Commit Graph

6078 Commits

Author SHA1 Message Date
Kubernetes Publisher b587e7ba77 Merge pull request #115096 from MadhavJivrajani/unset-rv-watch-semantics
cacher: Fix watch behaviour for unset RV

Kubernetes-commit: 70f337c0d5303078a325c63216345ae84475aa69
2023-02-21 13:13:21 +00:00
Kubernetes Publisher 70904f2f4c Merge pull request #113312 from jiahuif-forks/feature/cel/builtins
OpenAPI-based CEL type library

Kubernetes-commit: 70b2e4aa3ee16f8443cebd802d847e15e68f91c9
2023-02-18 09:12:32 +00:00
Kubernetes Publisher 6865d38156 Merge pull request #112393 from borgerli/apf-pl-dump
APF: two improvements when dumping priority levels

Kubernetes-commit: e55f2a9b54e0f6bd9ed12e50752d7d2545ab0cab
2023-02-17 05:12:46 +00:00
Kubernetes Publisher 5741140c0b Merge pull request #113263 from andrewsykim/fix-flaky-flowcontrol-queueset-test
[Flaky test] fix floating point precision error in TestDifferentWidths

Kubernetes-commit: 7d681c96a3bce144ad9fe7dba466f79ef1bb6f62
2023-02-16 21:20:46 +00:00
Kubernetes Publisher 062f1cebb4 Merge pull request #115604 from pacoxu/fix-design-proposals-links
old design proposals are now moved to Design Proposals Archive repo

Kubernetes-commit: ffe410bbb4e43ba7b7ceaec379709575e817d866
2023-02-16 21:20:44 +00:00
Kubernetes Publisher 2ddc1bb121 Merge pull request #114201 from Octopusjust/k8s-pr20
change unnecessary `switch` to `if` in metrics.go

Kubernetes-commit: 9269aaada269ef1d793bd89bde633a79bae201f5
2023-02-16 07:21:38 -08:00
Paco Xu f4e378eb7b API docs: point to current docs instead of archived designs
Kubernetes-commit: 3d536bd14bba0586f20d1d96560073e5d9e82f97
2023-02-16 15:29:56 +08:00
Li Bo 193a91e8ec refine code
Kubernetes-commit: 2d98d2412a153154396c7089fbe355a56e8a2329
2023-02-14 15:10:54 +08:00
Paco Xu 1e1b60ce05 archived design proposals are now moved to Design Proposals Archive Repo.
Kubernetes-commit: 019d2615af3f7fd0ed0d593ef9df348f6d85b204
2023-02-08 11:12:22 +08:00
Jiahui Feng 9fa5ee5fdb generated: ./hack/update-vendor.sh
Kubernetes-commit: b29f618ca7e35a5116ab8c36f3f819ea5ee44ae5
2023-02-07 15:57:05 -08:00
Jiahui Feng de2a3360b1 avoid deepcopying schemas.
Kubernetes-commit: 7106d42a275e959d55e407180668873451399d81
2023-02-07 18:03:58 -08:00
Jiahui Feng 5ec13b3cf1 adaptor between structral and OpenAPI.
Kubernetes-commit: 7eb7c8b4fadc40f987de668c37abc99c1d58b557
2023-02-06 18:56:51 -08:00
Madhav Jivrajani db00da87d8 cacher: Fix watch behaviour for unset RV
The original design was to honour strong consistency
semantics for when the RV is unset, i.e. serve the
watch by doing a quorum read.

However, the implementation did not match the intent,
in that, the Cacher did not distinguish between set
and unset RV. This commit rectifies that behaviour by
serving the watch from the underlying storage if the
RV is unset.

This commit subsequently also adds a test for the same.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: 610b67031c79c6c38964631d27dd59df357c6d2e
2023-01-16 11:10:05 +05:30
Madhav Jivrajani fd369afe45 cacher: Allow injecting errors for Watch()
This commit allows injecting errors for the
Watch() method of the dummy storage impl.

As a consequence of this, a race is introduced
between when the injected error is written and
read whenever a Watch() is invoked using the
dummy storage. This commit adds locking in order
to mitigate this.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>

Kubernetes-commit: 2593671337ad449f51b9dcc0b63aa190dd07ab68
2023-01-16 12:48:43 +05:30
Jiahui Feng b0c0a5edc5 make structural type use OpenAPI lib.
Kubernetes-commit: e11ea145eaa9c3261a3a6c3ef8c9c5ff29ad5e56
2023-01-11 10:08:11 -08:00
Jiahui Feng ac15595911 create OWNERS file for cel libs.
Kubernetes-commit: 43ef87a2680ecc007a036ca032ee17e294aff55c
2022-12-14 09:19:25 -08:00
Jiahui Feng 46ab726885 implement OpenAPI-based schema resolver.
Kubernetes-commit: 26089a4c957a87c27da31ecbf171e4943f5af6c0
2022-12-14 09:18:54 -08:00
Jiahui Feng bfa588de84 refit CEL typing library
to use OpenAPI schemas.

Kubernetes-commit: f2ee977afd72ee2a66fb491eb74713f1d14a12fd
2022-12-14 09:18:27 -08:00
ZhangYu 7e4c7c03fd change unnecessary switch to if in metrics.go
Kubernetes-commit: 48b9f7bb6c8298a00cdc04e394af15afe5804a3e
2022-11-30 11:04:03 +08:00
Kubernetes Publisher 534818d7e2 Merge pull request #115394 from ritazh/kmsv2-metrics
kmsv2: add metrics

Kubernetes-commit: 292450717cb76e0c480fa5883d18fe1245176d63
2023-02-16 04:24:46 +00:00
Kubernetes Publisher acc030f978 Merge pull request #115802 from logicalhan/webhook-metrics
webhook metrics top out at 2.5s but default timeout is 10s

Kubernetes-commit: a25834cb5a16bbd6a9295aeb5d1621aa8a4cd407
2023-02-16 00:32:54 +00:00
Han Kang 6ae8541062 add 25s bucket
Kubernetes-commit: 7b823002f3ee850b53cc0523ca271bc18661e5ef
2023-02-15 10:27:56 -08:00
Han Kang d92f186e5f use 10 seconds as the biggest bucket for webhook metrics otherwise charts will top out at 2.5s for webhook latencies
Kubernetes-commit: 20b5205dad419fa79b0c6cd69d01183d21f7d9c5
2023-02-15 09:16:16 -08:00
Kubernetes Publisher 019815a2d6 Merge pull request #115786 from liggitt/net-0.7.0-master
Update golang.org/x/net to v0.7.0

Kubernetes-commit: b3d8ac8496a23d65a907f9333d906bcd5463764e
2023-02-15 12:11:58 +00:00
Kubernetes Publisher 4481ce46b5 Merge pull request #115626 from hh/patch-3
Migrate apiserver tracing_test.go to registry.k8s.io

Kubernetes-commit: 62903e3de68475bccceb08735eba311f02302b3e
2023-02-15 06:34:09 +00:00
Kubernetes Publisher 7ccdd9a293 Merge pull request #115758 from sourcelliu/storageversion
Remove unused code

Kubernetes-commit: b8688048f8d3cca513ae36b2eb6e15f457a18df3
2023-02-15 06:34:04 +00:00
Jordan Liggitt ea0916c5d0 Update golang.org/x/net to v0.7.0
Kubernetes-commit: f8e00778ddca11c08117ccf1d1c410641c70c428
2023-02-14 23:14:30 -05:00
Kubernetes Publisher fce0631cbe Merge pull request #115456 from pohly/goroutine-leak-check
test/integration: goroutine leak check

Kubernetes-commit: 4cf352c4bba7ae7b2cf95f3278afc44a12c9b332
2023-02-14 18:23:56 +00:00
mantuliu 24f1059004 Remove unused code
Signed-off-by: mantuliu <240951888@qq.com>

Kubernetes-commit: bc70548c470983b2299a6d29add41ea81f676d92
2023-02-14 20:08:11 +08:00
Hippie Hacker 90d239d3a7 Migrate apiserver to registry.k8s.io
Part of kubernetes/k8s.io#4738

Kubernetes-commit: 75da0cc91ad5a268ef5a2b1fa0b251b81347ca56
2023-02-09 06:49:27 +13:00
Patrick Ohly 64242c43b8 test: use go-uber/goleak for strict leak checking
It provides more readable output and has additional APIs for using it inside a
unit test. goleak.IgnoreCurrent is needed to filter out the goroutine that gets
started when importing go.opencensus.io/stats/view.

In order to handle background goroutines that get created on demand and cannot
be stopped (like the one for LogzHealth), a helper function ensures that those
are running before calling goleak.IgnoreCurrent. Keeping those goroutines
running is not a problem and thus not worth the effort of adding new APIs to
stop them.

Other goroutines are genuine leaks for which no fix is available. Those get
suppressed via IgnoreTopFunction, which works as long as that function
is unique enough.

Example output for the leak fixed in https://github.com/kubernetes/kubernetes/pull/115423:

    E0202 09:30:51.641841   74789 etcd.go:205] "EtcdMain goroutine check" err=<
        found unexpected goroutines:
        [Goroutine 4889 in state chan receive, with k8s.io/apimachinery/pkg/watch.(*Broadcaster).loop on top of the stack:
        goroutine 4889 [chan receive]:
        k8s.io/apimachinery/pkg/watch.(*Broadcaster).loop(0xc0076183c0)
        	/nvme/gopath/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/watch/mux.go:268 +0x65
        created by k8s.io/apimachinery/pkg/watch.NewBroadcaster
        	/nvme/gopath/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/watch/mux.go:77 +0x116
    >

Kubernetes-commit: f131cabfa05d4d2867d987516c898f3a3519f21c
2023-02-01 14:48:46 +01:00
Kubernetes Publisher 942c3101da Merge pull request #115669 from aramase/aramase/f/structured_logging_check_kms
logcheck.conf: ensure that kms and value/encrypt uses structured logging

Kubernetes-commit: d2f40481d115155f3ce7abc0b7b2ff2cf8a0bb1e
2023-02-09 20:37:46 -08:00
Anish Ramasekar 0304cd9f08 logcheck.conf: ensure that kms and value/encrypt uses structured logging
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: b6b00e65bcfe40fdaca9ce8b214baf5015ad7c5c
2023-02-10 00:17:54 +00:00
Kubernetes Publisher 8228032d4b Merge pull request #115667 from aramase/aramase/f/structured_logging
[KMS] Use structured logging in value/encrypt

Kubernetes-commit: de4260fd659488e3f7334b836b1a5aa7b552329e
2023-02-09 17:02:46 -08:00
Anish Ramasekar c9656aa265 [KMS] Use structured logging in value/encrypt
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 6db7496db60816c36b519a940fa1b0af1c0898da
2023-02-09 19:54:37 +00:00
Kubernetes Publisher ea2072de7b Merge pull request #115665 from aramase/aramase/f/update_vendor_k8s_utils
Update k8s.io/utils to `a36077c30491`

Kubernetes-commit: 9a51625ebebcc8345c851afc2b5cc98eb19ac193
2023-02-10 01:24:10 +00:00
Kubernetes Publisher 6d27112fe5 Merge pull request #115649 from aramase/grpc-metrics
[KMSv2] Add metrics for grpc service

Kubernetes-commit: 0698d9eb829ff0ef10d0a7e5fb525d330d332fb4
2023-02-10 01:24:07 +00:00
Kubernetes Publisher 0307ae2c8b Merge pull request #115350 from aramase/kmsv2/cache-sha256
[KMSv2] store hash of encrypted DEK as key in cache

Kubernetes-commit: e476c88ca868b709f7e113d9bd0ed6616b4791b8
2023-02-10 01:24:04 +00:00
Anish Ramasekar f4bd4bf10c Update k8s.io/utils to `a36077c30491`
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 09e02052fdf3d248368b3d05d5c922d616528c4c
2023-02-09 20:09:41 +00:00
Anish Ramasekar 63ca46e40a [KMSv2] Add metrics for grpc service
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: de3b2d525b42d6eedeaa0b157f0f5ab98a4821f4
2023-02-09 07:46:29 +00:00
Rita Zhang f471919cab kmsv2: add metrics
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

Kubernetes-commit: bd0f7f8ee8f7f1c7809e17fa60804bb37f65c495
2023-01-29 22:40:18 -08:00
Anish Ramasekar 421ef770de [KMSv2] store hash of encrypted DEK as key in cache
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: f72cf5c510cf2cf7b8ee375f5c2ec835e3ed225a
2023-01-27 00:19:32 +00:00
Kubernetes Publisher e3ca625155 Merge pull request #114376 from baomingwang/serialization-error-metric
Added serialization from etcd error metric

Kubernetes-commit: dfb976e25a6687a2c4ff7d374e3f01006d65df66
2023-02-08 01:15:33 +00:00
Kubernetes Publisher 3cee67d89e Merge pull request #115379 from artemvmin/serial-mkfs
Add an option to limit the number of concurrent mkfs calls

Kubernetes-commit: 6eb008620cd0ee3501326ee003d47fbaf1fa5b52
2023-02-07 05:23:43 +00:00
Kubernetes Publisher a0aff86839 Merge pull request #115542 from SataQiu/clean-apiserver-20230206
Using BuildOpenAPISpecFromRoutes instead of deprecated BuildOpenAPISpec

Kubernetes-commit: daf0d8d14f2324791bb2261c3173bc1e56efe67a
2023-02-06 21:15:47 +00:00
SataQiu 08b93a6120 using BuildOpenAPISpecFromRoutes instead of deprecated BuildOpenAPISpec
Kubernetes-commit: 5fbd49c1023d1d92f2afad39a2ac847fd5f252a7
2023-02-06 17:47:44 +08:00
Artem Minyaylov 4065ac43ed Update k8s.io/utils to latest version
Update all usages of FakeExec to pointer to avoid copying the mutex

Kubernetes-commit: f573e149423dc578284789fdff8eeb3c195b5ccf
2023-02-03 14:51:25 -08:00
Kubernetes Publisher 9bb74f3471 Merge pull request #114894 from dipankardas011/validate-admission-policy-error-handling
Added error handling in ValidateAdmissionPolicy

Kubernetes-commit: 1ded677b2a77a764a0a0adfa58180c3705242c49
2023-02-03 21:14:55 +00:00
Max Smythe 19d202d87c make CEL admission controller code consumable (#115412)
* Make policy decision object public

Signed-off-by: Max Smythe <smythe@google.com>

* Separate version conversion from validation

Signed-off-by: Max Smythe <smythe@google.com>

* Address review comments

Signed-off-by: Max Smythe <smythe@google.com>

* Fix variable name

Signed-off-by: Max Smythe <smythe@google.com>

---------

Signed-off-by: Max Smythe <smythe@google.com>

Kubernetes-commit: 0ed74145fb00626ce0e900812a54ca3de5406f2e
2023-02-01 17:29:30 -08:00
Kubernetes Publisher c02aff4b8c Merge pull request #114439 from alexzielenski/apiserver/smd/conversion-smaller
add direct construction of TypeConverter from OpenAPI

Kubernetes-commit: d4750857760ae55802f69989dc2451feeb9a29e5
2023-02-02 01:15:09 +00:00