/Update/Patch traces.
...
Kubernetes-commit: 56769e794b757c541d1c7fef36a5507e52e3e7b2
2022-04-20 07:30:12 +00:00
Sanskar Jaiswal
d1bd5277fb
Update comment and declaration of `storage.GuaranteedUpdate` to be clearer.
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
Kubernetes-commit: f8df26ae803103f82edbf1efe17b1b169801b256
2022-04-16 17:19:06 +05:30
Wojciech Tyczyński
8010e8e7e3
Implement Destroy() method for all registries
...
Kubernetes-commit: 80060a502c3f86f00800fbeba7684a85f1ce5e17
2022-04-05 12:26:22 +02:00
Kevin Delgado
826d18bf6e
Track field validation in metrics
...
Kubernetes-commit: 0c432ccf58b968040bcf6009bc255eeff0092f5a
2022-03-29 18:38:58 +00:00
Kensei Nakada
dd6c8444f7
fix the doc about generateName conflict
...
Kubernetes-commit: 0865b9eca3f36ecb1fe9664c77d5017ca3c79b29
2022-03-23 01:08:37 +00:00
Tim Allclair
1e36b0a9fb
Don't add audit annotations directly to the audit event
...
Kubernetes-commit: bdebc62d49293a0fbbd7e0d95bfd94b1ce21015c
2022-03-28 11:38:38 -07:00
Wojciech Tyczyński
23c7d60c29
Deprecate apiserver_dropped_requests_total metric
...
Kubernetes-commit: b106b2621c454b8f38b9dc28935994c33426ee75
2022-03-25 14:58:41 +01:00
Tim Bannister
8b7169efd9
Update generated docs
...
Kubernetes-commit: de55f39f655816ecee9ab0b2c3842930cfe332a6
2022-03-01 23:42:36 +00:00
Abu Kashem
8b827c16cb
track latency for http.ResponseWriter.Write
...
Kubernetes-commit: 1d1a44cf129e1904217a1ed5a09f92c0a28ce11f
2022-02-04 11:36:23 -05:00
Abu Kashem
1b651c5994
add latency tracker for storage and transform
...
Kubernetes-commit: eca90856940e9251ecf3fde95c5e4d2d16f5ad68
2022-02-01 18:13:03 -05:00
Wojciech Tyczyński
abc4243fac
Record dropped requests in apiserver_request_total metric
...
Kubernetes-commit: 14396349954be57abea7162d7fe091e58a80ec4b
2022-03-23 16:16:36 +01:00
Daniel Smith
cbbb5800c3
find and replace
...
Kubernetes-commit: e405ae9ec8592bf028e351bab44de420908bac0d
2022-03-17 18:50:38 +00:00
Wojciech Tyczyński
35d7dfb633
Prepare apiserver for operating on cached objects by not modifying them
...
Kubernetes-commit: 7e434682e450e28d36f0ee4787e7b4672e8eb255
2022-02-21 15:05:35 +01:00
Jordan Liggitt
f7f2a709d5
Update storage/handler unit tests to set / expect namespace in object
...
Kubernetes-commit: e731ccd65074312f3f11b42f9a7bc0636cda1a31
2022-02-17 00:13:25 -05:00
Jordan Liggitt
bacaca81ed
set/validate object namespace before admission
...
Kubernetes-commit: 92422a73053129a88ea48e62a44410103a400376
2020-09-09 01:12:31 -04:00
Lukasz Szaszkiewicz
457184ab3a
update the watch server to use EncoderWithAllocator during object serialization.
...
It allows us to allocate a single buffer for the entire watch session and release it when a watch connection is closed.
Previously memory was allocated for every object serialization putting a lot of pressure on GC and consuming more memory than needed.
Kubernetes-commit: eda1b0c68ec166ee52c50e4a6ab682ce7227b6a5
2022-02-17 16:04:50 +01:00
Kevin Delgado
0d701a6123
FieldValidation tests for endpoints apiserver and benchmarks for integration tests ( #107848 )
...
* wip, working post-strict-yaml
* wip, merge-patch and json-patch tests added
* added SMP tests
* cleanup
* add benchmarks
* more detailed test failure message
* start adding field validation integration benchmarks
* use valid input for benchmarking
* fix remaining integration benchmarks
* benchmarking feedback
* fix endpoints benchmarking
* remove unused vars
Kubernetes-commit: df2768123d8d4d3854ec06bb67e352dcb1b4bd08
2022-02-17 06:11:24 +00:00
Wojciech Tyczyński
e6794552b0
Remove Selflink from convertors
...
Kubernetes-commit: 2169997dfea0a2f7ccf6911a745fc295793f70b4
2022-01-19 13:54:18 +01:00
Wojciech Tyczyński
2d144f4c39
Ensure non-nil items in lists
...
Kubernetes-commit: 8c1e8355f8efb322ad6e53229f0cbb14999a8fc2
2022-01-14 10:14:17 +01:00
Wojciech Tyczyński
8268596b30
Remove unused selflink parameters from ContextBasedNaming
...
Kubernetes-commit: 1e0b9c6e20a07f706e7ace39f417ea746fa05a3b
2022-01-14 10:00:04 +01:00
Wojciech Tyczyński
5e8e1ff118
Relax to using namer instead of selflinker in API groupversion
...
Kubernetes-commit: 0ad588b27b6845d9ece955bfdde0e2863b8e1394
2022-01-13 16:34:56 +01:00
Wojciech Tyczyński
b4d0749d39
Fix apiserver selflink tests
...
Kubernetes-commit: 0aaef27e59839bf60e06aa1421ecbb877207652c
2022-01-13 16:01:35 +01:00
Wojciech Tyczyński
38d7003d33
Remove selflink setting from apiserver
...
Kubernetes-commit: 0a674d3ed92ce6384e2e8018ca63cf2925474146
2022-01-13 15:29:21 +01:00
Abu Kashem
72aa2c42fc
refactor: rename webhook duration tracker
...
Kubernetes-commit: 4a9b9028153c6984b9cf69067cc0a1aa12a00e73
2022-02-01 15:44:59 -05:00
Wojciech Tyczyński
9c968f178e
Fix logging resource-scoped watch requests as GET requests.
...
Kubernetes-commit: 43e924a5b613850f43c02ac5a74d3e81c1292f3d
2021-11-25 08:55:45 +01:00
Iceber Gu
7c3ebaea3a
set RemainingItemCount to ParitalObjectMetadataList
...
Kubernetes-commit: 45f52321e52c5e5705a1c7ad3c17e52de262f469
2021-12-22 13:48:12 +08:00
Davanum Srinivas
b840d63feb
Cleanup OWNERS files (No Activity in the last year)
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 497e9c1971c9e7d0193bc6d11503ec4ad527f1d5
2021-12-10 15:18:50 -05:00
Jeffrey Ying
324a627831
Remove bazel condition in openapi_test
...
Kubernetes-commit: fcd567208cf74e4be83a2ae8fdadf02b933b0ec6
2021-12-09 11:47:18 -05:00
Davanum Srinivas
56a3a30ae1
Check in OWNERS modified by update-yamlfmt.sh
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 9405e9b55ebcd461f161859a698b949ea3bde31d
2021-12-09 21:31:26 -05:00
Abu Kashem
8949a1cdfc
add trace step for transformResponseObject
...
Kubernetes-commit: 41cef06f66dd4d7e87ff852dc228ab69587be9de
2021-11-22 13:18:02 -05:00
Jordan Liggitt
f0c214506c
Return BadRequest for invalid large patch
...
Kubernetes-commit: 2d307f47bd43902ee8f15751130dcbf4a4f775bf
2021-11-21 09:13:37 -05:00
Kevin Delgado
59227ac996
Server Side Field Validation
...
Implements server side field validation behind the
`ServerSideFieldValidation` feature gate. With the
feature enabled, any create/update/patch request
with the `fieldValidation` query param set to
"Strict" will error if the object in the request
body have unknown fields. A value of "Warn"
(also the default when the feautre is enabled)
will succeed the request with a warning.
When the feature is disabled (or the query param
has a value of "Ignore"), the request will succeed
as it previously had with no indications of any
unknown or duplicate fields.
Kubernetes-commit: e50e2bbc889eb274ad1463a54188a2805767bfde
2021-08-18 02:25:36 +00:00
Antonio Ojea
e0e98bc233
fix inefassign linter declaring variable
...
Kubernetes-commit: 4352768240037a7473b96c84bc432f52ce6e0dc8
2021-11-16 19:00:02 +01:00
Antonio Ojea
bcfc46c982
nolint:staticcheck,ineffassign Convert function
...
Kubernetes-commit: 4bf93f318ac2cbf2f2d24da1991a5e5a4ded6143
2021-11-16 18:59:09 +01:00
Antonio Ojea
4662dacdd3
migrate nolint coments to golangci-lint
...
Kubernetes-commit: d126b1483840b5ea7c0891d3e7a693bd50fae7f8
2021-11-16 16:57:58 +01:00
Paweł Banaszewski
78c055e084
Added requestSloLatencies metric
...
Kubernetes-commit: 0afa569499d480df4977568454a50790891860f5
2021-10-25 22:19:24 +00:00
Alexander Zielenski
01b1d339b3
verify liveObj not returned by manager pipeline
...
addresses feedback by adding a test to make sure that the manager pipeline will not return the same instance used as input, and that the output does not input managedFields
Kubernetes-commit: 68e175ef68eff1351917ac206fb29abe42128062
2021-11-10 14:41:14 -08:00
Alexander Zielenski
e2b596449a
remove mutation of liveObj in fieldManager.Apply
...
also document manager interface
Kubernetes-commit: 0963704178200365897390d1834615b30fac9b01
2021-11-09 11:40:20 -08:00
Alexander Zielenski
13e927c892
guard against modification of test inputs in TestNoOpChanges
...
Kubernetes-commit: 14b67bece4a9bb33adc23dcbbddd76a5cfe0c152
2021-11-09 11:39:46 -08:00
Paweł Banaszewski
0df77d8de7
Changed buckets for apiserver_request_duration_seconds metric
...
Kubernetes-commit: a8bd20a5af1174ce9f9a185b6d49f025a1045b03
2021-10-29 15:37:27 +00:00
Reza Karimi
193bf2c49a
making some apiserver metrics stable
...
Kubernetes-commit: 894e31f41aed5e6db4275bf8cf89fdd62fe25b1e
2021-11-02 17:53:53 +00:00
kkkkun
6bb07771dd
Fix bug: Specical GET should be transformed to WATCH
...
Kubernetes-commit: 5f98d8f79855af648a610b21d71583a6540a58cd
2021-11-04 21:33:30 +08:00
Abu Kashem
fea88b8efd
drop managed fields from audit entries
...
drop the managed fields of the objects from the audit entries when we
are logging request and response bodies.
Kubernetes-commit: bbc59348318c29199e23b27981fb56436ac68705
2020-10-12 13:18:59 -04:00
Lukasz Szaszkiewicz
3af709f483
aggregator: pass apiServiceRegistrationControllerInitiated signal directly to apiserviceRegistration controller
...
Kubernetes-commit: 5116a508a7bf84844f4987ab2db14af88bfd296f
2021-10-20 11:06:27 +02:00
Lukasz Szaszkiewicz
67be998d0f
rename to muxAndDiscoveryComplete
...
Kubernetes-commit: 9e2bdfee02a6851fbb13ffe28611e9d2b6242785
2021-10-19 12:24:00 +02:00
Lukasz Szaszkiewicz
ab8ebf841f
apiserver: adds WithMuxCompleteProtection filter
...
It puts the muxCompleteProtectionKey in the context if a request has been made before muxCompleteSignal has been ready.
Putting the key protect us from returning a 404 response instead of a 503.
It is especially important for controllers like GC and NS since they act on 404s.
The presence of the key is checked in the NotFoundHandler (staging/src/k8s.io/apiserver/pkg/util/notfoundhandler/not_found_handler.go)
The race may happen when a request reaches the NotFoundHandler because not all paths have been registered in the mux
but when the registered checks are examined in the handler they indicate that the paths have been actually installed.
In that case, the presence of the key will make the handler return 503 instead of 404.
Kubernetes-commit: b71fa61b79598b723c3ee23217e0b44564d90b52
2021-10-14 14:25:54 +02:00
Maciej Borsz
7bf60762ac
Update writers.go
...
Kubernetes-commit: f0c7c9abc92e9e32b4f83281f60d76bf25eed579
2021-10-25 13:35:43 +02:00
Abu Kashem
6013da2b94
apiserver: wrap ResponseWriter using abstraction
...
Kubernetes-commit: 0d50c969c587c8a6c16e0962118305ac652c5a6b
2021-09-20 11:21:56 -04:00
Abu Kashem
02a51f0c60
apiserver: introduce abstraction for wrapping ResponseWriter
...
Kubernetes-commit: 96e8fd69e392cc2acf12930a76edc66b801b3c93
2021-09-20 11:21:02 -04:00
Abu Kashem
0e3e7334bb
apiserver: refactor PolicyRuleEvaluator to return a struct
...
Kubernetes-commit: a748fdc6775c63b52a1a963e2332ac774890d2a9
2021-09-20 17:44:11 -04:00
Abu Kashem
d53acfe201
apiserver: store (event, evaluated policy) pair in request context
...
Kubernetes-commit: 8be823b0b0270e1b979b3d4c6e683e1daa0f2e01
2021-09-20 17:43:16 -04:00
CKchen0726
5c4bb8bb6a
remove invalid nil check
...
Kubernetes-commit: 3f1675312042cd855a39200c4bff8020cc0922de
2021-09-13 21:04:31 +08:00
wojtekt
b898581360
Migrate to k8s.io/utils/clock in apiserver
...
Kubernetes-commit: 859a98c0358610e2c127cd2fba1be601ca975188
2021-09-14 20:36:07 +02:00
Dr. Stefan Schimanski
5210be757e
server-side-apply: print object name in SHOULD NOT HAPPEN message
...
Kubernetes-commit: dc6f471e2cceb7aebb62fe2e4bd7c9ce53df6ff0
2021-09-06 08:35:47 +02:00
Stephen Augustus
771ffe6475
generated: Run hack/update-gofmt.sh
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
Kubernetes-commit: 481cf6fbe753b9eb2a47ced179211206b0a99540
2021-08-12 17:13:11 -04:00
Abu Kashem
cafef859a7
apiserver: add key/value pair to httplog
...
Kubernetes-commit: bdedd2a4c16487e075db45e778c9e47ddd57448f
2021-08-19 17:07:24 -04:00
Antonio Ojea
38c6ad936b
run hack/update-netparse-cve.sh
...
Kubernetes-commit: 0cd75e8fec62a2531637e80bb950ac9983cac1b0
2021-08-20 01:16:14 +02:00
Abu Kashem
450b7e8f12
rename audit Checker interface
...
Kubernetes-commit: 27f150351475adaef416bd893403e7066b70d33a
2021-03-24 13:07:21 -04:00
jyz0309
8a6934a20b
add new metric
...
Signed-off-by: jyz0309 <45495947@qq.com>
add comment
Signed-off-by: jyz0309 <45495947@qq.com>
add promlint
Signed-off-by: jyz0309 <45495947@qq.com>
address comment
Signed-off-by: jyz0309 <45495947@qq.com>
go fmt code
Signed-off-by: jyz0309 <45495947@qq.com>
Kubernetes-commit: 97ba475941f64f7ab41a92c51adeb4401146eed1
2021-07-20 19:28:33 +08:00
Antoine Pelisse
56458d94fe
Add name and namespace to structuredmerge errors
...
Kubernetes-commit: 5b3c226c34af328d6bd46866e806589189d44f4d
2021-08-12 15:53:54 -07:00
wojtekt
c6719af51e
Fix metrics reporting for the deprecated watch path
...
Kubernetes-commit: d9d41b70f64da65525d769ab279e3930d59435fe
2021-08-05 16:17:13 +02:00
j2gg0s
1f934a9364
apiserver: avoid repeated loading context for requestInfo in Namer.Name
...
Kubernetes-commit: 9cee586ee98bf7b5377ea04a8980f7f3fdbe5ec2
2021-07-28 19:04:48 +08:00
Yan Huang
8febdc018a
Deprecate apiserver_longrunning_guage and apiserver_registered_watchers
...
Deprecate apiserver_longrunning_guage and apiserver_registered_watchers
Update
Fix name
update
Add back empty space
Update the deprecated version to 1.23
Kubernetes-commit: e2b6816953c9c52b98c129a3e9c2dac4ee925ef0
2021-07-19 23:18:35 -07:00
Kevin Delgado
4a4149c8b0
remove apiserver impor from client-go
...
Kubernetes-commit: af11c4ac9be74115dfd35ce6f18cfa0440fc3458
2021-07-27 20:46:40 +00:00
Kevin Delgado
a8a3bb4200
rename cache, add to integration test
...
Kubernetes-commit: 604db6eb2ada446e78152685943253455b5ec888
2021-07-19 20:04:27 +00:00
Kevin Delgado
613f696b0b
Manually set GVK in extract, add commentary to extractor
...
Kubernetes-commit: dda31bbf2e7a94624e3679e3db56c95e66509ce0
2021-07-08 01:56:58 +00:00
Kevin Delgado
09e56ead9d
Initial UnstructuredExtract without caching
...
Kubernetes-commit: 6e481c5db19cda1ef1b7506c22c0046e440c7fe2
2021-07-03 00:05:11 +00:00
Harry Zhang
0321f0c67e
fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total
...
Kubernetes-commit: a3f57886a267c28d5a0193ca7193d4de9e9212d9
2021-07-07 19:07:49 -07:00
Margo Crawford
6c62752c02
This introduces an Impersonate-Uid header to server side code.
...
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.
This PR contains:
* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
and ensures that the API server populates the correct impersonated spec.uid upon creation.
Kubernetes-commit: 74f5ed6b17287100b339a2b3a43fd4c6fb200978
2021-03-04 15:19:52 -08:00
David Ashpole
5927da0040
Add distributed tracing to the apiserver using OpenTelemetry
...
Kubernetes-commit: 79550ed40c67a70534c1cb697e1fb7e7dbf96335
2021-06-25 05:20:16 -07:00
tiloso
c94ba7a71a
Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver}
...
Kubernetes-commit: c5d70e9db1e8f36e5eb6dae6ca72ad62c1c837d9
2021-06-05 22:15:15 +02:00
Daniel Smith
a08d7d5ddf
Make logged verbs match metric-reported verbs
...
Kubernetes-commit: 54fde5d119f8bb55aec18cb5aef01b6ea58dfea0
2021-06-16 17:08:54 -07:00
njuptlzf
dd5fc094cd
Use objGV instead of gvk.GroupVersion
...
Kubernetes-commit: 15c4d579f08335f33555d3cab5eff41c74e671b9
2021-06-02 14:27:30 +08:00
Kasakaze
f0159a94e3
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 58d7bf67d4694d52610097c72fe79012e19c5da0
2021-06-02 10:53:05 +08:00
Kasakaze
da0758027d
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: b9b01a0f901513370cf3e981544a79f57e321d67
2021-06-02 10:52:44 +08:00
Kasakaze
e7a594074a
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 19c72a6cd05da805b1bec9fe567614ef82bf7beb
2021-06-02 10:52:35 +08:00
Kasakaze
1b73b18c80
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 0ae6a7bac6ba268c59e82222d69ad91e381e79bc
2021-06-02 10:52:22 +08:00
njuptlzf
790f5a21a7
Fix auditing failed of request: encoding failed
...
Kubernetes-commit: 329f7d55d1344f728e28ce49728234f9f8f4c5d3
2021-05-17 02:31:08 +08:00
Julian V. Modesto
f753bce9f8
Make a public ValidateAnnotationsSize
...
Kubernetes-commit: 2e771b8e745c4a3be0d5bae3a6dc94087284c73b
2021-05-25 16:01:38 -04:00
Julian V. Modesto
a01d02b7fd
Make validation totalAnnotationSizeLimitB public.
...
Replace the forked totalAnnotationSizeLimitB with
apimachineryvalidation.TotalAnnotationSizeLimitB.
Kubernetes-commit: 55ff96301797a503b6ee1d09f0eb2ffc827f01b1
2021-05-18 17:28:11 -04:00
Jordan Liggitt
689a6cc12f
Graduate WarningHeader feature to GA
...
Kubernetes-commit: e3ea169d7d8b2c1417ef5a71ee1015f186ca0e3c
2021-04-01 02:51:48 -04:00
Jordan Liggitt
754e90a0a3
Promote apiserver_requested_deprecated_apis metric to stable
...
Kubernetes-commit: 7877539e3095669629e81633019836d2cdb7c368
2021-05-11 16:24:58 -04:00
Julian V. Modesto
c10cbf5412
Respect annotation size limit for SSA last-applied.
...
To support CSA and SSA interoperability, SSA updates the CSA
last-applied annotation.
This change ensures we don't set a big last-applied annotation if the
value is over the annotation limits.
Also, make sure that it's possible to opt-out of this behavior by
setting the CSA annotation to "" the empty string.
Kubernetes-commit: 6054320be1e50a450e9d1e19a79caa96f2035d4d
2021-05-18 15:06:48 -04:00
Marcel Zięba
489e43cad9
Add logging of filters to api calls logs
...
Kubernetes-commit: 7e01b7260ac5cc20c1fc236cae220857726dc330
2021-05-17 11:52:33 +00:00
zhuangqh
640ba0e40e
docs: fix outdated enhancement doc link
...
Signed-off-by: zhuangqh <zhuangqhc@gmail.com>
Kubernetes-commit: adf28648cb32d17cd186a6c7e8b264419e6d0759
2021-02-24 15:22:50 +08:00
卢振兴10069964
549cbbf8de
fix broken link in some files
...
Kubernetes-commit: b29a5fb0746f772b38da570cd8fdc77396ffca31
2021-04-13 08:43:24 +08:00
Abu Kashem
b84fa01322
add more context to post timeout request activities
...
Kubernetes-commit: 66587afb60b10569aa4ed35d53a4a91fcc40abd2
2021-04-09 12:09:35 -04:00
Zhou Peng
c233874954
[k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability
...
Do not wrap code here
Signed-off-by: Zhou Peng <p@ctriple.cn>
Kubernetes-commit: 95f7b4d8544eeba0bc06122b1a35db1ab603f19d
2021-04-27 13:55:31 +08:00
Lukasz Szaszkiewicz
a9e68c9b32
let objects without metadata pass through the managedFields admission controller
...
Not all objects provide metadata. There might be extention servers that allow for creating objects without the metadata field.
This PR changes the managedFileds admission to deal with objects without the metadata field.
Object without that field will be passed directly to the wrapped admission controller for further validation.
Kubernetes-commit: 3dbaf305ae1e52105a338987f3770ff104def68b
2021-04-29 14:08:36 +02:00
Andrea Nodari
ca3910bf4a
Add nil path to mapping when a CR has no "scale" subresource
...
This is to prevent the ScaleHandler to drop the entry. In this way
entries just get ignored.
Kubernetes-commit: 5b666a61a170f61c7e223085478b24a03612fa99
2021-04-18 13:55:15 +02:00
Andrea Nodari
a178a9c5d1
Drop managed fields entries with unknown fields
...
This is aligned to the behaviour of server-side apply on main resources.
Kubernetes-commit: c10dd884c494734d12aceb41daaccd1d8da9356b
2021-04-09 17:17:23 +02:00
Andrea Nodari
9c3786c066
Do not add managed fields if a scale entry doesn't own replicas
...
This happens when a request changes the .status.replicas but not
.spec.replicas
Kubernetes-commit: 8e4b5c849b67b3a12dbd63391a4e75234382ba2c
2021-04-04 19:05:45 +02:00
Andrea Nodari
8c0975e184
Check request info when updating managed fields during scale
...
- Test all versions to make sure each resource version is in the
mappings
- Fail when request info contains an unrecognized version. We have tests
that guarantee that all known versions are in the mappings. If we
get a version in request info that is not there we should fail fast to
prevent inconsistent behaviour (e.g. for some reason the mappings is
not up to date).
Ensure all known versions are in mappings
Kubernetes-commit: 09649e58b5a1368929e194991a763afc8011795e
2021-03-11 16:51:46 +01:00
Antoine Pelisse
ddd271ff4e
Use ScaleHandler for all scalable resources
...
Kubernetes-commit: 816e80206c169006de9d0a76cd385ee31c5aff39
2021-03-11 11:05:05 -08:00
Andrea Nodari
8df8282eaf
Track ownership of deployments scale subresource
...
Kubernetes-commit: a9ea98b3b9272a7f7788a0d37891e4b13b9be38d
2021-01-23 18:50:14 +01:00
Gautier Delorme
af9424d2c9
remove go-openapi/spec
...
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>
Kubernetes-commit: 34b0fcef5fc47e3fcddf7f6ca1b3e6176b2a5323
2021-04-20 17:48:33 +02:00
Andrea Nodari
2ec597ed01
Add "subresource" field to ManagedFieldEntry
...
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.
Kubernetes-commit: 862d256195adf3be5475b1a6935e5feb78f884a5
2021-02-27 17:16:46 +01:00
Jordan Liggitt
b97dfc761c
allow evictions subresource to accept policy/v1 and policy/v1beta1
...
Kubernetes-commit: 33ad842480353f2816873bf728d75333948e4817
2021-03-31 16:54:55 -04:00
Monis Khan
2ad661f8c5
Prune stale entries from OWNERS files
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 91241eac9b7a7e62cc31e663147294bf6dc8f875
2021-04-07 10:38:27 -04:00
Kevin Delgado
ea32c4f47f
Chain the field manager creation calls in newDefaultFieldManager and test
...
Kubernetes-commit: d37461180a1e5a52aeb85cf5853e000acfeb852d
2021-04-13 16:15:25 +00:00
Abu Kashem
bb69e234a6
apiserver: improve correlation by using the audit ID
...
- when we forward the request to the aggregated server, set the audit
ID in the new request header. This allows audit logs from aggregated
apiservers to be correlated with the kube-apiserver.
- use the audit ID in the current tracer
- use the audit ID in httplog
- when a request panics, log an error with the audit ID.
Kubernetes-commit: b607ca1bf3e1cf6152c446ea61ac7fdd9014e1f1
2021-03-02 19:27:43 -05:00
Abu Kashem
f1a76db888
apiserver: manage audit ID associated with a request
...
Manage the audit ID early in the request handling logic so that it can
be used by different layers to improve correlation.
- If the caller does not specify a value for Audit-ID in the request
header, we generate a new audit ID
- If a user specified Audit-ID is too large, we truncate it
- We echo the Audit-ID value to the caller via the response
Header 'Audit-ID'
Kubernetes-commit: 31653bacb9b979ee2f878ebece7e25f79d3f9aa6
2021-03-02 19:22:39 -05:00
Brendan Burns
3ba2299cd2
Fix api installer to indicate PATCH may return a 201 for server side apply
...
Kubernetes-commit: cb72ce975630b44ec8786d5b72b1e0ee8bb1a0e4
2021-03-11 17:06:33 +00:00
Abu Kashem
bf34b41185
refactor finishRequest
...
Kubernetes-commit: a8ff821a19b819a54a54d027ec631eab2ffaedc3
2021-03-22 18:01:33 -04:00
Abu Kashem
28c097bee7
move FinishRequest to its own package
...
Kubernetes-commit: 393a1f73fbaa1bf1facb8882eaf4fead16b94f58
2021-03-22 16:39:14 -04:00
Antoine Pelisse
49b6ebdaae
fieldmanager: Strip managedfields BEFORE we update the timestamp
...
Kubernetes-commit: c8be9651ce0de1eee3fa785882fe01dee4b15d37
2021-03-09 12:46:07 -08:00
Danil-Grigorev
de3d390777
Make selectors atomic
...
Ensure that all label selectors are treated as atomic values,
to exclude situations when selectors are being corrupted by
different actors attempting to apply their overlapping definition
for this field with server-side-apply.
Kubernetes-commit: d8a7764b6396b90313ae7bd50a845f4da4705d67
2021-01-12 18:29:56 +01:00
Marcel Zięba
7635650788
Fix incorret authentication metrics
...
Kubernetes-commit: 7dffc11abc37c4bd750a27553b6d983894bf865c
2021-03-08 13:34:55 +00:00
Kevin Delgado
86db6c67fb
Server-Side Apply: Status Wiping/Reset Fields
...
Adds and implements ResetFieldsProvder interface in order to ensure that
the fieldmanager no longer owns fields that get reset before the object
is persisted.
Co-authored-by: Kevin Wiesmueller <kwiesmul@redhat.com>
Co-authored-by: Kevin Delgado <kevindelgado@google.com>
Kubernetes-commit: a1fac8cbd9289d95db4831a83239292ed56ce59d
2021-03-09 23:54:55 +00:00
David Eads
3f9e652c39
provide directly decodable versions for storageversion API
...
Kubernetes-commit: fa03dee68cea605b285b00ae5b6ce22659d95026
2021-03-08 09:33:46 -05:00
Han Kang
fdbe19987d
promote apiserver_request_duration_seconds to STABLE
...
Change-Id: I1b050b812738719aedd7ac6f4794ec742812e12d
Kubernetes-commit: 69e3d89a38b198d6261e675a31853583f3cce8f7
2021-03-07 17:14:36 -08:00
Kevin Wiesmueller
b101f44b76
cleanup managedFields admission and test
...
Kubernetes-commit: 2d1ba0c35829a2f146a712d49cb21f382c9894cb
2021-03-04 23:20:51 +01:00
Kevin Wiesmueller
8ef7c0686d
only use managedFields decoding for admission check
...
Kubernetes-commit: 98d498117b5566c1229d754d97923f61600660d8
2021-03-01 20:29:15 +01:00
Kevin Wiesmueller
7c5bd1b084
harden managedFields decoding
...
Kubernetes-commit: 470ad03d076cae44bc98c64a08eea32e65f1bb9f
2021-03-01 19:58:56 +01:00
Kevin Wiesmueller
543879f479
fix test dependencies
...
Kubernetes-commit: 295e47f60b64332ef4e3268db282184357440675
2021-02-26 20:33:36 +01:00
Kevin Wiesmueller
e4b883c5c7
update licenses and bazel
...
Kubernetes-commit: 1a8e2bf0358651151a6440717b4de1f662c4571b
2021-02-26 20:14:22 +01:00
Kevin Wiesmueller
04593d2277
prevent fieldManager admission from wrapping nil
...
Kubernetes-commit: 22dfa6ae1b431cb8e8afe72ce7d60360bf766337
2021-02-26 20:14:11 +01:00
Kevin Wiesmueller
a69b2cb302
use existing validation code and decoding in fieldManager admission
...
Kubernetes-commit: fc1841d72f7418dd2606fb796f2a1b664bb3a721
2021-02-26 20:03:10 +01:00
Kevin Wiesmueller
f9c68c0e80
export and cleanup managedFields decoding
...
Kubernetes-commit: 589ca1be1c9e75b1730feacd1af6e2c817f693ac
2021-02-26 17:47:52 +01:00
Kevin Wiesmueller
82e671a5f8
add managedFields admission
...
Kubernetes-commit: f86b59ab79227929e7f283b859b4c59317399807
2021-02-11 16:22:16 +01:00
Kevin Wiesmueller
81cd3ef7b0
fix admission controller
...
Kubernetes-commit: 429a96da5e856c435b08b50791d462120724c475
2021-02-11 16:11:43 +01:00
Kevin Wiesmueller
7da058f6bb
disable webhook for testing
...
Kubernetes-commit: ffbae9c5b4a3df9f7400d0047a5d7a957adf295d
2021-02-01 17:56:49 +01:00
Kevin Wiesmueller
08a5711ffb
update bazel
...
Kubernetes-commit: a06f981fb1388976cd6427d7a4284d36dd2f2448
2021-01-14 20:33:50 +01:00
Kevin Wiesmueller
a29734176f
use managedFields admission controller in create/patch/update
...
Kubernetes-commit: 3d306e222de3b13a55030a53fef93622bb300646
2021-01-14 20:15:11 +01:00
Kevin Wiesmueller
4a5fdad93b
implement managedFields admission controller
...
Kubernetes-commit: d5ae113e8dfba62709b1fccb8dbc26c6dde9b3e5
2021-01-14 20:14:38 +01:00
Han Kang
1cd0838bc2
bump apiserver_request_total to STABLE status
...
We've dropped the content-type field since it is effectively unbounded
(we had a sec-vuln about this before actually). We retain all other
fields, despite their unboundedness due to the fact that we can now
explicitly set bounds on label values.
Change-Id: Icc483fc6a17ea6382928f4448643cda6f3e21adb
Kubernetes-commit: cfd00de6866e636332bdcd3f46d6d2ffd8d2bc88
2021-03-04 07:52:00 -08:00
Kagaya
2422ff2d3b
fix staticcheck for k8s.io/apiserver/pkg/endpoints
...
Kubernetes-commit: 9b02c89acd1c2c5664fdaa98884d17dfd5dad135
2021-02-27 15:37:00 +08:00
chymy
f5152b019f
Fix static failures for vendor/k8s.io/apiserver/pkg/endpoints/handlers
...
Kubernetes-commit: 04515b9c0a8634ddbb48883cdceb1c265ae97015
2021-02-26 21:01:55 -05:00
Alan Zhu
3292215ff4
at most every may result in less than expected times if overloaded
...
Signed-off-by: Alan Zhu <zg.zhu@daocloud.io>
Kubernetes-commit: 67234271ef50da475b4627b484b3b45ee54e8f8d
2021-02-25 16:27:42 +08:00
Han Kang
302deaf21a
add myself to approvers for apiserver metrics
...
Change-Id: Iaf78c3ffb2779701ba50cbbf38c0d7642930572f
Kubernetes-commit: be4db5ac559cc4ac49a6a6e279b8054c0808ec54
2021-02-18 13:55:35 -08:00
Maciej Borsz
b4f179e734
Use more real world examples in BenchmarkSerializeObject
...
Kubernetes-commit: f01f2b122923798d60893c6c189a204b94fe5723
2021-02-18 10:56:51 +01:00
Tim Bannister
b29ffb4398
Update generated code
...
Kubernetes-commit: 284e03e1abde67cae5520a9b61497a71cca78e90
2021-02-15 22:50:30 +00:00
Maciej Borsz
f407d7228e
Add BenchmarkSerializeObject* benchmarks
...
Kubernetes-commit: 2228d7ce2650ba4cc5811a761d9f54e09ea6d99e
2021-02-17 15:03:53 +01:00
Nikhita Raghunath
b0b0548e35
*: remove mbohlool from reviewers
...
Kubernetes-commit: dc3f59c8819d2985939645f4f08cfd98678295e3
2021-02-16 10:45:13 +05:30
Nikhita Raghunath
148a4561b0
*: remove jianhuiz from reviewers
...
Kubernetes-commit: e1b6089e7e9f3b80a911a4ec86cec6491729c89c
2021-02-16 10:35:01 +05:30
Jiaxin Shan
dfad5032fb
Fix ALPHA stability level reference link
...
Kubernetes-commit: e01a21469b9719f7d0e84021c032cd8f0016b5d2
2021-01-31 15:37:07 -08:00
yoyinzyc
74c8267082
add context to metrics in apiserver/endpoint
...
Kubernetes-commit: 266d67bd5124725befe775d580289b67a59f496c
2021-01-20 13:13:00 -08:00
yoyinzyc
6f3753addf
add context to metric in apiserver/audit
...
Kubernetes-commit: 4ba3f1a982227a30b083f6359e76a616e9eabfd1
2021-01-20 12:04:41 -08:00
tanjing2020
4785d0d3e4
fix staticcheck failures on vendor/k8s.io/apiserver/pkg/endpoints
...
Kubernetes-commit: c38a06bca6bb360caf9bc679ba19a5a4be662bd1
2020-12-11 14:23:30 +08:00
Abu Kashem
026eb846a4
apiserver: plumb context with request deadline
...
- as soon as a request is received by the apiserver, determine the
timeout of the request and set a new request context with the deadline.
- the timeout filter that times out non-long-running requests should
use the request context as opposed to a fixed 60s wait today.
- admission and storage layer uses the same request context with the
deadline specified.
we use the default timeout enforced by the apiserver:
- if the user has specified a timeout of 0s, this implies no timeout on the user's part.
- if the user has specified a timeout that exceeds the maximum deadline allowed by the apiserver.
Kubernetes-commit: e416c9e574c49fd0190c8cdac58322aa33a935cf
2020-11-26 23:53:20 -05:00
David Eads
67507290ad
finish removal of exportoptions
...
Kubernetes-commit: 37cc89ed8d5194f288bc9f9633e6142647631a07
2021-01-22 09:21:56 -05:00
Maciej Borsz
78e27f49d3
Add trace to SerializeObject
...
Kubernetes-commit: e93836d9b35f5ec231da91807f00dab3d1a28fd9
2021-01-12 09:45:43 +01:00
lala123912
5d990a9e20
staging\src\k8s.io\apiserver\pkg\endpoints:migrate to structured logs
...
Kubernetes-commit: 12076ff3e587be00f1ef52e546fa3a3a85d41e7b
2021-01-15 15:23:55 +08:00
xiongzhongliang
351f1ab57a
use klog.Info and klog.Warning when had no format
...
Kubernetes-commit: 90f4aeeea4cc5f96caa6ed87c67ca7e62d1ba21c
2020-11-14 00:55:06 +08:00
Dr. Stefan Schimanski
a2b6f03b6e
apiserver: print unknown responsewriter error strings, not only %#+v
...
Kubernetes-commit: b0ecbbc3cbd9bd811d5498a1dd95d516bcd82434
2020-11-26 13:39:56 +01:00
Rajalakshmi-Girish
c41f156212
fixes the unit tests to be more tolerant with error messages
...
Kubernetes-commit: 98948ad8092b41ebc08d50aa557b2d7ba5496e7d
2020-11-27 08:21:56 +00:00
Jie Shen
7dd2afd324
Revert "Cleanup: remove sanity check for CVE-2019-11253"
...
Kubernetes-commit: e3df70364594cdb7d0b321a405f1c0718c2c9b54
2020-12-11 09:38:21 +08:00
drfish
95a1d549eb
Cleanup sanity check for CVE-2019-11253
...
Kubernetes-commit: 4ac5844ec076e9bcc31fd0a79ca17eaf4fb1bdb3
2020-12-08 23:19:21 +08:00
Ken Sipe
92af261bb8
fix SA2006 value of err not used
...
Signed-off-by: Ken Sipe <kensipe@gmail.com>
Kubernetes-commit: a549d0a75e3a09d26f3a316982ff3711be4ed1d2
2020-06-25 17:23:37 -05:00
Ken Sipe
8877e7bd70
fix S1039 unnecessary use of fmt.Sprintf
...
Signed-off-by: Ken Sipe <kensipe@gmail.com>
Kubernetes-commit: 168677400c964fe823b985db35b5e1473db17b0f
2020-06-25 17:04:41 -05:00
lala123912
36a172d35e
Code optimization for add additional information to log trace in api server
...
Kubernetes-commit: 5d61e18a4343773105e39c36b944b4f223e70eaf
2020-11-23 16:27:05 +08:00
Kobayashi Daisuke
11999a9237
fix staticchekc failer in apiserver/pkg/endpoints/request
...
Kubernetes-commit: fa68cda13f329ff8e0458aa254caf321337c711f
2020-11-18 15:28:35 +09:00
Tim Hockin
c2f3123308
Make tests deal with old and new topology labels
...
Kubernetes-commit: 3bd337baf487a0ad9d748e7e0362b3d1b5eb5c4d
2020-11-06 08:47:32 -08:00
Jordan Liggitt
cec339c07a
Revert "plumb context with request deadline"
...
This reverts commit 83f869ee1350da1b65d508725749fb70d0f535f2.
Kubernetes-commit: afd92b3b3ea8fa8e3dbe2521d6ce213c809d25c7
2020-11-19 18:15:04 -05:00
Jordan Liggitt
9d2ba50b16
Revert "use default value when the specified timeout is 0s"
...
This reverts commit 0090e27bd3a271e199a232296b45e120dfa9808a.
Kubernetes-commit: 3e21057070c8227d217a272b6a2429ed3930ec7e
2020-11-19 18:13:37 -05:00
Haowei Cai
77d77260fb
unit and integration tests
...
apiserver dedups and adds warning in CREATE/UPDATE/PATCH requests;
also handles duplication caused by mutating admission.
Kubernetes-commit: 8bcf34a203efa596ac3b65da9afd6b6c764e78a9
2020-11-18 12:46:20 -08:00
Haowei Cai
00bc4d7843
apiserver dedups owner references and adds warning
...
for CREATE and UPDATE requests, we check duplication before managedFields
update, and after mutating admission; for PATCH requests, we check
duplication after mutating admission
Kubernetes-commit: ffc54ed1d2cbf4396fcc498beeb6ad34ac3df69c
2020-11-18 12:35:45 -08:00
Abu Kashem
e9dd37690f
use default value when the specified timeout is 0s
...
Kubernetes-commit: 0090e27bd3a271e199a232296b45e120dfa9808a
2020-11-18 12:01:27 -05:00
Abu Kashem
46e3e4810e
plumb context with request deadline
...
- as soon as a request is received by the apiserver, determine the
timeout of the request and set a new request context with the deadline.
- the timeout filter that times out non-long-running requests should
use the request context as opposed to a fixed 60s wait today.
- admission and storage layer uses the same request context with the
deadline specified.
Kubernetes-commit: 83f869ee1350da1b65d508725749fb70d0f535f2
2020-10-30 16:30:05 -04:00
Haowei Cai
eff0ad2a27
fixup! unblock resources that the storage version manager depends on
...
Kubernetes-commit: f9f6959284260ed43401cdb2ee13ed1167c32b19
2020-11-12 16:37:17 -08:00
Haowei Cai
095588786d
unblock resources that the storage version manager depends on
...
to avoid deadlock itself
Kubernetes-commit: 59b13500c6c1a19824248376a2fc725453682609
2020-11-12 16:22:34 -08:00
Lukasz Szaszkiewicz
383e99f309
stops puting a stacktrace of aborted requests in the logs
...
Aborted requests are the ones that were disrupted with http.ErrAbortHandler.
For example, the timeout handler will panic with http.ErrAbortHandler when a response to the client has been already sent
and the timeout elapsed.
Additionally, a new metric requestAbortsTotal was defined to count aborted requests. The new metric allows for aggregation for each group, version, verb, resource, subresource and scope.
Kubernetes-commit: 057986e32c1bb7284b0edbc161f0380f1548492f
2020-09-24 10:07:24 +02:00
Haowei Cai
0273686309
require APIServerIdentity to be enabled to run StorageVersionAPI
...
without APIServerIdentity enabled, stale apiserver leases won't be GC'ed
and the same for stale storage version entries. In that case the storage
migrator won't operate correctly without manual intervention.
Kubernetes-commit: 1c2d446648662529282a3bb1528a6dbb50700fdb
2020-11-08 19:06:30 -08:00
Haowei Cai
21ce34e628
return a Status formatted JSON response
...
Kubernetes-commit: 8a1d8f7fd58ee7eaa9a8985048a56e02c9ad40c1
2020-11-04 22:29:52 -08:00
Chao Xu
5533252037
Add a generic filter that blocks certain write requests before
...
StorageVersions are updated during apiserver bootstrap.
Also add a poststarthook to the aggregator which updates the
StorageVersions via the storageversion.Manager
Kubernetes-commit: 721897871697db007c2439ac298c579c0f201388
2020-02-24 15:36:08 -08:00
Chao Xu
cfa0865e12
Collect storage versions as ResourceInfo when installing API endpoints.
...
Co-authored-by: Haowei Cai <haoweic@google.com>
Kubernetes-commit: 369475681679e1cb68c23c3355542599a3c0e1e3
2020-02-24 15:35:14 -08:00
Abu Kashem
d09cfb1050
change bucket from 0.0s to 0.0001s
...
Kubernetes-commit: 16ac2d84cf125499651dac434a793f4c76e32640
2020-10-30 09:18:40 -04:00
Abu Kashem
9b40000eaa
Measure how much time a request spends in server filter(s):
...
- A: the timestamp a particular filter starts executing for a request.
- B: the timestamp the particular filter has completed and the next handler
in the chain has started executing.
We define filter latency as `B - A`. Introduce a new metric to track filter latency:
"apiserver_request_filter_duration_seconds"
This measures request filter latency distribution in seconds, for each filter type.
Kubernetes-commit: 99df0b15816cd59ed548235f33c7ab2add940eba
2020-10-13 18:05:44 -04:00
Jefftree
c13cd1f0d3
Make versionconverter functions private
...
Kubernetes-commit: 1f986cc69d8ac5b579ccc2e6817fd0a07903692b
2020-10-22 13:21:38 -07:00
Jefftree
ce4c2eff1a
Reuse SSA type converter for resources in the same API Group
...
Kubernetes-commit: 7182d84b109bb1c928bd5bf92d8c175432b9eeae
2020-10-20 11:16:51 -07:00
Andrea Nodari
b4becfdb04
Add yaml util to unmarshal numbers into int/float
...
Kubernetes-commit: 04d972cb4bab108b12f181f86b7c0f0854a1037a
2020-10-23 17:26:10 +02:00
wojtekt
6fc1d642b6
Fix metrics reporting in kube-apiserver
...
Kubernetes-commit: 3d2a80643aec08be1e50193aeed08aad0d7f886b
2020-10-14 17:34:33 +02:00
Joe Betz
2c72507385
Tag LabelSelector with +structType=atomic
...
Kubernetes-commit: 8874bdf00402b55cf5ede88a5ba4dfc94e9f4399
2020-08-11 11:34:15 -07:00
Antoine Pelisse
d0b4a78e16
Do not update managedFields timestamp when they don't change
...
Kubernetes-commit: fedc0b7093e396aaf1fca7fd6f145a0f3cfd5c47
2020-10-01 10:53:16 -07:00
Andrea Nodari
618f4b129a
Make the creation of namespace using POST and PATCH consistent
...
PATCH verb is used when creating a namespace using server-side apply,
while POST verb is used when creating a namespace using client-side
apply.
The difference in path between the two ways to create a namespace led to
an inconsistency when calling webhooks. When server-side apply is used,
the request sent to webhooks has the field "namespace" populated with
the name of namespace being created. On the other hand, when using
client-side apply the "namespace" field is omitted.
This commit aims to make the behaviour consistent and populates the
"namespace" field when creating a namespace using POST verb (i.e.
client-side apply).
Kubernetes-commit: 3cb510e33eecbdc37aad14f121396ccfbf5268cb
2020-09-21 12:13:12 +02:00
Marcus Alder
ab7c669cad
apiserver self request metric
...
Kubernetes-commit: 6f85e5c11179040b3618bcce9abe4e8f769323ad
2020-09-23 19:54:03 +00:00