Maciej Borsz
b0d1b1af17
Add "node-high" priority-level
...
Kubernetes-commit: 8d6e76f2766e51177ee50a1fba09bc5b04d6ce53
2021-04-15 16:24:02 +02:00
Monis Khan
bd0605a728
audit: make stage consts use correct type
...
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: 84ac2398da2be7810d311c4bc9f7358618ed193b
2021-04-09 12:29:20 -04:00
Abu Kashem
64517a3e40
apf: exempt probes /healthz /livez /readyz
...
Kubernetes-commit: 4447f2459aae1d916742eb1cb129d9438adcea9a
2021-03-30 12:55:30 -04:00
carlory
146083d06b
deprecate audit.k8s.io/v1[alpha|beta]1 versions
...
Kubernetes-commit: cad9c245b84fd16cbb5bf240622af07ce7bc3585
2021-02-08 11:22:29 +08:00
Nabarun Pal
e1246225c0
update gogo/protobuf to v1.3.2
...
gogo/protobuf@v1.3.2 fixes https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121
Ref: https://github.com/kubernetes/client-go/issues/927
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
Kubernetes-commit: 9cada2ec3ba793597606a1df1375ff8e8311ccf3
2021-01-27 18:01:27 +05:30
Adhityaa Chandrasekar
b8c96b50e9
APF defaults.go: use already defined catch-all name constant
...
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
Kubernetes-commit: 5d2fdde1202e65bcc66ad1c038d5fe84e7dbad9a
2020-11-18 18:58:45 +00:00
Adhityaa Chandrasekar
e590a0415c
flowcontrol bootstrap: give catch-all PL more concurrency share
...
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
Kubernetes-commit: 642b11483030e5aedbd6f43aeac3cbe40255b3b6
2020-11-13 19:26:06 +00:00
Adhityaa Chandrasekar
3d56b6662b
flowcontrol bootstrap: make exempt PL last
...
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
Kubernetes-commit: bb32d51fd6eeb6a0d1c287986a3f575c8c9a180d
2020-11-13 03:44:56 +00:00
yue9944882
a4a3fc9b87
APF: graduate API and types to beta
...
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
Kubernetes-commit: 849be447f563fc93a27a0827fb1185b885b57114
2020-11-04 16:33:14 +08:00
Andrew Sy Kim
5f8147ed4e
apiserver: use canonical egress selection names in EgressSelectorConfiguration API docs
...
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Kubernetes-commit: e4b45d944d54c239e1ad40af17221420f349c4f8
2020-10-26 10:24:16 -04:00
Andrew Sy Kim
6746ccadda
apiserver: support egress selection name 'controlplane' and deprecate 'master'
...
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Kubernetes-commit: a0aebf96ec2eef6517e2611335f0e6c9375dd807
2020-10-26 10:24:16 -04:00
Abu Kashem
3b4921fd00
allocate service-account flowschema to global-default
...
Kubernetes-commit: fd7bf9a5dc3b4a0ba51b041fc721de719d1b2e69
2020-10-02 13:58:46 -04:00
Haowei Cai
0ac797ac9e
move apiserverinternal types to kube-apiserver
...
move versioned types to k8s.io/api;
cleanup generated files
Kubernetes-commit: 1f4a4e9040fd9f357adf563b3d17aadaeb964e2b
2020-07-14 11:43:26 -07:00
David Ashpole
4b21935c20
consistently use double quotes in proto files
...
Kubernetes-commit: 296f7c91bb52cd724ce6d6d120d5d41ed459d677
2020-09-03 13:50:03 -07:00
wojtekt
7561eea1c6
Remove default conversions
...
Kubernetes-commit: 410d575d4219ee46c3726d31acf86e555f0a5f1b
2020-09-03 10:22:11 +02:00
yue9944882
be18e41882
fixes suggested default rules
...
Kubernetes-commit: a98f68e5b9cad08f4fc03665ca3a52cad69ed6f0
2020-07-01 15:26:02 +08:00
Stephen Augustus
58544edbdf
apiserver/pkg/apis/config/validation: Add invalidURLErrFmt
...
In go1.14, the following change to 'net/url' was made:
"When parsing of a URL fails (for example by Parse or ParseRequestURI),
the resulting Error message will now quote the unparsable URL. This
provides clearer structure and consistency with other parsing errors."
Here we add a new const, 'invalidURLErrFmt' to properly handle the now
quoted string in validation_test.go.
ref: https://golang.org/doc/go1.14#net/url
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
Kubernetes-commit: b0f17c2918fe0d099fc59f17788ca60202a5ae1a
2020-04-18 04:37:22 -04:00
Chao Xu
2994d90069
generated
...
Kubernetes-commit: 5f3838b906628f907939080bac967ef8f105e92f
2020-02-26 23:56:24 -08:00
Chao Xu
9cf97e52a9
Add the StorageVersion API
...
Kubernetes-commit: a2ad36f1e564f81fae4f65c9ac8aa193d6b0662d
2020-02-26 23:56:07 -08:00
Chao Xu
d81e3cbf28
Promote the egressselector API to beta
...
Kubernetes-commit: 3fbb549fb7ff707eb7c67e7ae275517c5bdc9883
2020-02-24 17:12:44 -08:00
Jefftree
e8c3464402
Add tests for egress selector
...
Kubernetes-commit: d798ccbba166449971c8579dce57870abec9131b
2020-02-12 10:57:21 -08:00
Jefftree
95ee8d4df4
Support empty root CA for konnectivity
...
Kubernetes-commit: 55b89a6451d253532ede0736d7bc8af62f396596
2020-02-03 19:54:41 -08:00
Jefftree
cbcdfbfd72
Network Proxy: GRPC + HTTP Connect with UDS
...
Kubernetes-commit: 725d2b6a8fd7733afcbc6822723f4c7e171bcd7f
2020-01-13 21:23:39 -08:00
yue9944882
0fb7c60f0a
fork out a new global-default from catch-all to handle unclassified traffic
...
Kubernetes-commit: d1f62ead18f97f98dd01073ca47c3b19382765a3
2020-01-13 15:56:54 +08:00
Davanum Srinivas
cde2338e26
update generated files
...
Kubernetes-commit: b3853138a4f1a0637ec3c38a5c59f8228765b261
2020-01-13 17:56:56 -05:00
Mike Spreitzer
05e620fec5
removed excess blank line
...
Kubernetes-commit: f1c26bf4362636bcd36fff4663cc87b567bf6603
2020-01-17 12:30:07 -05:00
Mike Spreitzer
f6a6879cc4
Update validation for API Priority and Fairness
...
This PR fixes oversights and adds validation that rejects writes
of wrong Spec values for the four mandatory objects.
Kubernetes-commit: ec5321c6a9f23e5ad26cf88a41fda9dba0c5ce89
2020-01-17 02:43:52 -05:00
yue9944882
07fdbc261e
review: several fixes and addressing comments
...
Kubernetes-commit: 70dea6e4a8495ff028ccc8dc8e8aec04b93287c3
2020-01-10 16:49:37 +08:00
yue9944882
54dfffd2ea
bootstrap flow-control objects
...
typo
wrap bootstrap-creation-flow w/ wait.PollUtil
go wait
Kubernetes-commit: fe8ad90afa553314e96daa8bba5d3964c714aea1
2019-11-14 15:56:34 +08:00
Monis Khan
43f8cca801
kms: use negative cachesize value to disable caching
...
This change relaxes the KMS config cache size validation to allow
for negative values. The KMS code already treats all values <= 0 to
mean that the cache is disabled (zero is still a validation error).
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: a16808f353afb6abf402c862d5f859b949d2027a
2019-12-15 23:30:36 -05:00
immutablet
5cec6b4746
Add defaulting logic for EncryptionConfiguration.
...
Kubernetes-commit: a151aa35dc21881d178e498141e5f58df13fb400
2019-11-14 22:53:18 -08:00
Jordan Liggitt
4b9c976f43
AdmissionConfiguration v1
...
Kubernetes-commit: 1234290adfa11eb3dd34242c296e1f1dbe211c19
2019-11-11 11:57:29 -05:00
wojtekt
0c1673664a
Autogenerated code
...
Kubernetes-commit: 7b6bcdf780b778af3df5c133686ccb18d8c38fa0
2019-10-24 14:09:51 +02:00
wojtekt
920eb0f6f5
Cleanup explicitly registered functions
...
Kubernetes-commit: d7011f1bdbee285cdfc9bdb0f5b0716f4e02adfd
2019-10-24 13:18:31 +02:00
Jordan Liggitt
0c12043fe4
Generated files
...
Kubernetes-commit: bbedc4f7ed436d28ed574615a33f8d03f7c8a2f0
2019-09-09 08:55:04 -04:00
Jordan Liggitt
a653e5ab1a
Export UserInfo conversion, use authnv1.UserInfo in audit
...
Kubernetes-commit: 0e787a4b78a849fa66a02126721dd185e7c00955
2019-09-09 08:54:54 -04:00
misakazhou
330a638869
Fix broken link to api-conventions doc.
...
Signed-off-by: misakazhou <misakazhou@tencent.com>
Kubernetes-commit: f0323a2030c7adae0e0965a7d3b455dd416472a0
2019-08-29 08:35:16 +08:00
Walter Fender
9bdac68d70
Get network-proxy working with GCE.
...
Got the proxy-server coming up in the master.
Added certs and have it comiung up with those certs.
Added a daemonset to run the network-agent.
Adding support for agent running as a sameon set on every node.
Added quick hack to test that proxy server/agent were correctly
tunneling traffic to the kubelet.
Added more WIP for reading network proxy configuration.
Get flags set correctly and fix connection services.
Adding missing ApplyTo
Added ConnectivityService.
Fixed build directives. Added connectivity service configuration.
Fixed log levels.
Fixed minor issues for feature turned off.
Fixed boilerplate and format.
Moved log dialer initialization earlier as per Liggits suggestion.
Fixed a few minor issues in the configuration for GCE.
Fixed scheme allocation
Adding unit test.
Added test for direct connectivity service.
Switching to injecting the Lookup method rather than using a Singleton.
First round of mikedaneses feedback.
Fixed deployment to use yaml and other changes suggested by MikeDanese.
Switched network proxy server/agent which are kebab-case not camelCase.
Picked up DIAL_RSP fix.
Factored in deads2k feedback.
Feedback from mikedanese
Factored in second round of feedback from David.
Fix path in verify.
Factored in anfernee's feedback.
First part of lavalamps feedback.
Factored in more changes from lavalamp and mikedanese.
Renamed network-proxy to konnectivity-server and konnectivity-agent.
Fixed tolerations and config file checking.
Added missing strptr
Finished lavalamps requested rename.
Disambiguating konnectivity service by renaming it egress selector.
Switched feature flag to KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE
Kubernetes-commit: ebb65c5f4c51340f42c260cf00bde8629ed68d74
2019-05-20 12:44:51 -07:00
Antoine Pelisse
0c3358252b
Regenerate
...
Kubernetes-commit: 6568325ca2bef519e5c8228cd33887660b5ed7b0
2019-07-24 15:21:55 -07:00
immutablet
5faffb9123
Allow kube-apiserver to test the status of kms-plugin.
...
Kubernetes-commit: 05fdbb201ffbaff4e92f0899f9e2ca038febb88d
2019-05-30 11:15:35 -07:00
Vallery Lancey
6e15e9a893
Updated github.com/gogo/protobuf from SHA to nearest-pinnable tag (v1.0.0), as part of dependency management cleanup: #79234
...
Kubernetes-commit: fe59ee8aaf8c7399476d286349caca9e3c05c522
2019-07-02 21:44:06 -07:00
Pingan2017
d5c0852e40
clean up redundant conditiontype OutOfDisk
...
Kubernetes-commit: e94d7b3802abe4ad7086551b91b2801ccee606c2
2018-12-29 15:31:56 +08:00
Chao Xu
74be843d4b
generated
...
Kubernetes-commit: 369314959c1bf096c1d3502f10b28a00c3d12691
2019-05-24 17:46:39 -07:00
Dr. Stefan Schimanski
2449fce880
apis: add +k8s:protobuf-gen=package tag
...
Kubernetes-commit: fd62585bd0a4b42935e516c5bcd37040ef57c820
2019-03-04 23:22:24 +01:00
Dr. Stefan Schimanski
9c57618b0e
Add proto roundtrip tests in roundtrip_test.go files
...
Kubernetes-commit: b9e12fd4db158c7aad96cee6310796263dfd9e30
2019-03-04 21:40:48 +01:00
Ben Moss
0806898be7
Update deprecated links
...
Kubernetes-commit: 34ac4d9ee9fed65d770403fff4cb037253fc5d09
2019-02-04 13:28:31 -05:00
Roy Lenferink
4c9524b9fb
Updated OWNERS files to include link to docs
...
Kubernetes-commit: b43c04452f3b563473b5c2a765d4ac18cc0ff58f
2019-01-30 20:05:00 +01:00
immutableT
d9414ee2ab
Expose kms timeout value via encryption config.
...
Kubernetes-commit: a4dc53cfeb91ee07cedcc6959e88e30cb0c3cca8
2019-01-03 14:26:57 -08:00
Lucas Käldström
e8928c4a1c
Move k8s.io/{apiserver,apimachinery}/pkg/apis/config to k8s.io/component-base/config. Co-authored-by @Klaven
...
Kubernetes-commit: 2e52d5c3311d3dcfd042e81570ef138645de529a
2019-01-06 13:57:47 +02:00
Stanislav Laznicka
fb4c655720
autogen files
...
Kubernetes-commit: 628d1fef37d565444a4fd7c97d8677621159dc57
2018-09-11 12:33:10 +02:00