kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,525 Commits 30 Branches 1,482 Tags 31 MiB
Commit Graph

6525 Commits

Author SHA1 Message Date
Kubernetes Publisher 8f12a0306b Merge pull request #116443 from benluddy/secondary-authz-decision-caching 
Cache authz decisions within the scope of validating policy admission.

Kubernetes-commit: 6ffca501361adadfb133ec1b8f76a2c2a23836dc
 2023-07-11 21:25:40 +00:00
Kubernetes Publisher 44c9069e7a Merge pull request #119207 from serathius/progress-notify 
Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh

Kubernetes-commit: e1fbd0c113af4b4c835ed2355b725506dfeda9e7
 2023-07-11 17:20:05 +00:00
Kubernetes Publisher 6e247788f7 Merge pull request #119198 from jadhaj/fix-115385 
Document address family of listening INET sockets

Kubernetes-commit: 50782ce5abfd75c644564dcfd2e96c2ae49921d5
 2023-07-11 13:21:18 +00:00
Marek Siarkowicz cd751eb82e Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh 
Kubernetes-commit: 98461be8ffa7383152c442414a16adb217e98080
 2023-07-10 18:10:49 +02:00
Jad Haj Yahya a01ccc2e32 Document address family of listening INET sockets 
Kubernetes-commit: de0764309571f0989847b2322db1906c5b34949e
 2023-07-10 15:01:13 +03:00
Kubernetes Publisher 0d62f07a5d Merge pull request #119127 from Mskxn/fix_leak 
use stopCh to avoid goroutine leak in tests

Kubernetes-commit: 4c7cda3e55736822bdee4c2ac93f989cf8f1501c
 2023-07-06 23:55:51 +00:00
Anish Ramasekar 5d08b1abe9 [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007) 
* add feature gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* add validation and warning in load config

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* mark v1beta1 proto message deprecated

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 1acdb4ae86e0e43475c31f108a6106b1f5ea5027
 2023-07-06 23:55:47 +00:00
Kubernetes Publisher 24d5ac4b98 Merge pull request #118960 from MikeSpreitzer/add-seat-occupancy-metric 
Introduce apiserver_flowcontrol_current_executing_seats metric

Kubernetes-commit: fbb2f89668bd07a96adc8a1f4f0819e769255703
 2023-07-06 11:25:19 +00:00
Mskxn 2595ae0416 use stopCh to avoid goroutine leak in tests 
Kubernetes-commit: 132d477cb7aa323c0eae6dd9a09f9c93fb570b83
 2023-07-06 16:24:58 +08:00
Kubernetes Publisher 73ba48c7f9 Merge pull request #118386 from Richabanker/enhance-storage-version 
Add servedVersions info in StorageVersion API

Kubernetes-commit: cd32adebd9d52ae46827054350c17de085a4eb23
 2023-07-06 07:32:27 +00:00
Kubernetes Publisher 0e613811b6 Merge pull request #118955 from MikeSpreitzer/add-exempt-queuesets 
Make QueueSet support exempt behavior; use it

Kubernetes-commit: 5f63d1f916279541874914165b21f4b4db31e26a
 2023-07-04 14:33:22 +00:00
Kubernetes Publisher 4cf166b68a Merge pull request #119045 from serathius/test-consistent-list 
Test consistent list

Kubernetes-commit: 2f563464bc879cc7d31642eb77e2b0d38b498159
 2023-07-04 14:33:18 +00:00
Kubernetes Publisher ce72ad1c02 Merge pull request #117971 from wojtek-t/paginate_delete_collection 
Paginate within DeleteCollection call.

Kubernetes-commit: c9c541a4b7f5a3aafac7e0b63c2080752ce16eb0
 2023-07-03 22:41:39 +00:00
Tim Allclair 2a8bc69060 Initialize the AuditEvent with the AuditContext (#113611) 
* Initialize the AuditEvent with the AuditContext

* Squash: Address PR feedback

* Squash: address PR feedback

Kubernetes-commit: 2b03f04ce589a57cf80b2153c7e5056c53c374d3
 2023-07-03 18:28:13 +00:00
Marek Siarkowicz df9896fd00 Test consistent List 
Kubernetes-commit: b36fdd68b72cd5c64ea5be3917846067644da983
 2023-07-03 17:22:22 +02:00
Wojciech Tyczyński bf71493219 Simplify DeleteCollection 
Kubernetes-commit: e08bd3bc263615f3a26bd17c66a3222e4b6ff7ec
 2023-07-03 16:56:53 +02:00
Kubernetes Publisher 10b550f442 Merge pull request #118931 from wojtek-t/generic_cacher_tests_270623 
Generalize watch storage tests

Kubernetes-commit: 8cd25e7908699eaf307661f805f7debcc9f358a0
 2023-06-29 22:36:45 +00:00
Kubernetes Publisher 122f3d90e6 Merge pull request #118948 from aramase/aramase/c/oidc_wire_context 
[StructuredAuthenticationConfig] wire request context to claim resolver

Kubernetes-commit: d27439701f6cc83f992eda73b4797fa1af8fe7f7
 2023-06-29 22:36:44 +00:00
Kubernetes Publisher f807a349b2 Merge pull request #118945 from andrewsykim/update-request-filter-duration-buckets 
Introduce larger buckets for request_filter_duration_seconds and request_wait_duration_seconds

Kubernetes-commit: 2ee01fb673213c80cb8afc79c60c32adeadb413c
 2023-06-29 15:00:55 +00:00
Mike Spreitzer d03cf9927b Introduce apiserver_flowcontrol_current_executing_seats metric 
This is a duplicate of
`apiserver_flowcontrol_request_concurrency_in_use` but with a better
name.  Hopefully we can later remove the copy with the inferior name.

Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 65e818d4ecfb7bf2a165897fb1caf29bf42f4f83
 2023-06-29 01:43:17 -04:00
Mike Spreitzer 078694d35d Make QueueSet support exempt behavior; use it 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: f269acd12b225f6a2dbbfae64a475f73f448b918
 2023-06-28 22:55:30 -04:00
Kubernetes Publisher 98133773bf Merge pull request #118182 from seans3/wsstream-refactor 
Refactor wsstream library from apiserver to apimachinery

Kubernetes-commit: 056f3a56b821a063210c2c4a67cc7a4d0a361afe
 2023-06-28 22:37:20 +00:00
Anish Ramasekar 822396743a [StructuredAuthenticationConfig] wire request context to claim resolver 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 150f732c7ee68cd738043c5e8a9966a9d55fb69d
 2023-06-28 20:37:40 +00:00
Andrew Sy Kim d969ae0916 apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: 16fdd3e5eef452712165b7625b2fec078fa79b7b
 2023-06-28 15:08:15 +00:00
Andrew Sy Kim 986c8832e5 apiserver: introduce larger buckets for request_filter_duration_seconds metric 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: c607984379234249403354bf1f9a2e86a740caf0
 2023-06-28 14:19:51 +00:00
Wojciech Tyczyński b560936651 Generalize watch storage tests 
Kubernetes-commit: 8266c4d934d42a5175a84bff10fda4bf36f13817
 2023-06-27 18:12:30 +02:00
Kubernetes Publisher 7d79c570c7 Merge pull request #118888 from enj/enj/i/kms_interface_split 
kmsv2: no-op: split transformer interface

Kubernetes-commit: 5e85f21e5be69d9e941771138002fdcfc48afbf2
 2023-06-27 01:18:39 +00:00
Jiahui Feng 9eebea091a add test for authorizer type checking. 
Kubernetes-commit: 7ccc23178396fb7c50cd59a16a62e7d79ba973a9
 2023-06-08 15:51:05 -07:00
Jiahui Feng c85cef6cc3 add support for authorizer to type checking. 
Kubernetes-commit: 04fa4184ed349d6ccce5be4daa7561356eebeea3
 2023-06-07 10:11:30 -07:00
Richa Banker 8859465680 Add servedVersions info in StorageVersion API 
Kubernetes-commit: 1c48b7ec144785b4b2493a01d82e40d6d34ce578
 2023-06-01 18:07:56 -07:00
Amine a4fba6de9b Move DeleteFunc logging to level 2 
Kubernetes-commit: 28b6c90696680c87cab04b539c0bca6af7d66bac
 2023-05-24 13:50:50 -05:00
Sean Sullivan 62e3f1a6d5 Re-add the legacy wsstream package and deprecate it 
Kubernetes-commit: 0fe84ff7cb1671d51769ad8f2378f919546a5f3a
 2023-05-23 16:15:07 -07:00
Sean Sullivan cdd93b4685 Refactor wsstream library from apiserver to apimachinery 
Kubernetes-commit: 8f3109da7913ef17c6656893f12f0e29ceabbde0
 2023-05-22 10:03:17 -07:00
Amine 278cd016a7 Properly setup mutatingWebhookConfigurationManager{} 
Kubernetes-commit: 761016482da9e3febbbfe5ab3cf6c2b31692c1b0
 2023-05-17 22:44:18 -05:00
Amine 907129f4f1 run `./hack/verify-gofmt.sh` 
Kubernetes-commit: 747dbd9b6b72c21c94ddd17bd2c82bbb2ff583ad
 2023-05-17 18:52:37 -05:00
Amine eb8a96cae5 Add smart reload for `MutatingWebhooks` 
Kubernetes-commit: 1eb60939fe5eb4c1394e5d93ee2d00b5894e9e73
 2023-05-17 18:44:01 -05:00
Amine 83bf64e6cc Properly handle parameter in `shareInformer.DeleteFunc` 
Kubernetes-commit: aeefb762ece0f866e99def259d6714aa4deb6d31
 2023-05-17 18:42:56 -05:00
Amine daa816b27c Fix webhook accessors caching pattern 
Kubernetes-commit: a01a8cb07e7bfe6dacadc51206ae4ef93d5f4352
 2023-05-17 10:54:17 -05:00
Abu Kashem dfc035926b apf: add validation to exempt for borrowing 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: f8e4e8abac8637f6510838d7d476a838ce612659
 2023-05-15 12:08:18 -04:00
Amine dbf21ae38a Add webhookAccessors smart reloads unit tests 
This patch adds few unit tests to assert that the webhook accessors are
only recreate when they are update in the api-server.

In order to test this feature we had to make few changes to wb manager
that allows us to mock `NewValidatingWebhookAccessor` external function.

Kubernetes-commit: 7d3d44af77679ed488b28dc839d02a8258fd3adc
 2023-05-12 20:32:20 -05:00
Amine c0d0aad2b4 Fix deadlock issue 
This patch fixes the deadlock issue by using a map to cache already
initiated Webhooks instead of using `needRefresh` map.

Kubernetes-commit: c6f36e8702a9e90350c585298f1fc6e908699b12
 2023-05-10 15:09:15 -05:00
Amine d886c0446d Webhook Accessors Smart Recompilation 
Addresses https://github.com/kubernetes/kubernetes/issues/116588

This is an WIP patch trying to avoid recompiling CELs expressions when
recreation Validating/Mutating WebhookAccessors.

Maybe we should also concider using generatic.Controller from
5f59f44983/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller.go

Kubernetes-commit: 99875b3fb73728caad3efb62556428b555ce02f4
 2023-05-09 16:47:11 -05:00
Monis Khan b90de05302 no-op: split transformer interface 
Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 9354e78289fde933f485c663df960b0bc6e24df5
 2023-03-24 16:23:40 -04:00
Kubernetes Publisher d8bdd263c2 Merge pull request #118793 from serathius/test-cache-bypass 
Test all cases for LIST request cache bypass

Kubernetes-commit: 2802bbce14ca32cddbd0d0567cd33fb435f445e6
 2023-06-21 21:17:17 +00:00
Kubernetes Publisher 9cfab516c2 Merge pull request #118792 from serathius/refactor-delegate 
Refactor shouldDelegateList/shouldListFromStorage to better explain d…

Kubernetes-commit: 55fb1805a1217b91b36fa8fe8f2bf3a28af2454d
 2023-06-21 17:17:12 +00:00
Kubernetes Publisher e1931a7854 Merge pull request #118794 from serathius/refactor-watch-context 
Refactor WithRequireLeader to make it part of the etcd store

Kubernetes-commit: 4862614c1cf73c5b0ccb97f8180a2c73770cb757
 2023-06-21 06:21:41 -07:00
Marek Siarkowicz 96d1438818 Refactor WithRequireLeader to make it part of the etcd store 
Kubernetes-commit: a9af2de8fdd1f2799b2017b19027958c69ffb04d
 2023-06-21 14:21:24 +02:00
Marek Siarkowicz eda3579943 Test all cases for LIST request cache bypass 
Kubernetes-commit: e4cf103c9b98391e5e135c3991cd8f380bfe22fe
 2023-06-21 14:12:04 +02:00
Marek Siarkowicz 72bea89ab7 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions 
Kubernetes-commit: 406899360b55b3a0e28970f369288a2bb8a804fe
 2023-06-21 14:02:46 +02:00
Kubernetes Publisher 2b176f025d Merge pull request #118763 from Shubham82/remove_AdvancedAuditing_featuregate 
Remove AdvancedAuditing feature gate.

Kubernetes-commit: 5a1c62b9d121e23d411fdc84255521d1dc231bf2
 2023-06-21 01:17:40 +00:00