kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,685 Commits 29 Branches 1,436 Tags 31 MiB
Commit Graph

6685 Commits

Author SHA1 Message Date
Marek Siarkowicz 573a8d6d05 Improve apiserver storage size metric to allow it's graduation 
Change name to make it compliant with prometheus guidelines.
Calculate it on demand instead of periodic to comply with prometheus standards.
Replace "endpoint" with "server" label to make it semantically consistent with storage factory

Kubernetes-commit: 7a63997c8a1a9ba14f2bdc478fdf33cf88f48d80
 2023-06-22 11:56:09 +02:00
Mike Spreitzer 90abb3933b QueueSet and controller part of borrowing by exempt PLs 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 7305c967101813f794449db21a6edfbc05df2575
 2023-06-20 23:35:21 -04:00
Marek Siarkowicz 9002dac854 Implement ConsistentListFromCache feature gate 
Request bookmark every 100ms when there is at least one request blocked on revision not present in watch cache.

Kubernetes-commit: 39bb8f4bb1d013937aceac6c387563ffe13545c5
 2023-06-06 15:49:46 +02:00
Kubernetes Publisher 6c99c223c9 Merge pull request #119252 from serathius/flakes 
Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes

Kubernetes-commit: da2d500c80968aacf4dfa9e32f5e6ccc06dc33c7
 2023-07-12 17:19:51 +00:00
Marek Siarkowicz 23cd6bbea9 Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes 
Kubernetes-commit: c1decb6763d2abf76d96aee8641ad56a23e0ba52
 2023-07-12 13:36:51 +02:00
Kubernetes Publisher 65a9d05461 Merge pull request #119209 from jiahuif-forks/feature/validating-admission-policy/typechecking-expension 
ValidatingAdmissionPolicy: expended type checking to messageExpression

Kubernetes-commit: da8974157faea86d15bb54e01eb946f9c4928e8c
 2023-07-11 14:19:12 -07:00
Jiahui Feng ef6545eca1 expended type checking. 
Kubernetes-commit: e655931274f91a7023fc2d5a26d8fe8ecaa1fa39
 2023-07-09 19:41:44 -07:00
Kubernetes Publisher ef1db3a01a Merge pull request #118540 from jiahuif-forks/feature/validating-admission-policy/authorizer-typechecking-support 
add support for authorizer to type checking.

Kubernetes-commit: 4954c7bac4029d2f2e4b305fdba41f81b718aefc
 2023-07-11 21:25:41 +00:00
Kubernetes Publisher 8f12a0306b Merge pull request #116443 from benluddy/secondary-authz-decision-caching 
Cache authz decisions within the scope of validating policy admission.

Kubernetes-commit: 6ffca501361adadfb133ec1b8f76a2c2a23836dc
 2023-07-11 21:25:40 +00:00
Kubernetes Publisher 44c9069e7a Merge pull request #119207 from serathius/progress-notify 
Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh

Kubernetes-commit: e1fbd0c113af4b4c835ed2355b725506dfeda9e7
 2023-07-11 17:20:05 +00:00
Kubernetes Publisher 6e247788f7 Merge pull request #119198 from jadhaj/fix-115385 
Document address family of listening INET sockets

Kubernetes-commit: 50782ce5abfd75c644564dcfd2e96c2ae49921d5
 2023-07-11 13:21:18 +00:00
Marek Siarkowicz cd751eb82e Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh 
Kubernetes-commit: 98461be8ffa7383152c442414a16adb217e98080
 2023-07-10 18:10:49 +02:00
Jad Haj Yahya a01ccc2e32 Document address family of listening INET sockets 
Kubernetes-commit: de0764309571f0989847b2322db1906c5b34949e
 2023-07-10 15:01:13 +03:00
Kubernetes Publisher 0d62f07a5d Merge pull request #119127 from Mskxn/fix_leak 
use stopCh to avoid goroutine leak in tests

Kubernetes-commit: 4c7cda3e55736822bdee4c2ac93f989cf8f1501c
 2023-07-06 23:55:51 +00:00
Anish Ramasekar 5d08b1abe9 [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007) 
* add feature gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* add validation and warning in load config

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* mark v1beta1 proto message deprecated

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 1acdb4ae86e0e43475c31f108a6106b1f5ea5027
 2023-07-06 23:55:47 +00:00
Kubernetes Publisher 24d5ac4b98 Merge pull request #118960 from MikeSpreitzer/add-seat-occupancy-metric 
Introduce apiserver_flowcontrol_current_executing_seats metric

Kubernetes-commit: fbb2f89668bd07a96adc8a1f4f0819e769255703
 2023-07-06 11:25:19 +00:00
Mskxn 2595ae0416 use stopCh to avoid goroutine leak in tests 
Kubernetes-commit: 132d477cb7aa323c0eae6dd9a09f9c93fb570b83
 2023-07-06 16:24:58 +08:00
Kubernetes Publisher 73ba48c7f9 Merge pull request #118386 from Richabanker/enhance-storage-version 
Add servedVersions info in StorageVersion API

Kubernetes-commit: cd32adebd9d52ae46827054350c17de085a4eb23
 2023-07-06 07:32:27 +00:00
Kubernetes Publisher 0e613811b6 Merge pull request #118955 from MikeSpreitzer/add-exempt-queuesets 
Make QueueSet support exempt behavior; use it

Kubernetes-commit: 5f63d1f916279541874914165b21f4b4db31e26a
 2023-07-04 14:33:22 +00:00
Kubernetes Publisher 4cf166b68a Merge pull request #119045 from serathius/test-consistent-list 
Test consistent list

Kubernetes-commit: 2f563464bc879cc7d31642eb77e2b0d38b498159
 2023-07-04 14:33:18 +00:00
Kubernetes Publisher ce72ad1c02 Merge pull request #117971 from wojtek-t/paginate_delete_collection 
Paginate within DeleteCollection call.

Kubernetes-commit: c9c541a4b7f5a3aafac7e0b63c2080752ce16eb0
 2023-07-03 22:41:39 +00:00
Tim Allclair 2a8bc69060 Initialize the AuditEvent with the AuditContext (#113611) 
* Initialize the AuditEvent with the AuditContext

* Squash: Address PR feedback

* Squash: address PR feedback

Kubernetes-commit: 2b03f04ce589a57cf80b2153c7e5056c53c374d3
 2023-07-03 18:28:13 +00:00
Marek Siarkowicz df9896fd00 Test consistent List 
Kubernetes-commit: b36fdd68b72cd5c64ea5be3917846067644da983
 2023-07-03 17:22:22 +02:00
Wojciech Tyczyński bf71493219 Simplify DeleteCollection 
Kubernetes-commit: e08bd3bc263615f3a26bd17c66a3222e4b6ff7ec
 2023-07-03 16:56:53 +02:00
Kubernetes Publisher 10b550f442 Merge pull request #118931 from wojtek-t/generic_cacher_tests_270623 
Generalize watch storage tests

Kubernetes-commit: 8cd25e7908699eaf307661f805f7debcc9f358a0
 2023-06-29 22:36:45 +00:00
Kubernetes Publisher 122f3d90e6 Merge pull request #118948 from aramase/aramase/c/oidc_wire_context 
[StructuredAuthenticationConfig] wire request context to claim resolver

Kubernetes-commit: d27439701f6cc83f992eda73b4797fa1af8fe7f7
 2023-06-29 22:36:44 +00:00
Kubernetes Publisher f807a349b2 Merge pull request #118945 from andrewsykim/update-request-filter-duration-buckets 
Introduce larger buckets for request_filter_duration_seconds and request_wait_duration_seconds

Kubernetes-commit: 2ee01fb673213c80cb8afc79c60c32adeadb413c
 2023-06-29 15:00:55 +00:00
Mike Spreitzer d03cf9927b Introduce apiserver_flowcontrol_current_executing_seats metric 
This is a duplicate of
`apiserver_flowcontrol_request_concurrency_in_use` but with a better
name.  Hopefully we can later remove the copy with the inferior name.

Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: 65e818d4ecfb7bf2a165897fb1caf29bf42f4f83
 2023-06-29 01:43:17 -04:00
Mike Spreitzer 078694d35d Make QueueSet support exempt behavior; use it 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: f269acd12b225f6a2dbbfae64a475f73f448b918
 2023-06-28 22:55:30 -04:00
Kubernetes Publisher 98133773bf Merge pull request #118182 from seans3/wsstream-refactor 
Refactor wsstream library from apiserver to apimachinery

Kubernetes-commit: 056f3a56b821a063210c2c4a67cc7a4d0a361afe
 2023-06-28 22:37:20 +00:00
Anish Ramasekar 822396743a [StructuredAuthenticationConfig] wire request context to claim resolver 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Kubernetes-commit: 150f732c7ee68cd738043c5e8a9966a9d55fb69d
 2023-06-28 20:37:40 +00:00
Andrew Sy Kim d969ae0916 apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: 16fdd3e5eef452712165b7625b2fec078fa79b7b
 2023-06-28 15:08:15 +00:00
Andrew Sy Kim 986c8832e5 apiserver: introduce larger buckets for request_filter_duration_seconds metric 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

Kubernetes-commit: c607984379234249403354bf1f9a2e86a740caf0
 2023-06-28 14:19:51 +00:00
Wojciech Tyczyński b560936651 Generalize watch storage tests 
Kubernetes-commit: 8266c4d934d42a5175a84bff10fda4bf36f13817
 2023-06-27 18:12:30 +02:00
Kubernetes Publisher 7d79c570c7 Merge pull request #118888 from enj/enj/i/kms_interface_split 
kmsv2: no-op: split transformer interface

Kubernetes-commit: 5e85f21e5be69d9e941771138002fdcfc48afbf2
 2023-06-27 01:18:39 +00:00
Jiahui Feng 9eebea091a add test for authorizer type checking. 
Kubernetes-commit: 7ccc23178396fb7c50cd59a16a62e7d79ba973a9
 2023-06-08 15:51:05 -07:00
Jiahui Feng c85cef6cc3 add support for authorizer to type checking. 
Kubernetes-commit: 04fa4184ed349d6ccce5be4daa7561356eebeea3
 2023-06-07 10:11:30 -07:00
Richa Banker 8859465680 Add servedVersions info in StorageVersion API 
Kubernetes-commit: 1c48b7ec144785b4b2493a01d82e40d6d34ce578
 2023-06-01 18:07:56 -07:00
Amine a4fba6de9b Move DeleteFunc logging to level 2 
Kubernetes-commit: 28b6c90696680c87cab04b539c0bca6af7d66bac
 2023-05-24 13:50:50 -05:00
Sean Sullivan 62e3f1a6d5 Re-add the legacy wsstream package and deprecate it 
Kubernetes-commit: 0fe84ff7cb1671d51769ad8f2378f919546a5f3a
 2023-05-23 16:15:07 -07:00
Sean Sullivan cdd93b4685 Refactor wsstream library from apiserver to apimachinery 
Kubernetes-commit: 8f3109da7913ef17c6656893f12f0e29ceabbde0
 2023-05-22 10:03:17 -07:00
Amine 278cd016a7 Properly setup mutatingWebhookConfigurationManager{} 
Kubernetes-commit: 761016482da9e3febbbfe5ab3cf6c2b31692c1b0
 2023-05-17 22:44:18 -05:00
Amine 907129f4f1 run `./hack/verify-gofmt.sh` 
Kubernetes-commit: 747dbd9b6b72c21c94ddd17bd2c82bbb2ff583ad
 2023-05-17 18:52:37 -05:00
Amine eb8a96cae5 Add smart reload for `MutatingWebhooks` 
Kubernetes-commit: 1eb60939fe5eb4c1394e5d93ee2d00b5894e9e73
 2023-05-17 18:44:01 -05:00
Amine 83bf64e6cc Properly handle parameter in `shareInformer.DeleteFunc` 
Kubernetes-commit: aeefb762ece0f866e99def259d6714aa4deb6d31
 2023-05-17 18:42:56 -05:00
Amine daa816b27c Fix webhook accessors caching pattern 
Kubernetes-commit: a01a8cb07e7bfe6dacadc51206ae4ef93d5f4352
 2023-05-17 10:54:17 -05:00
Abu Kashem dfc035926b apf: add validation to exempt for borrowing 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>

Kubernetes-commit: f8e4e8abac8637f6510838d7d476a838ce612659
 2023-05-15 12:08:18 -04:00
Amine dbf21ae38a Add webhookAccessors smart reloads unit tests 
This patch adds few unit tests to assert that the webhook accessors are
only recreate when they are update in the api-server.

In order to test this feature we had to make few changes to wb manager
that allows us to mock `NewValidatingWebhookAccessor` external function.

Kubernetes-commit: 7d3d44af77679ed488b28dc839d02a8258fd3adc
 2023-05-12 20:32:20 -05:00
Amine c0d0aad2b4 Fix deadlock issue 
This patch fixes the deadlock issue by using a map to cache already
initiated Webhooks instead of using `needRefresh` map.

Kubernetes-commit: c6f36e8702a9e90350c585298f1fc6e908699b12
 2023-05-10 15:09:15 -05:00
Amine d886c0446d Webhook Accessors Smart Recompilation 
Addresses https://github.com/kubernetes/kubernetes/issues/116588

This is an WIP patch trying to avoid recompiling CELs expressions when
recreation Validating/Mutating WebhookAccessors.

Maybe we should also concider using generatic.Controller from
5f59f44983/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller.go

Kubernetes-commit: 99875b3fb73728caad3efb62556428b555ce02f4
 2023-05-09 16:47:11 -05:00