Commit Graph

3457 Commits

Author SHA1 Message Date
Monis Khan dd3ae9c175 dynamic certs: use correct name with event recorder
Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 3bc918e48427720938c731a6b26e9474b4819716
2020-03-03 18:40:34 -05:00
Monis Khan 091c53ac7a dynamic certs: do not copy mutex via shallow copy of tls.Config
go vet error:

call of dynamiccertificates.NewDynamicServingCertificateController
copies lock value: crypto/tls.Config contains sync.Once contains
sync.Mutex

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 86a5993007e3c781749a5099b540307f65a4f377
2020-03-03 14:58:43 -05:00
Kubernetes Publisher 68653ed579 Merge pull request #88794 from MikeSpreitzer/full-nru-match
Generalized NonResourcePolicyRule.NonResourceURLs impl

Kubernetes-commit: fa78f6b1a05f6d49f3bc2a40b4b154b70e4bbe94
2020-03-06 04:37:53 +00:00
Kubernetes Publisher d1b14773e7 Merge pull request #88644 from MikeSpreitzer/literal-match-tests
Added non-randomized tests of matching FlowSchema rules

Kubernetes-commit: db73df3abe5a4b024d40492cbd4b736b09e8c1c3
2020-03-06 04:37:52 +00:00
Kubernetes Publisher 98a04d8621 Merge pull request #88502 from caesarxuchao/make-egress-api-beta
Promote the egressSelector API to beta

Kubernetes-commit: f605ab0b088ca109ecb1496d4ecf8347a2a3335c
2020-03-06 04:37:50 +00:00
Kubernetes Publisher 250e0f8502 Merge pull request #88763 from p0lyn0mial/dynamiccertificates-cleanup
cleans up dynamiccertificates package

Kubernetes-commit: ab7c75ff3e7047a704ae10effba6baaf1e8c4982
2020-03-05 16:29:54 +00:00
Kubernetes Publisher 0175e3aa31 Merge pull request #88600 from apelisse/at-most-every
SHOULD NOT HAPPEN: logging "SHOULD NOT HAPPEN" errors more than once per second

Kubernetes-commit: cd1ddbf5cc218b6375d523b32150fd27e65b14ac
2020-03-05 04:33:13 +00:00
Mike Spreitzer f9c1780311 Hopefully plainer test strings
Kubernetes-commit: 4a4852ca9a1ffc439e2c476d7057a8be9f081055
2020-03-04 21:47:19 -05:00
Kubernetes Publisher 8ae44864d8 Merge pull request #88567 from answer1991/feature/close-connection-when-over-load
add a new filter goaway which could send GOAWAY probabilistically to help balance HTTP2 requests

Kubernetes-commit: 48676adba97681027bb4223cb5b5b14aa1abb7d4
2020-03-04 20:38:45 +00:00
Kubernetes Publisher 31094a2234 Merge pull request #88684 from saad-ali/updateMountLib
Update AzureFile and CephFS to use MountSensitive

Kubernetes-commit: cd23e78c3dc1a4161abb11523a8614b56b9c0928
2020-03-04 08:33:43 +00:00
Mike Spreitzer 219ab512ff Generalized NonResourcePolicyRule.NonResourceURLs impl
... to match the comment on that field.

Also generalized the test case generator to exercise the new
generality.

Kubernetes-commit: 2e97d3c8732147c3ba2f11d668f50b44e6374348
2020-03-04 00:00:39 -05:00
Lukasz Szaszkiewicz 3ae793e2b7 cleans up dynamiccertificates package
Kubernetes-commit: 413960e49bea4b5558ea4dda3d18137eceaf7f16
2020-03-03 14:38:18 +01:00
saad-ali ae1277e9a9 Update dep k8s.io/utils to 0a110f9eb7ab
Kubernetes-commit: 22e8189f40fc95b18bad2b59ba2ad20ae7c69ea9
2020-02-28 18:22:45 -08:00
Kubernetes Publisher 5bc150e3a7 Merge pull request #88419 from Jefftree/netproxy-udstoken
Add support for token authentication with network proxy

Kubernetes-commit: eaceb7bf5c31919336642a187b2a035dae1c2064
2020-03-03 08:29:51 +00:00
Kubernetes Publisher a05abcce31 Merge pull request #87631 from immutableT/extract-auth-metrics
Factor-out metrics related logic from authentication logic.

Kubernetes-commit: 7dccfd6121af2bf563285a483ef67dd6fda50ca8
2020-03-03 00:33:02 +00:00
Kubernetes Publisher 94fd1da67f Merge pull request #87508 from jennybuckley/large-obj
Don't save managedFields if object is too large

Kubernetes-commit: a019609d5dd07d923b3deed70335ccb60ffa9d15
2020-03-03 00:33:01 +00:00
Kubernetes Publisher 5f79f6fd39 Merge pull request #88609 from yue9944882/chore/follow-up-metrics
Preserve legacy inflight metrics and fixes registration

Kubernetes-commit: d115206309fab67d22e6b17ee340b654077a9289
2020-03-03 00:32:58 +00:00
yue9944882 0e0b06e404 hack/update-vendor.sh
Kubernetes-commit: 1cb42445d76daa79b2e3ec7f5a6ec0b32e994815
2020-03-02 21:44:58 +08:00
Kubernetes Publisher dffa3c3d5d Merge pull request #88509 from robscott/ingress-v1beta1-class
Adding IngressClass to networking/v1beta1

Kubernetes-commit: fdb2cb4c8832da1499069bda918c014762d8ac05
2020-03-02 08:33:49 +00:00
Mike Spreitzer 8ad2cc1389 Replaced uber atomic with sync atomic, removed unneded "blank import"
Kubernetes-commit: dbe84361440697af5c53d12209524aad9068c81a
2020-03-01 18:10:20 -05:00
Mike Spreitzer f44645645b Added non-randomized tests of matching FlowSchema rules
Kubernetes-commit: 21f78f3348736f242541f7b66e191aa1dce78c47
2020-02-27 23:36:19 -05:00
chenjun.cj e5c6ec44de add a new generic filter goaway
Kubernetes-commit: 81f46b64a35f3af096d50620dfcc78b003de8263
2020-02-28 05:27:25 +08:00
Jefftree c66c307e66 Update network proxy to v0.0.7
Kubernetes-commit: 0989770135c188ad4cc5bab4a885f631cdb695e7
2020-02-27 10:54:12 -08:00
yue9944882 f452a698b0 register metrics from comp-base
Kubernetes-commit: 11656478be93d4a9e54129ec35cd2b9558e901ac
2020-02-27 17:04:17 +08:00
Antoine Pelisse 82ecbdb375 Don't log "SHOULD NOT HAPPEN" errors more than once per second
Kubernetes-commit: 389dd0a499e4fa79d3d2ef4261aa9f25aa94e6b0
2020-02-26 15:58:57 -08:00
Rob Scott 7adab84d8a Adding IngressClass to networking/v1beta1
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>

Kubernetes-commit: 132d2afca0794b4bcaedb6dbbefe4e9d66e80239
2020-02-24 21:20:45 -08:00
Kubernetes Publisher 04f91da94a Merge pull request #88674 from enj/enj/t/paging_with_filter
storage: confirm that paging and predicate filtering work together

Kubernetes-commit: a84cbd0a42ce5fbdd1ac601efa3ba40dafd738b8
2020-02-29 04:29:34 +00:00
Kubernetes Publisher eed18b499c Merge pull request #85870 from Jefftree/authn-netproxy
Use Network Proxy with Authentication & Authorizer Webhooks

Kubernetes-commit: 268d0a1d3a2c79f14d4c7aad98783f2cff919af0
2020-02-29 04:29:32 +00:00
Monis Khan f5c1e085ed storage: confirm that paging and predicate filtering work together
This change adds the TestListContinuationWithFilter test which
confirms that paging with a predicate that does not match everything
results in the correct amount of calls to TransformFromStorage and
KV.Get.  The partial result of each paging call is also asserted.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: 002c75442d768d2bcc51047667354ff16bbfa2e8
2020-02-28 15:35:22 -05:00
Kubernetes Publisher 65eed4cf58 Merge pull request #88637 from jktomer/priority-fairness-flag
Rename --enable-inflight-quota-handler to --enable-priority-and-fairness

Kubernetes-commit: 79377454e8dfa4c9c96f786c2f34e2a6230f7139
2020-02-28 04:48:02 +00:00
Jefftree 13613a1c15 Address comment and remove if condition
Kubernetes-commit: 61fa4e6c098559b65fe28c1bf55cb817697e38e5
2020-02-27 17:18:57 -08:00
Kubernetes Publisher 887685e277 Merge pull request #88632 from liggitt/admission-feature
Remove global variable dependency from runtimeclass admission

Kubernetes-commit: 8392baf492ebfb24d9e9d30863b1f3e1ac707c13
2020-02-28 00:37:49 +00:00
Jonathan Tomer 3a2c32b513 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness.
The old flag name doesn't make sense with the renamed API Priority and
Fairness feature, and it's still safe to change the flag since it hasn't done
anything useful in a released k8s version yet.

Kubernetes-commit: 711c1e17209cc410440eecd3723e7b4906ca0e42
2020-02-27 14:04:37 -08:00
Jordan Liggitt 15ffd4d5c4 Remove global variable dependency from runtimeclass admission
Kubernetes-commit: 57ea7a11a646e5ad9b3f5c42ba42c0b1d279286b
2020-02-27 15:20:26 -05:00
Chao Xu d81e3cbf28 Promote the egressselector API to beta
Kubernetes-commit: 3fbb549fb7ff707eb7c67e7ae275517c5bdc9883
2020-02-24 17:12:44 -08:00
Kubernetes Publisher 8701464958 Merge pull request #88421 from apelisse/enable-ssa-again
Enable field management for all new objects

Kubernetes-commit: 8ed008a41886f7aa7be55f860ef4832e21ebf026
2020-02-22 20:28:05 +00:00
Kubernetes Publisher ae400559ff Merge pull request #88294 from immutableT/envelope-metrics
Instrument DEK cache fill and request inter-arrival times.

Kubernetes-commit: 15515e12401090bff398efa73598f99ebf8c34d4
2020-02-22 20:28:04 +00:00
Kubernetes Publisher 509fd5d9b8 Merge pull request #88290 from tallclair/spr-deprecate
Start deprecation process for StreamingProxyRedirects

Kubernetes-commit: 20e6883a75db6dbc7908aba2ee69ed9afa8525ed
2020-02-21 20:28:09 +00:00
Kubernetes Publisher 4e3aa0457e Merge pull request #87179 from Jefftree/netproxy-uds
UDS + GRPC Support for Network Proxy

Kubernetes-commit: 6461e6f4fb688d3aab6934bd516e1c35dac72b39
2020-02-21 16:56:03 +00:00
Kubernetes Publisher 6306bb1298 Merge pull request #88332 from fleeto/comments-of-controller-manager
replaced tokenaccessreview with tokenreview

Kubernetes-commit: 3641953975f6edd1b62099a1e75b681e6a13769b
2020-02-21 16:56:02 +00:00
Kubernetes Publisher 36e80ea781 Merge pull request #88381 from BenTheElder/CVE-2020-9283
update golang.org/x/crypto to fix CVE-2020-9283

Kubernetes-commit: 056374d9c8b8e43745d8a97f82981f886702cef8
2020-02-21 16:55:59 +00:00
Benjamin Elder 6d64219a30 update golang.org/x/crypto
Kubernetes-commit: 86ead631585825725e39f9a5e99c169b892a338c
2020-02-20 13:17:51 -08:00
Kubernetes Publisher ab5dd25a00 Merge pull request #88149 from yue9944882/feat/flow-control-ob
Flowcontrol Obserbiliity: Add FS/PL UIDs into response headers

Kubernetes-commit: afa72e93cd55ec4f873b8d218054fc8b5f060e02
2020-02-21 16:55:58 +00:00
Kubernetes Publisher d984422bb9 Merge pull request #88311 from yue9944882/chore/refactor-metrics
Homogenize PF metrics naming

Kubernetes-commit: c3db17f22cc2af06d47225d30648cb682040f5ba
2020-02-21 16:55:57 +00:00
Kubernetes Publisher 14604abe9d Merge pull request #88260 from databus23/patch-3
Fix wrong alpha version for ValidateProxyRedirects

Kubernetes-commit: 13750a0843e341cf880b2d6655f8fded10745946
2020-02-21 16:55:55 +00:00
Kubernetes Publisher 641545009c Merge pull request #88176 from tedyu/que-cfg
Check qcAPI against nil before derefencing

Kubernetes-commit: 1531905dc4f1deeefe2f978f8107ba8c7d92449b
2020-02-21 16:55:53 +00:00
Vincent C 27ae2b291d replaced tokenaccessreview with tokenreview
Kubernetes-commit: b410f77d3140ebc19037e6089d0d45980f0c6edf
2020-02-19 22:41:35 +08:00
yue9944882 f93a7a8312 homogenize metrics naming
Kubernetes-commit: a1523a049ff9fc47d7dc2c4354b16b69d2eb4be2
2020-02-19 16:34:49 +08:00
immutablet 66b663f223 Instrument DEK cache fill and request inter-arrival times.
Kubernetes-commit: 684d6fb0ade6ac088af391cedd70bc847941a54f
2020-02-18 16:39:53 -08:00
Tim Allclair daf1b2ae21 Start deprecation process for StreamingProxyRedirects
Kubernetes-commit: 98ad7416faa5d393e18f29ccff11bc131338cab4
2020-02-18 14:36:02 -08:00