55bc692e10
Rename admission cel package to validatingadmissionpolicy
...
Kubernetes-commit: 40c21dafcdb7d4f7ee85c652b362632f3b620861
2022-11-08 14:18:26 +00:00
879a69d45b
Merge pull request #113758 from alexzielenski/readyFunc-refactor
...
use admission.Handler readyFunc for CEL Admission plugin
Kubernetes-commit: aeb8a8dfa47e25b21506a6c890d27754574ea7ca
2022-11-10 05:37:31 +00:00
0e0afc3ed7
Merge pull request #113475 from DangerOnTheRanger/validation-admission-metrics-integration
...
Validating admission metrics integration
Kubernetes-commit: f87231003aeb43bf884cf9dc10b1247b8ae5cbb8
2022-11-10 01:37:26 +00:00
806e2feeca
add test for error when informers are not ready
...
Kubernetes-commit: acf571fcbed6e762a2a654bfbe6c415e668dfed3
2022-11-09 15:28:37 -08:00
2167932c69
use existing admissionHandler readyfunc to wait for sync
...
is what other plugins do, and should decrease verbosity in logs
Kubernetes-commit: df315f347c911c5cc189d14f6dc70a23da52e57d
2022-11-08 13:07:42 -08:00
299c158ba3
Reuse generic List test for watchcache
...
Kubernetes-commit: ef8c4fbca8e5bed1e7edc162b95c412a7f1a758e
2022-11-04 22:01:37 +01:00
012ace9f52
Fix lack of sorting of list results in watchcache
...
Kubernetes-commit: aaaee155dd3c9402e674d066f4d6ca30cc971c8e
2022-11-08 13:06:56 +01:00
8cd19efa73
Fix inconsistency in returning list results both in etcd3 and watchcache
...
Kubernetes-commit: da8d197a7205c01fdf376246995b0a1b3ab53859
2022-11-08 11:47:28 +01:00
c44ad6bb02
apiserver: refactor cors filter
...
Kubernetes-commit: ea251b5605c22d82962d4e699d933428e4c9c211
2022-11-03 09:29:47 -04:00
5b1e3f38d8
apiserver: refactor cors unit test
...
Kubernetes-commit: ae7327ab8eb2e05c3ccb185354eed247795bbc6d
2022-11-03 09:05:40 -04:00
919e9045fa
Combine RequestAuditConfig with RequestAuditConfigWithLevel
...
Kubernetes-commit: 1a1ca5173ea0f6b06a74d4a26e694cff521a2f8e
2022-11-02 15:23:48 -07:00
f8412e0624
dependencies: update to ginkgo v2.6.1, gomega v1.24.2
...
Ginkgo v2.5.0 adds support for a "timeline": a full description of what happened
while a specific test ran, including failures, timeouts, and log output.
Ginkgo v2.6.0 adds ReportBeforeSuite which we need for
https://github.com/kubernetes/kubernetes/issues/114313 .
Kubernetes-commit: f3ef4004317c1a12d84021be29dd5f92badc8eff
2022-11-02 09:07:12 +01:00
8884260fa6
Add metrics integration.
...
Kubernetes-commit: 99494e67779d0db5a1bf304256e7df273070bf95
2022-10-31 19:22:35 +00:00
b987cdbc88
Merge pull request #113693 from dashpole/apiserver_tracing_beta
...
Graduate API Server tracing to beta
Kubernetes-commit: b2c72feca832e91dc1a9c5f0d1f21b12df77ef75
2022-11-09 13:44:49 +00:00
56254da7fb
Merge pull request #113721 from wojtek-t/storage_standard_test_naming_2
...
Standardize naming in generic storage watcher tests
Kubernetes-commit: 909af807eecd769f51d4f6e2988d6e86a1192337
2022-11-09 13:44:46 +00:00
e3c73d9b61
Merge pull request #113485 from MikeSpreitzer/apf-borrowing
...
Add borrowing between priority levels in APF
Kubernetes-commit: 1193a9abcbd6c6ce6fc7d4ce38872f1933ef5159
2022-11-09 13:44:44 +00:00
807ba65cc7
Merge pull request #113171 from Jefftree/aggregated-discovery-generic
...
Aggregated discovery server changes
Kubernetes-commit: 8058e8eff8ba8541ddd48cd54bbb19a3fce62c09
2022-11-09 09:40:18 +00:00
435b5543db
Merge pull request #113760 from alexzielenski/admission-listwatch-flake
...
fix possible race of listwatch in admission test
Kubernetes-commit: 18a78949bc7fa43e760570103321369ea31726b3
2022-11-09 09:40:16 +00:00
767537116c
Merge pull request #112050 from nilekhc/kms-hot-reload
...
Implements hot reload of the KMS `EncryptionConfiguration`
Kubernetes-commit: e62cfabf9326cdec65e926b697fa1911b4e85da6
2022-11-09 05:37:19 +00:00
e1b2482eb1
Merge pull request #113749 from jpbetz/fix-params-null
...
Fix params to be null instead of an empty map if paramRef is null
Kubernetes-commit: c61c3fc492424bfcfabf132650c2bc4404ef2727
2022-11-09 01:37:20 +00:00
e7f9c74b7b
Merge pull request #113711 from andrewsykim/fieldmanager-logging
...
apiserver: use the correct error when logging errors updating managedFields
Kubernetes-commit: 429f1527a7ac94e5280cb41931e74ac52d7a3fb1
2022-11-09 01:37:18 +00:00
25a9355604
Merge pull request #113486 from jkh52/uds-dial
...
egress_selector.go: hard cap UDS dial.
Kubernetes-commit: 86c535c0f8c3ba81e7c16f56659409d08c1dcb0a
2022-11-09 01:37:16 +00:00
9ab2df47e6
Merge pull request #111879 from sanwishe/etcd_compact_doc
...
fix etcd compaction doc
Kubernetes-commit: 886da71e7588c198dcb9a6c7cccfedb478110e57
2022-11-09 01:37:14 +00:00
855ac5dd3a
embed component-base tracing configuration
...
Kubernetes-commit: 6e13cf69f62e54622d45269e9ae33799a85f7cff
2022-11-08 22:43:28 +00:00
d72952eab5
Merge pull request #113698 from dashpole/missing_apiserver_migration
...
Migrate another usage of utiltrace to component base tracing
Kubernetes-commit: e361272423fda20d4201ddb2b98d9c1b512e5595
2022-11-08 21:37:23 +00:00
7ab335d271
Merge pull request #113629 from andrewsykim/apiserver-identity-beta
...
Promote APIServerIdentity to Beta
Kubernetes-commit: 3a99a5954d6497b4238d011cec4d33422d3957a0
2022-11-08 21:37:21 +00:00
5643daa2db
Merge pull request #113577 from pacoxu/prometheus-client
...
upgrade github.com/prometheus/client_golang to v1.14.0
Kubernetes-commit: 74352d88aaf1dc81eee6d90a3768fbd086f1a8f9
2022-11-08 21:37:19 +00:00
26c78119c2
Merge pull request #112679 from dgrisonnet/fix-apiserver-sli
...
Improve apiserver SLI metric name
Kubernetes-commit: 7752c3a8e0fbf59739f40526b2235347ff78000e
2022-11-08 21:37:16 +00:00
b2bf3ca966
add new aggregated resourcemanager to genericapiserver
...
Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>
Kubernetes-commit: 6e83f6750598d394fb257f66c5d0721cf88f45db
2022-11-08 12:37:50 -08:00
0a2a637e85
negotiated refactor
...
Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>
Kubernetes-commit: 76f056867a2be388f7780c1ff5c794edcdfd9aa4
2022-11-08 12:12:34 -08:00
0e28c0c81f
Fix params to be null instead of an empty map if paramRef is null
...
Kubernetes-commit: 65460b14d2b9ea20aaf2c6fece191af53ae57249
2022-11-08 13:49:50 -05:00
4bd488aae1
promote TracingConfiguration to v1beta1
...
Kubernetes-commit: 4be473c774aa1ccd018d6430dc860629a5b22022
2022-11-08 15:15:05 +00:00
ad0fbeeeec
Merge pull request #113728 from pawbana/add-scope-to-api-server-tracking
...
Added scope to api server tracing
Kubernetes-commit: 34ca18d1d0b239b871de7ca8047ab000ca3a418f
2022-11-08 04:30:22 -08:00
ebb0a2b606
Added scope as tracing attribute
...
Kubernetes-commit: e4169d7f4381595152f6fa862af2227950f3fc76
2022-11-08 11:22:57 +00:00
20c697acfa
Merge pull request #112137 from MikeSpreitzer/add-concurrency-allocation-algorithm
...
Add solver for APF concurrency rebalancing
Kubernetes-commit: 5a1fb17e2e07d9ddd89d83371595c72dee42e87d
2022-11-08 13:37:03 +00:00
a29f52cb30
Standardize naming in generic storage watcher tests
...
Kubernetes-commit: 593742f092e1ae81988c12e6d833acb29c02009e
2022-11-08 09:52:59 +01:00
3081aacf4c
upgrade prometheus-client to v1.14.0
...
Kubernetes-commit: c3add32859da5ff8156d30cf7c1697a2fb2a2eea
2022-11-08 16:25:12 +08:00
d50444613b
Merge pull request #113696 from tallclair/path
...
Fix etcd path construction
Kubernetes-commit: aa66cec6fa6e6804669363d54dc8971a6cb59b79
2022-11-08 06:29:00 +00:00
aa0e1e5e62
Merge pull request #113314 from cici37/celIntegration
...
CEL validation in Admission chain
Kubernetes-commit: 595ea324113580ae61f4a15ab3e5b22303a195cf
2022-11-08 06:28:58 +00:00
ab224f3839
Merge pull request #113697 from aramase/kms-duplication-name-validation-part-2
...
[KMS]: add validation for duplicate kms config name when auto reload is enabled
Kubernetes-commit: a236e4ca6f3860a5acbbfc62bb3fdd88ac7e2757
2022-11-08 06:28:54 +00:00
fda66ef343
Merge pull request #113688 from dashpole/update_utils
...
Update k8s.io/utils to fix util tracing panic
Kubernetes-commit: fa2e203a6bde89a84443ee9813e1f27aa31326a9
2022-11-08 06:28:52 +00:00
9e009a746a
Merge pull request #113682 from pawbana/add-verb-resource-to-api-server-tracing
...
Add verb resource to api server tracing
Kubernetes-commit: 887d92d20b3d1538ba900c466ead25ed662179cc
2022-11-08 06:28:50 +00:00
fe7d5b4b34
Merge pull request #113649 from andrewsykim/apiserver-identity-hash
...
apiserver identity : use SHA256 hash in lease names
Kubernetes-commit: 3d5725d9c09ef0be2e6aba4fdc665b2bd4a3fc96
2022-11-08 06:28:46 +00:00
16a641df6c
Merge pull request #113529 from enj/enj/i/kms_single_healthz
...
kms: add wiring to support automatic encryption config reload
Kubernetes-commit: b1dd1cd2f177ecf228cbbfb0db9327a276098be8
2022-11-08 06:28:44 +00:00
a3a25ce15d
Merge pull request #113666 from wojtek-t/storage_standard_test_naming
...
Standardize naming in generic storage tests
Kubernetes-commit: f8750e2faf99fb512c7c8fcce12ecaa8f793bd3c
2022-11-08 06:28:42 +00:00
5a2966576c
Merge pull request #113648 from SataQiu/improve-supported-media-type-20221105
...
kube-apiserver: print supported media types on failure to find a serializer
Kubernetes-commit: b4156ea47b3caf0088c6316ecd89afe715830807
2022-11-08 06:28:39 +00:00
3f92018a06
apiserver: use the correct error when logging errors updating managedFields
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
Kubernetes-commit: efdd06718646fc7e8912f8aaa8fc7bef3f7cdba0
2022-11-07 23:00:58 -05:00
25c1e9054d
feat: implements kms encryption config hot reload
...
This change enables hot reload of encryption config file when api server
flag --encryption-provider-config-automatic-reload is set to true. This
allows the user to change the encryption config file without restarting
kube-apiserver. The change is detected by polling the file and is done
by using fsnotify watcher. When file is updated it's process to generate
new set of transformers and close the old ones.
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
Kubernetes-commit: 761b7822fca569d475f782b135ef433e5b014147
2022-11-07 22:15:56 +00:00
81aeb1b5e9
Integrate cel admission with API.
...
Co-authored-by: Alexander Zielenski <zielenski@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
Kubernetes-commit: e7d83a1fb7b3e4f6a75ed73bc6e410946e12ad9f
2022-11-07 21:38:55 +00:00
58f75bc06a
Add match check for policy and binding.
...
Co-authored-by: Max Smythe <smythe@google.com>
Kubernetes-commit: 46f97d4662d5b403badd29675d79d0c74875b9f0
2022-11-07 21:33:17 +00:00
Cici Huang