04ebcd9672
Merge pull request #108992 from alexzielenski/cache-busting-client-go
...
client-go: OpenAPI v3 support
Kubernetes-commit: 656dc213ce43f1ecfa7f54eb1f01864468f8f0e2
2022-03-29 05:21:19 +00:00
59074d75ab
Merge pull request #109078 from tallclair/audit-mutex
...
Audit mutex
Kubernetes-commit: c64a8cdc2daf2935c2fbfdbbc10c554190a645db
2022-03-29 05:21:17 +00:00
2ebefbd1aa
Merge pull request #109080 from tallclair/audit-cleanup
...
Delete dead code
Kubernetes-commit: 41830a1f79c795881e62911a8fbd1f971afae48b
2022-03-29 01:23:10 +00:00
7629acd5c8
Merge pull request #108629 from skitt/blang-semver-v4
...
Upgrade to blang/semver/v4 v4.0.0
Kubernetes-commit: 6571eb24508657ad42ebdcb387aee6f532ea0822
2022-03-29 01:23:09 +00:00
625cf21c7c
Merge pull request #93438 from tallclair/audit-ips
...
Document the sources for the sourceIPs audit log field
Kubernetes-commit: 0bbb617412e6c281e3a1ab9512457b86f8e2f20d
2022-03-29 01:23:06 +00:00
d39da465cb
Merge pull request #108889 from kevindelgado/validation-beta-flag
...
ServerSideFieldValidation Beta Graduation
Kubernetes-commit: ea0dc6ed417c7cd398cd5e02cdaf04721265eee2
2022-03-29 01:23:04 +00:00
d0f7a9b250
Merge pull request #109018 from wojtek-t/deprecate_dropped_requests
...
Deprecate apiserver_dropped_requests_total metric
Kubernetes-commit: 24cb73bb9027b089e05d27cc29be0987ab8153ae
2022-03-28 21:27:15 +00:00
0bdbab6e34
Merge pull request #108282 from sftim/20220222_reword_types_container_runtime_neutral
...
Update types to be neutral about container runtime
Kubernetes-commit: 3a3c9bc5c0bf1d1626fb26696798b85e776704af
2022-03-28 21:27:12 +00:00
9fdeba9ae0
Switch beta flag on
...
Kubernetes-commit: 8e88d462109ef46b35b870bc73284b9a64fcc921
2022-03-28 13:43:01 -07:00
e4486afb41
Separate OpenAPI V2 and V3 Config
...
Kubernetes-commit: 67d3dbfaae87a5bf3325fadda7266ed223766a53
2022-03-28 13:18:56 -07:00
e09048caa8
generated: Update kube-openapi and vendor
...
Kubernetes-commit: 550d6383b5219ac43b8c86cf57807c47b82919aa
2022-03-28 13:20:46 -07:00
5258d09ebc
Delete dead code
...
Kubernetes-commit: d2f53a08567b763003bea6e9c45b688e604b8aff
2022-03-28 11:51:59 -07:00
1e36b0a9fb
Don't add audit annotations directly to the audit event
...
Kubernetes-commit: bdebc62d49293a0fbbd7e0d95bfd94b1ce21015c
2022-03-28 11:38:38 -07:00
8c9e58df37
Merge pull request #109024 from stlaz/sha1_sig_deprecation
...
webhooks,aggregation: add metrics to count certs with SHA1 signatures
Kubernetes-commit: e0ca5cfd73bd046ee5fbdef50e073842e6fbc52f
2022-03-28 17:29:32 +00:00
95587e321e
Audit annotations mutex
...
Kubernetes-commit: c3a68d5de83116289799571de57ace47cd950364
2022-03-28 17:21:14 +00:00
3d3cf542f9
update vendor
...
client-go depends on more of kube-openapi v3 now
Kubernetes-commit: bb799d97066bbae4eaacd2ecc2a57f7fd42fa142
2022-03-28 10:07:56 -07:00
6144d1e2b7
Merge pull request #108996 from cici37/errUpdate
...
Bump kube-openapi and update err handling
Kubernetes-commit: 898443f40583cd0fd864e9b11c8156faf64b680a
2022-03-27 01:22:31 +00:00
034ebc2d9b
x509metrics: rename 'missing_san*.go' files to match their new purpose better
...
Kubernetes-commit: 5479306b1326bcbf29ae2ca0694a36555ed1ce35
2022-03-25 17:03:13 +01:00
23c7d60c29
Deprecate apiserver_dropped_requests_total metric
...
Kubernetes-commit: b106b2621c454b8f38b9dc28935994c33426ee75
2022-03-25 14:58:41 +01:00
475546c99d
Enable ServerSideFieldValidation feature gate on by default in beta
...
Kubernetes-commit: a3a24e1c7b379c26b407ed081a0a17fde2410180
2022-03-24 23:56:48 +00:00
df7621debc
Bump kube-openapi
...
Kubernetes-commit: 383eb99bebdd5746732b7f6789907ea3598ee98e
2022-03-24 15:11:08 -07:00
a257d00b02
Merge pull request #109040 from jpbetz/revert-cel-bump
...
Revert #108954 : Use CEL EagerlyValidateDeclarations to improve compilation performance
Kubernetes-commit: f411c4068c89c540654a774178d55d74c927e2f9
2022-03-26 05:18:59 +00:00
1ad0d6cc84
Merge pull request #109030 from liggitt/revert-apf-ssa
...
Revert "Revert "Merge pull request #107797 from tkashem/revert-107456""
Kubernetes-commit: 6c73b674d7aa0113cf0d90bd47fdd80c768b7b5b
2022-03-26 05:18:57 +00:00
e2a792c7b0
Merge pull request #108939 from stevekuznetsov/skuznets/precise-watch
...
pkg/storage/etcd3: be more precise in watch test
Kubernetes-commit: bb3127eee816ed83fdf2fcb18fb70ae49453e6b6
2022-03-26 01:22:08 +00:00
83e26430f0
Merge pull request #108898 from jiahuif-forks/feature/openapi-enums/to-beta
...
Graduate OpenAPI Enums to beta
Kubernetes-commit: 8f12e4a44bbe5f5f2af2c7c5e63cb060da25748d
2022-03-26 01:22:07 +00:00
70253b1d88
Merge pull request #107910 from tkashem/latency-breakdown
...
track latency incurred in various layers of apiserver
Kubernetes-commit: 84bd51c7a19f3222e00e746197daff8de017ff7b
2022-03-25 21:18:59 +00:00
b84dea139c
Revert "Bump CEL to 0.11.2"
...
This reverts commit 4c90653d19471f0116cb988872cfdffec2e8e212.
Kubernetes-commit: 4fba6adc919542157bd5026161de020b611507b3
2022-03-25 16:46:52 -04:00
20ceb8964c
Revert "Revert "Merge pull request 107797 from tkashem/revert-107456""
...
This reverts commit b0b460921b81b260473d5c393d85beeb5a03e834.
Kubernetes-commit: 363a8beaab2d753413c5599a9ceb41c526bf7270
2022-03-25 14:34:41 -04:00
d0810d4211
Merge pull request #108954 from jpbetz/cel-0.11.1
...
Use CEL EagerlyValidateDeclarations to improve compilation performance
Kubernetes-commit: 5e63432f79357c376d920ae35409e98502bec6ec
2022-03-25 17:40:08 +00:00
fb7796cda6
Bump CEL to 0.11.2
...
Kubernetes-commit: 4c90653d19471f0116cb988872cfdffec2e8e212
2022-03-24 11:34:14 -04:00
0e371da4b0
Merge pull request #108159 from pohly/logcheck
...
logcheck update and golangci-lint integration
Kubernetes-commit: d60df5ba044fdb1cf20e4fc6d2ba45337d322052
2022-03-25 05:20:29 +00:00
6708a8888d
Update kube-openapi ( #108895 )
...
* upgrade k8s.io/kube-openapi
* fix open-api v3 blank aggregator output
* use keys as API group
in ./hack/update-openapi-spec.sh
* fix import grouping
* update openapiv3 integration tests
Kubernetes-commit: 11b3a18cca745485e1033be8d62a1d0cde5a1d1d
2022-03-24 21:22:00 +00:00
d4cb74b67d
Merge pull request #108455 from Argh4k/race-conditions
...
Copy request in timeout handler
Kubernetes-commit: 9bb5823b83c2929b059498b1e59c08261257126b
2022-03-24 21:21:58 +00:00
96bc51835b
Merge pull request #108934 from stevekuznetsov/skuznets/time-out-test
...
pkg/storage/etcd3: update test to time out, not panic
Kubernetes-commit: da7f184344d841807c2da88a92ee96e1de32d97b
2022-03-24 21:21:56 +00:00
5e6d6631a4
Merge pull request #108569 from mborsz/cont
...
Implement page size progressing for rare selectors
Kubernetes-commit: cc5bf4a3f480099a6230eb6a33141d4f6d8b1d16
2022-03-24 17:19:39 +00:00
610f96c654
Merge pull request #106591 from Kartik494/bumpetcd
...
Updated Etcd Version to 3.5.1 in go.mod
Kubernetes-commit: 83ee27569e38c057eaed080dc972c8de6aa639c6
2022-03-24 17:19:37 +00:00
1f257cb5e8
Merge pull request #108927 from wojtek-t/unify_pf_metrics
...
Record dropped requests in apiserver_request_total metric
Kubernetes-commit: d9819f05d0154677aee3e643c5498511fabce38a
2022-03-24 17:19:35 +00:00
8f16924121
Merge pull request #108553 from kerthcet/fix/race-detected-in-TestErrConnKilled
...
fix: race detected in TestErrConnKilled
Kubernetes-commit: c956b1a2c40267ace3e626f4ffef546ec396b78d
2022-03-24 17:19:34 +00:00
b9e1bc9a37
Merge pull request #108936 from stevekuznetsov/skuznets/more-correct-diff
...
pkg/storage/etcd3: use correct diff in tests
Kubernetes-commit: efdb80dcc61846a802aa233be1374628c5fd84ed
2022-03-24 13:25:08 +00:00
d6ba1acfea
Merge pull request #108935 from stevekuznetsov/skuznets/too-large-rv
...
pkg/storage/etcd3: refactor "too large" resourceVersions
Kubernetes-commit: 4e6000a40c267e66d9a0b6018cbb6b867cfa811c
2022-03-24 13:25:06 +00:00
2b17c30425
Merge pull request #108725 from pohly/klog-flush-and-exit
...
klog v2.60.1
Kubernetes-commit: 56f45c5c811ba23934915b1a1330d87c58bddf07
2022-03-24 09:22:39 +00:00
e2e25c864a
Merge pull request #108717 from lavalamp/remove-clustername
...
Remove ClusterName
Kubernetes-commit: bb67b5e9e830fba239c1e7957e5dcbefdce92a37
2022-03-24 09:22:37 +00:00
cd3019f777
webhooks, aggregation: add metrics to count certs with SHA1 signatures
...
Extends the certificate attribute deprecation RoundTrippers wrapper with
a checker that counts certificates with sha-1 signatures in server responses.
Non-root non-self-signed SHA-1 certificate signatures were deprecated in
Golang 1.18.
Kubernetes-commit: 499ee65a9b0cd45d41716b513fae0d537f7f9c88
2022-03-24 01:08:02 -04:00
a0f7d7ad7c
webhooks: regenerate certificates for additional sha-1 signatures
...
Kubernetes-commit: b2c6de170b0b880ccca0ae783bae09559f8dff04
2022-03-25 16:52:40 +01:00
d98bb60d70
webhooks: gencerts.sh: add intermediate and server certs with sha-1 signatures
...
Kubernetes-commit: fee08cc580e5147d11f3f12a37452f8a86cee3b8
2022-03-25 16:52:07 +01:00
97b274d46f
Merge pull request #108191 from ravisantoshgudimetla/wire-cert-contexts
...
Wire cert contexts
Kubernetes-commit: 14e8db067e93154b2561129724fccabe676876d8
2022-03-24 01:38:46 +00:00
42854c1734
pkg/storage/etcd3: be more precise in watch test
...
Previously, this test assumed that:
- a global watch would return only an event for the key in question
- only the delete event in question would be returned
Neither of these assumptions are correct for an etcd backend as long
as any other clients are interacting with the system. This commit
makes the watch more specific and extracts the correct event.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: 2631c0a0f959bd67aa455045dce33e77150ab5f8
2022-03-23 12:59:53 -08:00
41c1f65bf6
pkg/storage/etcd3: correctly validate resourceVersions
...
In a number of tests, the underlying storage backend interaction will
return the revision (logical clock underpinning the MVCC implementation)
at the call-time of the RPC. Previously, the tests validated that this
returned revision was exactly equal to some previously seen revision.
This assertion is only true in systems where no other events are
advancing the logical clock. For instance, when using a single etcd
cluster as a shared fixture for these tests, the assertion is not valid
any longer. By checking that the returned revision is no older than the
previously seen revision, the validation logic is correct in all cases.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: eba25cdbbcc5d35e707516194f64d8ed363c2773
2022-03-23 12:44:49 -08:00
edb0c0eba4
pkg/storage/etcd3: use correct diff in tests
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: 8903372e8b8d32f8b244f5087e3f2907b86f03bd
2022-03-23 12:33:57 -08:00
de7922ba23
pkg/storage/etcd3: refactor "too large" resourceVersions
...
When tests attempt to validate behavior in the case that a client asks
for a resource version that is "too large" for the underlying storage,
the previous implementation would simply add 1 to the latest revision
seen. This is only appropriate for storage backends that
a) provide a continuous monotonic logical clock
b) have no other events occurring while the test runs
For instance, when using a singe etcd backend as a shared fixture for
these tests, adding 1 to a previously-seen revision is not suffcient to
ensure that the resulting revision is "too large". By instead using the
largest possible integer value, we can be certain of this.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: b973cdc57cc6ee57684455cdb76db13a8c82cefa
2022-03-23 12:27:16 -08:00
Kubernetes Publisher
Jefftree
Tim Allclair
Alexander Zielenski
Stanislav Laznicka
Wojciech Tyczyński
Kevin Delgado
cici37
Joe Betz
Jordan Liggitt
Alex Zielenski
Steve Kuznetsov