Commit Graph

6550 Commits

Author SHA1 Message Date
Kubernetes Publisher 43a321c9cf Merge pull request #116779 from jpbetz/cel-ratcheting
Controlled rollout of CEL libraries and language feautres

Kubernetes-commit: 6442024f1c7ca6a5f03a5d7c590f89d975ba6bda
2023-05-08 17:13:21 +00:00
Lukasz Szaszkiewicz decaec94cd storage/etcd: skip SendInitialEvents if the request is backward compatible
otherwise an error will be returned.
backward compatibility is defined as RV = "" || RV = "O" and AllowWatchBookmark is set to false.
in that case we rely on 267eb25e60/staging/src/k8s.io/apiserver/pkg/storage/etcd3/watcher.go (L260)

Kubernetes-commit: f2de1a00b8fd7a22f9d0b2c1ace69be41d304f83
2023-05-08 13:04:31 +02:00
Kubernetes Publisher 055116923f Merge pull request #117342 from kkkkun/update-etcd-deps-3.5.8
upgrade etcd deps to v3.5.8

Kubernetes-commit: c44b2ed0d89fff7276074eaee642a196240f0fa2
2023-05-06 17:21:15 +00:00
kkkkun f4c24327c3 Fix etcd3 config changed
Kubernetes-commit: 57969c1b52ce0c3c27ccbf02ecc52ebc1b8533d9
2023-05-06 19:40:40 +08:00
Kubernetes Publisher c34a7cbb3a Merge pull request #117211 from HirazawaUi/add-auth-metrics
add Authorization tracking request/error counts and latency metrics

Kubernetes-commit: 7e25f1232a9f89875641431ae011c916f0376c57
2023-05-05 13:40:04 +00:00
Kubernetes Publisher 0931d11960 Merge pull request #117677 from Huang-Wei/fix-quota-priorityclass
🐛 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope

Kubernetes-commit: dea1312e03a0d6b7bc73ff21fa243cccea419c76
2023-05-04 17:59:12 -07:00
Wei Huang 049d92137b benchmark test to evaluate the overhead of podMatchesScopeFunc
Kubernetes-commit: 359bcec0e097f448931fe1faadfec46322e8d94d
2023-05-04 16:55:32 -07:00
Kubernetes Publisher e15c59590b Merge pull request #117380 from yulng/dryrun1
Remove GA feature gates in 1.28 about DryRun

Kubernetes-commit: 7efa07c74ef7c216228bd7fa68e6fc222682eaf7
2023-05-04 07:31:54 +00:00
Kubernetes Publisher 1ea353dbf6 Merge pull request #117687 from pohly/klog-update
dependencies: klog v2.100.1

Kubernetes-commit: a6825c8542ee1e5e9d570ba1c267458a09287015
2023-05-03 18:57:04 +00:00
Kubernetes Publisher 9808a87411 Merge pull request #117328 from humblec/uber
dependencies: update gh/go.uber.org/{atomic,multierr}

Kubernetes-commit: eea8086d309186daad0644ef94d92a721f16fb60
2023-05-03 09:53:38 +00:00
Kubernetes Publisher 95f2d5a023 Merge pull request #117090 from jpmcb/cobra-1.7.0
Upgrades spf13/cobra to v1.7.0

Kubernetes-commit: e7162ced04fca7e97fa6be9eb0ae788148dabfda
2023-05-03 09:53:36 +00:00
Patrick Ohly 6715656a38 dependencies: klog v2.100.1
Kubernetes-commit: 5fff8cae749cefbac63173f176831ea007b95b3a
2023-04-29 20:47:44 +02:00
Joe Betz f32e391a45 Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
Kubernetes-commit: e740f8340eedc89baccd120329b454a860385e2d
2023-04-28 14:16:56 -04:00
Humble Chirammal aa3e661a6f dependencies: go.uber.org/atomic v1.10.0
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>

Kubernetes-commit: 6da128bdb3e3217a06040648c3161f99b8901c04
2023-04-26 14:08:20 +05:30
Humble Chirammal 6f78eb49e5 dependencies: update go.uber.org/multierr v1.11.0
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>

Kubernetes-commit: 872305788029b9039e8db66bcba0976a148a4b80
2023-04-26 14:02:34 +05:30
yulng 3813b3ea2d remove genericfeatures.DryRun in 1.28
Signed-off-by: yulng <wei.yang@daocloud.io>

Kubernetes-commit: b899ae48477fabfe06acbaf0ed34015db7e79d4b
2023-04-15 20:14:19 +08:00
kkkkun f5166f76f4 upgrade etcd deps to v3.5.8
Signed-off-by: kkkkun <scuzk373x@gmail.com>

Kubernetes-commit: 36b760a931743c503229104449f24d3854c3caf4
2023-04-14 16:29:05 +08:00
HirazawaUi e6be55636d add Authentication tracking request/error counts and latency metrics
Kubernetes-commit: 104c208d0fb69ad8edb180b2b306516f9d01d021
2023-04-11 22:35:14 +08:00
John McBride 75fa683972 Upgrades spf13/cobra to 1.7.0
Signed-off-by: John McBride <jpmmcbride@gmail.com>

Kubernetes-commit: 933b665c18c3946a1c1316b1741ae4e0d0f5e05e
2023-04-04 15:02:20 +00:00
Kubernetes Publisher e277c42916 Merge pull request #117716 from thockin/validation_test_whitespace
Clean up brace whitespace in **/validation_test.go

Kubernetes-commit: 2e78e07ee56e4c7a6e764af39735a36454768ab4
2023-05-02 18:31:24 +00:00
Tim Hockin 6fa34a3ae5 Clean up brace whitespace in **/validation_test.go
This was making my eyes bleed as I read over code.

I used the following in vim.  I made them up on the fly, but they seemed
to pass manual inspection.

:g/},\n\s*{$/s//}, {/
:w
:g/{$\n\s*{$/s//{{/
:w
:g/^\(\s*\)},\n\1},$/s//}},/
:w
:g/^\(\s*\)},$\n\1}$/s//}}/
:w

Kubernetes-commit: d55b67b349021b6c46fc6ce78f2a36bd4217145f
2023-05-02 00:36:15 -07:00
Kubernetes Publisher d77e939d8d Merge pull request #114998 from alexzielenski/apiserver/smd/ssa-conditionals
Fix SSA being silently disabled by lack of OpenAPI config

Kubernetes-commit: 2588ae9a04be81fde4078253478e575785916652
2023-05-02 02:00:25 +00:00
Ian K. Coolidge fa401a0922 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749
Steps:
1) Manualy update go.mod with new version string
2) ./hack/update-vendor.sh
3) Fixup go.sum with new package hash
4) ./hack/update-vendor.sh

Kubernetes-commit: 9f46cbc6fa475c420af3ccd654d4e59606375836
2023-03-18 14:52:37 +00:00
Alexander Zielenski 5ea7a9f341 fixup patcher test to include field manager
Kubernetes-commit: 077cc20f8af4387f37d972e925510cb5e2ef56ea
2023-03-15 14:42:07 -07:00
Alexander Zielenski 4bd3e89853 remove checks for fieldmanager from handlers
it should never be nil

Kubernetes-commit: ad5cda4d21974104db01732474130d10c001d3f2
2023-03-14 15:08:00 -07:00
Joe Betz e04cbed587 CEL lib: Expose errors on authz decisions instead of raising them from check().
Co-authored-by: Ben Luddy <bluddy@redhat.com>

Kubernetes-commit: 1053d1bbcf581f20300a821a951a14ae77915246
2023-03-10 22:38:21 -05:00
Ben Luddy 330dca5753 Cache authz decisions within validating policy admission.
This avoids the surprise of identical authorization checks within a
policy evaluating to different decisions during the same admission
pass, and reduces the overhead of repeatedly referencing the same
authorization check.

Kubernetes-commit: f1700e4b95b404b37312084800ab8022f7069fee
2023-03-09 14:52:09 -05:00
Alexander Zielenski 444c9b2e30 add OpenAPIV3 config to tests and server options
Kubernetes-commit: ffb9c076d77d126484fe17adc30d5e40efb5efee
2023-03-03 10:49:50 -08:00
Alexander Zielenski c5d71177bc supply deduced typeconverter to apiserver tests
Kubernetes-commit: 94909af68aee4e5ad9f9c4f48f0b328473725e7a
2023-03-03 10:45:44 -08:00
Wojciech Tyczyński 6ab923fd4b Paginate within DeleteCollection call.
Kubernetes-commit: 732775ee7d1270b6056c371c4298a6b3380bec02
2023-02-09 20:59:18 +01:00
Alexander Zielenski 3783e4af68 Throw error if OpenAPIV3 config is not provided
it is required for Server-SIde-Apply to function correctly (SSA is based on OpenAPI schemas)

Kubernetes-commit: 302daa889c5ddb9c862cd0101b94071e42a3081d
2023-01-11 14:54:03 -08:00
Kubernetes Publisher a88d792173 Merge pull request #117705 from Jefftree/update-openapi-fix-race
Update kube-openapi to fix race

Kubernetes-commit: 3f8c4794eadf8aadd8a5bcb0b875bf0af5c2020b
2023-05-01 22:24:12 +00:00
Kubernetes Publisher 0faed203d1 Merge pull request #117623 from skitt/intstr-fromint32-api-machinery
API machinery: use new intstr functions

Kubernetes-commit: 32703dec0faa19762f3cde83cfefae981de62027
2023-05-01 22:24:10 +00:00
Kubernetes Publisher 2dff60bb4d Merge pull request #117253 from akhilerm/update-containerd-dependencies
dependencies: update cgroups, ttrpc, ebpf versions

Kubernetes-commit: d33853edcfdb521c80cd9a659ed02b7fe52b40f4
2023-05-01 18:20:24 +00:00
Jefftree 1d73caf490 Update kube-openapi to fix race
Kubernetes-commit: de34540248a6cd4335a6aedd3f1d24c608d59c86
2023-05-01 17:19:03 +00:00
Kubernetes Publisher d82c564862 Merge pull request #117349 from mohitsharma-in/deps-update/natefinch-lumberjack.v2
dependencies :  update  gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1

Kubernetes-commit: 9df749c5971655a8d533b8f91f8346da0211eeec
2023-04-28 22:09:19 +00:00
Kubernetes Publisher 7dd2787702 Merge pull request #117641 from wojtek-t/cleanup_cacher_tests_847
Refactor some watchcache tests

Kubernetes-commit: 00eee07272989e57eddf01e0ae1db5dda969dc63
2023-04-27 22:07:56 +00:00
Wojciech Tyczyński d9c1a1d082 Refactor some watchcache tests
Kubernetes-commit: 1eca720dcc727b5deeeeb1164689d42c6cc316eb
2023-04-27 11:59:33 +02:00
Kubernetes Publisher bd86839aba Merge pull request #117593 from jpbetz/test-join
Fix bug where CEL listOfString.join() results in unexpected error

Kubernetes-commit: 8ae8e7756075088b7178246457efc6859f192fc4
2023-04-27 02:24:51 +00:00
Kubernetes Publisher 4831ce3bb9 Merge pull request #117584 from wojtek-t/move_cacher_lister
Refactor cacher.ListerWatcher code structure

Kubernetes-commit: e9e60316d303a17c81ed856d6c82a4823b4327f8
2023-04-25 22:04:04 +00:00
Joe Betz 394de266f8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
Co-authored-by: Alvaro Aleman <alvaroaleman@users.noreply.github.com>

Kubernetes-commit: a4f98e4c1e85f6665578b938c5bbb65a5f9541c3
2023-04-25 14:22:01 -07:00
Wojciech Tyczyński 53b8c6919c Refactor cacher.ListerWatcher code structure
Kubernetes-commit: 3f247e59edfd4083242ad7271d076a38291760ff
2023-04-25 19:03:20 +02:00
Kubernetes Publisher e2900b180d Merge pull request #117350 from mohitsharma-in/update/google-golang-protobuf
Dependencies: Update google.golang.org/protobuf v1.30.0

Kubernetes-commit: b925ce244638187dbf0f502ecb6e02db149970aa
2023-04-25 18:29:57 +00:00
Kubernetes Publisher b8aae818d7 Merge pull request #117582 from wojtek-t/more_generic_tests_for_cacher
Enable a bunch of generic storage tests for watchcache.

Kubernetes-commit: c471f03ea369246f0d7a5279f11c84a399936b3c
2023-04-25 18:29:51 +00:00
Joe Betz daf9c33de1 Fix bug where CEL listOfString.join() results in unexpected error
Kubernetes-commit: e115d5234c208bddd1029d36f32c732b7080226f
2023-04-25 10:21:41 -04:00
Akhil Mohan 46705e923c chore: update cgroups and ttrpc versions
- update github.com/containerd/cgroups to v1.1.0
- update github.com/containerd/ttrpc to v1.2.1

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>

Kubernetes-commit: 76fe41a996ec78d9774e1f1ca9d1d7ec40522f98
2023-04-23 22:23:42 -07:00
Wojciech Tyczyński 68a91d7597 Enable a bunch of generic storage tests for watchcache.
Kubernetes-commit: 88e2c34439016e5feddfed529698ed71e81904d9
2023-04-17 19:03:51 +02:00
Kubernetes Publisher c4a4793144 Merge pull request #117483 from ArkaSaha30/bump-gofuzz
dependencies:update `github.com/google/gofuzz` to v1.2.0

Kubernetes-commit: 7fbe3cba41915cad69f376eb6b3d3a326d51cd11
2023-04-24 22:30:58 +00:00
Kubernetes Publisher 098b4196c2 Merge pull request #117482 from ArkaSaha30/bump-go-logr
dependencies:update `github.com/go-logr/logr` to v1.2.4

Kubernetes-commit: f77e570fbadbf91c05840a1f6f9b6aec860de400
2023-04-24 22:30:56 +00:00
Kubernetes Publisher 484331ccea Merge pull request #117413 from wojtek-t/generic_bookmark_tests
Refactor watch bookmark tests to allow sharing between etcd3 and watchcache

Kubernetes-commit: 5fa78f4646a7a1ae3109b681ad289e0a909a7d10
2023-04-24 22:30:54 +00:00