Commit Graph

6550 Commits

Author SHA1 Message Date
Monis Khan be9579fc15 k8s.io/apiserver/pkg/storage/value: allow encryption-at-rest approval
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: b68bc0678d5876e4c11c7d5289f777b6e37c4917
2022-10-17 17:07:56 -04:00
Monis Khan f4ac8fc8bb prefixTransformers: allocate after transformation length is known
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 59e1a32fc8ed35e328a3971d3a1d640ffc28ff55
2022-10-17 16:56:40 -04:00
Kubernetes Publisher c3dab8f04e Merge pull request #113106 from pohly/dep-ginkgo-gomega
dependencies: update to gomega v1.22.1 and ginkgo v2.3.1

Kubernetes-commit: 4216ad3542ff5defcfdb303945772a8e1663a7f6
2022-10-17 20:08:32 +00:00
Davanum Srinivas 96eda3624c Bump log level for health check warning for missing components
Default api server manifest whose liveness check looks like:
"/livez?exclude=etcd&exclude=kms-provider-0&exclude=kms-provider-1"

Which causes spurious messages in apiserver logs every 10 mins:
```
W1017 00:03:39.938956       9 healthz.go:256] cannot exclude some health checks, no health checks are installed matching "kms-provider-0","kms-provider-1"
```

Let's not log excessive messages especially at warning level. We should
do this at a higher level (6 instead of 4).

NOTE: we don't change the message returned to the http request, we keep
that as-is (does not change on log level)

Also see:
https://github.com/aws/eks-distro/blob/v1-19-eks-12/projects/kubernetes/kubernetes/1-19/patches/0016-EKS-PATCH-apiserver-healthz-upper-log-verbosity-for-.patch

Signed-off-by: Davanum Srinivas <davanum@gmail.com>

Kubernetes-commit: 20de240d5bdb7fc50de3fe9b8cdd95f81bf47034
2022-10-17 09:42:09 -04:00
Han Kang 4ae2cd3dc6 actually resolve the computations for buckets for static analysis
Change-Id: Icafe84e165cc14087a2811f9a3e5d5e69ef3f178

Kubernetes-commit: a07718258aef5cd20a356b4657f1054b6baeb03b
2022-10-13 13:44:51 -07:00
Tim Allclair 3268b0561b Validate etcd paths
Kubernetes-commit: f1693a02c46f79f8c90a4ef17c4a750034f21484
2022-10-10 18:15:22 -07:00
Abu Kashem c4de3f516b apiserver: fix typo in graceful termination test
Kubernetes-commit: 0af2306a9a1c867fc374eb740b3be2b5a00675e7
2022-10-10 10:47:27 -04:00
Shiming Zhang 5e43649440 Close body when Report non-OK status code
Kubernetes-commit: 1d1dc364bdc75c0aab9ac2406cb74f5c46c104ae
2022-10-09 11:22:10 +08:00
Patrick Ohly ad8c5c7734 dependencies: update to gomega v1.22.1 and ginkgo v2.3.1
This adds support for timeouts and intermediate reports in Eventually and
Consistently.

Kubernetes-commit: d1dbf7ae3e223d5d93d0b3d875e4f03ff38e6de0
2022-10-07 17:19:09 +02:00
Kubernetes Publisher 1ff02d7067 Merge pull request #112374 from Argh4k/no-stack-timeout
do not print status stack in case of timeout from timeout handler

Kubernetes-commit: 8fb8bb4e9ae2d2cb2b7cdb4c79c73be344fdc164
2022-10-15 04:06:27 +00:00
Kubernetes Publisher 7de07a574c Merge pull request #112988 from alexzielenski/update-kube-openapi
update kube-openapi

Kubernetes-commit: 353e00796ef4c1e8fcea1cb51bcc62fc3acac3c8
2022-10-15 04:06:24 +00:00
Kubernetes Publisher e23582d755 Merge pull request #109590 from twilight0620/mytest
code check modify

Kubernetes-commit: cf18b5098e4da734c7846de671ed1f4e7ebf971f
2022-10-15 00:00:32 +00:00
Kubernetes Publisher 6ea0849c6d Merge pull request #113037 from pacoxu/fsnotify-v1.6.0
update fsnotify to v1.6.0

Kubernetes-commit: 542ec977054c16c7981606cb1590cc39154ddf01
2022-10-14 08:10:21 +00:00
Alexander Zielenski ca9a4855d3 update kube-openapi
hack/pin-dependency.sh k8s.io/kube-openapi 172d655c2280350c77cf05962948fc67ff043492
hack/update-vendor.sh

Kubernetes-commit: f622dd918ab5d3bc902a8c625a0a89b21e8afe43
2022-10-13 19:51:22 -07:00
Kubernetes Publisher f928c72a9f Merge pull request #112153 from harshanarayana/feature/GIT-111923/enable-UID-logs-for-kmsv2
kmsv2: enable logging for kmsv2 enc/dec operations

Kubernetes-commit: 77d5dc7efc9c34eddd1137a938a0614f7e7e3274
2022-10-13 20:23:09 +00:00
Kubernetes Publisher fd5dbbca89 Merge pull request #112789 from enj/enj/r/kms_load_once_v2
Load encryption config once (second approach)

Kubernetes-commit: 01019770cfa6674099504050c47792d8770a2f7e
2022-10-13 20:23:07 +00:00
Kubernetes Publisher 318e3ec469 Merge pull request #113011 from jpmcb/cobra-1.6.0
Bumps cobra from 1.5.0 to 1.6.0

Kubernetes-commit: 79b4f1e77ae98ede37fd117f36158e88116a8a15
2022-10-13 20:23:05 +00:00
Paco Xu c23bbb6aae fsnotify: use event.Has instead of "event.Op&h == h"
Kubernetes-commit: 2ce7a8116902a47c0b859dff1f546e194d468064
2022-10-13 13:42:11 +08:00
Paco Xu cc4fd0eb1c update fsnotify to v1.6.0
Kubernetes-commit: 3fee9d27355afe64dec7fa264e1faf209712f169
2022-10-13 13:14:43 +08:00
John McBride 6cb436527c Bumps cobra from 1.5.0 to 1.6.0
- Upgrades mousetrap license to latest Apache 2.0

Signed-off-by: John McBride <jpmmcbride@gmail.com>

Kubernetes-commit: dfb55ba48a3d7bcf8efad080de822c57a3d8670f
2022-10-12 14:53:32 +00:00
Kubernetes Publisher db8c02bd35 Merge pull request #112926 from jiahuif-forks/refactor/cel-out-of-apiextensions
split and move CEL package

Kubernetes-commit: 61ca612cbb85efa13444a6d8ae517cd5e9c151a4
2022-10-13 00:00:33 +00:00
Kubernetes Publisher 848d0394b3 Merge pull request #112989 from ameukam/bump-golang.org/x/text-to-v0.3.8
Bump golang.org/x/text to v0.3.8

Kubernetes-commit: 054d86feb42b67bb13608d9aa9a7c986750da753
2022-10-12 04:05:21 +00:00
Arnaud Meukam d68a43391d Bump golang.org/x/text to v0.3.8
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>

Kubernetes-commit: 0d19690a54e480923e8222ce79566e6879667a1f
2022-10-11 23:30:39 +02:00
Jiahui Feng ac0ce38abe use DefaultMaxRequestSizeBytes for maxRequestSizeBytes.
Kubernetes-commit: 755f41a185e828d9c64ae3ac37ce829e60592ad1
2022-10-10 14:42:24 -07:00
Jiahui Feng 56d5416474 generated: ./hack/update-vendor.sh
Kubernetes-commit: 5b8a5b37d5b2031f5733396613d781f8967c25ed
2022-10-07 15:36:19 -07:00
Jiahui Feng 870da5a58e move CEL package to apiserver package.
only anything that does not require Structural

Kubernetes-commit: 0dd316a5c11261c0e5fc7928d8697754b16ad461
2022-10-07 15:02:47 -07:00
Kubernetes Publisher 3504a6fe60 Merge pull request #112884 from logicalhan/slis
wire up feature-gate for component slis

Kubernetes-commit: e11e226b23c0213021a6678002132ad102d488e7
2022-10-07 04:11:18 +00:00
Manish Kumar a433b219b9 Move celopenapi/model to staging/src/k8s.io/apiextensions-apiserver/pkg/apiserver/schema/cel/ (#109959)
Co-authored-by: Manish Kumar <manish.kumar1@india.nec.com>

Kubernetes-commit: 39ffd45175876fe7c846c6239d89613d31a28fa1
2022-10-07 05:43:52 +05:30
Kubernetes Publisher 2c46875bb7 Merge pull request #112875 from pohly/update-yaml
dependencies: update to sigs.k8s.io/yaml v1.3.0

Kubernetes-commit: 93d1c43b491a39740297cf1e76782b99d8739865
2022-10-06 16:07:04 +00:00
Kubernetes Publisher d022845da0 Merge pull request #112792 from cici37/celAd
Add feature gate CelValidatingAdmission

Kubernetes-commit: b4eec3c2ad8d0645a10b4e911738627b7ecb2809
2022-10-05 23:59:00 +00:00
Han Kang a26df69931 wire up feature-gate for component slis
Change-Id: Iba6ffbcac9dba4f4be3023ada6ac31691c1ae17b

Kubernetes-commit: 01bfbdff2dee3be93d286a8ff53f9e52a1ee9724
2022-10-05 15:56:06 -07:00
Cici Huang 025851852a Update feature gate name to CELValidatingAdmission
Kubernetes-commit: d8ab3fea0d5f91e273fcb3b49cffb71d1b70f7e3
2022-10-05 19:40:50 +00:00
Patrick Ohly df2eef62a7 dependencies: update to sigs.k8s.io/yaml v1.3.0
No particular benefit and no relevant changes, it's just to stay up-to-date and
to avoid having to pull that in when merging
https://github.com/kubernetes/kubernetes/pull/111023 which indirectly depends
on the newer release.

Kubernetes-commit: 9b93cc663a102b6e36f07eecc7b6e32225f39295
2022-10-05 11:14:23 +02:00
Cici Huang 464de72d97 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control
Kubernetes-commit: 0486e062618f2181857ae7b235dcd4b8be0964e4
2022-10-04 04:46:55 +00:00
Kubernetes Publisher 2f09ce5f22 Merge pull request #112306 from tkashem/v1beta3
add v1beta3 for Priority And Fairness

Kubernetes-commit: 9720af2ba3f0d792c873bfa6e4d54e60736fb7a0
2022-10-03 19:58:02 +00:00
Kubernetes Publisher 63a7e57090 Merge pull request #112258 from Abirdcfly/atomicTypes
go1.19: change some atomic.Value to atomic.Bool

Kubernetes-commit: f8bb82c2ac397b6353203ea7bc2b165ef4b17d1e
2022-09-30 23:53:26 +00:00
Kubernetes Publisher b54f08dbf6 Merge pull request #112797 from SataQiu/deprecated-apiserver-20220930
kube-apiserver: mark unused master-service-namespace flag as deprecated

Kubernetes-commit: 8ddbd892f24d895bd49563ddaa7614ef3c21f53f
2022-09-30 13:30:13 -07:00
SataQiu 2c587cfaab kube-apiserver: mark unused master-service-namespace flag as deprecated
Kubernetes-commit: 3cd3ab5f943a5b0e1bc0dc53c90ed9cf0aa811ad
2022-09-30 16:13:13 +08:00
Kubernetes Publisher da6fc2e0ae Merge pull request #112707 from enj/enj/i/https_links
Use https links for k8s KEPs, issues, PRs, etc

Kubernetes-commit: 3af1e5fdf6f3d3203283950c1c501739c21a53e2
2022-09-29 22:40:50 +00:00
Cici Huang d089253bb2 Add feature gate CelValidatingAdmissionExtensibility
Kubernetes-commit: 9dff2311eacbcde1390ad67233cf0a48f0020eea
2022-09-29 18:45:14 +00:00
Alex Zielenski c4a7c1b469 Allow timestamp transformer equalities to be configurable (#112158)
* allow noop-ignoring transformer to be configurable

* consolidate timestamp equalities initialization

* remove extra plumbing

* fix typo

* remove CustomEqualities list

Kubernetes-commit: a9a1cdbd1531df06e27029686669a8fea99d44e8
2022-09-28 10:56:34 -04:00
Kubernetes Publisher a9c8527e28 Merge pull request #112738 from liggitt/proto-tag
github.com/matttproud/golang_protobuf_extensions v1.0.2

Kubernetes-commit: 827c77afcb242295d438e847622699393034ed7c
2022-09-28 14:35:42 +00:00
Kubernetes Publisher 21548b65b5 Merge pull request #112689 from cheftako/master
Bump konnectivity-client to v0.0.33

Kubernetes-commit: 1294f557b90b5221e19d4fe3bffb06c09cd8ea81
2022-09-28 02:35:35 +00:00
Kubernetes Publisher 9d9f949704 Merge pull request #112741 from logicalhan/health-check-metrics
enable health check SLI metrics for apiserver

Kubernetes-commit: e11f23eb9712c9b4bebf8dd85dcb04441b4fb705
2022-09-28 02:35:33 +00:00
Kubernetes Publisher 710ad8da8e Merge pull request #112461 from aramase/validate-annotations
[KMSv2]: validate annotations key and size

Kubernetes-commit: 81b474d6a78dd5a75c91649486df0d92d43bbaad
2022-09-27 22:35:40 +00:00
Kubernetes Publisher 4f56f2c12f Merge pull request #112728 from qmloong/qmloong/redundant-log
fix: remove redundant error log print

Kubernetes-commit: 2a0842f7f3a384c7e848f21b09f2260dfb3d894f
2022-09-27 22:35:39 +00:00
Kubernetes Publisher 791da2a796 Merge pull request #112748 from wojtek-t/lock_ssa_gate
Lock ServerSideApply feature to true

Kubernetes-commit: 97d37c29552790384b0a8b8f6f05648f28e07c55
2022-09-27 18:35:40 +00:00
Wojciech Tyczyński baa5a012e9 Lock ServerSideApply feature to true
Kubernetes-commit: 57c95fbfa12bc04456330d8b0b29f333106cf156
2022-09-27 11:13:00 +02:00
Kubernetes Publisher 66c3451890 Merge pull request #112703 from enj/enj/r/kms_cleanup
encryption config: no-op refactor to prepare for single loading

Kubernetes-commit: 24377fa7a1b5a2a490e0b14e518bf17e3f1e652f
2022-09-27 06:50:39 +00:00
Kubernetes Publisher 4cfb2769d4 Merge pull request #111980 from aramase/kms
Add staging directory for kms

Kubernetes-commit: a54d8d8addf53270469399631fa0ba5c9e092945
2022-09-27 06:50:37 +00:00