Maciej Wyrzuc
bfac2bc2b9
do not print status stack in case of timeout from timeout handler
...
Kubernetes-commit: 886648b820c10011350e7435a3105fd7d329c3c5
2022-09-10 10:13:11 +00:00
twilight0620
2180db0c8d
code check modify:
...
receiver name obj should be consistent with previous receiver name s for SimpleStream
error var hookNotFinished should have name of the form errFoo
Kubernetes-commit: ae385ee874a81cd01ee4fef98efc1bd5c219c9b7
2022-04-21 16:47:22 +08:00
Paco Xu
c23bbb6aae
fsnotify: use event.Has instead of "event.Op&h == h"
...
Kubernetes-commit: 2ce7a8116902a47c0b859dff1f546e194d468064
2022-10-13 13:42:11 +08:00
Harsha Narayana
1da54ec21a
kmsv2: enable logging for kmsv2 enc/dec operations
...
Kubernetes-commit: 79d741f1f8efcfc75cecd22898c7b6b689449f0a
2022-08-31 22:08:55 +05:30
Monis Khan
8d68e6f323
Load encryption config once
...
This change updates the API server code to load the encryption
config once at start up instead of multiple times. Previously the
code would set up the storage transformers and the etcd healthz
checks in separate parse steps. This is problematic for KMS v2 key
ID based staleness checks which need to be able to assert that the
API server has a single view into the KMS plugin's current key ID.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: f507bc255382b2e2095351053bc17e74f7100d35
2022-08-29 17:25:48 -04:00
Jiahui Feng
ac0ce38abe
use DefaultMaxRequestSizeBytes for maxRequestSizeBytes.
...
Kubernetes-commit: 755f41a185e828d9c64ae3ac37ce829e60592ad1
2022-10-10 14:42:24 -07:00
Jiahui Feng
870da5a58e
move CEL package to apiserver package.
...
only anything that does not require Structural
Kubernetes-commit: 0dd316a5c11261c0e5fc7928d8697754b16ad461
2022-10-07 15:02:47 -07:00
Han Kang
a26df69931
wire up feature-gate for component slis
...
Change-Id: Iba6ffbcac9dba4f4be3023ada6ac31691c1ae17b
Kubernetes-commit: 01bfbdff2dee3be93d286a8ff53f9e52a1ee9724
2022-10-05 15:56:06 -07:00
Manish Kumar
a433b219b9
Move celopenapi/model to staging/src/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/ ( #109959 )
...
Co-authored-by: Manish Kumar <manish.kumar1@india.nec.com>
Kubernetes-commit: 39ffd45175876fe7c846c6239d89613d31a28fa1
2022-10-07 05:43:52 +05:30
Cici Huang
025851852a
Update feature gate name to CELValidatingAdmission
...
Kubernetes-commit: d8ab3fea0d5f91e273fcb3b49cffb71d1b70f7e3
2022-10-05 19:40:50 +00:00
Cici Huang
d089253bb2
Add feature gate CelValidatingAdmissionExtensibility
...
Kubernetes-commit: 9dff2311eacbcde1390ad67233cf0a48f0020eea
2022-09-29 18:45:14 +00:00
Abu Kashem
4ecff81419
rename assuredConcurrencyShares for flowcontrol v1beta3
...
Kubernetes-commit: 66fc0d703794f309c9715028d3b63f64c281a5fd
2022-09-21 15:40:33 -04:00
Abu Kashem
98ffe5507d
apiserver: update apf logic to use v1beta3
...
Kubernetes-commit: 0a99e6ebb1e241bf421f6df44b15a5a16063a9f2
2022-09-10 07:26:31 -04:00
Abu Kashem
e888dae968
apiserver: update apf tests to use v1beta3
...
Kubernetes-commit: 6edc2516863994905b57f4386450f3e8f818bbc9
2022-09-10 07:05:20 -04:00
Abirdcfly
487ade9f5d
go1.19: change some atomic.Value to atomic.Bool
...
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Kubernetes-commit: 1d631f7eef4db32afe23460843c4084ed3a3f6bd
2022-09-06 17:13:44 +08:00
SataQiu
2c587cfaab
kube-apiserver: mark unused master-service-namespace flag as deprecated
...
Kubernetes-commit: 3cd3ab5f943a5b0e1bc0dc53c90ed9cf0aa811ad
2022-09-30 16:13:13 +08:00
Monis Khan
25ccbfa75c
Use https links for k8s KEPs, issues, PRs, etc
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: b738be9b46a899571303c8c887e32bf4d5b71a0a
2022-09-23 16:13:22 -04:00
Alex Zielenski
c4a7c1b469
Allow timestamp transformer equalities to be configurable ( #112158 )
...
* allow noop-ignoring transformer to be configurable
* consolidate timestamp equalities initialization
* remove extra plumbing
* fix typo
* remove CustomEqualities list
Kubernetes-commit: a9a1cdbd1531df06e27029686669a8fea99d44e8
2022-09-28 10:56:34 -04:00
Han Kang
7ede3563fe
enable health check SLI metrics for apiserver
...
Change-Id: I1b43e6dfea35b8c3bfdf5daaa8b42adff2fbc786
Kubernetes-commit: db13f51db97c114bb550b99efddd985548edc082
2022-09-26 16:10:58 -07:00
Anish Ramasekar
1411f0e151
kmsv2: validate annotations key and size
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: d1fb258ff2d009f202cff3fdd25e6fd2bbda08ef
2022-09-14 21:58:17 +00:00
qmloong
a32e26b98a
fix: remove redundant error log print
...
Kubernetes-commit: 45ed5ba9939c581d0633772ea3177780fae95db0
2022-09-26 14:52:25 +08:00
Wojciech Tyczyński
baa5a012e9
Lock ServerSideApply feature to true
...
Kubernetes-commit: 57c95fbfa12bc04456330d8b0b29f333106cf156
2022-09-27 11:13:00 +02:00
Monis Khan
c602291fa1
encryption config: no-op refactor to prepare for single loading
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: db850931a8699e780dd794e1763fd0e54b4239b5
2022-08-29 17:25:48 -04:00
Anish Ramasekar
c027ae3881
Add staging directory for kms
...
- Moves kms proto apis to the staging repo
- Updates generate and verify kms proto scripts to check staging repo
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: c3794e2377016b1c18b1dcb63dc61d686c8ebcbf
2022-08-23 20:22:09 +00:00
Anish Ramasekar
ec520ccd91
[KMS]: update envelope caching unit tests
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 92dce5de71f752c8c136ec7c7417a73d50317cf5
2022-09-15 18:01:48 +00:00
Davanum Srinivas
ae4a45db07
update to v1.12.0 of semconv
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 01d8a4f0c56131de2ee8b4ba5ffd384de4b38578
2022-09-18 19:33:02 -04:00
Davanum Srinivas
6c2030e10c
update code to use newer otel api
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 3eaca7cf519808fcb98d4c43e666ea750270d825
2022-09-17 14:27:06 -04:00
SataQiu
d9a11fffae
remove DeprecatedInsecureServingOptionsWithLoopback
...
Kubernetes-commit: d545de2b96de094107c3b687d8d48663af8f9fae
2022-09-11 21:22:18 +08:00
Marcel Zięba
395682d7b7
Fix list estimator for lists that are executed as gets
...
Kubernetes-commit: 09f1ce9ec821c14013c775ba106e4888cb29c2c3
2022-09-19 07:42:45 +00:00
viveksahu26
6cb2fda0ab
fix warnings or linter errors
...
Signed-off-by: viveksahu26 <vivekkumarsahu650@gmail.com>
Kubernetes-commit: 386bc4a7fa3e975cb247d300fdc5ad1b14a15605
2022-09-05 19:10:43 +05:30
Antonio Ojea
1239036585
rate limit /healthz etcd healthchecks
...
return the last request error, instead of last error received
The rate limit allows 1 event per healthcheck timeout / 2
Kubernetes-commit: 510a85c53a5138babb1650fadd328e6f34baa03b
2022-08-29 11:09:58 +02:00
Antonio Ojea
d2581bb0e0
fix etcd unit tests
...
stop leaking goroutines
reduce etcd test duration
Kubernetes-commit: dd6d3d95cdeb0e165e8365212d85d0f3b972d3e8
2022-08-28 23:13:45 +02:00
Antonio Ojea
fb26cb4f0c
don't serialize etcd healthchecks
...
Kubernetes-commit: 5a67248115ec0bc762c0351a73810117ac0bb814
2022-08-29 17:57:01 +02:00
Monis Khan
70b4742ce2
kms: fix go routine leak in gRPC connection
...
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 4e68e9b5ad70ae074b3fb20f0fb2ba25d0792274
2022-08-24 01:51:19 +00:00
Shyam Jeedigunta
f7e0cdae19
Reduce default gzip compression level from 4 to 1 in apiserver
...
Kubernetes-commit: 7cd5e6597e7137aa3b37a7c7ade2bf831cb7aca9
2022-09-07 13:23:53 -07:00
HaoJie Liu
e1af448867
test: use bytes.Buffer.String
...
Signed-off-by: HaoJie Liu <liuhaojie@beyondcent.com>
Kubernetes-commit: f55d658c1c8b4c59dcb33bd07285e62344ef0186
2022-08-29 15:45:20 +08:00
Mike Spreitzer
3419387b18
Call queueSet::boundNextDispatchLocked enough
...
Fix the one path where boundNextDispatchLocked was not being called
after modifying a queue.
Also check for negative work in a request.
These are motivated by
https://github.com/kubernetes/kubernetes/issues/112169 but I do not
have a way to reproduce it and so can not check that these changes
actually remove that symptom. But these changes are good anyway.
Kubernetes-commit: 6ee93e2cee695203a6ce4935da1b9a807b624260
2022-09-01 22:54:53 -04:00
xueqzhan
9d6934f8fa
Add DisableAnonymous to DelegatingAuthenticationOptions
...
Kubernetes-commit: 5619c71eb0b9fae13c831d92797da9427094518f
2022-09-01 11:58:51 -04:00
Alex Zielenski
d46c86b62b
Update kube_features.go
...
Kubernetes-commit: 9dab9f3e28652b823d0589d127f84ba901ae4c65
2022-08-30 09:06:29 -07:00
Alex Zielenski
4c7c0de421
update comments
...
Kubernetes-commit: 92fac4ab8af1e90fc21163ef474c9094573b4ebd
2022-08-30 09:04:06 -07:00
Alexander Zielenski
b0ba338767
add aggregated discovery feature gate
...
Kubernetes-commit: 7b54c492d9586a8c979686795283324b272ad0c6
2022-08-29 16:21:23 -07:00
Antonio Ojea
852f0a02d4
Initialize Name (GenerateName) earlier in the Create process
...
Kubernetes-commit: af9d36f9310bc3c21791bf17470a667b690573b0
2022-08-26 13:20:43 +02:00
Antonio Ojea
89fb3670f4
test rest error generate name conflict
...
Kubernetes-commit: 20d190ec2ae90bc521e7342821a3a4301fe573af
2022-08-26 13:20:06 +02:00
Han Kang
ce7b4d6e8c
Add request body size metric
...
Change-Id: Ica5d9b5457d4f844c4500b2c05b2f0631c27454c
Kubernetes-commit: 43c95cbf0682895cf5bb79452b1f011123ac4513
2022-08-24 09:15:23 -07:00
Han Kang
270d177e30
add metric and test
...
Change-Id: Ic2bcf39caef791b2e13448a97d2c3203ed1d94b9
Kubernetes-commit: 07020ab42e8f1a2e9d6fe4969c01d0f971324ae1
2022-08-24 08:54:51 -07:00
Antonio Ojea
ea69e5d51c
remove DryRun feature gate checks
...
Kubernetes-commit: a1bfb76458a219577884d312ceb93eb1bb3f7e39
2022-08-26 11:33:56 +02:00
Andy Goldstein
8587d29223
etcd3: include GroupResource in logs/metrics
...
Use GroupResource instead of object reflection when recording the
following metrics:
- etcd_request_duration_seconds
- etcd_bookmark_counts
Add GroupResource to logs and traces where only reflection-based typing
was previously used.
Both of these changes allow us to disginguish between different CRDs,
all of which are represented as *unstructured.Unstructured.
Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
Kubernetes-commit: 305fa2add60ad507417304d865f001006d5175fe
2022-08-25 13:55:55 -04:00
Andy Goldstein
7eb011f596
watch cache: metrics: objectType -> group resource
...
Use the group resource instead of objectType in watch cache metrics,
because all CustomResources are grouped together as
*unstructured.Unstructured, instead of 1 entry per type.
Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
Kubernetes-commit: d08b69e8d35a5aa73a178c508f9b0e1ad74b882d
2022-08-11 15:51:21 -04:00
Andy Goldstein
ecf3a57374
watch cache: log GroupResource, not objectType
...
All CustomResources are treated as *unstructured.Unstructured, leading
the watch cache to log anything related to CRs as Unstructured. This
change uses the schema.GroupResource instead of object type for all type
related log messages in the watch cache, resulting in distinct output
for each CR type.
Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
Kubernetes-commit: 397533a4c2df9639ff4422c907d06fae195a1835
2022-08-11 15:45:04 -04:00
cndoit18
902be89708
style: remove redundant judgment
...
Signed-off-by: cndoit18 <cndoit18@outlook.com>
Kubernetes-commit: ec43037d0f57fdfc2fdc4960fdb8a7e31ac79fae
2022-07-29 18:25:05 +08:00