Commit Graph

5971 Commits

Author SHA1 Message Date
Kubernetes Publisher cbc2a9e12f Merge pull request #111507 from mborsz/compr
Add flag to disable compression for local traffic

Kubernetes-commit: c718f64b3f2ed9897bc9eaf6b36d99d17f38a57c
2022-08-02 20:27:11 +00:00
Alexander Zielenski e6b8e52ae7 update smd to 4.2.3
Kubernetes-commit: e77ed0bc2e3a807f4aca9360ec20933a03869716
2022-08-02 10:07:50 -07:00
Kubernetes Publisher c37dca5d74 Merge pull request #111119 from aramase/aes-gcm-part-2
feat:(kms) encrypt data with DEK using AES-GCM instead of AES-CBC

Kubernetes-commit: cdc60112a676010dbc0ba5650732386e2dedebd0
2022-08-02 04:22:06 +00:00
Kubernetes Publisher f742880c6b Merge pull request #111477 from negz/biglogs
Share a single etcd3 client logger across all clients

Kubernetes-commit: 59cedf4871cc8f775faec252f389e3916297751b
2022-08-02 00:21:36 +00:00
Kubernetes Publisher 1d04de9505 Merge pull request #111587 from ialidzhikov/k8s-utils@ee6ede2d64
Update `k8s.io/utils` to `ee6ede2d64ed`

Kubernetes-commit: 9af9947230633823ffa94e1fd11c58d7af986d8b
2022-08-01 04:25:33 +00:00
ialidzhikov 4d37417257 Update `k8s.io/utils` to `ee6ede2d64ed`
Kubernetes-commit: 6aa5efb1bdc2d0dcccca67c6a9cc20820380a366
2022-07-31 16:33:14 +03:00
Nic Cope 9b243e9d90 Copy etcd client debug level logic from upstream
Replicated from https://github.com/etcd-io/etcd/blob/v3.5.4/client/v3/logger.go#L47

The logic of this function doesn't make a lot of sense to me, but
copying it will avoid any behaviour change.

Signed-off-by: Nic Cope <nicc@rk0n.org>

Kubernetes-commit: c1aa7a0fe73cbcab8e70f7b73a845ae9394f9a71
2022-07-29 14:26:31 -07:00
Nic Cope a105c2570c Give etcd client logger a name
Logic copied from https://github.com/etcd-io/etcd/blob/v3.5.4/client/v3/client.go#L374

Signed-off-by: Nic Cope <nicc@rk0n.org>

Kubernetes-commit: f54d2606336e2e8130339d2a0bc04fac6906aa78
2022-07-29 14:24:17 -07:00
Han Kang d5fac85195 clean-up apiserver metrics and use subsystem
this is specifically so that we have more structured information when
the metric is parsed and stored as a stable metric. This change does not
change the name of the actual metrics.

Change-Id: I861482401ad9a0ae12306b93abf91d6f76d7a407

Kubernetes-commit: 178e57c17b66eb572a961690bd10782aeb3c3582
2022-07-29 12:51:29 -07:00
Kubernetes Publisher d1a02c58cc Merge pull request #111524 from cici37/celBeta
Promote feature CustomResourceValidationExpressions to beta

Kubernetes-commit: 762f39e2db0e55c4613e1f7945b3cb093df558e6
2022-07-29 16:21:02 +00:00
Maciej Borsz 40280f9889 Add an option to conditionally disable compression based on client ip.
Kubernetes-commit: 023583a15586328569ccab505db2f57f398e04b3
2022-07-29 08:44:14 +00:00
Nic Cope 463756f91d Share a single etcd3 client logger across all clients
Currently the API server creates one etcd client per CRD. If clients
aren't provided a logger they'll each create their own. These loggers
can account for ~20% of API server memory consumption on a cluster with
hundreds of CRDs.

Signed-off-by: Nic Cope <nicc@rk0n.org>

Kubernetes-commit: 0c81eabb853e581abbcb37ebf094af3316e1012e
2022-07-28 19:51:55 -07:00
Nic Cope ef17269e10 Disable the etcd3 client logger
This logger is responsible for 20% of the API server's memory usage when
many CRDs are installed. See the below issue for more context.

https://github.com/kubernetes/kubernetes/issues/111476

Signed-off-by: Nic Cope <nicc@rk0n.org>

Kubernetes-commit: 0e5401c93940126beac45264aa056507b0950075
2022-07-27 14:44:49 -07:00
Cici Huang 45072c5fc4 Promote feature CustomResourceValidationExpressions to beta
Kubernetes-commit: e0fb5714acf0b72bcc95fa59d62913ede51151c6
2022-07-14 18:32:51 +00:00
Kubernetes Publisher e8e2c8afba Merge pull request #111460 from wojtek-t/forget_watcher
Cacher: add support for draining watchers

Kubernetes-commit: 4f74844299489e5edd2b1feda4476399dfced62d
2022-07-28 16:24:22 +00:00
Kubernetes Publisher 310799f93e Merge pull request #111387 from marseel/feature/retry_internal_errors
Add option to retry internal api error in reflector.

Kubernetes-commit: 79a62d62350fb600f97d1f6309c3274515b3587a
2022-07-28 16:24:20 +00:00
Kubernetes Publisher 5f8b4fa67e Merge pull request #111503 from jupblb/b238599942-5
Switch initial/final seats type to uint64

Kubernetes-commit: 5a156349f6fdd31857249c30ebded7fcf19d30cf
2022-07-28 12:21:59 +00:00
jupblb 16f776a534 Switch initial/final seats type to uint64
Kubernetes-commit: 3c46482eb09d7343e0f98a930a9aaa158237e278
2022-07-28 10:48:40 +02:00
Wojciech Tyczyński 6ab5ae374a Fix draining cacher tests
Kubernetes-commit: a530a6898a36d43eef766f041eab4e4b6d5adedb
2022-07-28 10:20:23 +02:00
Kubernetes Publisher 918a4d70ad Merge pull request #111228 from Abirdcfly/220716
clean unreachable code

Kubernetes-commit: 4e5711829c1c8bfadbb7632b28def5ba08325132
2022-07-27 20:16:22 +00:00
Kubernetes Publisher ffadbb2b55 Merge pull request #111442 from ialidzhikov/k8s-utils@56c0de1e6f
Update `k8s.io/utils` to `9bab9ef40391`

Kubernetes-commit: e092b6d27bff004171b71fffa45f111fdcd6e81b
2022-07-27 20:16:18 +00:00
Kubernetes Publisher 8614c9c551 Merge pull request #111399 from Argh4k/i-111290
Modify timeout for etcd healthcheck

Kubernetes-commit: 610b7839a0bc2f9bafaca92930f8dd740f0ab46c
2022-07-27 16:11:42 +00:00
Kubernetes Publisher f53b829906 Merge pull request #111254 from dims/update-to-golang-1.19-rc2
[golang] Update to 1.19rc2 (from 1.18.3)

Kubernetes-commit: 3ffdfbe286ebcea5d75617da6accaf67f815e0cf
2022-07-27 00:17:12 +00:00
Kubernetes Publisher 8b27842692 Merge pull request #109778 from mythi/grpc-go-update
grpc: move to use grpc.WithTransportCredentials()

Kubernetes-commit: 631a5a849ab09216da42c10858e962d71071ea65
2022-07-26 20:16:05 +00:00
Kubernetes Publisher cf846c4344 Merge pull request #106388 from alexzielenski/ssa-ignore-nonsemantic-changes
Ignore non-semantic changes to objects

Kubernetes-commit: 8bc12f24e64ae045eb6770524388301cce6b7429
2022-07-26 20:16:01 +00:00
Kubernetes Publisher 7f7a01acf8 Merge pull request #108108 from thaJeztah/switch_golang_protobuf_extensions
vendor: downgrade github.com/matttproud/golang_protobuf_extensions to v1.0.1

Kubernetes-commit: d5f12ed7d89a4bf9ee18871fc079c1d0215094f1
2022-07-26 16:12:24 +00:00
ialidzhikov 5986901e9c Update `k8s.io/utils` to `9bab9ef40391`
Kubernetes-commit: 168fef6845f50f0460e7bdc0280da480cc92b787
2022-07-26 18:43:20 +03:00
Maciej Wyrzuc cb0bb2af35 Add additional etcd check to readyz with 2 seconds timeout.
Kubernetes-commit: b42045a64fd07fb948660839b6c7c14440bee9df
2022-07-25 13:08:50 +00:00
Marcel Zięba 3c024b4916 Add option to retry internal api error in reflector.
Kubernetes-commit: 0b2b6489de8f75d5299f54180617601126bb8878
2022-07-25 08:02:54 +00:00
Alexander Zielenski 43763b31c6 use more apt name for flag
Kubernetes-commit: c2cbc460f2c5be07b0f5762005642625b06b6a75
2022-07-20 10:45:21 -07:00
Alexander Zielenski feb8f08b78 guard usage of timestamp transformer under fieldManager non nil
not strictly necessary for correctness, but it is not needed unless SSA is enabled

Kubernetes-commit: 48786d90da794bd1a0ef588f6393a0dddffcc400
2022-07-20 08:58:28 -07:00
Davanum Srinivas 7e94033a61 Generate and format files
- Run hack/update-codegen.sh
- Run hack/update-generated-device-plugin.sh
- Run hack/update-generated-protobuf.sh
- Run hack/update-generated-runtime.sh
- Run hack/update-generated-swagger-docs.sh
- Run hack/update-openapi-spec.sh
- Run hack/update-gofmt.sh

Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: a9593d634c6a053848413e600dadbf974627515f
2022-07-19 20:54:13 -04:00
Davanum Srinivas a13e0b29d5 fix patch_test for gofmt issue
Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: ea7dff551f648d8a46087f59e40767216d00f60e
2022-07-26 10:12:54 -04:00
Abirdcfly 3fde82e2dd clean Unreachable code
Signed-off-by: Abirdcfly <fp544037857@gmail.com>

Kubernetes-commit: f71718d6448418d0289b9649905a16bfb1962b68
2022-07-19 00:58:17 +08:00
Alexander Zielenski c2e73305f9 add envar to disable non semantic updates feature
enabled by default. can easily be changed in backports

Kubernetes-commit: 076051135d16b70c08d8d6382e73ef983614240f
2022-07-14 11:28:10 -07:00
Anish Ramasekar 8ab3aa3011 feat:(kms) encrypt data with DEK using AES-GCM instead of AES-CBC
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: d54631a41a869f7a28d82fcab2e174ee85879027
2022-07-13 17:14:50 +00:00
Tim Allclair 4b329cff47 Rename WithAuditID to WithAuditInit
Kubernetes-commit: ea28a21a6790d40c1fe540c64a296c8f0db17c65
2022-07-12 14:46:27 -07:00
Tim Allclair bd7c7f52c2 Consolidate AuditContext
Kubernetes-commit: f1d684b7b60b39b7dc1eb4156307c593f0ba74e1
2022-07-12 11:53:57 -07:00
Lukasz Szaszkiewicz 684cf11215 cacher: add support for consistent streaming
design details https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/3157-watch-list#design-details

Kubernetes-commit: debace151cfffc1b5d805341efcbf5f0062e95ed
2022-07-05 15:48:30 +02:00
Anish Ramasekar 225e26ac4a Implement KMS v2alpha1
- add feature gate
- add encrypted object and run generated_files
- generate protobuf for encrypted object and add unit tests
- move parse endpoint to util and refactor
- refactor interface and remove unused interceptor
- add protobuf generate to update-generated-kms.sh
- add integration tests
- add defaulting for apiVersion in kmsConfiguration
- handle v1/v2 and default in encryption config parsing
- move metrics to own pkg and reuse for v2
- use Marshal and Unmarshal instead of serializer
- add context for all service methods
- check version and keyid for healthz

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: f19f3f409938ff9ac8a61966e47fbe9c6075ec90
2022-06-29 20:51:35 +00:00
Mikko Ylinen 12a8b7fef3 grpc: move to use grpc.WithTransportCredentials()
v1.43.0 marked grpc.WithInsecure() deprecated so this commit moves to use
what is the recommended replacement:

grpc.WithTransportCredentials(insecure.NewCredentials())

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>

Kubernetes-commit: 2c8bfad9106039aa15233b5bf7282b25a7b7e0a0
2022-05-11 12:13:28 +03:00
twilight0620 2180db0c8d code check modify:
receiver name obj should be consistent with previous receiver name s for SimpleStream
error var hookNotFinished should have name of the form errFoo

Kubernetes-commit: ae385ee874a81cd01ee4fef98efc1bd5c219c9b7
2022-04-21 16:47:22 +08:00
Shihang Zhang 7b63db277d track legacy service account tokens
Kubernetes-commit: 569cd70a52359a294a608fb256693445a89a9dab
2022-03-21 14:21:41 -07:00
Alexander Zielenski 48eb70e1d1 benchmark and metrics for new timestamp transformer comparison
add proper metrics

rename & improve documentation for path metric dimension

Kubernetes-commit: 40343793f7b9787b2d4b88f0a0439ce9e538075a
2022-03-01 14:24:12 -08:00
Alexander Zielenski 81749c6ee9 revert timestamp updates to object if non-managed fields do not change
add short-circuiting logic for long comaprison

replace timestamps rather than doing a full managed fields deepcopy

add guard

Kubernetes-commit: 7233538008489c189d09bb042fbabca97d9cdbaf
2022-07-14 11:40:20 -07:00
Sebastiaan van Stijn 7176586fe6 downgrade github.com/matttproud/golang_protobuf_extensions to v1.0.1
This dependency was updated in 6b864dc4e10bf62508ecbfa3106ac7952004ea9e, but using
a version that's 1 commit ahead of the latest (v1.0.1) release. As a consequence,
any project that uses k8s.io/component-base as a dependency, but that prefers to
use tagged releases, will be required to add a `replace` rule in their `go.mod`.

Looking at the difference between the currently used version and the last release,
the only difference is the addition of a `go.mod`:
https://github.com/matttproud/golang_protobuf_extensions/compare/v1.0.1...c182affec369

While it can help to have a `go.mod` to resolve the minimum version of (indirect)
dependencies, in this case, the (minimum) versions of dependencies defined in this
module's `go.mod` are quite a bit behind the version defined in k8s' own go.mod,
so would already be up-to-date.

Based on the above, it looks like the `go.mod` (currently) doesn't provide much
value, and it would be safe to roll back 1 commit to use the tagged/released
version of this module.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

Kubernetes-commit: 82a765c52fb94401a1b85c9fb9d2b1e457e84556
2022-02-14 16:58:00 +01:00
Kubernetes Publisher 077c6def5f Merge pull request #110164 from MikeSpreitzer/supply-denominators
Supply denominators

Kubernetes-commit: d48c0677712f76f1b1832d7f95625ff5994eeae4
2022-07-26 00:11:25 +00:00
Kubernetes Publisher 57f72cea4a Merge pull request #111348 from wojtek-t/pf_cleanup_observations
Eliminate MaintainObservations function in P&F

Kubernetes-commit: 99e34dc57283f77ee04e4a0746c56d4c0210c68f
2022-07-25 20:11:27 +00:00
Kubernetes Publisher fc846fd428 Merge pull request #109690 from twilight0620/addTest1
add test case for ToValidOperationID method: TestToValidOperationID

Kubernetes-commit: 455c1c250d1fa9e811603232ac8b6f6472a944b8
2022-07-23 04:10:43 +00:00
Kubernetes Publisher f8824a3f11 Merge pull request #111307 from HecarimV/fix-22072114
cleanup: use append other than for loop

Kubernetes-commit: 5095339162639f6e93492b2932227f1d0038075e
2022-07-22 16:55:13 +00:00