Commit Graph

7468 Commits

Author SHA1 Message Date
Jefftree e778ced9b7 Remove example feature gate from pkg/apiserver/kube_features.go
Kubernetes-commit: 79deb21ac1d0837fbafdf9e1556019062590c1d8
2024-09-04 14:50:41 +00:00
Kubernetes Publisher 90f5efd77b Merge pull request #126500 from liangyuanpeng/bump_etcd_3515
Bump dependency: etcd to 3.5.15.

Kubernetes-commit: 7df5940bf920349a3c158bcd425e4e4cf97096da
2024-09-04 19:44:01 +00:00
Kubernetes Publisher 1b4b1fb1c0 Merge pull request #127009 from vinayakankugoyal/kep4633
KEP-4633: Graduate to BETA.

Kubernetes-commit: 8b664fd41431aed4c69e3d6e76a2f25b84cb9a32
2024-09-04 03:51:20 +00:00
Kubernetes Publisher ec5e79c690 Merge pull request #127058 from carlory/rm-fgs
Remove GAed feature gates ServerSideApply/ServerSideFieldValidation

Kubernetes-commit: 6b2a5b84e58413f1736b862bad972fd4acc02dc0
2024-09-03 19:43:27 +00:00
Kubernetes Publisher 6b4322243f Merge pull request #127089 from sanposhiho/revert-126574
Revert: Fix data race in APF tests

Kubernetes-commit: 49ffd6192f1608e0a2980548390b2c5431d6af8a
2024-09-03 15:44:18 +00:00
Kensei Nakada cfa44309dd Revert "apiserver: fix data race in apf tests in server/filters package"
This reverts commit dde23bb0b103a00ac9c8e568e81826149b42472c.

Kubernetes-commit: d26772120531617e897a745b1bfd1178648fb995
2024-09-03 19:39:38 +09:00
Kensei Nakada 6bd08c5dc4 Revert "apiserver: improve logging for apf tests in server/filters package"
This reverts commit 8fa3e61399b85d534566dca6566ddb287873839c.

Kubernetes-commit: 9fe3b8410726b0276d2d65a79ce7645660d491f9
2024-09-03 19:39:32 +09:00
carlory af2142bfe4 Remove GAed feature gates ServerSideApply/ServerSideFieldValidation
Kubernetes-commit: de7e4318d6b2ad0de4472dcaef7d97c34057d3d8
2024-09-02 13:52:48 +08:00
Kubernetes Publisher bbf28207e3 Merge pull request #127010 from aramase/aramase/f/kep_3331_jti
Set credential-id in userinfo.extra for jwt authenticators if jti claim present

Kubernetes-commit: c3cb89ebb08e8c28eb3a3dc4baeb3a5117dbbea0
2024-08-30 19:46:15 +00:00
Anish Ramasekar 13c06f3696 Set credential-id in userinfo.extra for jwt authenticators if jti claim present
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: c22a41e879e72ba4c925b06d8aa00e43160a0f86
2024-08-29 17:09:07 -07:00
Kubernetes Publisher bb8caf4ebf Merge pull request #126574 from tkashem/apf-data-race
Fix data race in APF tests

Kubernetes-commit: dc8c42752aee5db66baca47535b867a41d15d92b
2024-08-29 19:47:04 +00:00
Kubernetes Publisher bd063e0342 Merge pull request #126968 from serathius/watchache-refactor-store
Watch cache refactor watch cache store and add tests

Kubernetes-commit: 6de748d97bf1cff8e6e511e8152af41c617ec8f5
2024-08-29 11:54:47 +00:00
Marek Siarkowicz a8c26a18b8 Extract watch cache store to separate file and cover with tests
Kubernetes-commit: c93d2e8fb19da0082765cb3e5a6db952eca628ce
2024-08-28 13:31:02 +02:00
Marek Siarkowicz 94a5e3cd04 Refactor WaitUntilFreshAndList to split out filtering to separate function
Kubernetes-commit: 7400d57943cf7576925d54e7daa42e397e71dfe4
2024-08-28 12:59:38 +02:00
Kubernetes Publisher 784a83e3b4 Merge pull request #126957 from dashpole/fix_tracing_leak
Fix memory leak from global OpenTelemetry MeterProvider

Kubernetes-commit: 3d65369f346d359bcabdc7f04addff5fdb2f194a
2024-08-28 20:28:38 +00:00
Kubernetes Publisher d9009c5253 Merge pull request #126627 from fusida/fix-reduce-etcd-conn
fix short circuit if the compaction request from apiserver is disabled

Kubernetes-commit: 26f399921f639df8bda16d365e9c632561ccc6de
2024-08-28 20:28:37 +00:00
Kubernetes Publisher 8beb81657f Merge pull request #125634 from ahmedtd/x509credentialID
Define credential IDs for X.509 certificates

Kubernetes-commit: bbd83d86444d7b325a51f4daa0d65163b795b70e
2024-08-28 16:11:34 +00:00
David Ashpole f1fcc94e63 update-vendor
Kubernetes-commit: 4aa655c2d73f90ed621bda58746f1cde28710d7a
2024-08-28 14:27:36 +00:00
David Ashpole daa75f8bec fix memory leak from global MeterProvider
Kubernetes-commit: b86cab8c4c3421c6b195fc82990a63c859449072
2024-08-28 14:20:46 +00:00
Kubernetes Publisher 6c201a977a Merge pull request #126930 from Ruddickmg/patch-1
kmsv2: set authority to localhost

Kubernetes-commit: 95b3fe9f15cdcaf98098be398478e70365b12dd7
2024-08-28 07:54:31 +00:00
Kubernetes Publisher 7198d4fe04 Merge pull request #126787 from Jefftree/update-kube-openapi
Bump k8s.io/kube-openapi and k8s.io/gengo

Kubernetes-commit: f1a922c8e6f951381450ee3c2922ca018f14a82e
2024-08-27 23:50:08 +00:00
Kubernetes Publisher a78241fd58 Merge pull request #126359 from jpbetz/quantity-estimated-cost
Fix estimated cost for Kubernetes defined CEL types for equals

Kubernetes-commit: f88281768c52a5729d1dccee16164b472e794922
2024-08-27 23:50:06 +00:00
Kubernetes Publisher 12c4904eb5 Merge pull request #126295 from sohankunkerkar/denoise-watcher-events
dynamiccertificates: denoise Kubelet logs by skipping removal of non-existent file watchers

Kubernetes-commit: 09596a57de807a9b9fb699f3ef44f0d3312bbcb1
2024-08-27 19:43:22 +00:00
Kubernetes Publisher 932b2589d5 Merge pull request #125884 from serathius/benchmark-storage
Benchmark storage

Kubernetes-commit: 3a849069043142b2bec8f45654b235ba0b660aad
2024-08-27 11:52:18 +00:00
Jefftree a03dae5dab re-vendor k8s.io/kube-openapi
Kubernetes-commit: ea2bdb6334ec1a2821a96163d83480d5fdb1861b
2024-08-27 01:58:39 +00:00
Marcus Ruddick 9c8c6ccc4d kmsv2: fixed issue with an invalid authority header being sent by the KMSv2 service
Kubernetes-commit: 618ca85bc9482ea11cf792331688fdf0c7b54518
2024-08-26 14:43:02 -10:00
Lan Liang 158efa920d Bump dependency: etcd to 3.5.15.
Signed-off-by: Lan Liang <gcslyp@gmail.com>

Kubernetes-commit: 81e754e7ef5cac4cd7697968b5ab8dc89648eca6
2024-08-24 04:46:01 +00:00
Kubernetes Publisher 586ab588eb Merge pull request #126645 from cici37/cleanupFG
Remove feature gate ValiatingAdmissionPolicy after being stable for two releases

Kubernetes-commit: 7b80cdb66a390f225d23cd612950144e3a39d1ae
2024-08-23 19:46:20 +00:00
Kubernetes Publisher da8e2914b0 Merge pull request #126867 from piny940/master
fix ValidatingAdmissionPolicy's Validate func to return decision with valid Evaluation

Kubernetes-commit: 1e827f4b2a46981e4f3056b54b43363e787bbaaa
2024-08-22 23:45:21 +00:00
cici37 e9e24680dc Remove FG inspection from VAP plugin
Kubernetes-commit: 72ad9c5fdf782f824281ecf9e18ec36caaa9472b
2024-08-22 17:52:21 +00:00
Kubernetes Publisher 27f5f2543a Merge pull request #126854 from serathius/pagination-tests
Add paging tests

Kubernetes-commit: cee43048c72403ae0f56f04053cb7e3361de1415
2024-08-22 07:43:46 +00:00
piny940 2ed104b2e5 fix ValidatingAdmissionPolicy's Validate func to return decision with valid Evaluation
Kubernetes-commit: 9f7ea45ea0ffc76be7793dbcb4730a98fa03bcf5
2024-08-22 13:33:17 +09:00
Vinayak Goyal 491f6248d4 KEP-4633: Graduate to BETA.
Signed-off-by: Vinayak Goyal <vinaygo@google.com>

Kubernetes-commit: 8a4e23ea30bb0af50aa425cea8af926998872ee4
2024-08-22 01:28:57 +00:00
Kubernetes Publisher a5bbfcdce4 Merge pull request #126512 from kmala/metrics
add resource to the transformation metrics

Kubernetes-commit: 77737c3eb37afaadbf40ec499a58c1593c9c7382
2024-08-21 23:44:23 +00:00
Kubernetes Publisher 6830df5156 Merge pull request #126305 from richabanker/optimize-tests
Init common apiserver for all testcases in CEL tests

Kubernetes-commit: beb696c2c9467dbc44cbaf35c5a4a3daf0321db3
2024-08-21 03:44:11 +00:00
Kubernetes Publisher 66b4299b79 Merge pull request #126774 from aramase/aramase/c/sa_rm_unused_function
cleanup unused fn GetOrCreateServiceAccount in serviceaccount/util

Kubernetes-commit: cb7b4ea648a97bdbf8f4f1b8655a7a110c9f78d0
2024-08-19 06:38:09 +00:00
Anish Ramasekar 43a56206a7 cleanup unused fn GetOrCreateServiceAccount in serviceaccount/util
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 2f96a788e299ef3cea08d0cb03b13c584496891c
2024-08-18 21:04:51 -07:00
Kubernetes Publisher 5d131b7a78 Merge pull request #126523 from enj/enj/i/ssa_authz_create_err
SSA: improve create authz error message

Kubernetes-commit: 114900ab1f678a03e5c1bc63fe92b0892d2a9238
2024-08-16 18:23:10 +00:00
Kubernetes Publisher 25d7e88901 Merge pull request #126553 from aramase/aramase/c/kep_3331_disallow_k8s_io_prefix
Disallow `k8s.io` and `kubernetes.io` namespaced extra key in structured authn config

Kubernetes-commit: f26cf38a50bb38689b7674d228d004bff7a65899
2024-08-15 18:32:46 +00:00
Kubernetes Publisher 38586e5d94 Merge pull request #126685 from enj/enj/i/kms_resouce_logs
Ensure transformers have access to the resource via request info

Kubernetes-commit: 026c55e40de835464e769bad65c8a19940b61459
2024-08-15 10:52:00 +00:00
Kubernetes Publisher 11b0e0730d Merge pull request #126698 from enj/enj/i/del_kms_v2_gates
Remove KMSv2 and KMSv2KDF feature gates

Kubernetes-commit: cd5f2083155bed7006b218ade85b584d53dfaae8
2024-08-15 02:43:25 +00:00
Monis Khan 272e9eba82 Remove KMSv2 and KMSv2KDF feature gates
These have been GA since v1.29 and can be safely removed.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 6398b8a19fe0e113cf250c13b0639dea258a174f
2024-08-14 15:59:01 -04:00
Monis Khan cd5bba1780 Ensure transformers have access to the resource via request info
This guarantees that logs and metrics that rely on this information
work as expected.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 49d7b4c97e4f7ee5c664b068c207a39b8c3f759e
2024-08-14 10:33:36 -04:00
Kubernetes Publisher b157511c42 Merge pull request #126649 from 0x5457/fix-panic
apiserver: declare kubeClient and dynamicClient as interface types to avoid panic

Kubernetes-commit: 19175396280537af75d20c5ea22e877f16b40792
2024-08-14 10:22:41 +00:00
Kubernetes Publisher 13f78e0e7e Merge pull request #126665 from liggitt/version-build-id
Restore honoring --version build ID overrides

Kubernetes-commit: 69dbf2eee96f1c95c097370ddcb1d5c30f86bec8
2024-08-14 06:30:43 +00:00
Kubernetes Publisher be949676bf Merge pull request #126565 from Adarsh-verma-14/remove-duplicate-call
remove duplicate call for ServeMux

Kubernetes-commit: 54691fdc21a84a6ac3a8e052d92f81a43a19139c
2024-08-14 06:30:41 +00:00
Kubernetes Publisher cb239f8776 Merge pull request #126354 from liangyuanpeng/celtest_update
Using NewExpressions for CEL lazy test.

Kubernetes-commit: bc3d6fd491aec44138086e5ece4e706041761398
2024-08-14 06:30:38 +00:00
Kubernetes Publisher c84ae4a3d4 Merge pull request #126316 from aramase/aramase/f/kep_3331_tighter_validation
Validate structured authn feature is enabled for discovery url/multiple audiences

Kubernetes-commit: c06ea0fc81168cee6d8055182aa4b3d38bc5bb58
2024-08-14 06:30:36 +00:00
Jordan Liggitt 77331233f8 Restore honoring --version build ID overrides
Kubernetes-commit: c181912dc5d8559834857e69ea34ee1729c43c6b
2024-08-13 18:48:56 -04:00
0x5457 27c3ca736b apiserver: declare kubeClient and dynamicClient as interface types to avoid panic
Kubernetes-commit: 81824b7c2e673f64f70a6e99180bb6bfc6b738d9
2024-08-13 11:25:11 +08:00