Dr. Stefan Schimanski
94ea219615
Update bazel
...
Kubernetes-commit: 9fdc36a47ada0bc34ee53b68edd085d368ed9012
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski
ec8d130fa7
audit: wire through non-nil context everywhere
...
Kubernetes-commit: ce942d19c378ecd335e7e158e30cdc184f9d6184
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski
f7d766d92d
audit: add audit event to the context and fill in handlers
...
Kubernetes-commit: 0b5bcb021932355b3ff7c2b45fb579f4adad84bf
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski
6bd3c73150
apiserver: move LongRunningRequestCheck type into endpoints/request
...
Kubernetes-commit: c1bf6e832e2887ef6cd0e7b7fa97a168fdf474e5
2017-06-13 20:47:27 +00:00
Wojciech Tyczynski
1d0b329280
Pass RequestInfo to GenerateLink
...
Kubernetes-commit: b4018f7da18f1e61e59c5c48cae4178db2714f85
2017-06-13 20:47:27 +00:00
Clayton Coleman
08910cc6fc
Cache watch returns incorrect object on DELETED events
...
The underlying storage has always returned the old object on watch
delete events when filtering. The cache watcher does not, which means a
downsteam caller gets different behavior.
This fixes the cache watcher to be consistent with our long term
behavior for watch. It may result in a behavior change (the filter
becomes more precise) but this was a regression in behavior.
Kubernetes-commit: e9e69356e4907fa4d0f45ea7e7768357ba71aba9
2017-06-13 20:47:27 +00:00
Wojciech Tyczynski
d82b8bc329
Pass Context to GenerateLink
...
Kubernetes-commit: 25f0fe1adb199697565487b9dfacc4ed8ecdccbb
2017-06-13 20:47:27 +00:00
deads2k
283dd09ef7
tighten and simplify owners in some staging repos
...
Kubernetes-commit: e7871dbab26459163fd916b83563c4815c7ca43c
2017-06-13 20:47:27 +00:00
Jordan Liggitt
781a66f4fb
Return MethodNotSupported when accessing unwatcheable resource with ?watch=true
...
Kubernetes-commit: da8ae29620811f3dc058e0e665d402a208a1fe6c
2017-06-13 20:47:27 +00:00
Morgan Bauer
5f3d0e25c7
documentation for implementors of RESTCreateStrategy
...
Kubernetes-commit: 1033c976f0bc5a25ae772fa92c724c5b2caea39e
2017-06-13 20:47:27 +00:00
Clayton Coleman
ec289c4e0b
Refactor move of client-go/util/clock to apimachinery
...
Kubernetes-commit: 3e095d12b4f152a45b593927804e2e7b8816239a
2017-05-21 17:28:01 +00:00
Clayton Coleman
01a774be49
Move client-go/util/clock to apimachinery/pkg/util/clock
...
For reuse
Kubernetes-commit: 8013212db54e95050c622675c6706cce5de42b45
2017-05-21 17:28:01 +00:00
Clayton Coleman
3cbbcf996a
Move pkg/util/cache to apimachinery
...
Will be used by client-go as well
Kubernetes-commit: 529e627c8a4338d48cd2bf658303bac6fef6aaaa
2017-05-21 17:28:01 +00:00
mbohlool
032de8d661
Update bazel
...
Kubernetes-commit: 4d4abf3ba625488bd8a1b577f15b85db3c0fccac
2017-05-21 17:28:01 +00:00
mbohlool
e57f74f648
bugfix: form parameters should have type in OpenAPI spec
...
Kubernetes-commit: 4b0fbfe1ee23e5498ecc4786d3eeec222710473b
2017-05-21 17:28:01 +00:00
mbohlool
d5a4874935
Add protobuf binary version of openapi spec
...
Kubernetes-commit: 161b480107d94fae0373a2d7221413ec7a816229
2017-05-21 17:28:01 +00:00
yupengzte
e701e40544
format re
...
Signed-off-by: yupengzte <yu.peng36@zte.com.cn>
Kubernetes-commit: 9eee70656fc411029c91edafdbfa327eb0736528
2017-05-20 17:28:13 +00:00
Shyam Jeedigunta
b10ed3c56c
Copy static variable 'verb' before instrumenting APIserver call to prevent overwriting
...
Kubernetes-commit: 4d457f55f4b190012440c8a454a2aee338a42c4d
2017-05-19 17:28:21 +00:00
Tim St. Clair
b2138bb657
Update generated files
...
Kubernetes-commit: 6565f68cfab218c1c143edc8028f2bc2183b4150
2017-05-19 17:28:21 +00:00
Tim St. Clair
d9744c1278
Add internal audit API types
...
Kubernetes-commit: cdacc1f6dfe85b99a0e8da7b1081eadeee1258ff
2017-05-19 17:28:21 +00:00
Christoph Blecker
64f3b76260
Update generated files
...
Kubernetes-commit: 4361a9146e34d74fce9c0193b11b920ffbd0eda8
2017-05-18 17:28:00 +00:00
Dr. Stefan Schimanski
2a11524990
apiserver: no Status in body for http 204
...
Kubernetes-commit: 8902dae1c4e12a0b5933beb965b148b4150c970d
2017-05-17 17:27:53 +00:00
Clayton Coleman
0bd7c5925e
generated: bazel
...
Kubernetes-commit: 7827899b1dd22074eb230e241f63e69499046fb6
2017-05-17 17:27:53 +00:00
Clayton Coleman
4ec184826d
Allow config to accept a Transformer
...
Kubernetes-commit: 4f27d8feea0cbb7634554ef8af1ad6265738a2a1
2017-05-17 17:27:53 +00:00
Clayton Coleman
f27996225a
Update etcd3 storage to leverage storage/value interfaces
...
Adds context argument which must be set for AES GCM authenticated data
to be passed.
Kubernetes-commit: a73990a33f95713f026ee7ae9ae6741255aaf8e4
2017-05-17 17:27:53 +00:00
Clayton Coleman
0fb460572a
Add an AEAD encrypting transformer for storing secrets encrypted at rest
...
Tweak the ValueTransformer interface slightly to support additional
context information (to allow authenticated data to be generated by the
store and passed to the transformer). Add a prefix transformer that
looks for known matching prefixes and uses them. Add an AES GCM
transformer that performs AEAD on the values coming in and out of the
store.
Kubernetes-commit: f418468c87d3071c5d9ed14ce850996c77251080
2017-05-17 17:27:53 +00:00
Cao Shufeng
549abf6787
Fix docs for advanced audit
...
Kubernetes-commit: 22ba5eb0756d4eb936db3d911be7a79fffbb142e
2017-05-17 17:27:53 +00:00
Tim St. Clair
ccd060c4df
hack/update-bazel.sh
...
Kubernetes-commit: 951aa18225ed27d3f6b181c9403e4c4755c30ae1
2017-05-16 17:27:51 +00:00
Tim St. Clair
801bfb00d4
Internal audit API
...
Kubernetes-commit: ce2d57802f984678bc6ea0143c63602e0a4fb54e
2017-05-16 17:27:51 +00:00
p0lyn0mial
b10e93e2f5
bazel update
...
Kubernetes-commit: 7b0950b298c876668d469d4b5b2ad7a4dcd344fc
2017-05-16 17:27:51 +00:00
nikhiljindal
404503d3e6
Updating generic registry to return UID while deleting the object
...
Kubernetes-commit: 44fc88cecd5ab175fe7907eb7b975f0a00cb2305
2017-05-16 17:27:51 +00:00
p0lyn0mial
ceeef3670c
This PR implements AdmissionOptions.ApplyTo
...
ApplyTo adds the admission chain to the server configuration the method lazily initializes a generic plugin
that is appended to the list of pluginInitializers.
apiserver.Config will hold an instance of SharedInformerFactory to ensure we only have once instance.
The field will be initialized in apisever.SecureServingOptions
Kubernetes-commit: 8cea69aa9812d6627ebdfa4f8b9c1d7624a8f3f5
2017-05-16 17:27:50 +00:00
Chao Xu
3ffeae2ff7
hack/update-bazel.sh
...
Kubernetes-commit: 14045d253d11c801ad94f0928cb9b13a224ee18f
2017-05-13 17:27:43 +00:00
Chao Xu
e46eb82a82
remove invocation of k8s.io/client-go/pkg/api/install
...
change import of client-go/api/helper to kubernetes/api/helper
remove unnecessary use of client-go/api.registry
change use of client-go/pkg/util to kubernetes/pkg/util
remove dependency on client-go/pkg/apis/extensions
remove unnecessary invocation of k8s.io/client-go/extension/intsall
change use of k8s.io/client-go/pkg/apis/authentication to v1
Kubernetes-commit: c354076aa41e3cf417b291d5f0eff2b70395ac30
2017-05-13 17:27:42 +00:00
deads2k
00b83db9b8
plumb stopch to post start hook index since many of them are starting go funcs
...
Kubernetes-commit: be39283923650ad96539640ca988fbf194db2be4
2017-05-12 17:30:09 +00:00
Nail Islamov
f72563011c
Remove mentioning insecure server (which is not supported anymore)
...
Kubernetes-commit: 6c448319ac4b6e05db87b126db136c609eceec55
2017-05-12 17:30:09 +00:00
Ryan Hitchman
4e16eae82b
Escape "<>&" in apiserver errors to avoid triggering vulnerability scanners.
...
Simple XSS scans might fetch /<script>alert('vulnerable')</script>, and
fail when the response body includes the script tag verbatim, despite
the headers directing the browser to interpret the response as text.
This isn't a real vulnerability, but it's easier to fix this here than
it is to fix the scanners.
Kubernetes-commit: dd4bb1213d8447632fa651195980cbfae2546fb3
2017-05-12 17:30:09 +00:00
deads2k
49f3eb05d8
refactor names for the apiserver handling chain
...
Kubernetes-commit: 4389f715768661731f0aae7438b2cc8414c9746a
2017-05-12 17:30:09 +00:00
Dr. Stefan Schimanski
234a9303e9
apiserver: tri-state watch cache capacity: off, default, value
...
Kubernetes-commit: b799e62e1aa82a1f1ff87597e762734cd702cdee
2017-05-12 17:30:09 +00:00
mbohlool
1ce699c0dd
Add GroupVersionKind and Action extensions to OpenAPI operations
...
Kubernetes-commit: fca7003dc5bd122e2123ef260e8612663f74a65b
2017-05-12 17:30:09 +00:00
mbohlool
a44fceadf3
Update go-restful dependency
...
Kubernetes-commit: ea042c6ca0fc7eb8017012ca56d6879b8cf10637
2017-05-12 17:30:08 +00:00
Dr. Stefan Schimanski
e640e78936
apiserver: fix --tls-sni-cert-key doc string
...
Kubernetes-commit: 53365880086f0d0d53002de7ce816284da41f4d0
2017-05-12 17:30:08 +00:00
deads2k
4989e215f2
handle registered third parties
...
Kubernetes-commit: b512073457d02f326ac39d5774582a92c763c47f
2017-05-12 17:30:08 +00:00
Cao Shufeng
ec0ac3b1aa
update the doc of function NewPathRecorderMux
...
Kubernetes-commit: 8b54081939c400d904dbf02fe5143c9dc11ad0ac
2017-05-12 17:30:08 +00:00
deads2k
9250b02a30
remove bearer token from headers after we consume it
...
Kubernetes-commit: 641b83877a5bd01f87f3e4db53917e854b581be7
2017-05-12 17:30:08 +00:00
mbohlool
0a32c6d3e2
Fix yet another bug in OpenAPI extension generation
...
Kubernetes-commit: bcd0288e607ee1a1eba3d69dbb7d533f7ef2e4ba
2017-05-05 20:36:47 +00:00
deads2k
585812f439
use our own serve mux that directs how we want
...
Kubernetes-commit: c837c7fb1a227ef8c772ad15b08ff47593379543
2017-05-04 20:36:37 +00:00
Chao Xu
e84e32eaa5
remove references to client-go/pkg/api
...
Kubernetes-commit: d978f22e04519f6eecfde839110c398dc28d4e8e
2017-05-03 20:36:26 +00:00
deads2k
2b31ba8b9c
separate discovery from the apiserver
...
Kubernetes-commit: e099f5eee60ad32661d28a2eda9d615ac25ba9a4
2017-05-02 20:36:05 +00:00
Dr. Stefan Schimanski
21f84e3d21
apiserver: split endpoint tests from client-go
...
Kubernetes-commit: 67ca42b2d7e9efb5701618fb3d7faa62c53101c5
2017-05-02 20:36:05 +00:00
xiangpengzhao
1512c30ca6
Delete "hard-coded" default value in flags usage.
...
Kubernetes-commit: 420caf200cdb1ba41d6af43c5695c29de2082851
2017-04-29 20:35:54 +00:00
Mike Danese
aab2f083cf
replace CloneTLSConfig() with (*tls.Config).Clone()
...
Kubernetes-commit: 6c6dbec1e2364b994bdae42828e094b9b540f9b3
2017-04-28 20:36:30 +00:00
Chao Xu
4b7a66ff7e
make it possible to move SchemeBuilder with zz_generated.deepcopy.go
...
Kubernetes-commit: d0b94538b9744d0c06df6ddec2604be168568f9d
2017-04-28 20:36:29 +00:00
Cao Shufeng
51bdb8b7fc
Fix PathPrefix for subresources
...
Kubernetes-commit: dde1221839a340f14924b399012e1aa137367092
2017-04-28 20:36:29 +00:00
deads2k
63fa51033e
build external watch event so simple encoders can encode
...
Kubernetes-commit: f53c9a7e59fe71c038cf727ac2072e5eb9efc6b9
2017-04-28 20:36:29 +00:00
Andy Goldstein
478b3779f2
Add redirect support to SpdyRoundTripper
...
Add support for following redirects to the SpdyRoundTripper. This is
necessary for clients using it directly (e.g. the apiserver talking
directly to the kubelet) because the CRI streaming server issues a
redirect for streaming requests.
Also extract common logic for following redirects.
Kubernetes-commit: 715d5d9c91c669cf33c0bf9a9c9d352c6c4228a6
2017-04-27 20:37:01 +00:00
Lucas Käldström
1b6b98500b
Update protobuf
...
Kubernetes-commit: f32e6d8a892504835454af4e740da5c9dd17c0a1
2017-04-26 20:36:15 +00:00
Jeremy Whitlock
02115850aa
apiserver: add pkg/util/webhook tests
...
This commit adds tests for pkg/util/webhooks. The purpose of this was
not only for better code coverage but also to alleviate the need for
consumers to write their own tests for core functionality.
Kubernetes-commit: d15dba7e8bff943d91ba6f58fcb0dfefa357a7f1
2017-04-26 20:36:15 +00:00
deads2k
a32f3c1391
fix cluster scoped self-link
...
Kubernetes-commit: 5746d876e3e4ff41696569d3d8e80ef3979d5186
2017-04-25 20:36:18 +00:00
Anthony Yeh
9841cf11a1
PATCH: Fix erroneous meaningful conflict for numeric values.
...
The wrong json package was used, resulting in patches being unmarshaled
with numbers as float64 rather than int64.
This in turn confused HasConflicts() which expects numeric types to match.
The end result was false positives of meaningful conflicts, such as:
```
there is a meaningful conflict (firstResourceVersion: "8517",
currentResourceVersion: "8519"):
diff1={"metadata":{"resourceVersion":"8519"},"spec":{"replicas":0},"status":{"conditions":null,"fullyLabeledReplicas":null,"replicas":0}}
, diff2={"spec":{"replicas":0}}
```
Kubernetes-commit: 1ab6a33db486adc060e1b63eecbdc06aabdde1f6
2017-04-24 20:36:05 +00:00
Monis Khan
c4cc6eba8b
Default ObjectNameFunc for all REST Stores
...
All Stores in Kubernetes follow the same logic for determining the name
of an object. This change makes it so that CompleteWithOptions defaults
the ObjectNameFunc if it is not specified. Thus a user does not need to
remember to use ObjectMeta.Name. Using the wrong field as the name can
lead to an object which has a name that bypasses normal object name
validation.
Signed-off-by: Monis Khan <mkhan@redhat.com>
Kubernetes-commit: ed35deb69d6fe480adc9178c30b4b9c9e03ca1a9
2017-04-24 20:36:05 +00:00
Cao Shufeng
32da3a6527
refactor code from restful namer
...
Some codes are replaced because they will never run.
Kubernetes-commit: 939b962975aabcb1587f40b0eb05a30d05168cc4
2017-04-24 20:36:05 +00:00
Cao Shufeng
ad7e6c7d72
Update basic audit filter's comment message
...
Kubernetes-commit: 267288249b0dac2e7ae60bd53bef2afe8a574c28
2017-04-24 20:36:05 +00:00
zhouhaibing089
79f762de77
componentstatus: support client cert health check
...
etcd has support for client-cert-auth, which can be configured via the flag `--ca-file`,
when that is enabled, all the client requests must present with a client certificate,
however, the current component status check uses a single transport for all of the checks,
this is wrong, the checks should be different for each of different component, and make
each of them use different transport(tls configurations).
Kubernetes-commit: b1040171b68217dccb617de85defa4a5063c638b
2017-04-22 20:36:06 +00:00
p0lyn0mial
fdb6bac0df
bazel update
...
Kubernetes-commit: 4a3dcff3bfb49317cee8fb209f6b915fc9e82f1a
2017-04-21 20:35:37 +00:00
p0lyn0mial
3422dafac7
Split out AdmissionOptions
...
In the long term AdmissionOptions will accepts various dependencies
and spit out AdmissionControl
Kubernetes-commit: de9706bc15ffc3a6a4ef30a00d5c7ea9a8881396
2017-04-21 20:35:37 +00:00
Jordan Liggitt
28f3b58b8b
Include system:authenticated group when impersonating
...
Kubernetes-commit: 86623ed2414d98d6ddc7f28028b88d17d8d8f6ec
2017-04-21 20:35:37 +00:00
Maru Newby
6c1b74403d
apiserver: Update genericapiserver to panic on listener error
...
Previously runServer would try to listen again if a listener error
occurred. This commit changes the response to a panic to allow a
process manager (systemd/kubelet/etc) to react to the failure.
Kubernetes-commit: 30fb3be4d29179cf551e3030ade37d94d9acc8c9
2017-04-20 20:35:32 +00:00
gmarek
94dd05e8db
Fix traces for get requests
...
Kubernetes-commit: 2a49281b55278bb6932e8862304cff0becaaabf3
2017-04-19 20:35:36 +00:00
xilabao
fa06d09988
remove useless check in audit.go
...
Kubernetes-commit: 4b8abd811dbea5b92c807b64b427eab296567b1d
2017-04-18 20:35:41 +00:00
Christoph Blecker
6d6242ff50
Fix gofmt errors
...
Kubernetes-commit: 6681835b0c00122a408bd4addd47b02840b6208c
2017-04-18 20:35:41 +00:00
Matt Liggett
3b01985067
Use regexp instead of substring to do search and replace.
...
enisoc pointed out how ToLower can change (lengthen even!) the length of
a string given arbitrary input.
Kubernetes-commit: fe202fcfc47c7e0fa7d75dc933c9988bb5a53e5e
2017-04-17 20:35:48 +00:00
Mike Danese
fda6fe0d70
add testdata for tests in //vendor/k8s.io/...
...
Kubernetes-commit: 981dd8dc6615f397a9b85c5b965998dc8a0b1338
2017-04-15 20:35:23 +00:00
Mike Danese
2aab760a2a
autogenerated
...
Kubernetes-commit: a05c3c0efdc5822049e34b1a5a1ee259c5fb1906
2017-04-15 20:35:23 +00:00
Matt Liggett
6c87ad1f20
Drop leading path of KUBECTL.EXE if it shows up in User-Agent.
...
Kubernetes-commit: 4cff7c3d30f4f6b4377d52ec29ec4866f1d28bb9
2017-04-14 20:35:35 +00:00
Jordan Liggitt
662942f8b8
Remove vestiges of defaulting from conversion path, switch to top-level default registration only
...
Kubernetes-commit: ad116026d9fefe70bbc37f30b9d299ca3af6e43c
2017-04-14 20:35:34 +00:00
deads2k
631ed9acef
add deregistration for paths
...
Kubernetes-commit: cd950364e5259659a771caf5b564de7a8319969b
2017-04-13 20:35:21 +00:00
Dr. Stefan Schimanski
320e34b1d9
pkg/admission: make plugin registry non-global
...
Kubernetes-commit: 63f547e1b15ed94ef91c69a7e294b3506bd8c918
2017-04-12 20:35:22 +00:00
mbohlool
f8217a24e4
Bugfix: OpenAPI generator should pass generate type extensions
...
Kubernetes-commit: ab5bcf6d2da5fc9cd2374e966f87e20a95d59ed6
2017-04-12 20:35:22 +00:00
Sahdev P. Zala
c44e920355
Conversion generated code changes for golint fix
...
The exported or public functions requires a doc comment to pass golint.
This commit has changes of conversion generated code. The actual doc
changes are added into a separate commit for a clean review.
Kubernetes-commit: 08639023d027e0b69e3b3e5535b04148e084b1bd
2017-04-12 20:35:21 +00:00
Timothy St. Clair
3c7e90361c
Update generated due to proto-shift
...
Kubernetes-commit: 818dd4443dc4760c90edd3aa608265d2573c7cc9
2017-04-12 20:35:21 +00:00
deads2k
540c5cf18e
remove dependency on gorestful for rest handling
...
Kubernetes-commit: c5e2f7c229d8194386de97df7ff6c1b0f71be4c7
2017-04-11 20:35:21 +00:00
deads2k
5e858945af
remove objectmetafor
...
Kubernetes-commit: 04460c8750b9a47672aa708251de0e703cfb7266
2017-04-11 20:35:21 +00:00
deads2k
d3546820d7
remove go-restful from namer for rest handling
...
Kubernetes-commit: da27957390b99c3053922e75f220a8b09c20d7f6
2017-04-10 20:35:11 +00:00
deads2k
01f14fece5
only log stacks on server errors
...
Kubernetes-commit: b73cddb2278d792c7e07d4e69969df32636ecb6d
2017-04-10 20:35:11 +00:00
Abhishek Dasgupta
ba77f4a298
Updated key.pm and cert.pm to remove error in setting up localhostCert pool.
...
Signed-off-by: Abhishek Dasgupta <a10gupta@linux.vnet.ibm.com>
Kubernetes-commit: 0d42da1b9345e2a649f298ac4f77807143e7befa
2017-04-10 20:35:11 +00:00
Cao Shufeng
d08e3dad61
Fix empty RBAC Forbidden message
...
Kubernetes-commit: 30844541d55b302b06bd85f12d8cf0193e7e4240
2017-04-08 20:35:19 +00:00
deads2k
e8e8bbf610
remove ListMetaFor
...
Kubernetes-commit: 7df37c484dac3438530f2b8cb03cf63f85f2fc29
2017-04-08 20:35:19 +00:00
supereagle
02ca4828ef
fix some typos in apiserver
...
Kubernetes-commit: e35b7d10821bc2c7b4b59e1da3808d46356be69d
2017-04-07 20:35:14 +00:00
Jordan Liggitt
fa876f6773
Fix original object mutation on patch retry
...
Kubernetes-commit: c415e4aeabe5e5514dcdbf2c01c533533c25f4c1
2017-04-06 20:35:16 +00:00
Jordan Liggitt
72998a2b11
Allow disabling specific post-start hooks
...
Kubernetes-commit: 2c89ff59e22e0d9c825203c4cb94613a3b246d64
2017-03-31 20:37:16 +00:00
Jordan Liggitt
b137e92ccf
Plumb cipher/tls version serving options
...
Kubernetes-commit: e156aca4f21331465ba9406be362b9f16b8aba9e
2017-03-31 20:37:15 +00:00
Jordan Liggitt
1d9d56a19e
Update godoc for discovery registration
...
Kubernetes-commit: 85b23bb98a2c80fe631e20785e5e7172cb69e518
2017-03-31 20:37:15 +00:00
Cao Shufeng
1e6400df1f
delete etcd socket file for unit tests
...
This change clean up the environment for etcd3 unit test.
Without this change, "make test" will leave some socket files in
workspace. And these socket files make hack/verify-generated-protobuf.sh
fails.
Kubernetes-commit: 4e9dcf3da536a9b956eb092fe9dbc5b2081cfb9d
2017-03-31 20:37:15 +00:00
p0lyn0mial
d711b4901e
Admission plugin initializer for the generic API server.
...
This PR implements a standard admission plugin initializer for the generic API server.
The initializer accepts external clientset, external informers and the authorizer.
Kubernetes-commit: 86e06e2401c3f8d5fc5217858612dcf5db39f27d
2017-03-31 20:37:15 +00:00
deads2k
38fb6e78f7
move legacy insecure options out of the main flow
...
Kubernetes-commit: cd297546807fc08546905a2b96879d13bcf3a30b
2017-03-31 20:37:15 +00:00
deads2k
c2afcd59a6
move insecure options to kubeapiserver
...
Kubernetes-commit: c2f8ef1b1a4e0e60379b7b7447d59a87b0b0ccf9
2017-03-31 20:37:15 +00:00
deads2k
b3af46c0dc
wire in aggregation
...
Kubernetes-commit: 8e26fa25da6d3b1deb333fe2484f794795d1c6b9
2017-03-31 20:37:15 +00:00
deads2k
8c644986dc
require codecfactory
...
Kubernetes-commit: 087a03022106c02f82a497f65b945f3cbab3f643
2017-03-31 20:37:15 +00:00
deads2k
6e5dbf8e26
rewire aggregation handling chain to be normal
...
Kubernetes-commit: b28966b48ae8e3e10427e0347f33a36053884e0a
2017-03-31 20:37:15 +00:00
deads2k
91f0fac434
force callers to specify the cert dns names
...
Kubernetes-commit: f31eb0a77f0616a5c4c3477b6d87a5a6726845cc
2017-03-31 20:37:15 +00:00
Andy Goldstein
ba9d99da29
React to go-systemd changes
...
Kubernetes-commit: 085db20a02b222e8a909da02fc5025aeee6ebc57
2017-03-31 20:37:15 +00:00
Jordan Liggitt
e314f85f65
Preserve API group order in discovery, prefer extensions over apps
...
Kubernetes-commit: 707f0fb131b5ff89caae7c45a0e4b59991bd7bc2
2017-03-31 20:37:15 +00:00
Dr. Stefan Schimanski
18fcdcc57b
k8s.io/apiserver: make maxRetryWhenPatchConflicts public
...
Kubernetes-commit: be6be1370b5d1c9b6269c24f663426e3bac93c72
2017-03-31 20:37:15 +00:00
deads2k
43ba6dde7a
allow combining API servers
...
Kubernetes-commit: bccef75d7ae43be333e068748bb6f998dafa6d9d
2017-03-31 20:37:15 +00:00
deads2k
4620c09303
allow fallthrough handling from go-restful routes
...
Kubernetes-commit: 02efeeaf4087533803299356de1673c8400bc351
2017-03-31 20:37:15 +00:00
Jordan Liggitt
66064e4297
generated files
...
Kubernetes-commit: 939ca532aadc3c89d6ea40cf45fab44c0537d167
2017-03-31 20:37:15 +00:00
deads2k
1e6581d944
use - to indicate audit log goes to system out
...
Kubernetes-commit: 91f461283ec25dd43d55db97f981723a94f208b8
2017-03-31 20:37:15 +00:00
Jordan Liggitt
0f41d276a9
Force etcd2 to use application/json, add base64-wrapper decoder as fallback
...
Kubernetes-commit: 87e32c75321bad09707683cb15d6a0c41f4b6f0d
2017-03-18 19:56:09 +00:00
Jordan Liggitt
8543f589d2
Ensure patched objects are defaulted correctly
...
Kubernetes-commit: 464db160b410b22dba53af6d11fa097f0fa4fd6b
2017-03-18 19:56:09 +00:00
Maru Newby
48679afa87
apiserver: Add non-blocking run method to simplify testing
...
Kubernetes-commit: 6f70b977ff6c6f9ba7ba1971d38ce3bd49243266
2017-03-18 19:56:09 +00:00
Dr. Stefan Schimanski
25380b2e8b
Support multiple --feature-gates flags in the command line
...
Kubernetes-commit: faa5b44381ab04d9a4645b949311b70fb00ca60f
2017-03-18 19:56:09 +00:00
Andy Goldstein
33e10a040b
Add pprof trace support
...
Add pprof trace support and --enable-contention-profiling to those
components that don't already have it.
Kubernetes-commit: b011529d8a1486bc2316a049db35759086d2994b
2017-03-18 19:56:09 +00:00
Jordan Liggitt
a22f78080a
Preserve custom etcd prefix compatibility for etcd3
...
Kubernetes-commit: 6853e4d71ea128ff955fad32972ad9edcb376dfb
2017-03-18 19:56:09 +00:00
Dominik Schulz
37527becd4
Clean user agent
...
This commit cleans common browser user-agents to reduce the metrics
cardinality in exported prometheus metrics.
Kubernetes-commit: b5c89a8be68e031e12d6750ed6cc470de4cc3fdf
2017-03-18 19:56:09 +00:00
ymqytw
7306f452f2
switch to k8s json to avoid number conversion issue
...
Kubernetes-commit: b29f4c26d799dca6606b45a0e03f7f931abcdefc
2017-03-18 19:56:09 +00:00
deads2k
4429450aca
make the system:authenticated group adder smarter
...
Kubernetes-commit: 379a73a8dbd3aa09471eab3994861ad41f548ded
2017-03-18 19:56:09 +00:00
deads2k
e8086d93fd
show patch error as string not byte slice
...
Kubernetes-commit: ea887557d36cec45744c11019aa3fd64d44f24f7
2017-03-18 19:56:09 +00:00
Chao Xu
a258201e01
registry changes
...
Kubernetes-commit: 93686da1044ea5396978a9bc86468dd3d1c32190
2017-03-18 19:56:09 +00:00
Clayton Coleman
1c5eb397bb
Server timeout returns an incorrect error
...
Not a valid Status object in JSON
Kubernetes-commit: 60d83657516f63b51e43f5b2350821cb5b6835f0
2017-03-18 19:56:09 +00:00
deads2k
8aacf17ba5
allow incluster authentication info lookup
...
Kubernetes-commit: 3d039f60cf998746a95181cacf5d3d69b83b46b0
2017-03-18 19:56:09 +00:00
deads2k
9c5ae42f4d
add aggregation integration test
...
Kubernetes-commit: 5cfe26dece13c77bd17fd10e47d2c00bf5da9b6d
2017-03-18 19:56:09 +00:00
Eric Chiang
51e6651c84
apiserver/pkg/server: include scheme in insecure self client config
...
Kubernetes-commit: 6891505db9c02769b903446946a2506276329eb9
2017-03-18 19:56:09 +00:00
Dr. Stefan Schimanski
07a502d3a2
apimachinery: handle duplicated and conflicting type registration
...
Kubernetes-commit: 395be3b4010b0eef63e98961a14064360fdca26c
2017-03-18 19:56:08 +00:00
Derek Carr
53343624bb
stop spamming logs on restart of api server
...
Kubernetes-commit: 9211e0380f39f08ff99dcf78f50fefad1d0179b8
2017-03-18 19:56:08 +00:00
Clayton Coleman
55e799bbec
Don't log context or full request URI due to security concerns
...
These lines may contain information that cannot be safely logged to
disk. Only deal with known parameters, also bump to V(2) to be
consistent with other logging.
Kubernetes-commit: f6300555f4c105f60c5a4cb0a0cdfc01899b833d
2017-03-18 19:56:08 +00:00
deads2k
7170396682
tweak defaults for recommended apiserver options
...
Kubernetes-commit: acba2cbd6d188a34f4c3032c933921ba22a0f77c
2017-03-18 19:56:08 +00:00
Wojciech Tyczynski
63e29dca6f
Use new runtime.Object <-> map[string]interface{} converter
2017-02-27 15:10:34 -05:00
Dr. Stefan Schimanski
954f7be538
apiserver: self-signed in-memory cert for loopback
2017-02-27 15:10:34 -05:00
Jordan Liggitt
20015a7f72
Switch watch prefixes to params
2017-02-27 15:10:33 -05:00
deads2k
025f3f79e4
redact detailed errors from healthz and expose in default policy
2017-02-27 15:10:33 -05:00
nikhiljindal
6863c37d24
Update REST Handler to return 202 for cascading deletion
2017-02-27 15:10:33 -05:00
nikhiljindal
01de98ed76
Updating tests for deleted boolean from Delete()
2017-02-27 15:10:33 -05:00
nikhiljindal
fee1f0dd8f
Updating the registry to return whether the resource was immediately deleted
2017-02-27 15:10:33 -05:00
deads2k
1e2d8fe122
remove cycle that snuck into tests
2017-02-23 09:48:09 -05:00
deads2k
1b0d4c5781
tweak a list to a watch verb when requested
2017-02-23 09:48:09 -05:00
Wojciech Tyczynski
36ad26fdd3
Don't use base64 encoding with etcd v3
2017-02-23 09:48:09 -05:00
Wojciech Tyczynski
ecdf2151f8
Revert "Use watch param instead of deprecated /watch/ prefix"
2017-02-23 09:48:09 -05:00
jg Chen
0446eafcdb
fix misspell "roughly" in config.go
2017-02-23 09:48:09 -05:00
Jordan Liggitt
167718650d
Switch watch prefixes to params
2017-02-23 09:48:09 -05:00
Timothy St. Clair
3c7b74f219
Cleanup work to enable feature gating annotations
2017-02-23 09:48:09 -05:00
Robert Rati
d4431d8e63
Feature-Gate affinity in annotations
2017-02-23 09:48:09 -05:00
Dr. Stefan Schimanski
73c30cda7e
staging/src/*: run gofmt
2017-02-23 09:48:09 -05:00
fate-grand-order
3890a8e1d0
fix misspell "underlying" in cacher.go
2017-02-23 09:48:09 -05:00
Jordan Liggitt
5d99edcdb1
Support PATCH operation in root proxy
2017-02-23 09:48:08 -05:00
Wojciech Tyczynski
bdf67d9749
Revert "Revert "Avoid unnecessary copies in cacher""
2017-02-16 08:03:04 -05:00
Dr. Stefan Schimanski
585aca0c2c
k8s.io/apiserver: straighten EtcdOptions, backend Config and kube RESTOptionsFactory
2017-02-16 08:03:03 -05:00
Dr. Stefan Schimanski
1a57a29c12
k8s.io/apiserver: fixup imports and renamed packages
2017-02-16 08:03:03 -05:00
Dr. Stefan Schimanski
9f1d603944
k8s.io/apiserver: move server storage code into subpackage
2017-02-16 08:03:03 -05:00
Jordan Liggitt
2ad7085dba
Create bootstrap system:kube-scheduler role
2017-02-15 07:28:56 -05:00
linyouchong
35b486da95
fix spelling error of type store struct, in store.go
2017-02-14 14:04:06 -05:00
deads2k
ef02ebd216
copy pkg/util/logs to apiserver
2017-02-14 14:04:06 -05:00
deads2k
147d3934cf
auto-create the loopback token
2017-02-14 14:04:06 -05:00
linyouchong
bed500fca9
fix bug of runServer function in server.go
2017-02-13 07:36:42 -05:00
deads2k
c2c4ecb2ff
create sample-apiserver repo for people to inspect
2017-02-13 07:36:42 -05:00
deads2k
9d21f84d8f
streamline etcd options for aggregated api server
2017-02-13 07:36:42 -05:00
deads2k
5566a0ef65
move storage serialization type to etcd options
2017-02-13 07:36:42 -05:00
deads2k
2e34520350
add feature enablement options to recommendedoptions
2017-02-13 07:36:42 -05:00
deads2k
8c39f8c871
move --runtime-config to kubeapiserver
2017-02-13 07:36:42 -05:00
deads2k
d3c1c03062
move auditoptions to separate struct
2017-02-13 07:36:42 -05:00
deads2k
aed020968e
add recommended aggregated api server options
2017-02-13 07:36:42 -05:00
deads2k
284a95797b
apiserver command line options lead to config
2017-02-13 07:36:41 -05:00
deads2k
1227857843
move admission read logic
2017-02-13 07:36:41 -05:00
Wojciech Tyczynski
3102519e3a
Fix incorrect watch cache sizes
2017-02-13 07:36:41 -05:00
p0lyn0mial
8dc243803d
added short names for resources which are exposed during discovery
2017-02-13 07:36:41 -05:00
deads2k
90dc6e098c
switch admission serialized config to an apiserver type
2017-02-13 07:36:41 -05:00
deads2k
ad39e3715b
add apiserver API group for structured configuration
2017-02-13 07:36:41 -05:00
Wojciech Tyczynski
c2f76cc51b
Revert "Avoid unnecessary copies in cacher"
2017-02-13 07:36:41 -05:00
Clayton Coleman
74dc1360f1
Allow ValueTransformer to indicate resource is stale
...
Allows a transformer (such as an encrypter) to force an update if a new
key is in use, thus allowing simple writes to the REST layer to
trivially migrate keys.
2017-02-13 07:36:41 -05:00
Clayton Coleman
3d8615c851
Allow values to be wrapped prior to serialization in etcd3
2017-02-13 07:36:41 -05:00
Clayton Coleman
679a2b25d7
Allow values to be wrapped prior to serialization in etcd2
...
This adds a new value transformer to the etcd2 store that can transform
the value from etcd on read and write. This will allow the store to
implement encryption at rest or otherwise transform the value prior to
persistence.
2017-02-13 07:36:41 -05:00
ymqytw
5598b36661
extract util used by jsonmergepatch and SMPatch
2017-02-13 07:36:41 -05:00
deads2k
ac15385364
add liggitt to apimachinery/apiserver packages
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
0e2b28a48d
Update generated files
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
a372fcad62
Mechanical fixup imports: pkg/genericapiserver
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
f3c3e07241
Mechanical move: pkg/genericapiserver -> k8s.io/apiserver
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
4b46da7a0d
Mechanical import fixup: pkg/storage
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
4a2fe15be7
Mechanical move: pkg/storage -> k8s.io/apiserver
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
6025c228e6
pkg/storage/etcd: cut off pkg/api scheme
2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski
e4699fca43
pkg/genericapiserver/endpoints: cutting off pkg/api deps
2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski
4fbb344378
Update protobufs
2017-02-02 09:36:48 -05:00
Dr. Stefan Schimanski
8af0dd2e0a
k8s.io/apiserver: add example api group
2017-02-02 09:36:48 -05:00
deads2k
c4b078bb1d
move apiserver options
2017-02-02 09:36:48 -05:00
deads2k
b0801a1423
move swagger route to apiserver
2017-02-02 09:36:48 -05:00
Wojciech Tyczynski
83dfb6ab47
Avoid unnecessary copies in cacher
2017-02-02 09:36:48 -05:00
deads2k
55fd399ad4
move pkg/storage to apiserver
2017-02-01 07:33:52 -05:00
Dr. Stefan Schimanski
0c2f5c4565
pkg/util: move trace.go to k8s.io/apiserver/pkg/util/trace
2017-01-30 09:46:32 -05:00
deads2k
b60c7818e4
move storage/storagebackend to apiserver
2017-01-27 14:15:18 -05:00
deads2k
32ddb5c9d2
move genericapiserver/server/filters to apiserver
2017-01-27 14:15:18 -05:00
deads2k
9503eabb8b
move genericapiserver authenticator and authorizer factories
2017-01-27 08:47:01 -05:00
deads2k
2770a87575
stop hardcoding api registry and codecs in webhook
2017-01-27 08:47:01 -05:00
Dr. Stefan Schimanski
5858be0e9d
third_party/forked/golang/netutil: move to k8s.io/apimachinery
2017-01-27 08:47:01 -05:00
Dr. Stefan Schimanski
de513ec8e2
pkg/util: move proxy into k8s.io/apiserver
2017-01-27 08:47:01 -05:00
Dr. Stefan Schimanski
29814dd5b7
pkg/util: move Trie to k8s.io/apiserver
2017-01-27 08:47:01 -05:00
Dr. Stefan Schimanski
01994f3f6a
Update generated files
2017-01-25 07:42:18 -05:00
Dr. Stefan Schimanski
1689f4218c
pkg/util/flag: move to k8s.io/apiserver
2017-01-25 07:42:18 -05:00
Dr. Stefan Schimanski
5b638522cc
pkg/flag: make feature gate extensible and split between generic and kube
2017-01-25 07:42:18 -05:00
deads2k
3ac45aec91
move authoritative client-go utils out of pkg
2017-01-25 07:42:18 -05:00
Clayton Coleman
e5842f0f5f
iQEcBAABCAAGBQJYhok+AAoJED0WkGtPHFyzhlMIAKUGDc5OG9u8AFgmZaRWp+ig
...
tTAd5vL479Y9GX0sorhbGZbXS5+ylqEfbkZQC1A4eoDOmt+dkC8jdHgUZmEwwKOM
V/CH09SAkEa8MhxDbASV0J0oSWphMdOCMtIotB/M2S9TMNCMBDusj1VkB8kUXgKW
MUnabb90dkFGtYWiPKNx+TVmv0T9fMWvODL24yKzLn13R+Wjk+4FfrEPFacEnsv3
uaLAgxenhoGyf18E3d4ij6DW8c23Xrdn+s2hDL9WOtELGCUYaflU7q2Udz8DZIKu
GLcfVzdTpcjw5Q8fdDNykxLq6+18L92V2Wj3wzWEVZmH6kVy2ty1hFY4o08/phc=
=OL70
-----END PGP SIGNATURE-----
refactor: move ListOptions references to metav1
2017-01-24 08:10:17 -05:00
deads2k
466822b370
remove go get failing import comment
2017-01-19 13:02:01 -05:00
deads2k
64ca3b645e
move utils used in restclient to client-go
2017-01-19 10:27:27 -05:00
Dr. Stefan Schimanski
855c38d53e
genericapiserver: fix imports
2017-01-19 10:27:27 -05:00
Dr. Stefan Schimanski
dc90e9a003
genericapiserver: move packages
...
Towards a sane k8s.io/apiserver package structure.
2017-01-19 10:27:27 -05:00
deads2k
0243c13f2a
move admission to genericapiserver
2017-01-19 10:27:27 -05:00
Clayton Coleman
e31581569e
iQEcBAABCAAGBQJYfoobAAoJED0WkGtPHFyz80gH/RNPz9wEQ9kjzmq5Zccmxcnn
...
Nz8+i0Ksr4dvwTV7SaYO8NHpkqTR6z5X1vLlwIAve/hjCyvZ58xT1qEbPyXNWXvq
sYgj1b490wdrF0cFQVY7YoKUK5FgwGnmdK+vXG2bUZl6qlnik742QDP5zkxPnwHI
tpz4o0SfOisxFFkktowems4SMBBLSozqChzAnhbE0b5L/+bLcxOkNaZ8w0CPX5TE
1uVpw+lAuLq/10XKBhWb6wyc/2+aW0EfUs/4JIK69giPY+Km0QMejIJ4UYc6ml2F
DOGcWR+nKbeMIi6TFMZd1MdfLhSzipRxCECv1MYEZgIg3nGchYdybriJiYG8R3M=
=DxiX
-----END PGP SIGNATURE-----
Correct import statements
2017-01-18 07:43:45 -05:00
Clayton Coleman
474b80883a
iQEcBAABCAAGBQJYfoneAAoJED0WkGtPHFyzON8H/2oS1qSlJg/iJ8Ia6Hf/U7/k
...
i7CaVgRIrMJbxPbPeXSE9UZuoUkuM8R9/J5J1Nu/ZNhEoHfUDWCKvLTIyRmplrIX
GW/I7LHoRaFdi4RDQLprBdbWJt0Vyi2JNwIoX8EDsNT9/09WmRbNaganoQ35bos0
ath62hBu34h1xIa9vXf+eh08IqReNraztRD/f7SOfHk2qhLQGREDqPUC/jEkrW5+
45+mT2RvzTmnY2yoMxh1StpISqxOTX/R9Pt8wWwY7LcC0s9GLMYpTRMynaWr40rb
30XEdFr6O5sRui4Ho2pjb0YY2NuhyPhiEfGMY2p+zRO9uXaFhQJBxd4OnDNXPp4=
=bile
-----END PGP SIGNATURE-----
Move APIs and core code to use metav1.ObjectMeta
2017-01-18 07:43:45 -05:00
Dr. Stefan Schimanski
05c91315e2
Move first pkg/api/validation's into apimachinery
2017-01-17 10:46:17 -05:00
Dr. Stefan Schimanski
c0fd39038a
genericapiserver: cut off pkg/serviceaccount dependency
2017-01-17 10:46:17 -05:00
deads2k
1f282a1786
move name generation to generic api server storage helpers
2017-01-17 10:46:17 -05:00
deads2k
5ec0163a4f
mechanicals
2017-01-16 15:01:42 -05:00
deads2k
708baaf567
move no k8s.io/kubernetes deps to apiserver
2017-01-16 15:01:42 -05:00
deads2k
d2037a9447
use apimachinery packages instead of client-go packages
2017-01-13 16:24:57 -05:00
deads2k
2284cd2bb7
mechanical repercussions
2017-01-13 13:38:51 -05:00
deads2k
6687ea314a
moves of genericapiserver packages without dependencies
2017-01-13 13:38:51 -05:00
deads2k
3af9046f55
mechanicals
2017-01-13 13:38:51 -05:00
deads2k
f22426d63f
move no k8s.io/kubernetes dependencies round one
2017-01-13 13:38:51 -05:00
deads2k
eee88cccbf
move pkg/auth/user to staging
2017-01-13 13:38:43 -05:00