Commit Graph

3752 Commits

Author SHA1 Message Date
Mike Spreitzer 219ab512ff Generalized NonResourcePolicyRule.NonResourceURLs impl
... to match the comment on that field.

Also generalized the test case generator to exercise the new
generality.

Kubernetes-commit: 2e97d3c8732147c3ba2f11d668f50b44e6374348
2020-03-04 00:00:39 -05:00
Monis Khan dd3ae9c175 dynamic certs: use correct name with event recorder
Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 3bc918e48427720938c731a6b26e9474b4819716
2020-03-03 18:40:34 -05:00
Monis Khan 091c53ac7a dynamic certs: do not copy mutex via shallow copy of tls.Config
go vet error:

call of dynamiccertificates.NewDynamicServingCertificateController
copies lock value: crypto/tls.Config contains sync.Once contains
sync.Mutex

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 86a5993007e3c781749a5099b540307f65a4f377
2020-03-03 14:58:43 -05:00
Lukasz Szaszkiewicz 3ae793e2b7 cleans up dynamiccertificates package
Kubernetes-commit: 413960e49bea4b5558ea4dda3d18137eceaf7f16
2020-03-03 14:38:18 +01:00
saad-ali ae1277e9a9 Update dep k8s.io/utils to 0a110f9eb7ab
Kubernetes-commit: 22e8189f40fc95b18bad2b59ba2ad20ae7c69ea9
2020-02-28 18:22:45 -08:00
Kubernetes Publisher 5bc150e3a7 Merge pull request #88419 from Jefftree/netproxy-udstoken
Add support for token authentication with network proxy

Kubernetes-commit: eaceb7bf5c31919336642a187b2a035dae1c2064
2020-03-03 08:29:51 +00:00
Kubernetes Publisher a05abcce31 Merge pull request #87631 from immutableT/extract-auth-metrics
Factor-out metrics related logic from authentication logic.

Kubernetes-commit: 7dccfd6121af2bf563285a483ef67dd6fda50ca8
2020-03-03 00:33:02 +00:00
Kubernetes Publisher 94fd1da67f Merge pull request #87508 from jennybuckley/large-obj
Don't save managedFields if object is too large

Kubernetes-commit: a019609d5dd07d923b3deed70335ccb60ffa9d15
2020-03-03 00:33:01 +00:00
Kubernetes Publisher 5f79f6fd39 Merge pull request #88609 from yue9944882/chore/follow-up-metrics
Preserve legacy inflight metrics and fixes registration

Kubernetes-commit: d115206309fab67d22e6b17ee340b654077a9289
2020-03-03 00:32:58 +00:00
yue9944882 0e0b06e404 hack/update-vendor.sh
Kubernetes-commit: 1cb42445d76daa79b2e3ec7f5a6ec0b32e994815
2020-03-02 21:44:58 +08:00
Kubernetes Publisher dffa3c3d5d Merge pull request #88509 from robscott/ingress-v1beta1-class
Adding IngressClass to networking/v1beta1

Kubernetes-commit: fdb2cb4c8832da1499069bda918c014762d8ac05
2020-03-02 08:33:49 +00:00
Mike Spreitzer 8ad2cc1389 Replaced uber atomic with sync atomic, removed unneded "blank import"
Kubernetes-commit: dbe84361440697af5c53d12209524aad9068c81a
2020-03-01 18:10:20 -05:00
Mike Spreitzer f44645645b Added non-randomized tests of matching FlowSchema rules
Kubernetes-commit: 21f78f3348736f242541f7b66e191aa1dce78c47
2020-02-27 23:36:19 -05:00
chenjun.cj e5c6ec44de add a new generic filter goaway
Kubernetes-commit: 81f46b64a35f3af096d50620dfcc78b003de8263
2020-02-28 05:27:25 +08:00
Jefftree c66c307e66 Update network proxy to v0.0.7
Kubernetes-commit: 0989770135c188ad4cc5bab4a885f631cdb695e7
2020-02-27 10:54:12 -08:00
yue9944882 f452a698b0 register metrics from comp-base
Kubernetes-commit: 11656478be93d4a9e54129ec35cd2b9558e901ac
2020-02-27 17:04:17 +08:00
Antoine Pelisse 82ecbdb375 Don't log "SHOULD NOT HAPPEN" errors more than once per second
Kubernetes-commit: 389dd0a499e4fa79d3d2ef4261aa9f25aa94e6b0
2020-02-26 15:58:57 -08:00
Rob Scott 7adab84d8a Adding IngressClass to networking/v1beta1
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>

Kubernetes-commit: 132d2afca0794b4bcaedb6dbbefe4e9d66e80239
2020-02-24 21:20:45 -08:00
Kubernetes Publisher 04f91da94a Merge pull request #88674 from enj/enj/t/paging_with_filter
storage: confirm that paging and predicate filtering work together

Kubernetes-commit: a84cbd0a42ce5fbdd1ac601efa3ba40dafd738b8
2020-02-29 04:29:34 +00:00
Kubernetes Publisher eed18b499c Merge pull request #85870 from Jefftree/authn-netproxy
Use Network Proxy with Authentication & Authorizer Webhooks

Kubernetes-commit: 268d0a1d3a2c79f14d4c7aad98783f2cff919af0
2020-02-29 04:29:32 +00:00
Monis Khan f5c1e085ed storage: confirm that paging and predicate filtering work together
This change adds the TestListContinuationWithFilter test which
confirms that paging with a predicate that does not match everything
results in the correct amount of calls to TransformFromStorage and
KV.Get.  The partial result of each paging call is also asserted.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 002c75442d768d2bcc51047667354ff16bbfa2e8
2020-02-28 15:35:22 -05:00
Kubernetes Publisher 65eed4cf58 Merge pull request #88637 from jktomer/priority-fairness-flag
Rename --enable-inflight-quota-handler to --enable-priority-and-fairness

Kubernetes-commit: 79377454e8dfa4c9c96f786c2f34e2a6230f7139
2020-02-28 04:48:02 +00:00
Jefftree 13613a1c15 Address comment and remove if condition
Kubernetes-commit: 61fa4e6c098559b65fe28c1bf55cb817697e38e5
2020-02-27 17:18:57 -08:00
Kubernetes Publisher 887685e277 Merge pull request #88632 from liggitt/admission-feature
Remove global variable dependency from runtimeclass admission

Kubernetes-commit: 8392baf492ebfb24d9e9d30863b1f3e1ac707c13
2020-02-28 00:37:49 +00:00
Jonathan Tomer 3a2c32b513 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness.
The old flag name doesn't make sense with the renamed API Priority and
Fairness feature, and it's still safe to change the flag since it hasn't done
anything useful in a released k8s version yet.

Kubernetes-commit: 711c1e17209cc410440eecd3723e7b4906ca0e42
2020-02-27 14:04:37 -08:00
Jordan Liggitt 15ffd4d5c4 Remove global variable dependency from runtimeclass admission
Kubernetes-commit: 57ea7a11a646e5ad9b3f5c42ba42c0b1d279286b
2020-02-27 15:20:26 -05:00
Chao Xu d81e3cbf28 Promote the egressselector API to beta
Kubernetes-commit: 3fbb549fb7ff707eb7c67e7ae275517c5bdc9883
2020-02-24 17:12:44 -08:00
Kubernetes Publisher 8701464958 Merge pull request #88421 from apelisse/enable-ssa-again
Enable field management for all new objects

Kubernetes-commit: 8ed008a41886f7aa7be55f860ef4832e21ebf026
2020-02-22 20:28:05 +00:00
Kubernetes Publisher ae400559ff Merge pull request #88294 from immutableT/envelope-metrics
Instrument DEK cache fill and request inter-arrival times.

Kubernetes-commit: 15515e12401090bff398efa73598f99ebf8c34d4
2020-02-22 20:28:04 +00:00
Kubernetes Publisher 509fd5d9b8 Merge pull request #88290 from tallclair/spr-deprecate
Start deprecation process for StreamingProxyRedirects

Kubernetes-commit: 20e6883a75db6dbc7908aba2ee69ed9afa8525ed
2020-02-21 20:28:09 +00:00
Kubernetes Publisher 4e3aa0457e Merge pull request #87179 from Jefftree/netproxy-uds
UDS + GRPC Support for Network Proxy

Kubernetes-commit: 6461e6f4fb688d3aab6934bd516e1c35dac72b39
2020-02-21 16:56:03 +00:00
Kubernetes Publisher 6306bb1298 Merge pull request #88332 from fleeto/comments-of-controller-manager
replaced tokenaccessreview with tokenreview

Kubernetes-commit: 3641953975f6edd1b62099a1e75b681e6a13769b
2020-02-21 16:56:02 +00:00
Kubernetes Publisher 36e80ea781 Merge pull request #88381 from BenTheElder/CVE-2020-9283
update golang.org/x/crypto to fix CVE-2020-9283

Kubernetes-commit: 056374d9c8b8e43745d8a97f82981f886702cef8
2020-02-21 16:55:59 +00:00
Tim Allclair 5d41955c07 Remove tallclair from some OWNERS files
Kubernetes-commit: 029a144ae9e143ea3f648a8d14fdddb7c845246d
2020-02-20 15:07:06 -08:00
Benjamin Elder 6d64219a30 update golang.org/x/crypto
Kubernetes-commit: 86ead631585825725e39f9a5e99c169b892a338c
2020-02-20 13:17:51 -08:00
Kubernetes Publisher ab5dd25a00 Merge pull request #88149 from yue9944882/feat/flow-control-ob
Flowcontrol Obserbiliity: Add FS/PL UIDs into response headers

Kubernetes-commit: afa72e93cd55ec4f873b8d218054fc8b5f060e02
2020-02-21 16:55:58 +00:00
Kubernetes Publisher d984422bb9 Merge pull request #88311 from yue9944882/chore/refactor-metrics
Homogenize PF metrics naming

Kubernetes-commit: c3db17f22cc2af06d47225d30648cb682040f5ba
2020-02-21 16:55:57 +00:00
Kubernetes Publisher 14604abe9d Merge pull request #88260 from databus23/patch-3
Fix wrong alpha version for ValidateProxyRedirects

Kubernetes-commit: 13750a0843e341cf880b2d6655f8fded10745946
2020-02-21 16:55:55 +00:00
Kubernetes Publisher 641545009c Merge pull request #88176 from tedyu/que-cfg
Check qcAPI against nil before derefencing

Kubernetes-commit: 1531905dc4f1deeefe2f978f8107ba8c7d92449b
2020-02-21 16:55:53 +00:00
Vincent C 27ae2b291d replaced tokenaccessreview with tokenreview
Kubernetes-commit: b410f77d3140ebc19037e6089d0d45980f0c6edf
2020-02-19 22:41:35 +08:00
yue9944882 f93a7a8312 homogenize metrics naming
Kubernetes-commit: a1523a049ff9fc47d7dc2c4354b16b69d2eb4be2
2020-02-19 16:34:49 +08:00
immutablet 66b663f223 Instrument DEK cache fill and request inter-arrival times.
Kubernetes-commit: 684d6fb0ade6ac088af391cedd70bc847941a54f
2020-02-18 16:39:53 -08:00
Tim Allclair daf1b2ae21 Start deprecation process for StreamingProxyRedirects
Kubernetes-commit: 98ad7416faa5d393e18f29ccff11bc131338cab4
2020-02-18 14:36:02 -08:00
Fabian Ruff 71203b3ff4 Fix wrong alpha version for ValidateProxyRedirects
This feature gate apparently never made it into 1.10 or 1.11
https://github.com/kubernetes/kubernetes/pull/69943

Kubernetes-commit: 9eb45d22a43f83c0ed957a580744ddbe1ef2dccd
2020-02-18 09:22:42 +01:00
yue9944882 1c89464ba6 adding response headers
Kubernetes-commit: da6f89217d357a6683ca4a7825c673d7c2af92f0
2020-02-17 16:06:13 +08:00
Kubernetes Publisher 73eccd1273 Merge pull request #88171 from MikeSpreitzer/version-field-managers
Version the API Priority and Fairness FieldManager values

Kubernetes-commit: 954d8b13ca8c3ea14cba95b6c44f6086eca9a91a
2020-02-16 06:03:38 +00:00
Ted Yu f2eace2821 Do not dereference qcAPI which maybe nil
Kubernetes-commit: 583f804652ffff898437c80ce357e4f0c379bfb9
2020-02-14 13:30:40 -08:00
Mike Spreitzer 1ef67fe134 Version the API Priority and Fairness FieldManager values
Kubernetes-commit: b142868eaf46b24fce0e6b01e06087c924351857
2020-02-14 13:50:11 -05:00
Kubernetes Publisher 18e37e63c4 Merge pull request #87754 from MikeSpreitzer/apf-filter5
Add twice refactored filter and config consumer for API Priority and Fairness

Kubernetes-commit: 77e8c75f32ae3e35a655fde08ae3b188d2a8e92e
2020-02-14 08:40:59 +00:00
Kubernetes Publisher de0bb6a690 Merge pull request #88092 from yujuhong/rm-beta-labels
Replace Beta OS/arch labels with the GA ones

Kubernetes-commit: 35bb71d855825ca836b85014c298e02dd4b55beb
2020-02-14 08:40:57 +00:00