Commit Graph

4185 Commits

Author SHA1 Message Date
Kubernetes Publisher eb676eb91b Merge pull request #98208 from mborsz/patch-14
Print queue lengths on watch termination

Kubernetes-commit: 28f713a19d5b20de0444fcdc6754644a3255ef28
2021-01-20 15:20:08 +00:00
Kubernetes Publisher c469c23398 Merge pull request #98196 from YoyinZyc/add_context_to_apiserver
Apply WithContext to metrics in apiserver admission webhook

Kubernetes-commit: 17f040034a0c4ca18fa6140be3d8ccb03369918f
2021-01-20 04:25:59 -08:00
Maciej Borsz 5d1582cdd6 Print queue lengths on watch termination
Kubernetes-commit: 8f8beeabb7deb04624c70444012ebc8ba59d990f
2021-01-20 09:32:00 +01:00
lala123912 887895128f staging/src/k8s.io/apiserver/pkg/admission: migrate to structured logs
Kubernetes-commit: 2dc8cadd00962512fa90c460b9fa86a175ca73fc
2021-01-18 17:19:32 +08:00
lala123912 5d990a9e20 staging\src\k8s.io\apiserver\pkg\endpoints:migrate to structured logs
Kubernetes-commit: 12076ff3e587be00f1ef52e546fa3a3a85d41e7b
2021-01-15 15:23:55 +08:00
Maciej Borsz 78e27f49d3 Add trace to SerializeObject
Kubernetes-commit: e93836d9b35f5ec231da91807f00dab3d1a28fd9
2021-01-12 09:45:43 +01:00
ialidzhikov 1b82145bb1 Fix staticcheck in staging/src/k8s.io/apiserver/pkg/authentication/request/x509
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: 5771ea733ffbcff823517a4c51ebcadf11122578
2021-01-10 00:32:42 +02:00
David Eads 2ea61962bd add metrics for insecure backend proxy
Kubernetes-commit: 782a7a54269cba12bd16f90347127c9efd41fa36
2021-01-07 11:25:43 -05:00
yoyinzyc 4c292300d7 add context to metrics in apiserver admission webhook
Kubernetes-commit: b3aeaa4ed7bf8d419a96b4456a97bdf4c29e4330
2020-12-09 16:46:15 -08:00
Kubernetes Publisher cbff8a83d7 Merge pull request #96552 from pandaamanda/klog_fmt
use klog.Info and klog.Warning when had no format

Kubernetes-commit: 8bf42039e62d001f5d0331753bd99790b70d51eb
2021-01-16 05:09:18 +00:00
Kubernetes Publisher a588cec107 Merge pull request #98023 from tkashem/fix-test
fix apf controller unit test

Kubernetes-commit: e059af640627c7be36b00c1d10a4d511e283d9b4
2021-01-14 01:09:14 +00:00
Kubernetes Publisher a01efc7338 Merge pull request #97957 from yue9944882/aa-server-apf-optionality
Disables APF if the aggregated apiserver cannot locate the core kube-apiserver

Kubernetes-commit: 5c58b222516c0c8547d2f699b7582db9df09df8d
2021-01-13 17:06:38 +00:00
Kubernetes Publisher f297286279 Merge pull request #96502 from 249043822/br-hsts
Fix HSTS Missing From HTTPS Server(Nessus Scanner)

Kubernetes-commit: 33518271f3f97733a52369713769746f78cc4f1a
2021-01-13 17:06:34 +00:00
Abu Kashem 84ce907827 fix apf controller unit test
- don't expose the internal states of the apf controller to the caller
- return a boolean, instead of the priority level states

Kubernetes-commit: f20c6cb2d9060920cae9ff5cade1739c7e0b7f7a
2021-01-13 11:06:17 -05:00
Kubernetes Publisher fbd608a836 Merge pull request #97786 from pacoxu/staticcheck/apiserver-storage
fix static check for vendor/k8s.io/apiserver/pkg/storage/etcd3/

Kubernetes-commit: ef3337a443b402756c9f0bfb1f844b1b45ce289d
2021-01-12 17:05:38 +00:00
Kubernetes Publisher 2100cfae2d Merge pull request #97954 from yue9944882/fixes-nil-panic-for-delegated-auth-options
Fixes nil panic for nil delegated auth options

Kubernetes-commit: 564b0e55c7007745500d579356897848aaacb9dd
2021-01-12 17:05:36 +00:00
yue9944882 9db9b5f556 disables APF if the aggregated apiserver cannot locate the core kube-apiserver
Kubernetes-commit: 02df343437ca9331ab6b0a0de65858c68ba47a54
2021-01-12 18:08:46 +08:00
yue9944882 54481aaf0e fixes nil panic for nil delegated auth options
Kubernetes-commit: 9ade821baab1fa5573f4a36eb7d7098b033ec17c
2021-01-12 17:12:33 +08:00
Kubernetes Publisher 5a2668eee5 Merge pull request #97843 from mborsz/watcher-log
Improve logging in cacheWatcher

Kubernetes-commit: 97d7e50a4baac7efdb14ea771bfdd1673775dd05
2021-01-11 17:10:00 +00:00
Kubernetes Publisher fafe41b7ff Merge pull request #97480 from lingsamuel/etcd-lease-max-size
apiserver add lease object count metric

Kubernetes-commit: e054aa268e86808c381226b2eded83a3f84834f8
2021-01-11 17:09:58 +00:00
Maciej Borsz 8313c177f0 Improve logging in cacheWatcher
Kubernetes-commit: b78f0b31063b7d47781a1ce9ee4ed6c118fb949f
2021-01-11 12:33:52 +01:00
Kubernetes Publisher 202c033ed5 Merge pull request #96887 from sttts/sttts-unexpected-error-string
apiserver: print unknown responsewriter error strings, not only %#+v

Kubernetes-commit: 94b082550e57d06d251735e8d36f4333617e80d9
2021-01-10 05:06:33 +00:00
Kubernetes Publisher ba0503fa77 Merge pull request #96393 from thockin/rest-hooks
Add BeginCreate and BeginUpdate REST hooks

Kubernetes-commit: 67541a1bcc153861e9781f6a08d58da46dbdd5fc
2021-01-09 09:05:55 +00:00
Kubernetes Publisher f343cfc213 Merge pull request #97860 from MikeSpreitzer/rejigger-quantize-4
move all variables in sampleAndWaterMarkHistograms::innerSet

Kubernetes-commit: d9a26fb69bcb194c1b56a93eca0735a8fdf3bd63
2021-01-09 01:11:47 +00:00
Kubernetes Publisher 996b873a3d Merge pull request #96754 from tkashem/fix-etcd-metric
Reduce number of  buckets for etcd_request_duration_seconds metric

Kubernetes-commit: 2b8cac754c88900ea3ad91d6c3f0997b602a3051
2021-01-08 21:06:09 +00:00
Kubernetes Publisher 7e2afe673c Merge pull request #97820 from tkashem/webhook-error
prevent panic on webhook authenticator and authorizer timeout before response

Kubernetes-commit: cfc96c7db7489fa76172187035468e4d918631e3
2021-01-08 21:06:07 +00:00
Mike Spreitzer 16288a4d61 move all variables in sampleAndWaterMarkHistograms::innerSet
to tiptoe around https://github.com/golang/go/issues/43570 for #97685

Kubernetes-commit: 611184aa59d0cd40466bc3bc4b40a3712a038171
2021-01-08 13:32:38 -05:00
Kubernetes Publisher 8d68b7dd0d Merge pull request #97845 from mborsz/cacher-metrics2
Add 'apiserver_terminated_watchers_total'

Kubernetes-commit: 9a386cdd5d703d310ef82e892501621665c5eb00
2021-01-08 17:25:10 +00:00
Maciej Borsz 255da953aa Add 'apiserver_terminated_watchers_total'
Kubernetes-commit: 342ad48feb2629ebc832c0b85c52b4eb04d81498
2021-01-08 10:55:44 +01:00
Kubernetes Publisher 80777f1353 Merge pull request #97693 from enj/enj/i/oidc_fast_init
oidc authenticator: attempt to immediately initialize verifier

Kubernetes-commit: d1db90ba579e9c01194f92ba6daff852e3b4c6e7
2021-01-08 05:05:22 +00:00
Kubernetes Publisher afe6e553ea Merge pull request #96657 from KobayashiD27/staticcheck_server-storage
fix staticcheck error in vendor/k8s.io/apiserver/pkg/server/storage

Kubernetes-commit: 0dfa4419a05318ffcfb7a34a7e599bed87ce4a37
2021-01-08 01:05:51 +00:00
Abu Kashem 3ba02b7f93 handle webhook authenticator and authorizer error
webhook.WithExponentialBackoff returns an error, and the priority is:
- A: if the last invocation of the webhook function returned an error
  that error should be returned, otherwise
- B: the error associated with the context if it has been canceled or
  it has expired, or the ErrWaitTimeout returned by the wait package
  once all retries have been exhausted.

caller should check the error returned by webhook.WithExponentialBackoff
to handle both A and B. Currently, we only handle A.

Kubernetes-commit: ae2b353fbf519b29d168c534f88c373fd67a1c31
2021-01-07 16:14:18 -05:00
Kubernetes Publisher 83c2f3afa5 Merge pull request #97370 from MikeSpreitzer/relax-apf-controller
Relax apf_controller's reaction to certain errors

Kubernetes-commit: e765ab2e7ea5b411eae7ba3be570f3170ded74c8
2021-01-07 17:05:47 +00:00
Kubernetes Publisher 8bcb42fe50 Merge pull request #97451 from pacoxu/fix/cluster-ip-quota
bugfix: nodeport quota check failure result into failing to create a clusterip service

Kubernetes-commit: f9c7c59e25d2ae82bf7b3d72ec65e41c712f24bd
2021-01-07 17:05:45 +00:00
pacoxu b74ce63ea5 fix static check for vendor/k8s.io/apiserver/pkg/storage/etcd3/
Kubernetes-commit: aaa7084a4a548795c987b29dffb48749531b60a4
2021-01-07 11:21:50 +08:00
Kubernetes Publisher c2a4b1a59a Merge pull request #96906 from Rajalakshmi-Girish/issue-96853
Fixes the unit tests to be more tolerant with error messages

Kubernetes-commit: 10c1c3acf65cfb00de7fa28f784865bd42ab4872
2021-01-06 05:16:29 +00:00
Kubernetes Publisher c3e839ce63 Merge pull request #97656 from ialidzhikov/staticchec/initializers
Fix staticcheck in staging/src/k8s.io/apiserver/pkg/admission/initializer

Kubernetes-commit: 7e677be77a0118df136f16f10244b125840cd968
2021-01-05 13:12:35 +00:00
Monis Khan 4f25a579ae oidc authenticator: attempt to immediately initialize verifier
This change updates the OIDC authenticator to not wait 10 seconds
before attempting to fetch the /.well-known/openid-configuration
metadata from the OIDC issuer.  In most situations this results in
the API server being able to verify ID tokens sooner.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: be99f37a6861f885c263a447656b9470ba4f720f
2021-01-04 14:59:56 -05:00
ialidzhikov 584906efd7 Fix staticcheck in staging/src/k8s.io/apiserver/pkg/admission/initializer
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>

Kubernetes-commit: 8a0bce0021ca5565ba90d2119e479d3728a53865
2021-01-02 22:38:09 +02:00
Kubernetes Publisher 39d5049e42 Merge pull request #97206 from tkashem/panic
clean up executing request on panic

Kubernetes-commit: d815833a308b7c37389218f712511f6713a47570
2020-12-22 21:04:45 +00:00
pacoxu ee05a4663e bugfix: check Spec.AllocateLoadBalancerNodePorts for nodeport and skip zero usage in delta evaluator
Signed-off-by: pacoxu <paco.xu@daocloud.io>

When Spec.AllocateLoadBalancerNodePorts is "false" NodePort shall
not be included when computing quota for type:LoadBalancer.

Co-authored-by: uablrek

Kubernetes-commit: 15867d9e8a1faf007f6df563c26a9b5e8744b2a1
2020-12-22 19:19:15 +08:00
Kubernetes Publisher bef379c42d Merge pull request #97418 from wojtek-t/guaranteed_update_refactors
Unify variable naming between GuaranteedUpdate and Delete in storage

Kubernetes-commit: d63dc87ae8b6d568785bd4c532fb16d99a6b7338
2020-12-21 15:40:25 -08:00
Mike Spreitzer 41788f53e2 Relax apf_controller's reaction to certain errors
When the error is due to the object having been deleted, the
controller does not need to do anything before the coming
notification.

Kubernetes-commit: ef1e2039b5fc7f955ec4f9c636a64aa403cba2ab
2020-12-17 10:46:14 -05:00
wojtekt 3de94d4883 Unify variable naming between GuaranteedUpdate and Delete in storage
Kubernetes-commit: d0726e4b1354b1c8c3978b96ab7b01d13a2b6340
2020-12-16 09:28:44 +01:00
Kubernetes Publisher 9d65c2711e Merge pull request #97323 from tkashem/graceful-apf-controller
Fix the deadlock in priority and fairness config controller

Kubernetes-commit: 4164818517b5bd7046fa05b482fa768af48162d3
2020-12-18 21:04:47 +00:00
Tim Hockin 12c81a534a Use typedefs for Begin* functions
David asked for this for readability, even if not all other hooks do it.

Kubernetes-commit: 37b34f5b53edec78ca33929443bb4ba9a9534ed1
2020-12-15 21:49:16 -08:00
Tim Hockin e0a1a6eb3d Change AfterCreate/Update to take Options
Also adds typedefs for these function signatures for code clarity.

Kubernetes-commit: 25da6a06609265dcd3f637629705686b308b26d0
2020-12-15 21:40:44 -08:00
Tim Hockin f25a4e6d0f Change AfterDelete to take DeleteOptions
All of the After* hooks are called, whether the operation is dry-run or
not.  Create and Upate both have BeginCreate() hooks which know about
dry-run but delete doesn't, and can't (because of graceful deletion and
finalizers, the Delete() method may return and the object is actually
deleted later).

This adds an argument to AfterDelete(), and the others will follow.

This commit also adds tests for AfterDelete being called in the right
places.

Kubernetes-commit: 9402f48e050c25514a95da2e5e1feb6754ad0e0d
2020-12-15 21:24:57 -08:00
Tim Hockin c1a9dd5c5f Remove ObjectFunc
Kubernetes-commit: bb79475a860e908c6d3bbaf25da802c158c356b7
2020-12-15 13:05:13 -08:00
Abu Kashem 59a718ed18 fix the deadlock in priority and fairness config controller
Kubernetes-commit: 7114319b3e66e331250c116ac926f1a57352072f
2020-12-15 12:19:56 -05:00