0550db794e
move logs into component-base
...
all the code changes to move move /apiserver/pkg/util/logs into /component-base/logs
Kubernetes-commit: ba81a5409affb6b861d5994c1e2f7c74a05826e5
2019-01-17 09:06:12 -05:00
1e20513561
fix typo and instead of amd
...
Kubernetes-commit: 3e83f0f08abab4c10dfab7053529709883c9b834
2018-10-30 01:27:50 +08:00
2109711572
Remove build/verify scripts for swagger 1.2 API docs, API server swagger ui / swagger 1.2 config
...
Kubernetes-commit: 9229399bd6049bc7766829b436d5cb5fe0dfe2f1
2019-01-15 10:44:36 -05:00
8a453581d7
Fix nil panic propagation
...
Kubernetes-commit: b8c64e30d18d3ea41de703d369e2a97063bce08f
2019-01-12 11:11:47 -05:00
b3e7114b6a
Allow FeatureGate values to be overridden in benchmarks.
...
This updates `SetFeatureGateDuringTest` to use the `testing.TB`
interface, which matches *testing.T and *testing.B.
Kubernetes-commit: 28a6a446a14d064d8a85c3e59b3c77f2127be35b
2018-12-13 18:44:39 -08:00
dfaa27e10c
Update two doc.go files under staging/src/k8s.io/apiserver
...
Signed-off-by: Zhang-hoon Dennis Oh <zhanghoondennisoh@gmail.com>
Kubernetes-commit: f48480953e00f39e108833fd88a1d614459053a7
2018-10-11 19:10:16 +09:00
0202761ce2
Ensure we set a content-type for healthz
...
Change-Id: I453b1433c69bf26c28da873dbdd1ac25006b8d60
Co-Authored-By: Tim Allclair (St. Clair) <tallclair@google.com>
Kubernetes-commit: eedb70355ad59f9d7054dba198a8352554274e0a
2019-01-03 10:05:58 -05:00
9c474d9c53
require timeout to be greater than zero.
...
add unit test to cover timeout behaviour.
Kubernetes-commit: 39aca564749cd92ed1cfec7129eb3f6593549137
2019-01-04 17:06:07 -08:00
d9414ee2ab
Expose kms timeout value via encryption config.
...
Kubernetes-commit: a4dc53cfeb91ee07cedcc6959e88e30cb0c3cca8
2019-01-03 14:26:57 -08:00
e8928c4a1c
Move k8s.io/{apiserver,apimachinery}/pkg/apis/config to k8s.io/component-base/config. Co-authored-by @Klaven
...
Kubernetes-commit: 2e52d5c3311d3dcfd042e81570ef138645de529a
2019-01-06 13:57:47 +02:00
efb664a483
kube-apiserver: add e2e graceful shutdown integration test
...
Kubernetes-commit: a2e19f1228b365f17401b1e958a6bb684e65fd65
2018-12-19 12:42:22 +01:00
12d1c63697
apiserver: check that request fail after shutdown
...
Kubernetes-commit: c0d8ad1578efe52df3ca6bc57a90a623d1d2e482
2018-12-19 12:41:58 +01:00
b87560e3bd
Log Health Check failure at Verbosity Level - 4
...
Our default recommendation as well as our CI default is 4, so we should
be able to see the health check errors at the same level 4 itself.
Change-Id: I388f945d3522d1f63f0a85f35e765c2d4f2c548a
Kubernetes-commit: 3d6b3857b29b9c738f258344781ce4a9b40b9a0b
2019-01-06 21:32:57 -05:00
5bbdd5d7c3
Strengthen ErrorToAPIStatus against bad input
...
Change-Id: Id44a59f56c074901257760ff4e40ce29820c6c50
Kubernetes-commit: 6858a24835721cae6968ad85cdf4985afaa03923
2019-01-04 11:22:46 -05:00
e2884e1186
Revert "Generate Stack Traces for http response with status code zero"
...
Does not help with the bug investigation. the http server is designed to
panic when the http status code is `0`.
This reverts commit 72792d59f46f822cf360e797d886e582a6a2dc60.
Kubernetes-commit: 85ae15621af1d71caf5d0bac2299d17ec1020664
2019-01-04 15:26:07 -05:00
fe4a2dbfb0
preserve behavior of ignoring invalid --runtime-config keys and api/all=false
...
Kubernetes-commit: fc3fca2857a18464cfff8aff5f9e4b062f293ac5
2019-01-04 13:50:21 -05:00
1702e95788
fix typo in warning advice for permissions
...
Kubernetes-commit: 1105e4e0d1c0e78e2a203a136e9f8bcaff5c36ab
2019-01-04 09:58:06 -05:00
e16a86073e
add a content-type filter to apiserver filters to autoset nosniff
...
Kubernetes-commit: d0532bdb9ab40e06ee0702481f623d5054c8831a
2019-01-04 14:06:46 -08:00
5e146b0a14
Flush headers before streaming logs
...
Kubernetes-commit: 93625f502676f7a89474cdd3d588354a8ffabb78
2019-01-04 10:16:40 -05:00
2b1eeee742
Generate Stack Traces for http response with status code zero
...
When we spit out a http reponse with a `0` http status code we
should log a trace back so we can easily find where things went wrong.
Change-Id: Ic2aadec3a3de85fbdf64da66d6d12e3c631f409d
Kubernetes-commit: 72792d59f46f822cf360e797d886e582a6a2dc60
2019-01-03 16:52:36 -05:00
b63cac0574
apiserver: start only one compactor per unique storage transport config
...
Kubernetes-commit: 00a717b572f3582d0d20633644e827dd60991dce
2018-09-12 11:54:14 +02:00
7d47897b55
apiserver: separate transport setting from storagebackend.Config
...
Kubernetes-commit: 7b242533a217bd809e2c846c3e3fadf7bf6edee8
2018-09-12 10:59:01 +02:00
837d33c6f5
Allow enabling/disabling specific extensions/v1beta1 resources
...
Kubernetes-commit: e016e132f519dbfb63ce09f6084d6dd64617f615
2018-12-20 13:08:14 -05:00
5c0ad5c6cf
Fix a typo
...
Kubernetes-commit: 83ff55ccc39ecc1adadd96486d5c1a5c02466e33
2018-12-31 12:28:33 +06:00
ec307f52e2
Stop checking VolumeScheduling feature gate
...
Kubernetes-commit: 73dcfe12dac3e3dc8997e7296f34701c0c15ec67
2018-12-27 17:45:04 -05:00
b6d1828116
Fix unreachable code
...
Kubernetes-commit: 267425667f45f37b0fb70a6e6904efb995cb4924
2018-11-18 04:16:25 +08:00
7b0f961e27
Remove uses of extensions/v1beta1 clients
...
Kubernetes-commit: fd9e9b01b1c79c47c7edb4980468f2675daebf27
2018-12-19 11:18:53 -05:00
a229479a54
Better organize object conversion in response handling
...
Prepare to support watch by cleaning up the conversion method and
splitting out each transition into a smaller method.
Kubernetes-commit: 63c49ba55a8da571522a9615dfa64471c5e9041e
2018-11-28 22:01:47 -05:00
065e089126
Ensure all response object modification happens in one place
...
Make setLink and setListLink the same, and make them happen in transformResponseObject.
Make those methods also responsible for ensuring an empty list. Then move outputMediaType
negotiation before all other calls in the specific methods, to ensure we fail fast.
Refactoring in preparation to support type conversion on watch.
Kubernetes-commit: 56a25d8c5f04ec5401b99c8eb29e980b1e8123d3
2018-11-28 21:32:51 -05:00
a3f2a871b3
Surface help for insecure ports to explain how to disable
...
Kubernetes-commit: 819b502768034b8104904cd7031db8c4838f900a
2018-11-30 10:52:37 -05:00
232ebfaeaf
Allow kube-scheduler to tolerate cluster auth config lookup failure
...
Kubernetes-commit: 416e11421590838f0022242bff1db10da595b074
2018-12-05 13:51:06 -05:00
b4ca200ede
apiserver: add component label to request metrics
...
Kubernetes-commit: 7190b17e5a52a7c0673c2e8a30cbe95f2847a6df
2018-11-29 16:30:15 +01:00
0f8de8e61f
apiserver: add group+version to request metrics
...
Kubernetes-commit: ff6e028755163ef52ad135da9f5d800c5749632c
2018-11-29 16:03:37 +01:00
f3ce4369fb
Plumb token and token file through rest.Config
...
Kubernetes-commit: dba85e58debadfcb66aff2b68ba8bcc2eafeac2d
2018-12-04 11:24:29 -05:00
cc459864cf
remove duplicate word
...
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
Kubernetes-commit: b32bd6e812138faa218a0ab906989fdca27843a2
2018-12-03 19:24:45 +08:00
c3865fa725
apiserver: set klog as etcdclient logger
...
Kubernetes-commit: a00d08610f2303cd433e75cff7f73c0d0dc18b1d
2018-11-21 15:31:25 +01:00
2433950ca1
drop VerifyFeatureGatesUnchanged
...
Kubernetes-commit: 2498ca760695ad03d4b400ab1e9766799f4d7975
2018-11-21 10:44:02 -05:00
d294e6b5b4
Update non-test code to use DefaultMutableFeatureGate
...
Kubernetes-commit: d440ecdd3b41a4fc4a207195e1bb976422d6d35e
2018-11-20 23:59:52 -05:00
e5cdab222a
Tighten feature gate interface to split out mutating methods
...
Kubernetes-commit: 1d6db5924f4529431cd88bce20f04940681f0aa6
2018-11-20 23:58:51 -05:00
ee7fb67d6e
Clarified syntax doc on --watch-cache-sizes
...
Noted that group must be omitted for resources of apiVersion v1 (the
legacy core API) and included for others.
Fixes #65393
Kubernetes-commit: fc20359fed5e3d0e89a60653b9b0d638d4d757d8
2018-11-12 14:45:45 -05:00
e6d011f6fa
Add license header to non-generated proto files
...
Kubernetes-commit: 6285db6576553e40aacb74579de57a77e19bb434
2018-10-30 22:29:07 +05:30
e485f8578d
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
...
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.
In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
Kubernetes-commit: 21c1bb883081b13244002271bccc9cf119d4db4f
2018-03-23 14:16:04 +03:00
70d40a2bc9
*-controller-manager: fix missing global flags for --help
...
Kubernetes-commit: 10dd5d663197abae40374c3eaa5c0ec2b638a234
2018-11-21 10:46:27 +08:00
877329b0f3
Add option to k8s apiserver to reject incoming requests upon audit failure
...
Kubernetes-commit: 7a10f4eda725f55bec9893eb1c03f2402dbcd32f
2018-07-03 14:40:55 +02:00
ae00afc213
patch webhook authenticator to support token review with arbitrary audiences
...
Kubernetes-commit: effad15ecc373beb46afd2915827247da51f399d
2018-10-29 20:45:10 -07:00
a7180e74a2
Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec"
...
This reverts commit 54ee58b2d613c636f972312ca80357563292b57d, reversing
changes made to 9e2820e4c9541a7718e9d5b7a0ee62429552023a.
Kubernetes-commit: 8799eb4e2e12e5d144871a35c6288b8433a74c9b
2018-11-16 16:36:24 -05:00
fb4c655720
autogen files
...
Kubernetes-commit: 628d1fef37d565444a4fd7c97d8677621159dc57
2018-09-11 12:33:10 +02:00
e2bc8e4617
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
...
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
Kubernetes-commit: c21cb548e6c7d4ab019fce8a35c9b99c035c2071
2018-05-02 18:21:38 +02:00
f78d7e624c
fix a description error in DynamicAuditing feature
...
Kubernetes-commit: 84aa00c03df00eade6615ca009fa9b2943a98b8c
2018-11-17 01:49:02 +08:00
2a34c94d31
Add tests to ensure storage feature gate changes don't escape packages
...
Kubernetes-commit: 248d66132702c152de0bd90f90f9eb0bd4b34e72
2018-11-15 22:08:01 -05:00
67a9161222
apiserver: propagate panics from REST handlers correctly
...
Kubernetes-commit: 0952c9ee9692dea46b7e1456f984bafa5cdb56ed
2018-11-15 10:07:49 -05:00
3c9d1f5b21
Apiextensions-apiserver aggregates CRD schemas
...
efficiently without checking conflicts, and wire up CRD discovery
controller to serve OpenAPI spec.
Kubernetes-commit: 3222a7033cf9128b76c0677887f4e383821d0475
2018-11-15 11:02:11 -08:00
bb8c155568
apiserver: preserve stack trace in handler panic beyond timeout handler
...
Kubernetes-commit: 96fd0482f41ff34ef7d9b7de07ded38152a35141
2018-11-15 09:56:49 +01:00
0837aa9e3a
apiserver: in timeout_test separate out handler
...
Kubernetes-commit: e43e5e2e4547c7cfb50190d67556352ef0aee9e8
2018-11-15 09:26:02 +01:00
7cc3f112fb
Build OpenAPI Definitions per group instead of per resource
...
Kubernetes-commit: 758e8623e9b08065f053bedf4474626696b6346c
2018-11-14 12:50:02 -08:00
9fd62b6f47
adds dynamic audit configuration
...
Kubernetes-commit: eb89d3dddd3792b0a6cd724e64bbbc11d6c15380
2018-10-18 21:34:17 -05:00
f61020971c
add ability to exclude health checks from failing healthz by passing in a query param
...
Kubernetes-commit: f1f1bc83fd07450a191ecf94b945f1b772d1dc7c
2018-11-12 16:17:36 -08:00
d0a6ca6003
Use watch cache when rv=0 even when limit is set
...
Kubernetes-commit: 4242d1b760314adc69498b1f523a4759c446d7c0
2018-11-07 10:38:31 +01:00
0639bdeeb1
kube-scheduler: output flags in logical sections
...
Kubernetes-commit: a77652e9ab25382706e98e24f6026e28a9fbe621
2018-11-08 12:49:19 +08:00
2710b17b80
Move from glog to klog
...
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
* github.com/kubernetes/repo-infra
* k8s.io/gengo/
* k8s.io/kube-openapi/
* github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods
Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
Kubernetes-commit: 954996e231074dc7429f7be1256a579bedd8344c
2018-11-09 13:49:10 -05:00
26065df432
CRD Conversion
...
Kubernetes-commit: e2ca575d0f40d94578c7c0babce543ab5199d2d0
2018-11-09 14:55:06 -08:00
f3b69c3f89
adds dynamic audit plugins
...
Kubernetes-commit: 8eb2150689159bd011aec189cf77e5b15fbcb22b
2018-10-18 21:34:02 -05:00
85a1725c91
fix healthz checkerNames test so that it tests against the expected output
...
Kubernetes-commit: 0623f630ab37ad75961bf836195e190e6bcf560e
2018-11-07 09:26:11 -08:00
631dda550e
kube-scheduler: enable secure ports 10259
...
Kubernetes-commit: cb95edafe8bf4f294beb53d0a7bc04d62584577c
2018-09-05 16:42:16 +08:00
032ec9d79b
Switch to sigs.k8s.io/yaml from ghodss/yaml
...
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
Kubernetes-commit: 43f523d405b012fa8d90dd95b667f520e036f6bc
2018-11-02 16:41:57 -04:00
257a06e88a
add With method for allowed URL options on delegated authorization
...
Kubernetes-commit: 77b56ec9e36dd721c341ce838d608e8af10ce51f
2018-11-06 10:44:29 -05:00
136e478e9f
encryption-at-rest approvers/reviewers
...
Kubernetes-commit: 666c93a8343029a499ea64de8a6d09596097ccb3
2018-11-02 17:38:17 -04:00
b5314974ae
certificates subproject approvers/reviewers
...
Kubernetes-commit: 4ebe084376610b88b0ac446b59ef537adcee51e3
2018-11-02 14:11:01 -04:00
c710b80254
authorizers subproject approvers/reviewers
...
Kubernetes-commit: 9ae79f965395047ed46de110b2b45f0a91083f43
2018-11-02 13:53:57 -04:00
6320ce44cc
authenticators subproject approvers/reviewers
...
Kubernetes-commit: 4fa2a0cc8a86a5d322e52c43eb7d5ffe36b7887f
2018-11-02 13:36:47 -04:00
e206313b1e
audit subproject owners/reviewers
...
Kubernetes-commit: 4fe30e92fa655b08f819bc449ca6002a7ccd3eea
2018-11-02 12:46:56 -04:00
83c8e657ed
allow delegated authorization to have privileged groups
...
Kubernetes-commit: 0b70b7a7c975589f7019e5017c334cf0ee6b819f
2018-11-05 16:23:20 -05:00
ee71388a42
updates audit endpoints test
...
Kubernetes-commit: 5a84453e4eaab610e2af5346b948091a409327e2
2018-11-01 15:56:50 -06:00
0bf5dcd764
remove webhook cache implementation and replace with the token cache
...
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:
* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
Kubernetes-commit: 0ec4d6d396f237ccb3ae0e96922a90600befb83d
2018-10-30 12:41:46 -07:00
f8fa426bd3
Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13
...
Kubernetes-commit: 9671a035f7e7308ac804b4637af19bac2ecce0f4
2018-10-31 17:22:37 +08:00
8c2cdbce6d
refactors kubeapiserver webhook utility to be generic
...
Kubernetes-commit: 1081fffdd5f6f523a5de0fd30e85b7208220dcb9
2018-11-01 15:22:58 -06:00
89bdd8bce5
create audience unaware authenticator wrappers
...
Kubernetes-commit: c704d70d49bb9799674d84aecb2a49afb6512e11
2018-10-16 20:57:37 -07:00
1692373df9
move audience context functions to authenticator package
...
Kubernetes-commit: 817cf70191b73d1ee9f4e7af83089e5854e5131d
2018-10-31 14:50:11 -07:00
154485c3be
Refactor webhookclientConfig validation of admission and audit registration
...
Kubernetes-commit: 1587d189cbf27b3c2470cf1fe56e50afbde412b6
2018-10-30 11:57:29 -07:00
670c0a7eb7
Update API-related owners files
...
Kubernetes-commit: 8c20bdaf4661f8764c7a7f2e42674aa6a9bf5d70
2018-10-30 17:05:08 -04:00
3e6dd50d69
fix(bug): make body a optional parameter in [DELETE] /apis/batch/v1/namespaces/{namespace}/jobs/{name}
...
Kubernetes-commit: 31372f16129b3f6fa50e85e175643b3a43ba3da2
2018-10-27 00:40:10 +05:30
22df332aff
Allow components to generate certificates in-memory
...
Kubernetes-commit: b7160d4ee2073f06293d7c3b20acdf4620fadf61
2018-10-16 17:22:13 -04:00
d8ee4bc0cb
Revert "limit forbidden error to details of what was forbidden"
...
This reverts commit ecbd0137957b4afd4cdd94c0209998228fd70e99.
Kubernetes-commit: 294e02ed4b341fe9497cdfadb93cf19f1e64243f
2018-10-26 15:58:09 -07:00
7c1e7ec029
echo audiences in anonymous and insecure authenticators
...
part of https://github.com/kubernetes/kubernetes/issues/69893
Kubernetes-commit: f94bc6193e1e299b1cb258b59504fab81cf8da1c
2018-10-26 15:29:55 -07:00
4749d14e11
Added tracing for long running requests.
...
Added tracing for use cases where etcd is not the cause of long running
requests.
Fixed spelling.
Factored in Wojtek-t feedback.
Kubernetes-commit: 99ebe8747176a10c718d5e3276c64d8c507bfb3b
2018-10-12 17:36:36 -07:00
4e305103fd
Dynamic client watchers should be able to handle ERROR gracefully
...
Watch can return type "ERROR" and a metav1.Status object. We need to
handle that during wait, and make it easy to handle the status object.
Kubernetes-commit: 5a8afa073f6b8cbb8b09f997f6db747c39dffb6e
2018-10-03 14:16:44 -04:00
a14ca1235c
generated proto: remove trailing whitespace
...
Kubernetes-commit: e60b0a129a16fbc785c73dd4839acaabf856851c
2018-10-25 16:37:33 +05:30
dba666528b
Allow specifying the hub group-version for a handler
...
Kubernetes-commit: 0e9b06df0f21b421ff69fd455d4542883d61e8c3
2018-10-22 10:14:52 -04:00
b758170bd7
Inline patch#toUnversioned
...
Kubernetes-commit: 870d121d5e8033a72c62ef3a64939f0eacab6798
2018-10-22 10:01:27 -04:00
47845b88c3
Update usages of http.ResponseWriter.WriteHeader to use http.Error
...
Signed-off-by: Ibrahim AshShohail <me@ibrasho.com>
Kubernetes-commit: 2fb3ba71f196031e9b36095d64c921cacc54f44e
2018-10-08 22:20:52 +03:00
92cd1a54fc
Remove excess 'in'
...
Fix some typo
Fix some typo
Kubernetes-commit: ef496320cf6ba73f118fc285691043a87ae05727
2018-10-11 00:52:39 -04:00
908a04653f
make token cache include audience in hash key
...
Kubernetes-commit: 809f278b032103cd24fcbb5ea2196c6c7caa6f63
2018-10-16 10:02:01 -07:00
2ced48ac6e
rebase authenticators onto new interface.
...
Kubernetes-commit: e5227216c0796d725c695e36cfc1d54e7631d3a6
2018-10-15 15:17:36 -07:00
b411a20b15
tokenreview: authenticator interface changes
...
Kubernetes-commit: 11be17175798773a1011afad8d0a9119254e728c
2018-10-09 10:22:06 -07:00
53adc37659
updates shared apiserver webhook client
...
Kubernetes-commit: 5874a1f8faab92aacc5503aa6dbf1c6a724f832f
2018-10-21 10:03:28 -05:00
21f232e065
Remove duplicate words
...
Kubernetes-commit: e39448237370df37d2f77bf98cf951a19b1e5b6c
2018-10-15 15:55:49 -04:00
7b71273ec8
Reduce cardinality of admission webhook metrics
...
Kubernetes-commit: 96034014f5fe08d7bb8b92b8f1679d9761c3f83d
2018-10-16 13:35:42 -07:00
e560728e03
adds dynamic audit api
...
Kubernetes-commit: 381d0a5d1416f58c94ea02d23d59cbcb6ce526f0
2018-08-17 10:36:51 -06:00
adddd63698
add some helpers to Audiences to find intersecting audiences
...
Kubernetes-commit: 01ce5bb8a470280d1a8ce68d5b2b4f1b2ac283cf
2018-10-16 20:01:58 -07:00
c7c9a358c2
etcd2 code cleanup, remove deserialization cache
...
Kubernetes-commit: c8db31b84adc40aa875917fbca27b2a787902088
2018-10-15 22:17:44 -04:00
Marek Counts