kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,804 Commits 30 Branches 1,482 Tags 31 MiB
Commit Graph

663 Commits

Author SHA1 Message Date
Abu Kashem d53acfe201 apiserver: store (event, evaluated policy) pair in request context 
Kubernetes-commit: 8be823b0b0270e1b979b3d4c6e683e1daa0f2e01
 2021-09-20 17:43:16 -04:00
CKchen0726 5c4bb8bb6a remove invalid nil check 
Kubernetes-commit: 3f1675312042cd855a39200c4bff8020cc0922de
 2021-09-13 21:04:31 +08:00
wojtekt b898581360 Migrate to k8s.io/utils/clock in apiserver 
Kubernetes-commit: 859a98c0358610e2c127cd2fba1be601ca975188
 2021-09-14 20:36:07 +02:00
Dr. Stefan Schimanski 5210be757e server-side-apply: print object name in SHOULD NOT HAPPEN message 
Kubernetes-commit: dc6f471e2cceb7aebb62fe2e4bd7c9ce53df6ff0
 2021-09-06 08:35:47 +02:00
Stephen Augustus 771ffe6475 generated: Run hack/update-gofmt.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>

Kubernetes-commit: 481cf6fbe753b9eb2a47ced179211206b0a99540
 2021-08-12 17:13:11 -04:00
Abu Kashem cafef859a7 apiserver: add key/value pair to httplog 
Kubernetes-commit: bdedd2a4c16487e075db45e778c9e47ddd57448f
 2021-08-19 17:07:24 -04:00
Antonio Ojea 38c6ad936b run hack/update-netparse-cve.sh 
Kubernetes-commit: 0cd75e8fec62a2531637e80bb950ac9983cac1b0
 2021-08-20 01:16:14 +02:00
Abu Kashem 450b7e8f12 rename audit Checker interface 
Kubernetes-commit: 27f150351475adaef416bd893403e7066b70d33a
 2021-03-24 13:07:21 -04:00
jyz0309 8a6934a20b add new metric 
Signed-off-by: jyz0309 <45495947@qq.com>

add comment

Signed-off-by: jyz0309 <45495947@qq.com>

add promlint

Signed-off-by: jyz0309 <45495947@qq.com>

address comment

Signed-off-by: jyz0309 <45495947@qq.com>

go fmt code

Signed-off-by: jyz0309 <45495947@qq.com>

Kubernetes-commit: 97ba475941f64f7ab41a92c51adeb4401146eed1
 2021-07-20 19:28:33 +08:00
Antoine Pelisse 56458d94fe Add name and namespace to structuredmerge errors 
Kubernetes-commit: 5b3c226c34af328d6bd46866e806589189d44f4d
 2021-08-12 15:53:54 -07:00
wojtekt c6719af51e Fix metrics reporting for the deprecated watch path 
Kubernetes-commit: d9d41b70f64da65525d769ab279e3930d59435fe
 2021-08-05 16:17:13 +02:00
j2gg0s 1f934a9364 apiserver: avoid repeated loading context for requestInfo in Namer.Name 
Kubernetes-commit: 9cee586ee98bf7b5377ea04a8980f7f3fdbe5ec2
 2021-07-28 19:04:48 +08:00
Yan Huang 8febdc018a Deprecate apiserver_longrunning_guage and apiserver_registered_watchers 
Deprecate apiserver_longrunning_guage and apiserver_registered_watchers

Update

Fix name

update

Add back empty space

Update the deprecated version to 1.23

Kubernetes-commit: e2b6816953c9c52b98c129a3e9c2dac4ee925ef0
 2021-07-19 23:18:35 -07:00
Kevin Delgado 4a4149c8b0 remove apiserver impor from client-go 
Kubernetes-commit: af11c4ac9be74115dfd35ce6f18cfa0440fc3458
 2021-07-27 20:46:40 +00:00
Kevin Delgado a8a3bb4200 rename cache, add to integration test 
Kubernetes-commit: 604db6eb2ada446e78152685943253455b5ec888
 2021-07-19 20:04:27 +00:00
Kevin Delgado 613f696b0b Manually set GVK in extract, add commentary to extractor 
Kubernetes-commit: dda31bbf2e7a94624e3679e3db56c95e66509ce0
 2021-07-08 01:56:58 +00:00
Kevin Delgado 09e56ead9d Initial UnstructuredExtract without caching 
Kubernetes-commit: 6e481c5db19cda1ef1b7506c22c0046e440c7fe2
 2021-07-03 00:05:11 +00:00
Harry Zhang 0321f0c67e fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total 
Kubernetes-commit: a3f57886a267c28d5a0193ca7193d4de9e9212d9
 2021-07-07 19:07:49 -07:00
Margo Crawford 6c62752c02 This introduces an Impersonate-Uid header to server side code. 
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.

This PR contains:

* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
  and ensures that the API server populates the correct impersonated spec.uid upon creation.

Kubernetes-commit: 74f5ed6b17287100b339a2b3a43fd4c6fb200978
 2021-03-04 15:19:52 -08:00
David Ashpole 5927da0040 Add distributed tracing to the apiserver using OpenTelemetry 
Kubernetes-commit: 79550ed40c67a70534c1cb697e1fb7e7dbf96335
 2021-06-25 05:20:16 -07:00
tiloso c94ba7a71a Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver} 
Kubernetes-commit: c5d70e9db1e8f36e5eb6dae6ca72ad62c1c837d9
 2021-06-05 22:15:15 +02:00
Daniel Smith a08d7d5ddf Make logged verbs match metric-reported verbs 
Kubernetes-commit: 54fde5d119f8bb55aec18cb5aef01b6ea58dfea0
 2021-06-16 17:08:54 -07:00
njuptlzf dd5fc094cd Use objGV instead of gvk.GroupVersion 
Kubernetes-commit: 15c4d579f08335f33555d3cab5eff41c74e671b9
 2021-06-02 14:27:30 +08:00
Kasakaze f0159a94e3 Simplify objGV construction 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

Kubernetes-commit: 58d7bf67d4694d52610097c72fe79012e19c5da0
 2021-06-02 10:53:05 +08:00
Kasakaze da0758027d Simplify objGV construction 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

Kubernetes-commit: b9b01a0f901513370cf3e981544a79f57e321d67
 2021-06-02 10:52:44 +08:00
Kasakaze e7a594074a Simplify objGV construction 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

Kubernetes-commit: 19c72a6cd05da805b1bec9fe567614ef82bf7beb
 2021-06-02 10:52:35 +08:00
Kasakaze 1b73b18c80 Simplify objGV construction 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>

Kubernetes-commit: 0ae6a7bac6ba268c59e82222d69ad91e381e79bc
 2021-06-02 10:52:22 +08:00
njuptlzf 790f5a21a7 Fix auditing failed of request: encoding failed 
Kubernetes-commit: 329f7d55d1344f728e28ce49728234f9f8f4c5d3
 2021-05-17 02:31:08 +08:00
Julian V. Modesto f753bce9f8 Make a public ValidateAnnotationsSize 
Kubernetes-commit: 2e771b8e745c4a3be0d5bae3a6dc94087284c73b
 2021-05-25 16:01:38 -04:00
Julian V. Modesto a01d02b7fd Make validation totalAnnotationSizeLimitB public. 
Replace the forked totalAnnotationSizeLimitB with
apimachineryvalidation.TotalAnnotationSizeLimitB.

Kubernetes-commit: 55ff96301797a503b6ee1d09f0eb2ffc827f01b1
 2021-05-18 17:28:11 -04:00
Jordan Liggitt 689a6cc12f Graduate WarningHeader feature to GA 
Kubernetes-commit: e3ea169d7d8b2c1417ef5a71ee1015f186ca0e3c
 2021-04-01 02:51:48 -04:00
Jordan Liggitt 754e90a0a3 Promote apiserver_requested_deprecated_apis metric to stable 
Kubernetes-commit: 7877539e3095669629e81633019836d2cdb7c368
 2021-05-11 16:24:58 -04:00
Julian V. Modesto c10cbf5412 Respect annotation size limit for SSA last-applied. 
To support CSA and SSA interoperability, SSA updates the CSA
last-applied annotation.

This change ensures we don't set a big last-applied annotation if the
value is over the annotation limits.

Also, make sure that it's possible to opt-out of this behavior by
setting the CSA annotation to "" the empty string.

Kubernetes-commit: 6054320be1e50a450e9d1e19a79caa96f2035d4d
 2021-05-18 15:06:48 -04:00
Marcel Zięba 489e43cad9 Add logging of filters to api calls logs 
Kubernetes-commit: 7e01b7260ac5cc20c1fc236cae220857726dc330
 2021-05-17 11:52:33 +00:00
zhuangqh 640ba0e40e docs: fix outdated enhancement doc link 
Signed-off-by: zhuangqh <zhuangqhc@gmail.com>

Kubernetes-commit: adf28648cb32d17cd186a6c7e8b264419e6d0759
 2021-02-24 15:22:50 +08:00
卢振兴10069964 549cbbf8de fix broken link in some files 
Kubernetes-commit: b29a5fb0746f772b38da570cd8fdc77396ffca31
 2021-04-13 08:43:24 +08:00
Abu Kashem b84fa01322 add more context to post timeout request activities 
Kubernetes-commit: 66587afb60b10569aa4ed35d53a4a91fcc40abd2
 2021-04-09 12:09:35 -04:00
Zhou Peng c233874954 [k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability 
Do not wrap code here

Signed-off-by: Zhou Peng <p@ctriple.cn>

Kubernetes-commit: 95f7b4d8544eeba0bc06122b1a35db1ab603f19d
 2021-04-27 13:55:31 +08:00
Lukasz Szaszkiewicz a9e68c9b32 let objects without metadata pass through the managedFields admission controller 
Not all objects provide metadata. There might be extention servers that allow for creating objects without the metadata field.

This PR changes the managedFileds admission to deal with objects without the metadata field.
Object without that field will be passed directly to the wrapped admission controller for further validation.

Kubernetes-commit: 3dbaf305ae1e52105a338987f3770ff104def68b
 2021-04-29 14:08:36 +02:00
Andrea Nodari ca3910bf4a Add nil path to mapping when a CR has no "scale" subresource 
This is to prevent the ScaleHandler to drop the entry. In this way
entries just get ignored.

Kubernetes-commit: 5b666a61a170f61c7e223085478b24a03612fa99
 2021-04-18 13:55:15 +02:00
Andrea Nodari a178a9c5d1 Drop managed fields entries with unknown fields 
This is aligned to the behaviour of server-side apply on main resources.

Kubernetes-commit: c10dd884c494734d12aceb41daaccd1d8da9356b
 2021-04-09 17:17:23 +02:00
Andrea Nodari 9c3786c066 Do not add managed fields if a scale entry doesn't own replicas 
This happens when a request changes the .status.replicas but not
.spec.replicas

Kubernetes-commit: 8e4b5c849b67b3a12dbd63391a4e75234382ba2c
 2021-04-04 19:05:45 +02:00
Andrea Nodari 8c0975e184 Check request info when updating managed fields during scale 
- Test all versions to make sure each resource version is in the
  mappings
- Fail when request info contains an unrecognized version. We have tests
  that guarantee that all known versions are in the mappings. If we
  get a version in request info that is not there we should fail fast to
  prevent inconsistent behaviour (e.g. for some reason the mappings is
  not up to date).

Ensure all known versions are in mappings

Kubernetes-commit: 09649e58b5a1368929e194991a763afc8011795e
 2021-03-11 16:51:46 +01:00
Antoine Pelisse ddd271ff4e Use ScaleHandler for all scalable resources 
Kubernetes-commit: 816e80206c169006de9d0a76cd385ee31c5aff39
 2021-03-11 11:05:05 -08:00
Andrea Nodari 8df8282eaf Track ownership of deployments scale subresource 
Kubernetes-commit: a9ea98b3b9272a7f7788a0d37891e4b13b9be38d
 2021-01-23 18:50:14 +01:00
Gautier Delorme af9424d2c9 remove go-openapi/spec 
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>

Kubernetes-commit: 34b0fcef5fc47e3fcddf7f6ca1b3e6176b2a5323
 2021-04-20 17:48:33 +02:00
Andrea Nodari 2ec597ed01 Add "subresource" field to ManagedFieldEntry 
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.

Kubernetes-commit: 862d256195adf3be5475b1a6935e5feb78f884a5
 2021-02-27 17:16:46 +01:00
Jordan Liggitt b97dfc761c allow evictions subresource to accept policy/v1 and policy/v1beta1 
Kubernetes-commit: 33ad842480353f2816873bf728d75333948e4817
 2021-03-31 16:54:55 -04:00
Monis Khan 2ad661f8c5 Prune stale entries from OWNERS files 
Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 91241eac9b7a7e62cc31e663147294bf6dc8f875
 2021-04-07 10:38:27 -04:00
Kevin Delgado ea32c4f47f Chain the field manager creation calls in newDefaultFieldManager and test 
Kubernetes-commit: d37461180a1e5a52aeb85cf5853e000acfeb852d
 2021-04-13 16:15:25 +00:00