03890bebf5
Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0
...
Kubernetes-commit: 8efeb5afcfd006a48d6e1263a5cf8de3284797df
2023-04-14 04:28:47 -07:00
0335b09d69
update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1
...
Kubernetes-commit: a325fdbbe5dbd56dc6e9e68b1c55187d4e954f23
2023-04-14 04:17:24 -07:00
c16cde40ab
dependencies: update go-semver to v0.3.1
...
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
Kubernetes-commit: 5bce18c98ecc6d8cea6b3ababc49691dc0438b48
2023-04-13 23:29:48 -07:00
de75faf66f
dependencies: update go-oidc to v2.2.1
...
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
Kubernetes-commit: d7270f4ba72d8d2e749cbd812936e4d3d3eadf6c
2023-04-13 23:25:57 -07:00
41a75810f4
dependencies: update go-systemd to v22.5.0
...
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
Kubernetes-commit: 1595d7f52d7e8d489f4ea8f573fa976c35dc242a
2023-04-13 23:21:38 -07:00
e643c04bdd
Merge pull request #117278 from haoruan/cleanup/replace-spew-with-dump
...
replace spew methods with dump methods
Kubernetes-commit: d060d487dcd74bc1a557f9378035696db40c64c2
2023-04-14 06:12:11 +00:00
d3fa9a05b8
Merge pull request #117285 from humblec/azure-go-autorest
...
dependencies: update gh/Azure/auto-test/{adal,validation}
Kubernetes-commit: ba0a8f9cceb513bc36bd803e9bf8f9a8c3912ff2
2023-04-13 22:27:57 +00:00
4ab5a3af89
dependencies: update gh/Azure/auto-test/{adal,validation}
...
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
Kubernetes-commit: 6d13cad2cf56d0bad77a6410a0c36b2cf8f0df57
2023-04-13 23:25:48 +05:30
e395bf0215
Merge pull request #116896 from thockin/apimachinery_util_diff_cleanup
...
apimachinery util/diff cleanups
Kubernetes-commit: c3e3ff989ac9abfb0dc3b958fcb698fcce952f8c
2023-04-13 13:56:56 +00:00
f695e2298f
replace spew methods with dump methods
...
Kubernetes-commit: c4e1b01416ec05e6a520a181d4ce3b4333adb4e4
2023-04-13 09:41:07 +08:00
0165503c5a
Replace uses of ObjectReflectDiff with cmp.Diff
...
ObjectReflectDiff is already a shim over cmp.Diff, so no actual output
or behavior changes
Kubernetes-commit: bc302fa4144d21a338683cd83701661f97be4aba
2023-03-23 11:34:03 -07:00
aa9b8ec0fe
Replace uses of ObjectGoPrintDiff with cmp.Diff
...
ObjectGoPrintDiff is already a shim over cmp.Diff, so no actual output
or behavior changes
Kubernetes-commit: 9627c50ef37f3b5274486e6f5ad37b73b1b69bf0
2023-03-23 11:31:25 -07:00
1431da0154
Replace uses of diff.ObjectDiff with cmp.Diff
...
ObjectDiff is already a shim over cmp.Diff, so no actual output or
behavior changes
Kubernetes-commit: 29c0b73d640b6e50c4f2dfeee7b07ca66a530dbd
2023-03-23 11:29:01 -07:00
61d7d16e0e
Replace apimachinery diff.StringDiff with cmp
...
I forced failures of most of these tests and verified readability
Kubernetes-commit: 97bab44cae3857710bfb072d233e654784082ee3
2023-03-23 11:10:32 -07:00
b1805a9a4d
apiserver/etcd: add request and request_error metrics ( #117222 )
...
* apiserver/etcd: add request and request_error metrics
Signed-off-by: iyear <ljyngup@gmail.com>
* apiserver/etcd: rename etcdRequestCounts metric
Signed-off-by: iyear <ljyngup@gmail.com>
---------
Signed-off-by: iyear <ljyngup@gmail.com>
Kubernetes-commit: 4f6714ef42dcdb1b35bb2d8581c1ef83d59f02d1
2023-04-12 22:02:45 +08:00
cff2363f5e
Merge pull request #117137 from p0lyn0mial/upstream-streaming-api-deadlock
...
cacher: prevent a potential deadlock
Kubernetes-commit: afcc207feb0da6c5866dea33b07856091328f9ab
2023-04-12 12:10:28 +00:00
2bd0999ce9
Merge pull request #116865 from alexzielenski/apiserver/apply/move-transformer
...
move check for noop managed field timestamp updates
Kubernetes-commit: 5f23f835879b514e9bf16809059b38957d20a486
2023-04-12 08:23:52 +00:00
98ef921952
Merge pull request #117154 from p0lyn0mial/upstream-cacher-size-rlock
...
watchcache: currentCapacity acquires a read lock
Kubernetes-commit: 6262d253719213503ce4d9b887fb39700975b8a8
2023-04-12 08:23:50 +00:00
ada7c4aad6
Merge pull request #116442 from benluddy/cel-admission-vestigal-errcheck
...
Remove vestigal err check from CEL admission controller.
Kubernetes-commit: 9b45cb9d5587c2a63f9d85ca578efcd1d45a6099
2023-04-12 08:23:48 +00:00
ba2cefc22c
Merge pull request #115076 from hasheddan/go-restful
...
Fix gorestful typos in the APIServerHandler.Director docstring
Kubernetes-commit: 379a1f376989a582e80738a63cc85c633f247ecf
2023-04-12 08:23:47 +00:00
e8fa17c2ec
Merge pull request #116987 from wojtek-t/fix_non_recursive_list_test
...
Deflake TestGetListNonRecursive
Kubernetes-commit: 01c0495463b660d2a7e770b22b238e3484e7e3e3
2023-04-12 04:34:50 +00:00
722690c0d0
Merge pull request #116893 from aramase/aramase/t/generate_transformer_test
...
[KMSv2] add tests for generate transformer
Kubernetes-commit: d78ca2a552a4df17adc87c25a7b16b32002006ad
2023-04-12 04:34:48 +00:00
90c5f14b70
Merge pull request #116881 from ritazh/kms-test-fix
...
kmsv2: test cleanup
Kubernetes-commit: 66c78653f1c5bca4f9992c971c886043ab5f86da
2023-04-12 04:34:44 +00:00
c7cbc5a59c
Merge pull request #116681 from stlaz/webhook_impersonate_uid
...
don't ignore UID impersonation in webhook clients
Kubernetes-commit: 27f5601182382ff5ca5b94bb24e42d479d3a370f
2023-04-12 04:34:35 +00:00
684582ce79
Merge pull request #116648 from ncdc/admission-clients
...
admission ApplyTo: take in clients
Kubernetes-commit: 61457b939df36d8e0a44a7d49572f9feff8cd58e
2023-04-12 04:34:31 +00:00
815ae0353e
Merge pull request #116374 from sxllwx/optimize/etcd3-getlist
...
ftr(etcd): add benchmarks for getlist
Kubernetes-commit: 62d00139e8712e672de29c23f4adfe7cf6039906
2023-04-12 00:28:20 +00:00
9808ea1436
Merge pull request #116348 from jkh52/knp-0.1.2
...
Bump Konnectivity to 0.1.2
Kubernetes-commit: 68f873250f13bee7a342696454db8c60fa593a92
2023-04-12 00:28:15 +00:00
b1bc32fa21
optimize watch-cache getlist ( #116327 )
...
* ftr(watch-cache): add benchmarks
* ftr(kube-apiserver): faster watch-cache getlist
* refine: testcase name
* - refine var name make it easier to convey meaning
- add comment to explain why we need to apply for a slice of runtime.Object instead of making a slice of ListObject.Items directly.
Kubernetes-commit: 75f17eb38fc8bbcb360d43dffce6e27a7159d43f
2023-04-12 00:28:10 +00:00
89471f9967
watchcache: currentCapacity acquires read lock
...
Kubernetes-commit: f138d29bf2df1a67883e6c16249eb4f26d34ec0c
2023-04-07 10:16:46 +02:00
cea854521c
cacher: prevent a potential deadlock
...
waitUntilWatchCacheFreshAndForceAllEvents must be called without
a read lock held otherwise the watchcache won't be able to make
progress (i.e. the watchCache.processEvent method that requries acquiring an exclusive lock)
the deadlock can happen only when the alpha watchlist feature flag is on
and the client specifically requests streaming.
Kubernetes-commit: 476e407ffd2ab393840d3f7a9fd01b71698738a3
2023-04-06 09:54:02 +02:00
d681755704
ftr(etcd): add benchmarks
...
Kubernetes-commit: db92cc1388021495e47dbe257a9e6559031cfe51
2023-03-29 21:52:38 +08:00
e4d6a4de7c
Deflake TestGetListNonRecursive
...
Kubernetes-commit: 05f4e497f1d692031b31c27098abc1e838e8814b
2023-03-29 13:46:49 +02:00
7bde2af536
Merge pull request #116948 from MadhavJivrajani/fix-verify-vendor
...
.*: update vendor dir and cleanup
Kubernetes-commit: 3a46f2611503b4d8a8ab557bf2541ac9c1be695a
2023-03-27 18:48:05 +00:00
3c5cb190cc
.*: update vendor dir and cleanup
...
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
Kubernetes-commit: 63b5ca69f1f481b2b4b2ee967f5b8b7b58937211
2023-03-27 19:18:05 +05:30
97cf1b06b7
Merge pull request #116877 from enj/enj/i/validate_encrypt_resp_early
...
kmsv2: validate encrypt response at DEK generation time
Kubernetes-commit: f393e7da7fd201d96f8471a1769594bef47fba90
2023-03-25 00:48:08 +00:00
20de79e7e1
[KMSv2] add tests for generate transformer
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: f2fe1fff655968f2b5959b387683637c5a1f8e66
2023-03-23 16:40:16 +00:00
bef9a879e0
Clean up kms test
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 906f0607efc5e12b3108e2b12cdac119fdba7909
2023-03-22 22:38:36 -07:00
242620fc19
kmsv2: validate encrypt response at DEK generation time
...
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response. This means that the
plugin could report healthy but all TransformToStorage calls would
fail. Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 5469c198e5d074c7e88e14c3dcbc3ebb2b37cfa8
2023-03-22 21:27:47 -04:00
021e1f7afd
kmsv2: validate encrypt response at DEK generation time
...
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response. This means that the
plugin could report healthy but all TransformToStorage calls would
fail. Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: 479fcf0b13f551517801b8677272c73f3f845565
2023-03-22 21:27:47 -04:00
29e89f54e2
move check for noop managed field timestamp updates
...
this check needs to go after any mutations. After the mutating admission chain, rest.BeforeUpdate (which is responsible for reverting updates to immutable timestamp fields, among other things.) is called in the store.Update function. Without moving this check, it will be possible for an object to be written to etcd with only a change to its managed fields timestamp.
Kubernetes-commit: 2b01f63b115e19e8ac9f8ee8e00dde65c5f40290
2023-03-22 11:18:50 -07:00
45f55ded30
Merge pull request #116770 from alexzielenski/agg-discovery-err-sources
...
Fix aggregated discovery race when using CRD and Aggregated APIService under same group
Kubernetes-commit: 8dd3807f4df05abae4a440e0b21750e30bcdd1d3
2023-03-22 01:00:19 +00:00
fe9b9da7ad
Merge pull request #116820 from Jefftree/patch-1
...
Update kube_features comment for aggregated discovery and openapi v3
Kubernetes-commit: 2f002862f0bf240aaa8e400a378400233ee315f2
2023-03-21 14:16:12 -07:00
a8fe83c416
Update kube_features comment for aggregated discovery and openapi v3
...
Kubernetes-commit: 0e4cece0e896d3fb6ef61f2880fa4ee3fe1f3fea
2023-03-21 15:18:41 -04:00
855aee423b
Merge pull request #116785 from enj/enj/i/clean_front_proxy_headers
...
Clear front proxy headers after authentication is complete
Kubernetes-commit: 956fa9b9cef031a34188c2292b5f8c0db2dcd26f
2023-03-21 20:38:48 +00:00
3f91e4a9ba
Merge pull request #116783 from tallclair/cel-authz
...
[CEL] Clean up reference to deleted denied function
Kubernetes-commit: 9614d7c03bf97953922c6238a18a264171e52146
2023-03-21 09:56:11 -07:00
c86f7c33d0
Clean up reference to deleted denied function
...
Kubernetes-commit: d109f60a0579bcc34244cbc74068be07d18443e6
2023-03-20 18:24:10 -07:00
9c69aab43c
Clear front proxy headers after authentication is complete
...
This matches the logic we have for the Authorization header as well
as the impersonation headers.
Signed-off-by: Monis Khan <mok@microsoft.com>
Kubernetes-commit: e9866d2794675aa8dc82ba2637ae45f9f3a27dff
2023-03-20 13:11:38 -04:00
63812e2f9b
allow multiple sources to add/remove from discovery without clobbering each other
...
Kubernetes-commit: 0740b11073d08262d4d6687ceedd8f0c71819ebd
2023-03-20 10:05:15 -07:00
0ad7c4e505
Merge pull request #116550 from alculquicondor/fix-bind-uid
...
Preserve UID and ResourceVersion in BindingREST
Kubernetes-commit: 15894cfc85cab64df081bb753b8ccf32a243da68
2023-03-20 16:56:14 +00:00
62e2e0a1b7
Preserve UID/ResourceVersion in the BindingREST endpoint
...
Change-Id: If4023da10c455963a320fdb9fc2a73c099bea3db
Kubernetes-commit: 62889f416cb60f66b3f04810ef2475c425b8394a
2023-03-16 16:35:39 -04:00
Mohit Sharma
Akhil Mohan
Kubernetes Publisher
Humble Chirammal
Hao Ruan
Tim Hockin
iyear
wangxiang
Lukasz Szaszkiewicz
Wojciech Tyczyński
Madhav Jivrajani
Anish Ramasekar
Rita Zhang
Monis Khan
Alexander Zielenski
Jeffrey Ying
Tim Allclair
Aldo Culquicondor