Abu Kashem
f013b63777
apf: use EventClock rather than a PassiveClock for queueset
...
Kubernetes-commit: c2a3b793d3ec62e781dd20704370d09f7e1be706
2021-07-21 17:06:48 -04:00
Abu Kashem
bd2ef9810a
apf: estimate list width
...
Kubernetes-commit: 296c18ec323328bf1c6a621a9ca3a094d78bb9d0
2021-06-22 19:38:00 -04:00
Jordan Liggitt
29227fd4ee
Avoid spurious calls to update/delete validation
...
Kubernetes-commit: 561ce035b5b7d577ddb5bb30657bc1f8b399e109
2021-08-05 17:21:40 -04:00
wojtekt
c6719af51e
Fix metrics reporting for the deprecated watch path
...
Kubernetes-commit: d9d41b70f64da65525d769ab279e3930d59435fe
2021-08-05 16:17:13 +02:00
Quan Tian
0737519ac6
Improve dynamic cert file change detection
...
DynamicFileCAContent and DynamicCertKeyPairContent used periodical job
to check whether the file content has changed, leading to 1 minute of
delay in worst case. This patch improves it by leveraging fsnotify
watcher. The content change will be reflected immediately.
Kubernetes-commit: 3cfe3d048ff37c1c6994d131ed8557f3c8bddc8a
2021-08-03 21:28:01 +08:00
Manu Gupta
b09300b3f0
fix unsafe json construction for digestConfigObjects.
...
fix unsafe json creation by creating intermediate objects
while creating patch bytes.
Kubernetes-commit: dfde50b18564cc9a8e99fdcba2f136d770ec6943
2021-08-01 18:43:40 -07:00
j2gg0s
1f934a9364
apiserver: avoid repeated loading context for requestInfo in Namer.Name
...
Kubernetes-commit: 9cee586ee98bf7b5377ea04a8980f7f3fdbe5ec2
2021-07-28 19:04:48 +08:00
Jordan Liggitt
1e6293c86f
Set idle and readheader timeouts
...
Kubernetes-commit: db48793269ef9eca63fa12abb1a25d017c0e09bb
2021-07-27 11:58:45 -04:00
Mike Spreitzer
0c550377cf
Introduce event clocks based on k8s.io/utils/clock
...
So we can move off of the apimachinery clock package.
Switch queueset to new clocks.
Removed event clocks based on apimachinery clocks,
because this PR introduces ones based on k8s.io/utils/clock .
Removed interface that is implemented by only one interesting type.
Simplify RealEventClock::EventAfterTime.
Kubernetes-commit: dcb298c9552de44e27ed52f5e2b58a0dd7cd8d54
2021-07-21 16:56:11 -04:00
Abu Kashem
feb4eefe1c
apiserver: add callback to get notified of object count
...
Kubernetes-commit: 2c60feffbee690af4632d068158e640abe10f678
2021-07-14 16:44:34 -04:00
Alexi Kessler
80b28d7c2c
Update doc description for --audit-log-maxbackup
...
Per https://pkg.go.dev/gopkg.in/natefinch/lumberjack.v1 a value of 0 will retain all logs. Not understanding this led to an outage for my team.
Kubernetes-commit: 94977dce8d13ec1e8b4bd8b449f555af685c3ab6
2021-07-22 09:42:30 -04:00
wojtekt
719fda2a8b
Simplify APF promise to what is really used in the code
...
Kubernetes-commit: 9f735e71bbb7d0dde67a718891641d8afd20a8bc
2021-07-23 13:30:34 +02:00
wojtekt
d6e0cf5d71
Remove unused promise code from APF
...
Kubernetes-commit: a1cf44eab44f21c3929ff2d79501c56e6fbcddc3
2021-07-21 12:14:30 +02:00
Antonio Ojea
42a99cd0a2
decouple timeBudget from real clock
...
instead of using a goroutine refreshing the budget, obtain
the value from the last time the budget was accessed.
Kubernetes-commit: dd2c38306000eeb1720afc8346165a6caab09259
2021-07-20 13:54:59 +02:00
Yan Huang
8febdc018a
Deprecate apiserver_longrunning_guage and apiserver_registered_watchers
...
Deprecate apiserver_longrunning_guage and apiserver_registered_watchers
Update
Fix name
update
Add back empty space
Update the deprecated version to 1.23
Kubernetes-commit: e2b6816953c9c52b98c129a3e9c2dac4ee925ef0
2021-07-19 23:18:35 -07:00
wojtekt
9209ed5928
Get rid of unused flowSchemaRVs in P&F
...
Kubernetes-commit: c79a0a08828ef86e07941e96dafefb7d8bc51990
2021-07-13 15:16:17 +02:00
wojtekt
b4c306e1e8
Rename width to workEstimate in P&F code
...
Kubernetes-commit: 73211256e8f15cf84ee69d6fe8258c3a912e0f94
2021-07-13 15:10:58 +02:00
Kevin Delgado
4a4149c8b0
remove apiserver impor from client-go
...
Kubernetes-commit: af11c4ac9be74115dfd35ce6f18cfa0440fc3458
2021-07-27 20:46:40 +00:00
Kevin Delgado
a8a3bb4200
rename cache, add to integration test
...
Kubernetes-commit: 604db6eb2ada446e78152685943253455b5ec888
2021-07-19 20:04:27 +00:00
Kevin Delgado
613f696b0b
Manually set GVK in extract, add commentary to extractor
...
Kubernetes-commit: dda31bbf2e7a94624e3679e3db56c95e66509ce0
2021-07-08 01:56:58 +00:00
Kevin Delgado
09e56ead9d
Initial UnstructuredExtract without caching
...
Kubernetes-commit: 6e481c5db19cda1ef1b7506c22c0046e440c7fe2
2021-07-03 00:05:11 +00:00
Sergiusz Urbaniak
2402d951d2
Revert "Add a namespace label to admission metrics and expand histogram range to 0-10s"
...
Kubernetes-commit: 1a87ae19a62d0c61afa6b381a54c6798effa49eb
2021-07-30 14:34:45 +02:00
Andrew Rynhard
bfbd0aaa7d
Do not try to create an audit log file named "-"
...
That PR fixes --audit-log-path=- support.
It now logs to stdout as in 1.21.
Kubernetes-commit: 7728428f017350d5fb9a91e6e5dc3ccf86348478
2021-07-23 14:26:28 +00:00
wojtekt
280558d490
Add additional APF test for handling other panic types
...
Kubernetes-commit: faed88bb7200cc4693b7a3f9cecff1a99ea1fc95
2021-07-14 16:36:38 +02:00
wojtekt
242c8c8a1c
Optimize APF support for watch initialization to fix the pod startup time regression.
...
Kubernetes-commit: ef435b85b47618d0d463ac93e9758d75c2998681
2021-07-13 10:22:30 +02:00
David Ashpole
0562c83329
add apiserver tracing integration test, and fix endpoint validation
...
Kubernetes-commit: e5a1f86e0ac21de6bacbb9fed242853ff20c3aaf
2021-07-15 16:21:48 -07:00
David Ashpole
785c5626f9
add tracing to webhook requests
...
Kubernetes-commit: 9dd59017c4c218135b12949a2bd3af07e892199a
2021-07-08 20:13:33 -07:00
Paco Xu
d0159b4bbf
Revert "use PermitWithoutStream=true for etcd: send pings even without active stream"
...
Kubernetes-commit: 1280a365e4a2407efb9aba9e701eeb1a5a69a2f0
2021-07-12 11:47:55 +08:00
Abu Kashem
b206f9ea02
apf: fix virtual clock
...
Kubernetes-commit: a570008cbd6c2142a2f270570fe49bf982825c19
2021-07-06 19:29:16 -04:00
David Eads
526d12c09b
prevent mutation of deletion options during delete collection
...
Kubernetes-commit: 649b87aaf85dbb6e8190bf7d16c5dc903b5ecedc
2021-03-10 15:41:03 -05:00
Ryan Phillips
7afffd8ef3
Revert "apiserver: add callback to get notified of object count"
...
Kubernetes-commit: d95b14e1abfb5ec87248e5dd826b89d0c738af42
2021-07-08 13:56:39 -05:00
David Ashpole
4d188ce1c3
Add distributed tracing to the etcd client
...
Kubernetes-commit: 71f810bb71ed7b87e02c91ebb879363f32dcfaac
2021-06-25 11:54:53 -07:00
Harry Zhang
0321f0c67e
fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total
...
Kubernetes-commit: a3f57886a267c28d5a0193ca7193d4de9e9212d9
2021-07-07 19:07:49 -07:00
wojtekt
9606daa5ef
Refinements to pick queue logic in P&F
...
Kubernetes-commit: 7f1c4977d7ad9fdfd44549ee8ffe289127be4d81
2021-07-07 08:58:49 +02:00
Davanum Srinivas
fe1610f3fe
switch from golang-lru to the one in k8s.io/utils
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 79d0c6cdc10293c9bfe644ce31dc186a936579b0
2021-07-07 13:45:07 -04:00
pacoxu
6640c869f9
use PermitWithoutStream=true for etcd: send pings even without active streams
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 849dbe034b3e4398922c383e09900b464a60db69
2021-04-29 16:27:08 +08:00
wojtekt
cd8b524e3f
Avoid code duplication in watchcache
...
Kubernetes-commit: 2df05df6982df93e4ced37d1236f0366069d5838
2021-07-07 09:40:58 +02:00
wojtekt
fbc127e994
Add watch tracker to APF for request cost estimation
...
Kubernetes-commit: cea1dcfeed2fc4e8ab89cd43e5a0e402251c8df5
2021-06-15 10:49:42 +02:00
astraw99
532c5c3d69
fix delete nil pointer panic
...
Kubernetes-commit: af19d7f415d70a1de3d67a00921865ba2868b425
2021-06-26 18:06:20 +08:00
Margo Crawford
6c62752c02
This introduces an Impersonate-Uid header to server side code.
...
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.
This PR contains:
* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
and ensures that the API server populates the correct impersonated spec.uid upon creation.
Kubernetes-commit: 74f5ed6b17287100b339a2b3a43fd4c6fb200978
2021-03-04 15:19:52 -08:00
wojtekt
a35bb85f09
Update the logic to pick the best queue in P&F
...
Kubernetes-commit: 0ecc7ba311ab33b16c5d907ebb1120e3e51a947d
2021-06-17 09:22:00 +02:00
Abu Kashem
cf5c77fde9
apf: add additional latency into width
...
Kubernetes-commit: 24e19229101d242d924ce98a562be3864dde9eae
2021-06-27 12:45:24 -04:00
David Ashpole
fe620be9c7
change tracing service from kube-apiserver to apiserver
...
Kubernetes-commit: 8972efc65fe7f4d2ed840ba1a2bd8ff31e829a7a
2021-07-02 07:04:26 -07:00
Abu Kashem
d929410e13
apiserver: add callback to get notified of object count
...
Kubernetes-commit: 1002b0d163dd948334f10b0e25d0e91d253791e8
2021-06-18 10:44:07 -04:00
Lukasz Szaszkiewicz
aefd8ed86f
adds HasBeenReady signal that fires when the readyz endpoint succeeds
...
Kubernetes-commit: 58b91ffca9efe3afb20d80914cdc33c6b0acdef2
2021-07-02 15:18:19 +02:00
Lukasz Szaszkiewicz
279d11fb1e
readyz signals when the handler succeeds for the first time.
...
Co-authored-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
Kubernetes-commit: ca108d109d55e927c292e3e558fc4f761a3a4e7c
2021-06-30 11:04:44 +02:00
Abu Kashem
e9708ba84d
apf: calculation of dR/dt should use seats in use
...
Kubernetes-commit: 6203d4fc6af36b1fd60177e8a88b8d4d45acb029
2021-06-21 05:38:07 -04:00
Lukasz Szaszkiewicz
d8c0235e05
remove logging from the Signal method
...
Kubernetes-commit: 6c88a62cb4c849e3844dcc3870073a1b5e05d301
2021-07-02 12:50:20 +02:00
Lukasz Szaszkiewicz
3f407f0668
rename terminationSignals to lifecycleSignals
...
Kubernetes-commit: dae08bc3a735e50845af7cf639bdbb8971a2115a
2021-07-02 12:28:07 +02:00
David Ashpole
71612b014d
move tracing instantiation further up, and check for nil
...
Kubernetes-commit: b0ffaa93f5c607325203f978c1ae685d6b64d053
2021-07-01 10:42:11 -07:00
David Ashpole
5053bddd06
add tracing to the apiserver's client-go requests
...
Kubernetes-commit: 79d400c4416f903af604fb2cf07d2c34bb4b98f7
2021-06-26 09:16:32 -07:00
Lukasz Szaszkiewicz
9ff2637133
adds metrics for authorization webhook
...
Kubernetes-commit: 4a2aef00d6dd2543b011aa7e5af28df598a0cd72
2021-03-17 16:30:40 +01:00
Lukasz Szaszkiewicz
69433684ce
adds metrics for authentication webhook
...
Kubernetes-commit: 322c18c147da08dd2eea25ba3c2b9630a228cf5f
2021-02-23 08:39:25 +01:00
Mike Spreitzer
4dcb848926
Track generalization for width
...
Kubernetes-commit: 3930629e130f1c98821f8033941870ab582db284
2021-06-18 01:37:22 -04:00
Mike Spreitzer
d28ccb4224
Add APF metrics about R(t)
...
Kubernetes-commit: 676f0450ed37eeec92b67246719cc46e7567e512
2021-06-14 16:48:27 -04:00
Shiming Zhang
b76bf120f0
Allow delete with grace period 1s even if metadata period is negative
...
Kubernetes-commit: a8d4cfac933485b9b4e5e802e267723ce9d2b90f
2021-06-21 15:12:17 +08:00
JD Nurme
288c8d4acf
Updated to use konnectivity client v0.0.21, and implemented placeholder context
...
Kubernetes-commit: 21fd224ebdb17fbaafbb73a36a18aafcab6e4efa
2021-06-23 19:29:14 +00:00
Abu Kashem
4f3f9c7b9e
add unit test to verify graceful termination behavior
...
Kubernetes-commit: 913c449a42f13da758fca2740474bb33d3b65da8
2021-06-24 16:15:12 -04:00
Abu Kashem
c1c949723d
apiserver: NonBlockingRun should return a listener stopped channel
...
NonBlockingRun should also return a channel that gets closed when the
underlying http Server has stopped listening (during the graceful
shutdown period)
Kubernetes-commit: a84c1b71005930e8253c1348515020132c5c175b
2021-06-24 16:04:54 -04:00
Abu Kashem
5c1642946b
apiserver: refactor graceful termination logic
...
- refactor graceful termination logic so we can write unit tests
to assert on the expected behavior.
Kubernetes-commit: d85619030e3a5fec5960ad00136e8d9bd030b5f8
2021-06-24 15:51:38 -04:00
David Ashpole
5927da0040
Add distributed tracing to the apiserver using OpenTelemetry
...
Kubernetes-commit: 79550ed40c67a70534c1cb697e1fb7e7dbf96335
2021-06-25 05:20:16 -07:00
njuptlzf
4e8f1a1c5a
Fix staticcheck failures
...
Kubernetes-commit: 93365919b501f4b7dcd0cf3ce84c34a584efc17f
2021-04-02 12:23:30 +08:00
Jordan Liggitt
4bb06f3c4d
Simplify running embedded etcd server in tests
...
Kubernetes-commit: 01760927b82cf28bc6ba5b6364fda3c9f8c5c0b1
2021-06-15 12:07:46 -04:00
Mike Spreitzer
feae5f3e79
Add config checking for inflight limits
...
When API Priority and Fairness is enabled, the inflight limits must
add up to something positive.
This rejects the configuration that prompted
https://github.com/kubernetes/kubernetes/issues/102885
Update help for max inflight flags
Kubernetes-commit: 0762f492c5b850471723a305cfa7390e44851145
2021-06-21 16:53:07 -04:00
youhonglian
56e6dac0bb
update github.com/pkg/errors to go native errors pkg in staging
...
Kubernetes-commit: 4b1402187474a1ebd0f71c824f45448fea160fc6
2021-06-22 11:54:56 +08:00
lala123912
5c11e2a763
staging/src/k8s.io/apiserver/pkg/registry:migrate logs to structured logs
...
Kubernetes-commit: 8e7b5ff480b04342f78b6d321814f05e31abc4bb
2021-01-22 10:25:47 +08:00
Antonio Ojea
5a7fb85083
deflake TestClientReceivedGOAWAY test
...
The test was flaking because the test was creating more connections
than expected.
Disabling connection pooling removes the flakes, and no more connections
are created that the necessary.
Kubernetes-commit: 4d11c3cd8cb18c1e246a7a6b8e9a791177c49d31
2021-06-18 00:38:02 +02:00
tiloso
c94ba7a71a
Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver}
...
Kubernetes-commit: c5d70e9db1e8f36e5eb6dae6ca72ad62c1c837d9
2021-06-05 22:15:15 +02:00
Daniel Smith
a08d7d5ddf
Make logged verbs match metric-reported verbs
...
Kubernetes-commit: 54fde5d119f8bb55aec18cb5aef01b6ea58dfea0
2021-06-16 17:08:54 -07:00
Abu Kashem
e1aec4ecae
apf: take seats into account when dispatching request
...
Kubernetes-commit: ff716cef508f948b50e1026e980e6df5ee475538
2021-06-14 12:19:06 -04:00
Davanum Srinivas
c2350dc583
Switch to github.com/coreos/go-systemd/v22 and drop older package
...
- We use the new v22 module released on May 10
- We drop the unmaintained `github.com/coreos/pkg`
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 7fcdbbef06d0bc8c4416db1d2cbba9f30d30e8c4
2021-06-16 11:14:02 -04:00
Jordan Liggitt
aafb67c9b2
Quiet grpc info logs in apiserver
...
Kubernetes-commit: 503f5e1b52812f1bc5bb66d9b02a8f32cc5dccd9
2021-06-15 18:50:54 -04:00
Abu Kashem
abdd901971
apf: always include seats in virtual time
...
Kubernetes-commit: 2f7456076e0cb29a95d86cd0f54c34a04b4722ab
2021-06-14 09:52:00 -04:00
Jordan Liggitt
2f8b9e4dbc
Fix etcd egress dialer addr parsing
...
Kubernetes-commit: a26c392de176494f2c425f712bc49fc399e9ce6d
2021-06-14 18:02:59 -04:00
Jordan Liggitt
aaf5f32453
Quiet embedded etcd logs
...
Kubernetes-commit: f283deee6b65be2b435ec192b6444f969f9d2a42
2021-06-04 00:43:11 -04:00
Jordan Liggitt
862269412a
Eliminate parallel and unnecessary embedded etcd instances
...
Kubernetes-commit: 068e4c55a8aef3c9f3b7eb4565fc3babfab186b5
2021-06-04 00:41:09 -04:00
Jordan Liggitt
8492f8d104
Drop use of deprecated clientv3.SetLogger
...
Kubernetes-commit: 52b629efbc8be30901192880b8005e7362f9a69f
2021-05-19 09:10:05 -04:00
Jordan Liggitt
6365bf9124
Switch to go.etcd.io/etcd/client/v3
...
Kubernetes-commit: 2979c3325e3ac4023dd19c435f3a995074328751
2021-03-23 11:01:52 -04:00
Jordan Liggitt
5d270fd014
Drop etcd v2 support from test util
...
Kubernetes-commit: 77ab4bdbbcc84ebb10645d810a087d272f16f803
2021-03-23 10:54:43 -04:00
Dinghua Li
b313c48103
Retain the test coverage of TestObserveWebhookRejection.
...
Kubernetes-commit: ae90e6b9a1f1e9e7704feeefa8723c15f2afa61e
2021-05-18 21:13:24 +00:00
Dinghua Li
7edb7c1c1e
Add attr to the argument list of ObserveWebhookRejection, and remove
...
operation, as it is included in attr.
Kubernetes-commit: fb23e449ab680bc53fc1aae826e377c1153d51e4
2021-05-18 17:42:02 +00:00
Dinghua Li
a2b831d599
Extend the max of admission latency buckets to 10s.
...
Kubernetes-commit: 2dbdfd0902e2625d40f338fdbb814ada63720d32
2021-04-17 00:59:25 +00:00
Dinghua Li
bbc089727a
Add a namespace label to admission metrics.
...
Kubernetes-commit: e7db88b0b65cf685ccae804ff2d073169ed9637e
2021-04-17 00:58:11 +00:00
Shihang Zhang
4a6863aa9a
the last upperbound of kms latency metric is too small
...
Kubernetes-commit: 6d7c83f2cd19455107bc02bc98fed2296bb46dca
2021-02-23 14:19:25 -08:00
Abu Kashem
345d1c6ff9
apf: add a gauge for the number of seats currently in use
...
Kubernetes-commit: c710f99ef730a791a6911e63cc3b9d26cced6bd3
2021-06-10 17:34:50 -04:00
Abu Kashem
3c7f54740f
apf: add plumbing to estimate width" of a request
...
- add plumbing that allows us to estimated "width" of a request
- the default implementation returns 1 as the "width" of all
incoming requests, this is in keeping with the current behavior.
Kubernetes-commit: 9b72eb1929a64b9d5a5234090a631ba312fb4d41
2021-05-11 07:03:05 -04:00
Abu Kashem
f410577081
apiserver: close handler chain right after shutdown delay duration
...
Kubernetes-commit: de7e56bf37440ca6a4c634ede8abaf1315fe9de3
2021-06-07 18:13:24 -04:00
AbdulBasitAlvi
da18259e5b
hotfix(staging_apiserver_pkg_httplog): restore depth to log calls
...
/kind bug
This PR adds depth to logging which was removed when migrating to structured logging in the file
Ref #102353
```release-note
NONE
```
```docs
```
Kubernetes-commit: 5d4c1162b944ff34374313103d0555ac0b334a1d
2021-05-30 01:42:54 +02:00
Abu Kashem
9421ee44c4
apf: fix flake in test
...
Kubernetes-commit: 8847a25026711f51ae694fe8288e285a48e70675
2021-06-01 20:07:51 -04:00
njuptlzf
dd5fc094cd
Use objGV instead of gvk.GroupVersion
...
Kubernetes-commit: 15c4d579f08335f33555d3cab5eff41c74e671b9
2021-06-02 14:27:30 +08:00
Kasakaze
f0159a94e3
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 58d7bf67d4694d52610097c72fe79012e19c5da0
2021-06-02 10:53:05 +08:00
Kasakaze
da0758027d
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: b9b01a0f901513370cf3e981544a79f57e321d67
2021-06-02 10:52:44 +08:00
Kasakaze
e7a594074a
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 19c72a6cd05da805b1bec9fe567614ef82bf7beb
2021-06-02 10:52:35 +08:00
Kasakaze
1b73b18c80
Simplify objGV construction
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: 0ae6a7bac6ba268c59e82222d69ad91e381e79bc
2021-06-02 10:52:22 +08:00
njuptlzf
790f5a21a7
Fix auditing failed of request: encoding failed
...
Kubernetes-commit: 329f7d55d1344f728e28ce49728234f9f8f4c5d3
2021-05-17 02:31:08 +08:00
Jordan Liggitt
84ac736f8e
Fix audit unit test file location
...
Kubernetes-commit: 91e5d98b572a74bf827a575559238cc0a4be6c57
2021-06-04 17:23:34 -04:00
Jordan Liggitt
584c18160b
Fix closing of decorated watcher channel on timeout
...
Kubernetes-commit: bd2d63dd57e6011bfa3218e59e27fddaa295426b
2021-06-02 14:05:52 -04:00
wojtekt
9b71cff19c
Fix watch rejections in P&F filter
...
Kubernetes-commit: 8054b0f808d116658ac086e4b71fb34d1502cd57
2021-06-02 08:22:29 +02:00
wojtekt
d000916ae7
Address watch panics in P&F handler and extend testing.
...
Kubernetes-commit: d9d51541a87ec627160d7d6a1fcd4b357a0fa493
2021-05-27 14:49:54 +02:00
wojtekt
5290a24345
Implement support for watch initialization in P&F
...
Kubernetes-commit: 0cc217647ca8be0820973b970124a072c27b6575
2021-05-07 12:49:06 +02:00
xiaofei.sun
4f1bee1bff
fix watch_cache_capacity metrics
...
Kubernetes-commit: e3841e91c81e842f2a591b80b67d46c3f7f7adde
2021-06-01 21:42:45 +08:00
pacoxu
a18ab75c53
depracate ValidateProxyRedirects as it is with StreamingProxyRedirects
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 27044f4855209c515c57a77378fce970af097b14
2021-05-26 20:18:49 +08:00
pacoxu
d636703205
Default StreamingProxyRedirects to disabled
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 2eb90f9b80982d31efa971450ea7ac60359f9442
2021-04-30 14:07:43 +08:00
Julian V. Modesto
f753bce9f8
Make a public ValidateAnnotationsSize
...
Kubernetes-commit: 2e771b8e745c4a3be0d5bae3a6dc94087284c73b
2021-05-25 16:01:38 -04:00
Julian V. Modesto
a01d02b7fd
Make validation totalAnnotationSizeLimitB public.
...
Replace the forked totalAnnotationSizeLimitB with
apimachineryvalidation.TotalAnnotationSizeLimitB.
Kubernetes-commit: 55ff96301797a503b6ee1d09f0eb2ffc827f01b1
2021-05-18 17:28:11 -04:00
Xiaojun Hu
f9b4d95442
add fail-open audit logs to validating and mutating admission webhook
...
Kubernetes-commit: 9fe7c8955bcb1edbb5aa4fe6bfb8bb6d93d381de
2021-05-18 13:31:03 -04:00
Abu Kashem
ec22c8bdd8
apf: add "width" for request
...
all requests have a width of 1 to maintain current behavior.
Kubernetes-commit: b50507d98bd12503592ea62d2be2aadef49bdf70
2021-05-11 07:03:05 -04:00
Jordan Liggitt
689a6cc12f
Graduate WarningHeader feature to GA
...
Kubernetes-commit: e3ea169d7d8b2c1417ef5a71ee1015f186ca0e3c
2021-04-01 02:51:48 -04:00
Jordan Liggitt
754e90a0a3
Promote apiserver_requested_deprecated_apis metric to stable
...
Kubernetes-commit: 7877539e3095669629e81633019836d2cdb7c368
2021-05-11 16:24:58 -04:00
Mengxue Zhang
15750850e0
specify pod name and hostname in indexed job
...
Kubernetes-commit: e64e34e0298d27d4099b632f5b7c1ba38fc66561
2021-04-29 03:33:36 +00:00
Jordan Liggitt
8dd82c2391
Add WarningsOnCreate,WarningsOnUpdate
...
Kubernetes-commit: 8c8a4cf3e4a18e97359ce750530a4fa27bbd3b88
2021-04-30 21:46:54 -04:00
Julian V. Modesto
c10cbf5412
Respect annotation size limit for SSA last-applied.
...
To support CSA and SSA interoperability, SSA updates the CSA
last-applied annotation.
This change ensures we don't set a big last-applied annotation if the
value is over the annotation limits.
Also, make sure that it's possible to opt-out of this behavior by
setting the CSA annotation to "" the empty string.
Kubernetes-commit: 6054320be1e50a450e9d1e19a79caa96f2035d4d
2021-05-18 15:06:48 -04:00
Marcel Zięba
489e43cad9
Add logging of filters to api calls logs
...
Kubernetes-commit: 7e01b7260ac5cc20c1fc236cae220857726dc330
2021-05-17 11:52:33 +00:00
Lukasz Szaszkiewicz
1d2b77256f
adds a unit test for checking if graceful shutdown of HTTP2 server works
...
Kubernetes-commit: 373fc7d711a2fb39b7e94737b2b880feca596171
2020-12-11 13:12:46 +01:00
David Eads
d15d62d4df
enforce strict alpha handling for API serving
...
Kubernetes-commit: 21faec925459bce93954e0f0110ebd3a4f207c24
2021-05-12 09:17:15 -04:00
David Eads
2286099903
update integration tests to reflect the kube version to stop serving removed APIs
...
Kubernetes-commit: d6a4afa5b8f6b7a17868649ea40b370c7f12a37f
2021-05-11 15:17:40 -04:00
sanwishe
1b6c1bf2dd
Structured Logging migration: for package staging/src/k8s.io/apiserver/pkg/server/dynamiccertificates
...
Signed-off-by: sanwishe <jiang.mingzhi35@zte.com.cn>
Kubernetes-commit: 6eb645088c41f5f9309ad27a3fe80ccebd18460d
2021-05-10 20:08:14 +08:00
zhuangqh
640ba0e40e
docs: fix outdated enhancement doc link
...
Signed-off-by: zhuangqh <zhuangqhc@gmail.com>
Kubernetes-commit: adf28648cb32d17cd186a6c7e8b264419e6d0759
2021-02-24 15:22:50 +08:00
pacoxu
e11aa23b6b
wait for poststarthook/max-in-flight-filter to be initialized asynchronously
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 3c4eb55b4acd4bc4740b15a58fc7da0d5b516300
2021-05-07 15:17:03 +08:00
Maciej Borsz
770eb2bc44
Update watcher.go
...
Kubernetes-commit: 532e35ba31e4df0a2df7dd5f2930035ce9379559
2021-05-07 16:07:34 +02:00
卢振兴10069964
549cbbf8de
fix broken link in some files
...
Kubernetes-commit: b29a5fb0746f772b38da570cd8fdc77396ffca31
2021-04-13 08:43:24 +08:00
Abu Kashem
df062f56c2
add auto update for apf bootstrap configuration
...
Take the following approach:
On a fresh install, all bootstrap configuration objects will
have auto update enabled via the following annotation :
`apf.kubernetes.io/autoupdate: 'true'`
The kube-apiserver periodically checks the bootstrap configuration
objects on the cluster and applies update if necessary.
We enforce an 'always auto-update' policy for the mandatory
configuration object(s).
We update the suggested configuration objects when:
- auto update is enabled (`apf.kubernetes.io/autoupdate: 'true'`) or
- auto update annotation key is missing but `generation` is `1`
If the configuration object is missing the annotation key, we add
it appropriately:
it is set to `true` if `generation` is `1`, `false` otherwise.
The above approach ensures that we don't squash changes made by an
operator. Please note, we can't protect the changes made by the
operator in the following scenario:
- the user changes the spec and then deletes and recreates
the same object. (generation resets to 1)
remove using a marker
Kubernetes-commit: 759a64136b0d4619d5535adb79a8367e124b06c6
2021-01-12 16:12:13 -05:00
Chao Xu
8f650d1e76
Move the comment to the right line
...
Kubernetes-commit: 6001c70c7274d88b566ac3ff40e4f8900cc23c54
2021-04-23 00:05:15 +00:00
Chok Yip Lau
f0cd8bd9bf
Fix staticcheck on vendor/k8s.io/apiserver/pkg/server/httplog
...
Kubernetes-commit: eaaa803d48e8d78e5ad6d49324169e9d775ed7bc
2021-01-08 17:57:20 -05:00
Abu Kashem
b84fa01322
add more context to post timeout request activities
...
Kubernetes-commit: 66587afb60b10569aa4ed35d53a4a91fcc40abd2
2021-04-09 12:09:35 -04:00
JUN YANG
2a99e7e764
Fix misspelling of condition.
...
Signed-off-by: JUN YANG <yang.jun22@zte.com.cn>
Kubernetes-commit: 6c566f6dfa5b76d105ce24b3b0cb7f5e3d50d018
2021-03-14 00:17:58 +08:00
mozillazg
eca89e844c
Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/registry/rest/resttest
...
Kubernetes-commit: 92ece853be2969fd8f9716434c8fb062e1ebef9b
2021-04-17 16:07:19 +08:00
caozhiyuan
5a479e600e
fix hardcoding and format error log
...
Kubernetes-commit: c468a02718402bf42ffc0cd8cdbdf805fdf903a2
2021-04-14 20:19:41 +08:00
Chao Xu
218926b065
Switch the order of adding SNICert and creating LoopbackClientConfig
...
Kubernetes-commit: 1df4503b859a2b7b2b7f9c5bcf400f61cc29d349
2021-04-22 23:17:39 +00:00
Monis Khan
5289a15a1a
client-go transport: assert that final CA data is valid
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 440ea3ef49e0ac77353ceeaebc2aad6c995d5b35
2021-05-03 10:11:54 -04:00
Stanislav Laznicka
7eb7056b38
webhooks,aggregation: add metrics to count certs missing SAN
...
Adds counters to generic webhook code and to the kube aggregator
so that it is possible to effectively measure the impact of
Golang 1.15's deprecation of x509 cert CN hostname
verification.
Kubernetes-commit: 9d6a19efff05a40081337a2fcb3dce6331b04022
2020-10-06 13:02:52 +02:00
Abu Kashem
4e12e0cd34
apf: use a list instead of slice for queueset
...
Kubernetes-commit: 69f9bc181f155ded7c5d5cc0ca9f026a6b42f431
2021-03-29 11:31:12 -04:00
Antonio Ojea
04c8c14809
admission metrics reset metrics after tests
...
Kubernetes-commit: b1a81d2fb8b4528172a8de6de01b53526b7b2277
2021-03-13 21:26:22 +01:00
Zhou Peng
c233874954
[k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability
...
Do not wrap code here
Signed-off-by: Zhou Peng <p@ctriple.cn>
Kubernetes-commit: 95f7b4d8544eeba0bc06122b1a35db1ab603f19d
2021-04-27 13:55:31 +08:00
Lukasz Szaszkiewicz
a9e68c9b32
let objects without metadata pass through the managedFields admission controller
...
Not all objects provide metadata. There might be extention servers that allow for creating objects without the metadata field.
This PR changes the managedFileds admission to deal with objects without the metadata field.
Object without that field will be passed directly to the wrapped admission controller for further validation.
Kubernetes-commit: 3dbaf305ae1e52105a338987f3770ff104def68b
2021-04-29 14:08:36 +02:00
Steve Kuznetsov
8c01d7fe18
apiserver: wrap errors in admission with context
...
When the API server encounters an error during admission webhook
handling, lower-level errors are bubbled up without any additional
context added. This leads to fairly opaque and unintelligible errors. It
is not clear to users if the API server itself is having an error (for
instance, fetching the REST client) or if the request to the webhook
failed in some way.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: ae9e71ba68cb1dd00bb5ed2635bac9aab2abbafe
2021-04-27 11:19:01 -07:00
Juan Antonio Osorio Robles
332add01ef
Ensure audit log permissions are restricted
...
While the apiserver audit options merely use the lumberjack logger in
order to write the appropriate log files, this library has very loose
permissions by default for these files [1]. However, this library will
respect the permissions that the file has, if it exists already. This is
also the most tested scenario in the library [2].
So, let's follow the pattern marked in the library's tests and
pre-create the audit log file with an appropriate mode.
[1] https://github.com/natefinch/lumberjack/blob/v2.0/lumberjack.go#L280
[2] https://github.com/natefinch/lumberjack/blob/v2.0/linux_test.go
Signed-off-by: Juan Antonio Osorio Robles <jaosorior@redhat.com>
Kubernetes-commit: 42df7bc5b3aa26bf545b6392b557833c7162c472
2020-10-08 09:38:57 +03:00
Jefftree
285024a6b7
Promote SSA GA
...
Kubernetes-commit: 94cf48a2d16d7eaa915b7f685746a0e63870d5ff
2021-03-11 06:40:43 -08:00
xiaofei.sun
e9a1de1bba
add user-agent for audit log format legacy
...
Kubernetes-commit: 358b33519cdcb3561b41a665558306967cc1d1b9
2021-02-25 20:23:51 +08:00
Andrea Nodari
ca3910bf4a
Add nil path to mapping when a CR has no "scale" subresource
...
This is to prevent the ScaleHandler to drop the entry. In this way
entries just get ignored.
Kubernetes-commit: 5b666a61a170f61c7e223085478b24a03612fa99
2021-04-18 13:55:15 +02:00
Andrea Nodari
a178a9c5d1
Drop managed fields entries with unknown fields
...
This is aligned to the behaviour of server-side apply on main resources.
Kubernetes-commit: c10dd884c494734d12aceb41daaccd1d8da9356b
2021-04-09 17:17:23 +02:00
Andrea Nodari
9c3786c066
Do not add managed fields if a scale entry doesn't own replicas
...
This happens when a request changes the .status.replicas but not
.spec.replicas
Kubernetes-commit: 8e4b5c849b67b3a12dbd63391a4e75234382ba2c
2021-04-04 19:05:45 +02:00
Andrea Nodari
8c0975e184
Check request info when updating managed fields during scale
...
- Test all versions to make sure each resource version is in the
mappings
- Fail when request info contains an unrecognized version. We have tests
that guarantee that all known versions are in the mappings. If we
get a version in request info that is not there we should fail fast to
prevent inconsistent behaviour (e.g. for some reason the mappings is
not up to date).
Ensure all known versions are in mappings
Kubernetes-commit: 09649e58b5a1368929e194991a763afc8011795e
2021-03-11 16:51:46 +01:00
Antoine Pelisse
ddd271ff4e
Use ScaleHandler for all scalable resources
...
Kubernetes-commit: 816e80206c169006de9d0a76cd385ee31c5aff39
2021-03-11 11:05:05 -08:00
Andrea Nodari
8df8282eaf
Track ownership of deployments scale subresource
...
Kubernetes-commit: a9ea98b3b9272a7f7788a0d37891e4b13b9be38d
2021-01-23 18:50:14 +01:00
Gautier Delorme
af9424d2c9
remove go-openapi/spec
...
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>
Kubernetes-commit: 34b0fcef5fc47e3fcddf7f6ca1b3e6176b2a5323
2021-04-20 17:48:33 +02:00
njuptlzf
b86a0eee08
Add more test code for SelectionPredicate
...
Kubernetes-commit: 5468db05f0ca33e78ebf96420281097d28971140
2021-04-09 22:28:51 +08:00
Mike Danese
a6a121887a
force implementors of dyanmiccertificates providers to think about notify
...
Right now, `_, ok := provider.(Notifier); !ok` can mean one of two
things:
1. The provider does not support notification because the provided
content is static.
2. The implementor of the provider hasn't gotten around to implementing
Notifier yet.
These have very different implications. We should not force consumers of
these interfaces to have to figure out the static of Notifier across
sometimes numerous different implementations. Instead, we should force
implementors to implement Notifier, even if it's a noop.
Change-Id: Ie7a26697a9a17790bfaa58d67045663bcc71e3cb
Kubernetes-commit: 9b7d654a08d694d20226609f7075b112fb18639b
2021-04-09 16:59:17 -07:00
John Howard
d7e2a0bbee
Update kube-openapi and gnostic dependencies
...
Pulling in https://github.com/kubernetes/kube-openapi/pull/220
Kubernetes-commit: a849c8998c1ed71f25387a560f8359596aec8bd3
2021-03-23 08:33:15 -07:00
Shihang Zhang
87ac3f57d4
allow multiple of --service-account-issuer
...
Kubernetes-commit: 925900317e43e58435082f624f5969e3cfe25c67
2021-04-15 09:50:43 -07:00
Andrea Nodari
2ec597ed01
Add "subresource" field to ManagedFieldEntry
...
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.
Kubernetes-commit: 862d256195adf3be5475b1a6935e5feb78f884a5
2021-02-27 17:16:46 +01:00
Maciej Borsz
b0d1b1af17
Add "node-high" priority-level
...
Kubernetes-commit: 8d6e76f2766e51177ee50a1fba09bc5b04d6ce53
2021-04-15 16:24:02 +02:00
Monis Khan
e14444ffc5
authorizer func: pass through context
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 8f00e918d84a76ea43d76a8d5b96c3f2535afa99
2021-04-09 09:33:46 -04:00
Monis Khan
bd0605a728
audit: make stage consts use correct type
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 84ac2398da2be7810d311c4bc9f7358618ed193b
2021-04-09 12:29:20 -04:00
Jordan Liggitt
b97dfc761c
allow evictions subresource to accept policy/v1 and policy/v1beta1
...
Kubernetes-commit: 33ad842480353f2816873bf728d75333948e4817
2021-03-31 16:54:55 -04:00
Monis Khan
2ad661f8c5
Prune stale entries from OWNERS files
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 91241eac9b7a7e62cc31e663147294bf6dc8f875
2021-04-07 10:38:27 -04:00
Lukasz Szaszkiewicz
49d90ce0ad
DelegatingAuthenticationOptions TokenReview request timeout
...
it turns out that setting a timeout on HTTP client affect watch requests made by the delegated authentication component.
with a 10 second timeout watch requests are being re-established exactly after 10 seconds even though the default request timeout for them is ~5 minutes.
this is because if multiple timeouts were set, the stdlib picks the smaller timeout to be applied, leaving other useless.
for more details see a937729c2c/src/net/http/client.go (L364)
instead of setting a timeout on the HTTP client we should use context for cancellation.
Kubernetes-commit: d690d71d27c78f2f7981b286f5b584455ff30246
2021-04-09 13:20:51 +02:00
Kevin Delgado
ea32c4f47f
Chain the field manager creation calls in newDefaultFieldManager and test
...
Kubernetes-commit: d37461180a1e5a52aeb85cf5853e000acfeb852d
2021-04-13 16:15:25 +00:00
Abu Kashem
bb69e234a6
apiserver: improve correlation by using the audit ID
...
- when we forward the request to the aggregated server, set the audit
ID in the new request header. This allows audit logs from aggregated
apiservers to be correlated with the kube-apiserver.
- use the audit ID in the current tracer
- use the audit ID in httplog
- when a request panics, log an error with the audit ID.
Kubernetes-commit: b607ca1bf3e1cf6152c446ea61ac7fdd9014e1f1
2021-03-02 19:27:43 -05:00
Abu Kashem
f1a76db888
apiserver: manage audit ID associated with a request
...
Manage the audit ID early in the request handling logic so that it can
be used by different layers to improve correlation.
- If the caller does not specify a value for Audit-ID in the request
header, we generate a new audit ID
- If a user specified Audit-ID is too large, we truncate it
- We echo the Audit-ID value to the caller via the response
Header 'Audit-ID'
Kubernetes-commit: 31653bacb9b979ee2f878ebece7e25f79d3f9aa6
2021-03-02 19:22:39 -05:00
Monis Khan
0ac9d4bf6d
Update auth OWNERS files to only use aliases
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: bca4993004953041c91ad56e37ef195b32066c27
2021-04-07 10:42:00 -04:00
Abu Kashem
64517a3e40
apf: exempt probes /healthz /livez /readyz
...
Kubernetes-commit: 4447f2459aae1d916742eb1cb129d9438adcea9a
2021-03-30 12:55:30 -04:00
Niekvdplas
c74d3bdddc
Fixed several spelling mistakes
...
Kubernetes-commit: fec272a7b290a34776eac6698f12be043367a4c2
2021-03-30 15:28:23 +02:00
Brendan Burns
3ba2299cd2
Fix api installer to indicate PATCH may return a 201 for server side apply
...
Kubernetes-commit: cb72ce975630b44ec8786d5b72b1e0ee8bb1a0e4
2021-03-11 17:06:33 +00:00
Abu Kashem
bf34b41185
refactor finishRequest
...
Kubernetes-commit: a8ff821a19b819a54a54d027ec631eab2ffaedc3
2021-03-22 18:01:33 -04:00
Abu Kashem
28c097bee7
move FinishRequest to its own package
...
Kubernetes-commit: 393a1f73fbaa1bf1facb8882eaf4fead16b94f58
2021-03-22 16:39:14 -04:00
Antoine Pelisse
49b6ebdaae
fieldmanager: Strip managedfields BEFORE we update the timestamp
...
Kubernetes-commit: c8be9651ce0de1eee3fa785882fe01dee4b15d37
2021-03-09 12:46:07 -08:00
Abu Kashem
1e7338b1ea
use request received timestamp in httplog
...
Kubernetes-commit: 71199664be6d26e435a78566818379ff43110352
2021-03-02 18:05:51 -05:00
Lukasz Szaszkiewicz
b5be45a80f
DelegatingAuthOptions: allows for specifying a middleware function for custom HTTP behaviour for the auth webhook client
...
Kubernetes-commit: ea7d94497b5fef2fe7b925d378f425b94448f01b
2021-03-04 12:35:09 +01:00
xiongzhongliang
fbe8ccc9bd
Optimize some codes
...
Kubernetes-commit: 4a24a08f936a295bf332b9567bea182e2feff554
2021-02-28 01:00:09 +08:00
Danil-Grigorev
de3d390777
Make selectors atomic
...
Ensure that all label selectors are treated as atomic values,
to exclude situations when selectors are being corrupted by
different actors attempting to apply their overlapping definition
for this field with server-side-apply.
Kubernetes-commit: d8a7764b6396b90313ae7bd50a845f4da4705d67
2021-01-12 18:29:56 +01:00
Abu Kashem
7c07064678
apf: fix test flake
...
Kubernetes-commit: fa0952ee778aaf7df3e593305575f5d121b55cf1
2021-03-29 16:09:49 -04:00
Han Kang
d21d96225a
bump the deprecated version to 1.22
...
Change-Id: Ibefaa94151704fcaaa920541bbb9a8ad714c1d24
Kubernetes-commit: e7ee76efc0813da419045c80cc06a513fba6fc37
2021-03-29 07:54:12 -07:00
Haowei Cai
4a7c21439a
webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup
...
Kubernetes-commit: 37d171e5bc6ca5b7aab7bfe52c8baabdea536415
2021-03-17 14:34:06 -07:00
Kevin Delgado
a11399dd98
Add ability to skip OpenAPI handler installation
...
Kubernetes-commit: 66d2f4359efadd2cf85f9d901676f2ea28555951
2021-03-17 00:26:23 +00:00
Marcel Zięba
7635650788
Fix incorret authentication metrics
...
Kubernetes-commit: 7dffc11abc37c4bd750a27553b6d983894bf865c
2021-03-08 13:34:55 +00:00
answer1991
db01b261c4
disable flaky TestClientReceivedGOAWAY test case
...
Kubernetes-commit: d6f9369126dcaa3c94902108ec1aa3d01f658163
2021-03-15 21:12:22 +08:00
Han Kang
4ac82c26cf
rename apiserver_storage_object_counts to conform to best practices (apiserver_storage_objects)
...
Change-Id: I8c08a37cd3ed7c943a6691185f750e55d389dd3a
Kubernetes-commit: 50e6f15deec3f9b9ffe52accd6aab5f9560b88ad
2021-03-10 04:32:27 -08:00
Jefftree
14406b8e7c
Revert SSA GA
...
Kubernetes-commit: 4a41c474cc3e8fb0320f67dca581aaea6167a72c
2021-03-10 18:04:40 -08:00
Monis Khan
63ca1f6039
delegated authn: allow client CA override based on non-empty opts
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 6686d8b846546f682d1a449cc9cd0e3c0de977b4
2021-03-09 22:53:04 -05:00
Kevin Delgado
86db6c67fb
Server-Side Apply: Status Wiping/Reset Fields
...
Adds and implements ResetFieldsProvder interface in order to ensure that
the fieldmanager no longer owns fields that get reset before the object
is persisted.
Co-authored-by: Kevin Wiesmueller <kwiesmul@redhat.com>
Co-authored-by: Kevin Delgado <kevindelgado@google.com>
Kubernetes-commit: a1fac8cbd9289d95db4831a83239292ed56ce59d
2021-03-09 23:54:55 +00:00
Jefftree
a5c8a1e98c
Promote SSA to GA
...
Kubernetes-commit: fe1d8682845c2db2f2baa5046d7c782f5c0ca55e
2021-03-02 10:39:33 -08:00
David Eads
3f9e652c39
provide directly decodable versions for storageversion API
...
Kubernetes-commit: fa03dee68cea605b285b00ae5b6ce22659d95026
2021-03-08 09:33:46 -05:00
Yu Yi
09fb3448ff
metrics: promote apiserver_storage_object_counts to stable
...
- rename etcd_object_counts to apiserver_storage_object_counts
CONTEXT https://github.com/kubernetes/kubernetes/issues/98270
FIXES https://github.com/kubernetes/kubernetes/issues/98270
Kubernetes-commit: 77950ba79b8b56bae34291093c69006975c7b775
2021-03-04 14:42:42 +00:00
David Eads
4c81a6672b
Enable, rate limit, and test APF controller fights
...
Using real time.
Kubernetes-commit: 80ff06fe846c5e565e0cbd4b70f5f1e8a4ea7295
2020-12-02 16:50:05 -05:00
answer1991
43c20c5bfe
enable goaway testcases which will not flake any more with new golang.org/x/net version.
...
Kubernetes-commit: f1b23fe7679f3c650cabcd13a60b5a08b8cda36f
2021-02-05 23:34:30 +08:00
Han Kang
fdbe19987d
promote apiserver_request_duration_seconds to STABLE
...
Change-Id: I1b050b812738719aedd7ac6f4794ec742812e12d
Kubernetes-commit: 69e3d89a38b198d6261e675a31853583f3cce8f7
2021-03-07 17:14:36 -08:00
Jordan Liggitt
a70d9c48f0
Deflake TestPrepareRun
...
Kubernetes-commit: ba4aade23a76969d7598fb7ac170891c183e7327
2021-03-06 19:46:00 -05:00
Kevin Wiesmueller
b101f44b76
cleanup managedFields admission and test
...
Kubernetes-commit: 2d1ba0c35829a2f146a712d49cb21f382c9894cb
2021-03-04 23:20:51 +01:00
Kevin Wiesmueller
8ef7c0686d
only use managedFields decoding for admission check
...
Kubernetes-commit: 98d498117b5566c1229d754d97923f61600660d8
2021-03-01 20:29:15 +01:00
Kevin Wiesmueller
7c5bd1b084
harden managedFields decoding
...
Kubernetes-commit: 470ad03d076cae44bc98c64a08eea32e65f1bb9f
2021-03-01 19:58:56 +01:00
Kevin Wiesmueller
543879f479
fix test dependencies
...
Kubernetes-commit: 295e47f60b64332ef4e3268db282184357440675
2021-02-26 20:33:36 +01:00
Kevin Wiesmueller
e4b883c5c7
update licenses and bazel
...
Kubernetes-commit: 1a8e2bf0358651151a6440717b4de1f662c4571b
2021-02-26 20:14:22 +01:00
Kevin Wiesmueller
04593d2277
prevent fieldManager admission from wrapping nil
...
Kubernetes-commit: 22dfa6ae1b431cb8e8afe72ce7d60360bf766337
2021-02-26 20:14:11 +01:00
Kevin Wiesmueller
a69b2cb302
use existing validation code and decoding in fieldManager admission
...
Kubernetes-commit: fc1841d72f7418dd2606fb796f2a1b664bb3a721
2021-02-26 20:03:10 +01:00
Kevin Wiesmueller
f9c68c0e80
export and cleanup managedFields decoding
...
Kubernetes-commit: 589ca1be1c9e75b1730feacd1af6e2c817f693ac
2021-02-26 17:47:52 +01:00
Kevin Wiesmueller
82e671a5f8
add managedFields admission
...
Kubernetes-commit: f86b59ab79227929e7f283b859b4c59317399807
2021-02-11 16:22:16 +01:00
Kevin Wiesmueller
81cd3ef7b0
fix admission controller
...
Kubernetes-commit: 429a96da5e856c435b08b50791d462120724c475
2021-02-11 16:11:43 +01:00
Kevin Wiesmueller
7da058f6bb
disable webhook for testing
...
Kubernetes-commit: ffbae9c5b4a3df9f7400d0047a5d7a957adf295d
2021-02-01 17:56:49 +01:00
Kevin Wiesmueller
08a5711ffb
update bazel
...
Kubernetes-commit: a06f981fb1388976cd6427d7a4284d36dd2f2448
2021-01-14 20:33:50 +01:00