c55f8b7cef
Merge pull request #101707 from enj/enj/i/bad_cadata
...
client-go transport: assert that final CA data is valid
Kubernetes-commit: 9126048c9c47cc51f15f977da51c6023229a02b5
2021-05-18 11:28:04 +00:00
5289a15a1a
client-go transport: assert that final CA data is valid
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 440ea3ef49e0ac77353ceeaebc2aad6c995d5b35
2021-05-03 10:11:54 -04:00
0abfd35982
Merge pull request #95396 from stlaz/x509_cn_error_metrics
...
webhooks,aggregation: add metrics to count certs missing SAN
Kubernetes-commit: 96e4e953978416e164e001abd2c607ce357fdd46
2021-05-18 11:28:01 +00:00
ba14a28ef3
Merge pull request #101484 from tkashem/apf-queueset-use-list
...
apf: use a list instead of slice for queueset
Kubernetes-commit: a108dc498be8c745cbf01ae072389fbae11fb970
2021-05-18 11:27:58 +00:00
b10515a636
Merge pull request #100218 from aojea/unitflakes1
...
unit test using metrics must reset the global registry
Kubernetes-commit: 6850e0abf24fd115cd26853559247861820b5670
2021-05-18 11:27:56 +00:00
664c22f9f6
Merge pull request #101509 from thinpark/park
...
[k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability
Kubernetes-commit: ce5ce8e290ae140bc8d4838a377f99052d592191
2021-05-18 11:27:53 +00:00
b9ce58c2ef
Merge pull request #101611 from p0lyn0mial/fix-fieldmanager-admission-metadata
...
let objects without metadata pass through the managedFields admission controller
Kubernetes-commit: db2c109a14e9847da5fde58deb723dd8402aaa2c
2021-04-29 06:50:50 -07:00
a9e68c9b32
let objects without metadata pass through the managedFields admission controller
...
Not all objects provide metadata. There might be extention servers that allow for creating objects without the metadata field.
This PR changes the managedFileds admission to deal with objects without the metadata field.
Object without that field will be passed directly to the wrapped admission controller for further validation.
Kubernetes-commit: 3dbaf305ae1e52105a338987f3770ff104def68b
2021-04-29 14:08:36 +02:00
28df761863
Merge pull request #101532 from stevekuznetsov/skuznets/wrap-admission-error-reasons
...
apiserver: wrap errors in admission with context
Kubernetes-commit: 50e319767cc4aad5c6ff56a8d002c406cdcc3e0e
2021-05-18 11:27:49 +00:00
8c01d7fe18
apiserver: wrap errors in admission with context
...
When the API server encounters an error during admission webhook
handling, lower-level errors are bubbled up without any additional
context added. This leads to fairly opaque and unintelligible errors. It
is not clear to users if the API server itself is having an error (for
instance, fetching the REST client) or if the request to the webhook
failed in some way.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: ae9e71ba68cb1dd00bb5ed2635bac9aab2abbafe
2021-04-27 11:19:01 -07:00
f9a92cec2f
Merge pull request #95387 from JAORMX/logperms
...
Ensure audit log permissions are restricted
Kubernetes-commit: b81a36021f0a6d3d4944c3aba779e0174955515c
2021-05-18 11:27:46 +00:00
16ed1713d9
Merge pull request #100139 from Jefftree/ssa-ga2
...
Promote SSA GA
Kubernetes-commit: 6067d8556a017102fcd92c6a06738524c36847a9
2021-05-18 11:27:44 +00:00
9427d805d6
Merge pull request #99452 from xiaoanyunfei/bugfix/legacy_user-agent
...
add user-agent for audit log format legacy
Kubernetes-commit: 0da2e97ac112baaf9c2d8d723f7c4805f57dd363
2021-05-18 11:27:40 +00:00
b8afabd522
Merge pull request #101357 from feiskyer/update-vendor
...
Update Azure Go SDK version to v53.1.0
Kubernetes-commit: 253685779f15d2bf1ebf8354474761752edd8d6e
2021-05-18 11:27:38 +00:00
c233874954
[k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability
...
Do not wrap code here
Signed-off-by: Zhou Peng <p@ctriple.cn>
Kubernetes-commit: 95f7b4d8544eeba0bc06122b1a35db1ab603f19d
2021-04-27 13:55:31 +08:00
df1dd422c7
Update Azure Go SDK version to v53.1.0
...
Kubernetes-commit: bee44da7a258bbe3996ad3cc38d905ae9a28271e
2021-04-22 11:45:39 +08:00
e25550bce3
Merge pull request #101119 from BinacsLee/binacs-cmd-reuse-function
...
code cleanup: Abstract repetitive codes in `cmd` as a function
Kubernetes-commit: ed4fa17d01545b33562aea91b7f3487a872bf8fb
2021-05-18 11:27:35 +00:00
9e0dad9438
code cleanup: Abstract repetitive codes in cmd as a function
...
Kubernetes-commit: 75dde4dce4d5e9825490d9e77329b73501529a39
2021-04-22 22:34:50 +08:00
1a1fa2aa6b
Merge pull request #98377 from nodo/scale-ownership-tracking-deployment
...
Track ownership of scale subresource
Kubernetes-commit: f1e51ceb3c58da272bc0fc68e200db6fd12121dd
2021-05-18 11:27:31 +00:00
ca3910bf4a
Add nil path to mapping when a CR has no "scale" subresource
...
This is to prevent the ScaleHandler to drop the entry. In this way
entries just get ignored.
Kubernetes-commit: 5b666a61a170f61c7e223085478b24a03612fa99
2021-04-18 13:55:15 +02:00
a178a9c5d1
Drop managed fields entries with unknown fields
...
This is aligned to the behaviour of server-side apply on main resources.
Kubernetes-commit: c10dd884c494734d12aceb41daaccd1d8da9356b
2021-04-09 17:17:23 +02:00
9c3786c066
Do not add managed fields if a scale entry doesn't own replicas
...
This happens when a request changes the .status.replicas but not
.spec.replicas
Kubernetes-commit: 8e4b5c849b67b3a12dbd63391a4e75234382ba2c
2021-04-04 19:05:45 +02:00
4e12e0cd34
apf: use a list instead of slice for queueset
...
Kubernetes-commit: 69f9bc181f155ded7c5d5cc0ca9f026a6b42f431
2021-03-29 11:31:12 -04:00
04c8c14809
admission metrics reset metrics after tests
...
Kubernetes-commit: b1a81d2fb8b4528172a8de6de01b53526b7b2277
2021-03-13 21:26:22 +01:00
8c0975e184
Check request info when updating managed fields during scale
...
- Test all versions to make sure each resource version is in the
mappings
- Fail when request info contains an unrecognized version. We have tests
that guarantee that all known versions are in the mappings. If we
get a version in request info that is not there we should fail fast to
prevent inconsistent behaviour (e.g. for some reason the mappings is
not up to date).
Ensure all known versions are in mappings
Kubernetes-commit: 09649e58b5a1368929e194991a763afc8011795e
2021-03-11 16:51:46 +01:00
ddd271ff4e
Use ScaleHandler for all scalable resources
...
Kubernetes-commit: 816e80206c169006de9d0a76cd385ee31c5aff39
2021-03-11 11:05:05 -08:00
285024a6b7
Promote SSA GA
...
Kubernetes-commit: 94cf48a2d16d7eaa915b7f685746a0e63870d5ff
2021-03-11 06:40:43 -08:00
e9a1de1bba
add user-agent for audit log format legacy
...
Kubernetes-commit: 358b33519cdcb3561b41a665558306967cc1d1b9
2021-02-25 20:23:51 +08:00
8df8282eaf
Track ownership of deployments scale subresource
...
Kubernetes-commit: a9ea98b3b9272a7f7788a0d37891e4b13b9be38d
2021-01-23 18:50:14 +01:00
c883d6c994
Merge pull request #101234 from gautierdelorme/rm-go-openapi-spec
...
eliminate dependency on go-openapi/spec
Kubernetes-commit: 565d5f456242fcc79b7540a4c4913c7577cbfc7d
2021-05-18 11:27:27 +00:00
af9424d2c9
remove go-openapi/spec
...
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>
Kubernetes-commit: 34b0fcef5fc47e3fcddf7f6ca1b3e6176b2a5323
2021-04-20 17:48:33 +02:00
4a8e81fac6
bump k8s.io/kube-openapi
...
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>
Kubernetes-commit: bcdde6bf75c7e177b44e58c5313e405c22d8d46d
2021-04-20 17:43:59 +02:00
f48391aefe
Merge pull request #100964 from njuptlzf/SelectionPredicateUT
...
Add more unit tests for SelectionPredicate
Kubernetes-commit: 90e599f56a931f9ba32244c7f6250db27cb61af5
2021-05-18 11:27:23 +00:00
b9ad7382f7
Merge pull request #100979 from mikedanese/tlscleanup
...
force implementors of dyanmiccertificates providers to think about notify
Kubernetes-commit: 496a94bf98c86abea5c18395880340ad64dcb9dd
2021-05-18 11:27:20 +00:00
0be3b21634
Merge pull request #100490 from howardjohn/gnostic-v051
...
Update kube-openapi and gnostic dependencies
Kubernetes-commit: c555b23f1c84bcdd1d87a7ae831675281f5c0c94
2021-05-18 11:27:17 +00:00
152ef2fa3b
Merge pull request #101155 from zshihang/bound
...
allow multiple of --service-account-issuer
Kubernetes-commit: 6157361dd758dc5774b7776d897727b53d696d57
2021-05-18 11:27:13 +00:00
87ac3f57d4
allow multiple of --service-account-issuer
...
Kubernetes-commit: 925900317e43e58435082f624f5969e3cfe25c67
2021-04-15 09:50:43 -07:00
940c107184
Merge pull request #100970 from apelisse/add-subresource-managedfields
...
Add subresource managedfields
Kubernetes-commit: 0f1d105f8d3e114f0bf47307513fe519a71351a2
2021-04-17 16:17:57 +00:00
64747d3be0
Merge pull request #101151 from mborsz/nodehealth
...
Add "node-high" priority-level
Kubernetes-commit: 09bd59687500e6b3c53e34cf20ef7727a1886c22
2021-04-17 11:54:00 +00:00
16fda89d29
sync: update go.mod
2021-04-17 03:58:27 +00:00
66df8c7bf0
Merge pull request #100963 from enj/enj/i/authz_func_ctx
...
authorizer func: pass through context
Kubernetes-commit: f1c1379defd362a7156b0568c77b2f41583b1e00
2021-04-16 23:54:04 +00:00
db0339edde
Merge pull request #100969 from enj/enj/i/audit_stage_const
...
audit: make stage consts use correct type
Kubernetes-commit: 2ec888b2d0a23861a93e6599e0f993e12c7a79f4
2021-04-16 19:57:58 +00:00
4004e014d5
Merge pull request #100724 from liggitt/eviction-v1beta1
...
Add policy/v1 Eviction support
Kubernetes-commit: 27a625cf8921007eaf115425b6d61587eb253e92
2021-04-16 19:57:56 +00:00
f09aa9568e
Merge pull request #101086 from enj/enj/i/auth_owners_gen
...
Prune stale entries from OWNERS files
Kubernetes-commit: 24350a922ea2b1b2a8aeba58e150fa90370a282b
2021-04-15 15:59:31 +00:00
b0d1b1af17
Add "node-high" priority-level
...
Kubernetes-commit: 8d6e76f2766e51177ee50a1fba09bc5b04d6ce53
2021-04-15 16:24:02 +02:00
781f4a4107
Merge pull request #100959 from p0lyn0mial/upstream-delegated-authn-timeout
...
DelegatingAuthenticationOptions: TokenReview request timeout
Kubernetes-commit: dc2020eb9d59a19952cbdabd3d4f819c6f307899
2021-04-15 03:54:50 +00:00
584a6d3ae5
Merge pull request #101076 from kevindelgado/fix-diff
...
Chain the field manager creation calls in newDefaultFieldManager
Kubernetes-commit: 6cc27991e95a4bd242a9c631d520a909778d05e6
2021-04-13 21:08:42 -07:00
ea32c4f47f
Chain the field manager creation calls in newDefaultFieldManager and test
...
Kubernetes-commit: d37461180a1e5a52aeb85cf5853e000acfeb852d
2021-04-13 16:15:25 +00:00
56981b814f
Merge pull request #99237 from tkashem/audit-correlation
...
Use the audit ID of a request for better correlation
Kubernetes-commit: 46563b0abebbb00e21db967950a1343e83a0c6a2
2021-04-13 15:55:56 +00:00
3f59c51398
Merge pull request #100885 from enj/enj/i/auth_owners
...
Update sig-auth OWNERS
Kubernetes-commit: d51f15ed0d47aa81c572076877c69e3107ad3bfc
2021-04-13 07:30:31 +00:00
Kubernetes Publisher
Monis Khan
Lukasz Szaszkiewicz
Steve Kuznetsov
Zhou Peng
Pengfei Ni
BinacsLee
Andrea Nodari
Abu Kashem
Antonio Ojea
Antoine Pelisse
Jefftree
xiaofei.sun
Gautier Delorme
Shihang Zhang
Maciej Borsz
Kevin Delgado