Commit Graph

5971 Commits

Author SHA1 Message Date
Monis Khan 2d35015235 webhook: use rest.Config instead of kubeconfig file as input
This change updates the generic webhook logic to use a rest.Config
as its input instead of a kubeconfig file.  This exposes all of the
rest.Config knobs to the caller instead of the more limited set
available through the kubeconfig format.  This is useful when this
code is being used as a library outside of core Kubernetes. For
example, a downstream consumer may want to override the webhook's
internals such as its TLS configuration.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: fef7d0ef1e1fbff65e8d445256036704bb9dbcbd
2021-07-23 11:15:47 -04:00
Kubernetes Publisher c237789502 Merge pull request #108644 from Jefftree/googleapis-gnostic
googleapis/gnostic -> google/gnostic and update kube-openapi

Kubernetes-commit: b195a64d45e1880878a22d178055f1b4220dcb43
2022-03-17 02:46:20 +00:00
Kubernetes Publisher aef041adda Merge pull request #108419 from DangerOnTheRanger/cel-maxlength-integration
CEL MaxLength integration

Kubernetes-commit: 1d7599b56c827d396707b2d1744e7bc27fd88763
2022-03-16 22:19:28 +00:00
Jefftree 9b81dbc7e0 googleapis/gnostic -> google/gnostic
Kubernetes-commit: 8a1d5947ad34ba275192341baa4e5fef8e6c7f24
2022-03-15 20:36:21 -07:00
Kubernetes Publisher de6ba2aa0a Merge pull request #108394 from ialidzhikov/cleanup/warningheaders
Remove the WarningHeaders feature gate

Kubernetes-commit: 162f8d5bac870d41bbc63dbeb4922b4eab1b8800
2022-03-16 02:19:21 +00:00
Kubernetes Publisher db08da52f2 Merge pull request #108448 from ialidzhikov/cleanup/deserialization-cache-size
apiserver: Remove the deprecated `--deserialization-cache-size` flag

Kubernetes-commit: 6224458dc2440b580012434ea1ed951af98d86f3
2022-03-15 22:17:58 +00:00
Kubernetes Publisher d4fbf7fd3a Merge pull request #108214 from stevekuznetsov/skuznets/lease-manager-fix
storage: etcd: clarify lease manager configurations

Kubernetes-commit: faa027ca2b3605932ae319f13c1a9f150f755a47
2022-03-14 22:18:48 +00:00
Kubernetes Publisher 93a1162c9f Merge pull request #108643 from liggitt/cobra
Update cobra to v1.4.0

Kubernetes-commit: 9d512581b85ae8f2f315e042ed4bfc76d921bfb4
2022-03-11 06:18:04 +00:00
Jordan Liggitt 6ebace3af1 Update cobra to v1.4.0
Kubernetes-commit: 60b9af476f7f01f47396e4ddd491f66931159597
2022-03-10 16:19:43 -05:00
Kubernetes Publisher 66a171df29 Merge pull request #108631 from jupblb/b223652793
Remove apf_fd from httplog

Kubernetes-commit: e9af39914797d40766b166e18dac3a441a2bf5d4
2022-03-10 05:49:35 -08:00
jupblb c0c615eb7a Remove apf_fd from httplog
Since flowDistinguisher may hold data identifying a user accessing the
cluster this can be a source of a PII leak.

Kubernetes-commit: 94c92f78e5b02c27502f3b9d59b4e194e476a6f4
2022-03-10 12:59:00 +01:00
Kubernetes Publisher 433db7935a Merge pull request #108252 from wojtek-t/avoid_object_deep_copies
Avoid deep-copying object when possible on kube-apiserver watch path

Kubernetes-commit: 9946b5364e8199ac832161e17155bd005c391fc5
2022-03-09 10:17:30 +00:00
Kubernetes Publisher 687956beed Merge pull request #108092 from carlory/fix-98035
remove audit.k8s.io/v1[alpha|beta]1 versions

Kubernetes-commit: 19762408612e49401aa46d8396c7032462fe5ab0
2022-03-08 10:17:53 +00:00
ialidzhikov 38f395ca57 apiserver: Remove the deprecated `--deserialization-cache-size` flag
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: ee2530ffd4db0cdc8384f7d4acb014e79bb224e9
2022-03-02 15:33:21 +02:00
ialidzhikov ab1e9afa59 Remove the WarningHeaders feature gate
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: 55ee738f5755a27513e83405b5934f1710d96c8e
2022-02-28 19:07:23 +02:00
Wojciech Tyczyński 58b4aa562f Fix potential race in dispatching watch event
Kubernetes-commit: 779f157ecfb24d0ee944f18e481bfa8cc8c94f6f
2022-02-22 17:14:15 +01:00
Wojciech Tyczyński 0b8c9f5ebf Avoid perfoming deep copies in watchcache if not needed
Kubernetes-commit: 0cb3a02bbede2f547ddd20e23e2bbc782ac3956c
2022-02-21 15:18:25 +01:00
Wojciech Tyczyński 35d7dfb633 Prepare apiserver for operating on cached objects by not modifying them
Kubernetes-commit: 7e434682e450e28d36f0ee4787e7b4672e8eb255
2022-02-21 15:05:35 +01:00
Steve Kuznetsov 3d5978d57e storage: etcd: clarify lease manager configurations
When the original commit created the lease manager, this comment was
added to set the default test reuse time to 1s. Even at that time, the
comment claimed it was setting 10s. Instead of using this value, though,
new tests that did not call `testSetup()` started to use the default
configuration for production. This commit clarifies the intent of this
comment, moves it next to the code block that it actually applies to,
and makes use of this test-specific logic everywhere.

x-ref: f230b000db

Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>

Kubernetes-commit: 6aa37eb06247fb95a6a4ef61cbd50885e52055a0
2022-02-18 08:10:57 -08:00
Kermit Alexander c679395394 Add maxLength/maxItems/maxProperties support to cel.Compile.
Kubernetes-commit: 83e4d192b136ac3a28ea26a9d09dc9fee7c6b665
2022-02-15 08:49:37 +00:00
carlory 871a4b7200 remove audit.k8s.io/v1[alpha|beta]1 versions
Kubernetes-commit: fcc282f9f2050aaa4007d6f0444b0f4972925fea
2022-02-13 13:23:49 +08:00
Kubernetes Publisher 38bd432017 Merge pull request #108457 from ialidzhikov/cleanup/target-ram-mb
apiserver: Remove the deprecated `--target-ram-mb` flag

Kubernetes-commit: ad46b4f9215ce34fe316e4473767531456a81188
2022-03-07 14:35:54 +00:00
Kubernetes Publisher d694536ed8 Merge pull request #108437 from andrewsykim/bump-konnectivity-v0.0.29
bump konnectivity-client@v0.0.30

Kubernetes-commit: 82755e3cb2fa8742ac05749058c6f6d991ed2061
2022-03-05 02:18:03 +00:00
Kubernetes Publisher 70e1dccdc6 Merge pull request #108423 from ialidzhikov/cleanup/experimental-encryption-provider-config
apiserver: Remove the deprecated `--experimental-encryption-provider-config` flag

Kubernetes-commit: 1160923ae630fdcc2624c37c4e4f784bc61a5dd1
2022-03-05 02:18:01 +00:00
Kubernetes Publisher d2c6cea521 Merge pull request #106830 from pacoxu/StreamingProxyRedirects-remove
remove ValidateProxyRedirects and StreamingProxyRedirects

Kubernetes-commit: c2d2e665355334d2cfa282b6e5adff6bb0f80839
2022-03-05 02:17:59 +00:00
ialidzhikov bce3488a65 apiserver: Remove the deprecated `--target-ram-mb` flag
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: bdbc7501293eac721ea6f77b55918652f2cd6aab
2022-03-02 18:52:46 +02:00
Andrew Sy Kim 2f2755c126 bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: 00e222579c415cf700cb617733d0e70934ca3252
2022-03-02 01:30:08 +00:00
ialidzhikov aa165d392e apiserver: Remove the deprecated `--experimental-encryption-provider-config` flag
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: 244bf1bd69c962041ba5cabc3c9e92f3f94a3ba4
2022-03-01 19:21:18 +02:00
Kubernetes Publisher 96c13c2227 Merge pull request #108187 from stevekuznetsov/skuznets/storage-tests-diff
storage: etcd: use cmp.Diff for comparisons

Kubernetes-commit: cc4c95181e214e27de1d8a1f31af322a5ee966a8
2022-02-28 22:12:14 +00:00
Kubernetes Publisher 45c09eca61 Merge pull request #108365 from liggitt/fix-proto-gen
Fix proto gen

Kubernetes-commit: 05a71be79d8873a7e728312d8704dc1a91da6312
2022-02-26 22:11:55 +00:00
Jordan Liggitt 4d0c0a45de Regenerate protobuf
Change-Id: I2a563514955d7fc7559ceb7afb73df08ace8fd8b

Kubernetes-commit: 48a1c729a0c934ea7f6b893b823c9f6279aa763f
2022-02-26 18:02:52 +00:00
Kubernetes Publisher 32986d31ea Merge pull request #108339 from cheftako/anp-release
Bump konnectivity-client to v0.0.28

Kubernetes-commit: 109cb7cbe7c355ca8b035a1db902d526335808d6
2022-02-26 02:11:45 +00:00
Walter Fender c0b912ca94 Bump konnectivity-client to v0.0.28
Bump konnectivity network proxy to v0.0.28.
Includes a fix to ensure the KAS calls Close() on the egress connection.

Kubernetes-commit: e5b0392f12ed343fbd02266ec785cb31f7071fd3
2022-02-24 12:35:54 -08:00
Kubernetes Publisher 17ac9279fe Merge pull request #108328 from dgrisonnet/fix-go-collector
bump client_golang to v1.12.1

Kubernetes-commit: b181e174f25df752eb176c2393b95569646230d3
2022-02-24 18:11:57 +00:00
Damien Grisonnet 9a1a96e3ff bump client_golang to v1.12.1
Bump client_golang to v1.12.1 to fix a concurrency issue in the Go
Collector that was introduced by the library in v1.12.0.

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>

Kubernetes-commit: 7f3f8d25c856e3075d8526dc918ca0965bd4ffae
2022-02-24 10:25:12 +01:00
uhari03 ba2b9977b2 Issue 105353: Add messages+details to audit logs response (#105415)
Kubernetes-commit: 016b96ca3896d27b37c5b2d6e223fb3320a0fdec
2022-02-23 17:53:33 -08:00
Kubernetes Publisher b3c38add96 Merge pull request #107993 from deads2k/simplify
prevent enabling beta by default for new api groups

Kubernetes-commit: 2fcdbd098c67caccd2f705acbeec1741aab878bb
2022-02-24 02:12:04 +00:00
Kubernetes Publisher 091db3f2f6 Merge pull request #94637 from liggitt/namespace-before-admission
set/validate object namespace before admission

Kubernetes-commit: 77eb1a03df5ed29db8b093bc1b89778388593c2f
2022-02-24 02:12:02 +00:00
Kubernetes Publisher 9e63e25f08 Merge pull request #108186 from p0lyn0mial/watch-list-reduce-allocations-in-watch-server
reduce the number of allocations in the WatchServer during objects serialisation

Kubernetes-commit: b435061c80eea02304cfd5affceca001fc67f9ba
2022-02-23 18:11:44 +00:00
Kubernetes Publisher 0d8646592b Merge pull request #108263 from deads2k/more-resthandlers
migrate more rest handlers to select by resource enablement

Kubernetes-commit: b917653296b6fcac2220afb3ef4f8ed50a2025a2
2022-02-22 10:15:16 -08:00
David Eads 7fd5822a08 migrate more rest handlers to select by resource enablement
Kubernetes-commit: 0ec20f97d27e08be8d8bbbbff52e68a4409ab43c
2022-02-21 16:10:25 -05:00
Kubernetes Publisher 0e0430f946 Merge pull request #108211 from stevekuznetsov/skuznets/watcher-test-subtests
storage: etcd: misc Watch test cleanups

Kubernetes-commit: cf04a35e2ab4010c25268106f403ddb46df0b497
2022-02-21 18:15:47 +00:00
Kubernetes Publisher 8a830c3504 Merge pull request #107105 from justaugustus/go118
golang: Update to go1.18rc1

Kubernetes-commit: bda996e6a7cd115d76ebf1e0c127bee68e06269a
2022-02-21 18:15:45 +00:00
Kubernetes Publisher 2b64d103a6 Merge pull request #106948 from wojtek-t/simplify_storage_interface_2
Simplify storage interface

Kubernetes-commit: a4575202f412aa59e9a5b4118a867c64bf28ee38
2022-02-21 14:11:03 +00:00
Steve Kuznetsov fb315d8c17 store: etcd: TestWatch: use cmp.Diff
Modernize the comparisons used in the watch tests to use `cmp.Diff()` for
readability.

Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>

Kubernetes-commit: d17a19b39d2dbdaf2cbbaad46de403d6d7ce0602
2022-02-18 06:51:36 -08:00
Steve Kuznetsov 557ecdf10d store: etcd: TestWatch: use sub-tests
This was the last test to not use sub-tests, so we can also remove the
indices that the expectation functions take as parameters now.

Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>

Kubernetes-commit: 9f7bb4264e0b79cbe7979c09f0e4c75a434a27bb
2022-02-18 06:50:05 -08:00
Steve Kuznetsov 1501fbd930 storage: etcd: use cmp.Diff for comparisons
This commit simply modernizes the comparisons made in the storage tests
to use `cmp.Diff()` so that pointer comparisons and length checks do not
have to be made by hand. We also get nice diffs in the test output this
way instead of large pasted blobs.

Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>

Kubernetes-commit: dfdd486f09321e9105fa747a8d1ac5a9a2a7a94a
2022-02-17 07:55:49 -08:00
Lukasz Szaszkiewicz 457184ab3a update the watch server to use EncoderWithAllocator during object serialization.
It allows us to allocate a single buffer for the entire watch session and release it when a watch connection is closed.
Previously memory was allocated for every object serialization putting a lot of pressure on GC and consuming more memory than needed.

Kubernetes-commit: eda1b0c68ec166ee52c50e4a6ab682ce7227b6a5
2022-02-17 16:04:50 +01:00
Jordan Liggitt f7f2a709d5 Update storage/handler unit tests to set / expect namespace in object
Kubernetes-commit: e731ccd65074312f3f11b42f9a7bc0636cda1a31
2022-02-17 00:13:25 -05:00
Wojciech Tyczyński b028a2ea8d Unify merge GetToList and List storage methods to single GetList
Kubernetes-commit: f3d56369f71f5106eeec8300e77bd69b172733da
2022-02-10 10:15:29 +01:00