Commit Graph

6596 Commits

Author SHA1 Message Date
Kubernetes Publisher 3cebba9887 Merge pull request #118812 from serathius/storage-metric
Improve apiserver storage size metric

Kubernetes-commit: 2ec4e14bfa0cec1f22919ea862c45b1501187e20
2023-07-12 22:06:52 +00:00
Kubernetes Publisher 7f9444fbee Merge pull request #118508 from serathius/kep2340
Implement Alpha state for KEP #2340

Kubernetes-commit: be13c6a884248c40cb3a50a24a622b4403138444
2023-07-12 09:33:11 -07:00
Amine 408cf7b500 Improve naming and code comments
Kubernetes-commit: 0695853a3061ece0f602c1f267c82ced3f8c880d
2023-07-12 16:20:14 +01:00
Monis Khan c534f8e2b9 Add enj to apiserver options approver
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: b81f07ac9a61d425f1e457132803ed94f6b8a52d
2023-07-11 16:07:44 -04:00
Nilekh Chaudhari 1668629f57 feat: implements metrics for encryption config hot reload
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>

Kubernetes-commit: c291e6355c44e84c2e1d503d1d9bf3e8fab9e194
2023-07-05 22:28:15 +00:00
Andrew Sy Kim 73f18d34af promote the following APF metrics to beta:
apiserver_flowcontrol_request_wait_duration_seconds
apiserver_flowcontrol_request_concurrency_in_use
apiserver_flowcontrol_request_concurrency_limit
apiserver_flowcontrol_rejected_requests_total
apiserver_flowcontrol_dispatched_requests_total
apiserver_flowcontrol_current_inqueue_requests
apiserver_flowcontrol_current_executing_requests

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: 0bb419b1498a664d1dda3b487e9f15fd220ea363
2023-07-05 18:19:36 +00:00
Mike Spreitzer b8bc556baa Add tracking and reporting of executing requests
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: a8a2fb317c8bc9c64ced023988802b2517d34f81
2023-06-30 22:55:35 -04:00
Nilekh Chaudhari 36a1803532 chore: hashes keyID
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>

Kubernetes-commit: 131216fa8f2dd13f2585e2010717733f4cb2c1e2
2023-06-29 20:32:27 +00:00
Mike Spreitzer 003feef4b3 Fix, deprecate apiserver_flowcontrol_request_concurrency_limit
Because it is redundant and has a bad name and its HELP string was
outdated.

Also note intended retention period for request_concurrency_in_use.

Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 75186b1c32a7e9e92ced270eb303a686315a5c44
2023-06-29 01:29:15 -04:00
Wojciech Tyczyński c7b06c9136 Add support for watchlist to APF
Kubernetes-commit: c0030a4d27e0a30d89b1b0fddb32928942ca8085
2023-06-27 16:08:33 +02:00
Dr. Stefan Schimanski de579d1823 Bump kube-openapi
Kubernetes-commit: 961c1503b5bd2b0f83d6b6b98e0c8f29525ca9cb
2023-06-26 13:09:30 +02:00
Marek Siarkowicz 573a8d6d05 Improve apiserver storage size metric to allow it's graduation
Change name to make it compliant with prometheus guidelines.
Calculate it on demand instead of periodic to comply with prometheus standards.
Replace "endpoint" with "server" label to make it semantically consistent with storage factory

Kubernetes-commit: 7a63997c8a1a9ba14f2bdc478fdf33cf88f48d80
2023-06-22 11:56:09 +02:00
Mike Spreitzer 90abb3933b QueueSet and controller part of borrowing by exempt PLs
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 7305c967101813f794449db21a6edfbc05df2575
2023-06-20 23:35:21 -04:00
Marek Siarkowicz 9002dac854 Implement ConsistentListFromCache feature gate
Request bookmark every 100ms when there is at least one request blocked on revision not present in watch cache.

Kubernetes-commit: 39bb8f4bb1d013937aceac6c387563ffe13545c5
2023-06-06 15:49:46 +02:00
Kubernetes Publisher 6c99c223c9 Merge pull request #119252 from serathius/flakes
Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes

Kubernetes-commit: da2d500c80968aacf4dfa9e32f5e6ccc06dc33c7
2023-07-12 17:19:51 +00:00
Marek Siarkowicz 23cd6bbea9 Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes
Kubernetes-commit: c1decb6763d2abf76d96aee8641ad56a23e0ba52
2023-07-12 13:36:51 +02:00
Kubernetes Publisher 65a9d05461 Merge pull request #119209 from jiahuif-forks/feature/validating-admission-policy/typechecking-expension
ValidatingAdmissionPolicy: expended type checking to messageExpression

Kubernetes-commit: da8974157faea86d15bb54e01eb946f9c4928e8c
2023-07-11 14:19:12 -07:00
Jiahui Feng ef6545eca1 expended type checking.
Kubernetes-commit: e655931274f91a7023fc2d5a26d8fe8ecaa1fa39
2023-07-09 19:41:44 -07:00
Kubernetes Publisher ef1db3a01a Merge pull request #118540 from jiahuif-forks/feature/validating-admission-policy/authorizer-typechecking-support
add support for authorizer to type checking.

Kubernetes-commit: 4954c7bac4029d2f2e4b305fdba41f81b718aefc
2023-07-11 21:25:41 +00:00
Kubernetes Publisher 8f12a0306b Merge pull request #116443 from benluddy/secondary-authz-decision-caching
Cache authz decisions within the scope of validating policy admission.

Kubernetes-commit: 6ffca501361adadfb133ec1b8f76a2c2a23836dc
2023-07-11 21:25:40 +00:00
Kubernetes Publisher 44c9069e7a Merge pull request #119207 from serathius/progress-notify
Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh

Kubernetes-commit: e1fbd0c113af4b4c835ed2355b725506dfeda9e7
2023-07-11 17:20:05 +00:00
Kubernetes Publisher 6e247788f7 Merge pull request #119198 from jadhaj/fix-115385
Document address family of listening INET sockets

Kubernetes-commit: 50782ce5abfd75c644564dcfd2e96c2ae49921d5
2023-07-11 13:21:18 +00:00
Marek Siarkowicz cd751eb82e Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh
Kubernetes-commit: 98461be8ffa7383152c442414a16adb217e98080
2023-07-10 18:10:49 +02:00
Jad Haj Yahya a01ccc2e32 Document address family of listening INET sockets
Kubernetes-commit: de0764309571f0989847b2322db1906c5b34949e
2023-07-10 15:01:13 +03:00
Kubernetes Publisher 0d62f07a5d Merge pull request #119127 from Mskxn/fix_leak
use stopCh to avoid goroutine leak in tests

Kubernetes-commit: 4c7cda3e55736822bdee4c2ac93f989cf8f1501c
2023-07-06 23:55:51 +00:00
Anish Ramasekar 5d08b1abe9 [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
* add feature gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* add validation and warning in load config

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* mark v1beta1 proto message deprecated

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 1acdb4ae86e0e43475c31f108a6106b1f5ea5027
2023-07-06 23:55:47 +00:00
Kubernetes Publisher 24d5ac4b98 Merge pull request #118960 from MikeSpreitzer/add-seat-occupancy-metric
Introduce apiserver_flowcontrol_current_executing_seats metric

Kubernetes-commit: fbb2f89668bd07a96adc8a1f4f0819e769255703
2023-07-06 11:25:19 +00:00
Mskxn 2595ae0416 use stopCh to avoid goroutine leak in tests
Kubernetes-commit: 132d477cb7aa323c0eae6dd9a09f9c93fb570b83
2023-07-06 16:24:58 +08:00
Kubernetes Publisher 73ba48c7f9 Merge pull request #118386 from Richabanker/enhance-storage-version
Add servedVersions info in StorageVersion API

Kubernetes-commit: cd32adebd9d52ae46827054350c17de085a4eb23
2023-07-06 07:32:27 +00:00
Kubernetes Publisher 0e613811b6 Merge pull request #118955 from MikeSpreitzer/add-exempt-queuesets
Make QueueSet support exempt behavior; use it

Kubernetes-commit: 5f63d1f916279541874914165b21f4b4db31e26a
2023-07-04 14:33:22 +00:00
Kubernetes Publisher 4cf166b68a Merge pull request #119045 from serathius/test-consistent-list
Test consistent list

Kubernetes-commit: 2f563464bc879cc7d31642eb77e2b0d38b498159
2023-07-04 14:33:18 +00:00
Kubernetes Publisher ce72ad1c02 Merge pull request #117971 from wojtek-t/paginate_delete_collection
Paginate within DeleteCollection call.

Kubernetes-commit: c9c541a4b7f5a3aafac7e0b63c2080752ce16eb0
2023-07-03 22:41:39 +00:00
Tim Allclair 2a8bc69060 Initialize the AuditEvent with the AuditContext (#113611)
* Initialize the AuditEvent with the AuditContext

* Squash: Address PR feedback

* Squash: address PR feedback

Kubernetes-commit: 2b03f04ce589a57cf80b2153c7e5056c53c374d3
2023-07-03 18:28:13 +00:00
Marek Siarkowicz df9896fd00 Test consistent List
Kubernetes-commit: b36fdd68b72cd5c64ea5be3917846067644da983
2023-07-03 17:22:22 +02:00
Wojciech Tyczyński bf71493219 Simplify DeleteCollection
Kubernetes-commit: e08bd3bc263615f3a26bd17c66a3222e4b6ff7ec
2023-07-03 16:56:53 +02:00
Kubernetes Publisher 10b550f442 Merge pull request #118931 from wojtek-t/generic_cacher_tests_270623
Generalize watch storage tests

Kubernetes-commit: 8cd25e7908699eaf307661f805f7debcc9f358a0
2023-06-29 22:36:45 +00:00
Kubernetes Publisher 122f3d90e6 Merge pull request #118948 from aramase/aramase/c/oidc_wire_context
[StructuredAuthenticationConfig] wire request context to claim resolver

Kubernetes-commit: d27439701f6cc83f992eda73b4797fa1af8fe7f7
2023-06-29 22:36:44 +00:00
Kubernetes Publisher f807a349b2 Merge pull request #118945 from andrewsykim/update-request-filter-duration-buckets
Introduce larger buckets for request_filter_duration_seconds and request_wait_duration_seconds

Kubernetes-commit: 2ee01fb673213c80cb8afc79c60c32adeadb413c
2023-06-29 15:00:55 +00:00
Mike Spreitzer d03cf9927b Introduce apiserver_flowcontrol_current_executing_seats metric
This is a duplicate of
`apiserver_flowcontrol_request_concurrency_in_use` but with a better
name.  Hopefully we can later remove the copy with the inferior name.

Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 65e818d4ecfb7bf2a165897fb1caf29bf42f4f83
2023-06-29 01:43:17 -04:00
Mike Spreitzer 078694d35d Make QueueSet support exempt behavior; use it
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: f269acd12b225f6a2dbbfae64a475f73f448b918
2023-06-28 22:55:30 -04:00
Kubernetes Publisher 98133773bf Merge pull request #118182 from seans3/wsstream-refactor
Refactor wsstream library from apiserver to apimachinery

Kubernetes-commit: 056f3a56b821a063210c2c4a67cc7a4d0a361afe
2023-06-28 22:37:20 +00:00
Anish Ramasekar 822396743a [StructuredAuthenticationConfig] wire request context to claim resolver
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 150f732c7ee68cd738043c5e8a9966a9d55fb69d
2023-06-28 20:37:40 +00:00
Andrew Sy Kim d969ae0916 apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: 16fdd3e5eef452712165b7625b2fec078fa79b7b
2023-06-28 15:08:15 +00:00
Andrew Sy Kim 986c8832e5 apiserver: introduce larger buckets for request_filter_duration_seconds metric
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: c607984379234249403354bf1f9a2e86a740caf0
2023-06-28 14:19:51 +00:00
Wojciech Tyczyński b560936651 Generalize watch storage tests
Kubernetes-commit: 8266c4d934d42a5175a84bff10fda4bf36f13817
2023-06-27 18:12:30 +02:00
Kubernetes Publisher 7d79c570c7 Merge pull request #118888 from enj/enj/i/kms_interface_split
kmsv2: no-op: split transformer interface

Kubernetes-commit: 5e85f21e5be69d9e941771138002fdcfc48afbf2
2023-06-27 01:18:39 +00:00
Jiahui Feng 9eebea091a add test for authorizer type checking.
Kubernetes-commit: 7ccc23178396fb7c50cd59a16a62e7d79ba973a9
2023-06-08 15:51:05 -07:00
Jiahui Feng c85cef6cc3 add support for authorizer to type checking.
Kubernetes-commit: 04fa4184ed349d6ccce5be4daa7561356eebeea3
2023-06-07 10:11:30 -07:00
Richa Banker 8859465680 Add servedVersions info in StorageVersion API
Kubernetes-commit: 1c48b7ec144785b4b2493a01d82e40d6d34ce578
2023-06-01 18:07:56 -07:00
Amine a4fba6de9b Move DeleteFunc logging to level 2
Kubernetes-commit: 28b6c90696680c87cab04b539c0bca6af7d66bac
2023-05-24 13:50:50 -05:00