Commit Graph

5971 Commits

Author SHA1 Message Date
Kubernetes Publisher b51a237e4c Merge pull request #115140 from smarterclayton/wait_context
wait: Use a context implementation for ContextForChannel

Kubernetes-commit: 8bee5dca1d94625aad8a321d3ed4d1dbeeeb0a62
2023-01-19 04:46:14 +00:00
Kubernetes Publisher f4be1be367 Merge pull request #115147 from alexzielenski/apiserver/policy/multiple-paramkind-bug
ValidatingAdmissionPolicy: fix bug preventing multiple policies from using same paramKind

Kubernetes-commit: 06ad4258096621190b23c6e41818715e86291989
2023-01-19 01:10:26 +00:00
Kubernetes Publisher 52b3b18b4c Merge pull request #115163 from SataQiu/lock-AdvancedAuditing-gate-20230118
Lock the AdvancedAuditing feature gate to true

Kubernetes-commit: cc68c06f9cb6c70cbb840a8d7b9ca49eb223cb3f
2023-01-18 16:22:34 +00:00
SataQiu 0f00ee135b the AdvancedAuditing featuregate has been GA since v1.12, and is locked to ture in v1.27
Kubernetes-commit: c25095b2231eb64ac938ae8b3d939c76307da340
2023-01-18 18:50:15 +08:00
Kubernetes Publisher 0bff71021b Merge pull request #114586 from andrewsykim/apiserver-lease-rename
Rename apiserver identity lease labels to apiserver.kubernetes.io/identity

Kubernetes-commit: 46f3821bf4ce0e839a698b7f95f1ee9b08e198cf
2023-01-18 08:18:36 +00:00
Kubernetes Publisher fbb8099003 Merge pull request #114446 from lengrongfu/feat/clean_up
clean up master-service-namespace

Kubernetes-commit: 20c17da14210fbc0e144e0f2ed38a3bf9e98b633
2023-01-18 04:26:27 +00:00
Kubernetes Publisher c3d6c800b5 Merge pull request #114527 from alexzielenski/apiserver/policy/lockfree-refactor
refactor policy admission Validator to be lock free

Kubernetes-commit: 7e0923899fed622efbc8679cca6b000d43633e38
2023-01-18 00:16:02 +00:00
Alexander Zielenski 73db86feab fix bug with param controllers being removed if used by more than one policy
Kubernetes-commit: ecd267d097ec7cd26fa5a6343622c3772f66486f
2023-01-17 15:27:45 -08:00
Kubernetes Publisher 6c75d38fe1 Merge pull request #114542 from pacoxu/EphemeralContainers
cleanup: EphemeralContainers feature gate related codes

Kubernetes-commit: c913e6ce62d23b19eebec9beda91d7599bf5099b
2023-01-17 20:36:18 +00:00
Kubernetes Publisher 8f0891c85c Merge pull request #114922 from ibihim/kmsv2-interface-move
[KMSv2] apiserver/kmsv2: mv Service interface into kmsv2

Kubernetes-commit: f7b02260f6a8cc7826040d5fcd265bc15672880f
2023-01-17 20:36:14 +00:00
Clayton Coleman 03e6089ce8 wait: Use a context implementation for ContextForChannel
ContextForChannel uses a goroutine to transform a channel close to
a context cancel. However, this exposes a synchronization issue if
we want to unify the underlying implementation between contextless
and with context - a ConditionFunc that closes the channel today
expects the behavior that no subsequent conditions will be invoked
(we have a test in wait_test.go TestUntilReturnsImmediately that
verifies this expectation). We can't unify the implementation
without ensuring this property holds.

To do that this commit changes from the goroutine propagation to
implementing context.Context and using stopCh as the Done(). We
then implement Err() by returning context.Canceled and stub the
other methods. Since our context cannot be explicitly cancelled
by users, we cease to return the cancelFn and callers that need
that behavior must wrap the context as normal.

This should be invisible to clients - they would already observe
the same behavior from the context, and the existing error
behavior of Poll* is preserved (which ignores ctx.Err()).

As a side effect, one less goroutine is created making it more
efficient.

Kubernetes-commit: 95051a63b323081daf8a3fe55a252eb79f0053aa
2023-01-17 15:01:02 -05:00
Kubernetes Publisher 173011e7a5 Merge pull request #115079 from dims/update-to-newer-moby/ipvs-v1.1.0
Update to new release of moby/ipvs

Kubernetes-commit: 3613ed04b68156957f58635ecee8746e7fcf2a28
2023-01-15 23:40:12 +00:00
Davanum Srinivas 77e53669a3 Update to new release of moby/ipvs
hack/pin-dependency.sh github.com/moby/ipvs v1.1.0

- go to a fixed tag for `vishvananda/netns`
- no more references to `pkg/errors`

Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: d9b98bc36a572045851b059f7c7066addaad5703
2023-01-14 16:02:08 -05:00
Andrew Sy Kim 885060394e apiserver: use the identity value in the apiserver identity hash
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: a7de3e15a50bafdd65adf55f5fdc14567e3fa3e2
2023-01-13 15:49:30 -05:00
Kubernetes Publisher af2c7c7415 Merge pull request #115039 from apelisse/remove-dependency-fieldmanager
fieldmanager: remove dependencies on internal

Kubernetes-commit: 5323d9213a8c68f9279b3b73fc65c663febcfe16
2023-01-13 03:31:40 +00:00
Kubernetes Publisher ea2eeed670 Merge pull request #114794 from lavalamp/improved-has-synced
Do not N^2 loading webhook configurations

Kubernetes-commit: cc9cc4d3eaec45206f353216a1c3ff6edaf07d30
2023-01-13 03:31:39 +00:00
Daniel Smith f1c42beb68 Fix N^2 startup for webhook configurations
Add a "lazy" type to track when an update is needed. It uses a nested
locking technique to avoid extra evaluation calls.

Kubernetes-commit: 5a1091d88d95bd1dd5c27f2c72cee4ecb4219dda
2023-01-09 23:29:25 +00:00
Kubernetes Publisher c1d39b78f9 Merge pull request #114766 from MadhavJivrajani/prepare-for-go1.20
[Prepare for go1.20] *: Bump versions and fix tests

Kubernetes-commit: 4802d7bb62c2623be8e4f940f6b5c1fcddd6c744
2023-01-12 19:35:28 +00:00
Krzysztof Ostrowski a85078bf03 apiserver/kmsv2: mv Service interface into kmsv2
Signed-off-by: Krzysztof Ostrowski <kostrows@redhat.com>

Kubernetes-commit: b7701b00eaa8cdc2103beb8ab78f625cc3b62d90
2023-01-09 14:36:06 +01:00
Madhav Jivrajani 6acb797fd8 *: Bump version of vmware/govmomi
Bumping version to include changes that
better handle TLS errors. Bump nescessary
to prepare for when the version of Go is
bumped to 1.20

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: 8b064fa4be71b5f1b498fabb5caade3c57f5d434
2023-01-02 20:56:02 +05:30
Kubernetes Publisher b66d88b7b4 Merge pull request #114370 from enj/enj/r/reload_nits
encryption-at-rest: clean up context usage and duplicated code

Kubernetes-commit: c9ed04762f94a319d7b1fb718dc345491a32bea6
2023-01-12 02:59:38 +00:00
Kubernetes Publisher fb51b4a849 Merge pull request #114879 from olivierlemasle/bump-kube-openapi
Bump kube-openapi

Kubernetes-commit: 8fdaac238e4f7f560066ea3a324cdbcaae564ac9
2023-01-12 02:59:31 +00:00
Kubernetes Publisher 10adaa54e9 Merge pull request #113467 from pacoxu/psp-cleanup
Remove PodSecurityPolicy related code except client-go & API type

Kubernetes-commit: 08d9a0ef5b3b30952a558786e4b6e360701a16c6
2023-01-12 02:59:25 +00:00
Kubernetes Publisher e06d3eabf2 Merge pull request #114977 from apelisse/simplify-fieldmanager-test
fieldmanagertest: Reduce API surface of the test package

Kubernetes-commit: 97bbf07d3f3f20332912ee411fdf75ce84425e28
2023-01-11 22:18:41 +00:00
Olivier Lemasle a42cc78187 Bump kube-openapi
Kubernetes-commit: 8b8e20fcdbbeeb4520995e4f7c6a003a33062dd2
2023-01-09 20:41:41 +01:00
Antoine Pelisse 9451c13844 fieldmanager: remove dependencies on internal
Remove dependencies on internal fieldmanager for admission things. This
is preparing for moving fieldmanager out, but the admission part will
stay here, so it can't depend directly on internal.

Kubernetes-commit: d13b405307262b2b9c0795af3a22d0a5725ef6a0
2022-12-21 15:46:49 -08:00
Andrew Sy Kim 2d94c4699b apiserver: update lease identity prefix from kube-apiserver- to apiserver-
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: fb066a883de2b56e533eb622677056bd723748ce
2022-12-19 13:33:24 -05:00
Paco Xu d49ebea4e2 cleanup: EphemeralContainers feature gate related codes
Kubernetes-commit: 70e56fa71af5aa4f3d1448fcbc26e86309cd0cf3
2022-12-16 23:46:47 +08:00
Antoine Pelisse 652037afcf fieldmanagertest: Reduce API surface of the test package
Kubernetes-commit: 7899157345a9ef02bacc56898055e98f28d5b9cc
2022-12-15 20:50:38 -08:00
Kubernetes Publisher 9b380ef84b Merge pull request #114868 from apelisse/private-internal-managers
fieldmanager: Make internal managers private

Kubernetes-commit: 7e97b4b322ca7f62f84057290542aa55d2da736e
2023-01-11 01:38:15 +00:00
Kubernetes Publisher ee51ce0e60 Merge pull request #114970 from tkashem/waitgroup-refactor
apiserver: refactor WithWaitGroup handler

Kubernetes-commit: cf81822d38a7c392f350dc81dfad99a93a8341cb
2023-01-11 01:38:14 +00:00
Kubernetes Publisher 893840cfd3 Merge pull request #114859 from pohly/e2e-ginkgo-spec-ordering
dependencies: update ginkgo to v2.7.0

Kubernetes-commit: a11ad04564f05e5d7e2d5a3f421ec5a45b6807c5
2023-01-11 01:38:11 +00:00
Kubernetes Publisher 2e0e7657b8 Merge pull request #114940 from Rajalakshmi-Girish/fix-apiserver-ut-timeout-fail
Fixes the issue #114145

Kubernetes-commit: aab3fb3a1ece77242834b8a9ea048b141e5d03e1
2023-01-10 21:17:47 +00:00
Abu Kashem 9e60654b8a apiserver: refactor WithWaitGroup handler
Kubernetes-commit: 9093f126b87cb686784bb27b08be9eb12b4d5453
2023-01-10 15:55:19 -05:00
root d7c195333e Fixes the issue #114145
Kubernetes-commit: 0f186fd6d8a38601effd443bd4a23dea75e2c033
2023-01-10 04:49:49 +00:00
Kubernetes Publisher b78cc78a6e Merge pull request #112934 from wzshiming/fix/close-body
Close body when Report non-OK status code

Kubernetes-commit: 8d6bbfbad20ad30ec536d61d3c9c6a7ce4a310a1
2023-01-09 21:08:24 +00:00
Kubernetes Publisher 600e1b7356 Merge pull request #114869 from liggitt/kube-openapi
bump kube-openapi

Kubernetes-commit: 0e49c542d7a73dd056f8f32f33939207dd009b14
2023-01-07 08:18:54 +00:00
Kubernetes Publisher 1b4151ca48 Merge pull request #113959 from Jefftree/jefftree-owners
Update OWNERS for jefftree

Kubernetes-commit: be9d9a850de0df951a1fd6eebf4acef845a5cfb7
2023-01-07 08:18:51 +00:00
Kubernetes Publisher 51b7b50c1d Merge pull request #114832 from jkh52/register-client-metrics
egress_selector.go: register konnectivity-client metrics.

Kubernetes-commit: e048acbc0320743c8a465f3248672fa9a50f7426
2023-01-07 08:18:49 +00:00
Kubernetes Publisher 869b7f299b Merge pull request #114857 from jpbetz/bump-cel-1_12_66
Bump cel-go bump to 0.12.6 to fix bug in cel-go

Kubernetes-commit: 1af8278647d7d80aea152269baafaf278beb5cb3
2023-01-07 08:18:47 +00:00
Jordan Liggitt b0b89e7e65 Prune trailing newlines when enums are disabled
Kubernetes-commit: d0967bbe5e78dbcdd5bc189d5fc2becafc4be0f2
2023-01-06 00:58:23 -05:00
Jordan Liggitt 8e211636c3 bump kube-openapi
Kubernetes-commit: d78de56d769ee9bd2193ccadbac5621d4a0ae89d
2023-01-06 12:21:58 -05:00
Patrick Ohly 89a37edec3 dependencies: update ginkgo to v2.7.0
The new ginkgo release adds sorting of specs. This was triggered by
the observation that parallel test execution of Kubernetes E2E tests
sometimes ran the same spec twice and (presumably) other specs not at all
because spec order was random due to iteration over a map.

Sorting should avoid that problem.

Kubernetes-commit: baf832d80d798d53ceb7d4de3a39330c6eda5c6a
2023-01-05 21:19:14 +01:00
Joe Betz 79fc489823 Fix 114661 via cel-go bump to 0.12.6 to pick up cel-go#620
Kubernetes-commit: 8a69d206a2a5077f8eae8707c94cf01a0b897bd8
2023-01-05 14:24:00 -05:00
Kubernetes Publisher 8c229e9393 Merge pull request #114835 from apelisse/testfield-configurable-typeconverter
Give TypeConverter to TestFieldManager

Kubernetes-commit: cd1115ced0621563cc615aa88f574022afcc90dc
2023-01-07 08:18:44 +00:00
Joseph Anttila Hall f1f1cdab79 egress_selector.go: register konnectivity-client metrics.
This registers new metrics provided by https://github.com/kubernetes/kubernetes/pull/114789.

Kubernetes-commit: 43a6eba33bea2712ddef0f8191fb47ebc322c59e
2023-01-04 18:38:22 +00:00
Antoine Pelisse 4079852d5b fieldmanager: Remove obsolete comment
Kubernetes-commit: ad65b25cc33b7323d6651407944fe74d938ac42a
2022-12-15 16:42:40 -08:00
Alexander Zielenski 9be70531b4 refactor admission controller to avoid contention
refresh admission policies up to once per second based upon last known good data

Kubernetes-commit: 5f59f449832e5206fe9b5fd7d9a43721c4c9ae44
2022-12-15 16:30:52 -08:00
Alexander Zielenski 3fe59ceb77 defer Done call
safer in case of panic

Kubernetes-commit: 517df8f3051b5b0a9eb57a5bad1d6bc16fb61985
2022-12-15 13:09:11 -08:00
Antoine Pelisse 234f6c3879 Give TypeConverter to TestFieldManager
This is mostly because the path, even for built-in, can change from test
to test, so it's easier to make the whole thing configurable anyway.

Kubernetes-commit: 1617b06c039cb66f05e59b79f9a9963d5614ce31
2022-12-13 14:30:45 -08:00