Commit Graph

5747 Commits

Author SHA1 Message Date
Kubernetes Publisher ea0735b3bc Merge pull request #113206 from marseel/fix/fix_estimator_for_serviceaccount_tokens
Fix APF width estimate for creating service account's token

Kubernetes-commit: b7f5de17aeef93481f32a4cb804a72cd9ed9c8f3
2022-11-02 04:03:17 +00:00
Kubernetes Publisher 297ec95e2d Merge pull request #113349 from maxsmythe/refactor-matcher-interface
Refactor matcher interface

Kubernetes-commit: a0b69ecd01edc68f9eb88658edcb9f82daf27883
2022-10-29 00:18:27 +00:00
Kubernetes Publisher 97ea3380ba Merge pull request #113430 from wojtek-t/refactor_storage_tests_4
Refactor WatchError test to make it generic

Kubernetes-commit: 53afe3b674b3b16dbac964c0ca39d384604b837c
2022-10-29 00:18:24 +00:00
Kubernetes Publisher 3b6073073e Merge pull request #112994 from DangerOnTheRanger/validation-admission-metrics
Add metrics for CEL for admission control KEP

Kubernetes-commit: dd3dfab89576cb91c3c33d650a3ae842602dd3dc
2022-10-29 00:18:22 +00:00
Kubernetes Publisher c25134f9b8 Merge pull request #113367 from pohly/dep-ginkgo-gomega
dependencies: update to gomega v1.23.0 and ginkgo v2.4.0

Kubernetes-commit: 9e8558158478f622104afd0328883577756bff9f
2022-10-28 16:10:03 +00:00
Wojciech Tyczyński 499bbb88dc Refactor WatchError test to make it generic
Kubernetes-commit: b3f9272d57a71a9c50b38754b7309ddf68adb93f
2022-10-28 11:35:58 +02:00
Max Smythe 95fe36122a Fix canonical imports
Signed-off-by: Max Smythe <smythe@google.com>

Kubernetes-commit: 003fbae25bf4c76b8b71d56206b51e1ee6e80812
2022-10-25 20:40:27 -07:00
Max Smythe 73e7490c2b Make interface for webhook predicates more specific
Signed-off-by: Max Smythe <smythe@google.com>

Kubernetes-commit: 00ebe0bf623295dc589e43e8c299003f9e939f65
2022-10-25 16:34:06 -07:00
Max Smythe 3dc8d71b8a Move webhook scoping rules into a predicates directory
Signed-off-by: Max Smythe <smythe@google.com>

Kubernetes-commit: b4ee0c0574932b99a9e877c84d880a5f00fdd3cc
2022-10-25 16:28:16 -07:00
Patrick Ohly 27b096b05a dependencies: update to gomega v1.23.0 and ginkgo v2.4.0 and dependencies
Gomega adds support for formatting extensions and StopTrying in matchers.
Ginkgo enhances DeferCleanup.

This also triggered an update of other dependencies.

Kubernetes-commit: e6ad2f2f23449c9d24606b864c4737dc66a7427e
2022-10-24 13:43:15 +02:00
Kubernetes Publisher 176af23976 Merge pull request #113222 from MikeSpreitzer/add-borrowing-inputs
Add borrowing inputs

Kubernetes-commit: e438ea02ec12f4fce77eae7e54a3c6c2600e021d
2022-10-28 12:02:57 +00:00
Kubernetes Publisher 11847e4ad6 Merge pull request #112693 from aimuz/fix-GO-2022-0969
Fixed CVE-2022-27664 Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80

Kubernetes-commit: 6cb473b6c4f1239d411e0a50a1cdf9c4c092c42a
2022-10-28 08:11:20 +00:00
Kubernetes Publisher 7c80cf4335 Merge pull request #113326 from mborsz/bench3
Add benchmark for json.compact high cpu usage in watch

Kubernetes-commit: 08644a12b37e24f048882eec952fbdc3463d9744
2022-10-28 04:02:42 +00:00
aimuz d180ca3b4b Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
Fixed https://pkg.go.dev/vuln/GO-2022-0969

Signed-off-by: aimuz <mr.imuz@gmail.com>

Kubernetes-commit: 78c704d4f60d54996d483d49c23c6aac82f28dc9
2022-10-28 10:07:56 +08:00
Kubernetes Publisher 79044eb179 Merge pull request #113370 from wojtek-t/refactor_storage_tests_3
Refactor storage tests - part 3

Kubernetes-commit: 819cadca66a7dccfa5c0772605fc90c667555c97
2022-10-27 20:03:03 +00:00
Kubernetes Publisher 79726e140b Merge pull request #113172 from dashpole/endpoint_handler_tracing
Migrate apiserver from utils/trace to component-base/tracing

Kubernetes-commit: ae6dc598bd23c29480ce5ec426b75954dbd1b65b
2022-10-27 08:42:32 -07:00
Wojciech Tyczyński 3f5a3e0ae0 Refactor etcd3 list consistency test
Kubernetes-commit: cd5da36c92f3ed52debc22c39a7cd9d369b0eecd
2022-10-27 10:19:09 +02:00
Wojciech Tyczyński c527f6432a Minor cleanup of etcd3 tests
Kubernetes-commit: bbe1ebc82aa019118c91e8447517f91b9d036c1e
2022-10-27 09:48:06 +02:00
Wojciech Tyczyński f6802e074e Refactor storage tests using compaction
Kubernetes-commit: b02f172cbdf7e824d13a6a9c3a9b9fe4f3f92afb
2022-10-26 20:47:19 +02:00
Wojciech Tyczyński 834cf0fc14 Refactor compaction in etcd3 tests
Kubernetes-commit: 7da7ddd779f9ea835f0c57deae05e050c543066b
2022-10-26 16:34:28 +02:00
Maciej Borsz 49647f7386 Add benchmark for caching object
Kubernetes-commit: e577a77eb8160a5f70668a5d538ab5a1498ba0db
2022-10-25 12:57:24 +00:00
Mike Spreitzer 413be63b46 Add instrumentation for seat borrowing
Kubernetes-commit: 9b684579e230f105bcaa743f06bc07c39af703df
2022-10-20 15:21:09 -04:00
David Ashpole aa161f2fc0 migrate apiserver utiltrace usage to component-base/tracing
Kubernetes-commit: de26b9023f2872c5cd7e15fad5dd5ab649222c13
2022-10-20 18:15:38 +00:00
Kubernetes Publisher 507ddf331c Merge pull request #111095 from tallclair/audit-single-context
Audit single context

Kubernetes-commit: 6e31c6531fbb83088d472e7a5680add214060967
2022-10-27 08:02:51 +00:00
Kubernetes Publisher 27bc97be88 Merge pull request #113364 from wojtek-t/refactor_storage_tests_2
Refactor storage tests - part 2

Kubernetes-commit: e287b36cc1d9bc018ec6766041484deeea1723a6
2022-10-26 12:58:23 -07:00
Wojciech Tyczyński 3afe8ebf5f Minor cleanup of etcd3 tests
Kubernetes-commit: e04fe81dfcff189ef5162b9b26b55760f613a010
2022-10-26 13:05:49 +02:00
Wojciech Tyczyński 73a664638b Refactor pagination tests
Kubernetes-commit: 6c8ce894e18a2e2cae20edd2f6e79db9407ebce3
2022-10-26 12:18:21 +02:00
Wojciech Tyczyński dec6f492e8 Refactor GetReads
Kubernetes-commit: 8472e1bc13b0fa8aa3a67e5fcf2f13bfd7974cd3
2022-10-26 11:30:32 +02:00
Kubernetes Publisher 6e21d2997b Merge pull request #113357 from wojtek-t/refactor_storage_tests
Refactor storage tests

Kubernetes-commit: c33a77388657d69d5d0d7820aaedf88d165cd9b0
2022-10-26 16:03:20 +00:00
Kubernetes Publisher 4202b94cb2 Merge pull request #113310 from logicalhan/storage-metric
swap name for storage metric for underlying storage db

Kubernetes-commit: 19ab5b69108172a1c1725a23fdf4e30eba4ff629
2022-10-26 00:18:08 +00:00
Wojciech Tyczyński 5a8fdf8480 Move GuaranteedUpdateChecksData test to generic package
Kubernetes-commit: afc5ded83931cdb8a2643486d6834eb8d9b04588
2022-10-25 14:31:20 +02:00
Wojciech Tyczyński d9a3685d6f Minor cleanup of storage tests
Kubernetes-commit: 5344bc5e1b7e50d5ff359c714d522b421b28bd12
2022-10-25 14:09:36 +02:00
Wojciech Tyczyński 1960fa837f Move GuaranteedUpdate test to generic test package
Kubernetes-commit: 012676acc3dd2b235bd601e4105294d2715f155b
2022-10-25 14:04:00 +02:00
Kubernetes Publisher 5cbaaacac5 Merge pull request #108858 from zshihang/master
track legacy service account tokens

Kubernetes-commit: c5242edd929fc40f97d3f6ee3e8874ac1b297087
2022-10-24 20:02:45 +00:00
Kubernetes Publisher 467c829b54 Merge pull request #113189 from MikeSpreitzer/add-borrowing-parms
Introduce constants for the two parameters of seat borrowing

Kubernetes-commit: 23aaf78a4a6738fee748e19028758318f13fb7d0
2022-10-24 20:02:43 +00:00
Han Kang e9f139f163 swap name for storage metric for underlying storage db
Change-Id: Ic7cd9bf5ef29d9c51a728ef37c94d77172fbf678

Kubernetes-commit: 3a2d1bab26bfb9e7d887207dec0c51645c7017fe
2022-10-24 15:27:05 -04:00
Kubernetes Publisher d344c667ad Merge pull request #113264 from alexzielenski/admission-flake-fix
fix flaky admission tests

Kubernetes-commit: 21335cc264be3ab4f7bc962994099e42eb16d3bb
2022-10-21 12:37:50 -07:00
Alexander Zielenski ee983a05da fix flaky admission tests
would fllake .04% of the time on my machine.

In tests waiting for objects to be reconciled, would erroneously treat the "Not Found" case as an error rather than waiting a bit.

also add some more context to test errors to improve debuggability

Kubernetes-commit: bfbc1f3479423b5c53231cfec58895746ef2de69
2022-10-21 09:47:18 -07:00
Kubernetes Publisher b8f8d75cb6 Merge pull request #113133 from sxllwx/fix-issue-111985
Fix DeleteCollection API decode DeleteOptions fail

Kubernetes-commit: 615929ed889e7bf921798142ecdef9f87832da43
2022-10-21 00:02:14 +00:00
Kubernetes Publisher a207e9f270 Merge pull request #111706 from tallclair/audit-error
More useful audit error logs

Kubernetes-commit: fc4344a74875a867c844394a8cc9857fe3b51598
2022-10-20 12:02:39 +00:00
Mike Spreitzer b6fd67c2a7 Introduce constants for the two parameters of seat borrowing
Kubernetes-commit: 8d826ee9f8e19f499f5c0a982bb256ae268a9010
2022-10-20 00:47:01 -04:00
Kubernetes Publisher de12c77c9c Merge pull request #112858 from alexzielenski/cel-admission-hook
CEL Admission Plugin

Kubernetes-commit: 0a689af469de0b2095c70d53bfbb920ce7f4f9fb
2022-10-20 04:02:27 +00:00
Kubernetes Publisher ee01efa95d Merge pull request #112546 from oscr/the-the
grammar: replace all occurrences of "the the" with "the"

Kubernetes-commit: bf14677914cd7cef75deeb3ba136febe194d6ef4
2022-10-19 20:02:56 +00:00
Kubernetes Publisher 90614109fc Merge pull request #113077 from lixiaobing1/WithTransportCredentials
replace WithInsecure() with WithTransportCredentials()

Kubernetes-commit: 3eeb7cb57f388a594ce24e5a97f81029caad61f8
2022-10-19 20:02:54 +00:00
Mohammad Zuber Khan 6fe4f87105 add superuser fallback to authorizer (#111558)
* add superuser fallback to authorizer

* change the order of authorizers

* change the order of authorizers

* remove the duplicate superuser authorizer

* add integration test for superuser permissions

Kubernetes-commit: f86acbad68baf1a99d6fa153f6f0cdc7b93932e4
2022-10-19 04:02:04 +00:00
Kubernetes Publisher f3d3ed915e Merge pull request #112979 from dashpole/fix_tracing_crash
Fix bug in which APIServerTracing did not work with some egress selectors

Kubernetes-commit: 859ada198f51a73d2ce48fafdf7ab9153e653f3b
2022-10-19 00:11:14 +00:00
Marcel Zięba 6887520e10 Fix APF width estimate for creating service account's token
Kubernetes-commit: 2f7b4ca6851aa3d479c9af3c14a168b4974f2fee
2022-10-18 12:27:50 +00:00
scott 779d3eda81 Fix DeleteCollection API decode DeleteOptions fail
The reason for the issue is that the apiserver uses the Scheme in the
global variable pkg/api/legacyscheme/scheme.go, and registers the
DeleteOptions corresponding to each APIGroup in the Scheme.  But
DeleteOptions in meta.k8s.io/v1 is not registered, resulting
in a notRegisteredErr.

Use metainternalversionscheme.Codecs as Serializer

Kubernetes-commit: e7d7f4a9e56fe5d9c10da437787118fe9ea9e5af
2022-10-18 16:47:50 +08:00
lixiaobing1 c144979a82 replace WithInsecure() with WithTransportCredentials()
Kubernetes-commit: 7892175acdb329d44cf1f34230f78e608b3cb736
2022-10-15 16:41:53 +08:00
Alexander Zielenski e25b9399a5 add cel admission controller tests
84% coverage

Kubernetes-commit: 8b74e73e3825e725d05376de717ad96506a52eec
2022-10-12 18:03:44 -07:00