kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,463 Commits 30 Branches 1,482 Tags 31 MiB
Commit Graph

776 Commits

Author SHA1 Message Date
hzxuzhonghu c5ff2cea2f etcd client add dial timeout 
Kubernetes-commit: 814401fc902a7083bfd9933e245a2be62abfed60
 2018-03-21 14:45:13 +08:00
Avesh Agarwal cc0f17a725 Fix to avoid REST API calls at log level 2. 
Kubernetes-commit: 6a5c248bbb6a06a0c171f7171d3583cd006350db
 2017-02-03 12:47:03 -05:00
hzxuzhonghu 805ad14201 add test case for request context mapper 
Kubernetes-commit: 3f73ccfcde3bc1ff9bb24d3ec9f3154feb97e166
 2018-03-07 11:44:36 +08:00
hzxuzhonghu 4acae24757 optimize requestcontext: use RWMutex and atomic.Value 
Kubernetes-commit: 564d53f71b3fb52e956e4bece12483e4ba3f6248
 2018-03-06 11:20:46 +08:00
rithu john 6f00834df1 oidc authentication: Required claims support 
Kubernetes-commit: dd433b595f5f0b1d9a5195b3dbefe0fd2afc425d
 2018-04-03 10:54:09 -07:00
hzxuzhonghu 490c9a96c3 fix typo 
Kubernetes-commit: 549fb0cad39daa74c528f7f775d627f908785b61
 2018-04-04 16:03:17 +08:00
Cao Shufeng e8101c4ca7 Log rbac info into advanced audit event 
Kubernetes-commit: e87c2c9f27f7f9756a8b664d118d357b166bbd14
 2018-01-22 15:19:15 +08:00
Dr. Stefan Schimanski adb35656a1 apiserver: cancel context on timeout in WithTimeoutForNonLongRunningRequests 
Kubernetes-commit: f3ba7f95585cdcce19579d757dadbf3c8a9f8e0b
 2018-03-12 17:11:11 +01:00
Dr. Stefan Schimanski 584fe98b64 admission/webhook: fix panic from empty response in mutating webhooks 
Kubernetes-commit: 10969e1b8dcb89cc97d591df63be7464cefb454b
 2018-02-12 14:58:57 +01:00
Dr. Stefan Schimanski 378bb80fc8 admission/webhook: refactor to webhook = generic-webhook + source + dispatcher 
- unify test cases
- remove broken VersionedAttributes override abstraction

  This overriding had no effect. The versioned.Attributes were never
  used as admission.Attributes.Better make the versioned objects
  explicit than hiding them under a wrong abstraction.
- remove wrapping of scheme.Convert
- internalize conversion package

Kubernetes-commit: 72f8a369d021037ca6179339d50ad595b5462a6c
 2018-01-16 10:37:41 +01:00
Dr. Stefan Schimanski 1075399c96 apiserver: enforce shared RequestContextMapper in delegation chain 
Kubernetes-commit: 9f906618f04baceaf923e873530f9741e80ad2cb
 2018-04-04 10:05:06 +02:00
hangaoshuai dbf3897e4f remove unused function getEncodedPod in etcd_helper_test.go 
Kubernetes-commit: b07071f84bbfafb9dc525c5092573d11dcc6743a
 2018-04-04 18:24:48 +08:00
Dr. Stefan Schimanski 28595d407b apiserver: add warning about not trusting authz of aggregator 
Kubernetes-commit: 50b98169ede9648769ce471150b1ab9ceb06bc0c
 2018-03-19 13:37:52 +01:00
Mikhail Mazurskiy eb4672a9c5 Use range in loops; misc fixes 
Kubernetes-commit: c23a8a85cce80a1015797e9c76aae709d9910791
 2018-03-29 22:55:25 +11:00
Mengqi Yu c621a422af fix patch conflict detection in apiserver 
Kubernetes-commit: ff18af452dafef7fc115512940e0c6250ccf31ca
 2018-03-29 16:43:23 -07:00
Cao Shufeng 2cb36e30a2 fix error message about DeleteOptions 
Kubernetes-commit: c9aac2b2e0297ebb4e0b5425ad986069dd762e01
 2018-01-02 19:24:32 +08:00
David Eads 416f1ae672 update metrics to true like it is for kube-apiserver 
Kubernetes-commit: 456fd386dc6db8ba5ced338a5935de8229c14047
 2018-03-09 14:36:04 -05:00
hzxuzhonghu 6ab99203b7 Replace "golang.org/x/net/context" with "context" 
Kubernetes-commit: 70e45eccf27726f0e63dd1024924ccc7e2cd35a0
 2018-02-28 12:20:22 +08:00
Mik Vyatskov b2b70701e1 Make advanced audit output version configurable. 
Signed-off-by: Mik Vyatskov <vmik@google.com>

Kubernetes-commit: ad25d1f9ec398e5f9e91fd225cbbfdc5aa00973f
 2018-02-19 21:15:49 +01:00
hzxuzhonghu 240b9cf032 remove unused rls-ca-file flag 
Kubernetes-commit: 9c0803e14c0d76e2e8225db546c0d2ce0b522ab7
 2018-03-20 15:26:31 +08:00
hangaoshuai 9c6162ac42 add unit test for function FeatureGateSetFromMap and FeatureGateString 
Kubernetes-commit: 95eaccb0959af0ec91c3c4356a528516a5dc693f
 2018-03-08 18:52:36 +08:00
fisherxu 716af975eb regenerated all files and remove all YEAR fields 
Kubernetes-commit: b49ef6531c11f1c834e0d7591f5c965f6193c711
 2018-01-22 20:37:53 +08:00
Tim Allclair 8d9c5be000 Grant sig leads feature approval powers 
Kubernetes-commit: 9afc4242d367025454fc201519a29f77973ce29f
 2018-03-12 11:34:33 -07:00
lcfang 39fbe7ba58 remove the outdated TODO 
Kubernetes-commit: 9be76ec461e6bd2bddb5ab26b41b3ef5938e0791
 2018-03-13 20:31:01 +08:00
hzxuzhonghu 166387d3d7 fix bug in apiserver.k8s.io install 
Kubernetes-commit: f66c9b388fd276293ac9b430cac2ecf88b236e5d
 2018-03-13 14:47:05 +08:00
Cao Shufeng e75ab8e707 log enabled admission controller in order 
This change log enabled mutating and validating admission controller
in order.

Kubernetes-commit: 76aaba6d247fa479763fefa2d57c625077100d78
 2018-03-10 16:20:12 +08:00
hzxuzhonghu 422369e23b move EtcdServersOverrides to EtcdOptions flags validate 
Kubernetes-commit: f380ac8cec8061bf6533ccecd02ec49d9a5b016f
 2018-03-05 11:32:59 +08:00
hzxuzhonghu 03f5f59a07 apiserver clean code 
Kubernetes-commit: 0feecc376cc04baa2f4979cecaabb658373d6c69
 2018-03-02 17:15:02 +08:00
Wang Guoliang c26e7f2e3a more concise to merge the array 
Kubernetes-commit: 31aad75316b6e63840ec05b8bc9205fbb6d897aa
 2018-02-11 21:27:11 +08:00
Kubernetes Publisher 627fa76a8b sync: initially remove files BUILD */BUILD BUILD.bazel */BUILD.bazel 2018-03-15 09:38:17 +00:00
Tim Allclair d89e8e9460 Fix default auditing options. 
- Log backend defaults to blocking mode (backwards compatability)
- Fix webhook validation
- Add options test

Kubernetes-commit: e004257919d779d56f27ad84c7f33799cc7ab580
 2018-03-02 15:16:37 -08:00
Cao Shufeng 6466b038b4 fix option --audit-webhook-initial-backoff 
Before this change, --audit-webhook-initial-backoff has no effect

Kubernetes-commit: 5bc5cd1b2ccb0b9fb5e652b579b4fb379428cb56
 2018-03-10 17:44:20 +08:00
Chao Xu f86f44d94d Make admission webhooks work in custom apiservers. 
Created a scheme that only understands admission/v1beta1 and use it to
encode/decode admissionReviews.

Also made the NegotiationSerializer setup static

Kubernetes-commit: 3ab516035d17c2b2798797eb8ee85522ccbc051e
 2018-03-09 11:25:34 -08:00
jennybuckley c28dea8a20 Make admission webhooks not ignore scheme 
Kubernetes-commit: 7d5696eb6d98a0ce76e4fe18c3e37aec05060b46
 2018-03-08 11:35:13 -08:00
Cao Shufeng 8779e14501 log enabled admission controller in order 
Kubernetes-commit: 4c6db2516a7597bd0be5c1f3a3905b8894a18e6a
 2018-03-06 17:40:34 +08:00
jennybuckley 89e1aa5933 Prevent webhooks from affecting admission requests for webhooks 
Kubernetes-commit: 58b43ad27d00191cf5291d8508dc346f1924b785
 2018-03-05 16:35:52 -08:00
Aleksandra Malinowska 2f4fe441f5 Fix initializing watch cache 
Kubernetes-commit: 09606310ac86932152bb582d284d02958c089af8
 2018-03-02 16:53:18 +01:00
Mik Vyatskov 9169f6d300 Add buffering to the log audit backend 
Signed-off-by: Mik Vyatskov <vmik@google.com>

Kubernetes-commit: 881e6d4f6f905079b2c27299e7b631b6903b6815
 2018-02-22 19:52:33 +01:00
hangaoshuai 8e51703adb remove unused function negotiate() and writeYAML() 
Kubernetes-commit: 5f908c226c9df144dfc0e1665381b8ec534a60a4
 2018-02-23 14:53:51 +08:00
Ryan Hitchman 43796a9895 Fix build tag for grpc_service_unix_test.go. 
Kubernetes-commit: 4d2e43f53f3c057e7bddd6f09e5a82b0b97d276f
 2018-02-09 12:10:25 -08:00
Ryan Hitchman bbfe695b05 Remove unused variables (only assigned to) from test code. 
This is revealed by the go/types package, which is stricter than
the Go compiler about unused variables. See also: golang/go#8560

Kubernetes-commit: e04b91facf180c17557a44e8e462858ea2936301
 2018-02-02 13:34:57 -08:00
jennybuckley 9fa0aca343 Run hack/update-all.sh 
Kubernetes-commit: c8dacd8e631f59ef158c79156d77a99fd2a632cc
 2018-02-26 17:16:14 -08:00
Wang Guoliang 32fe314a1e fix some syntax related errors 
Kubernetes-commit: d065157dd74fa02eec87f5849528b079a3736c3d
 2018-02-11 19:50:49 +08:00
Haowei Cai 8080a6e06e Add new openapi endpoint in aggregator server 
Kubernetes-commit: 2eb3d046ce8b0a1b500d68d5a83fa7e575da7ca9
 2018-02-20 09:22:25 -08:00
Mike Spreitzer aa5d4f9f32 Fixes for HTTP/2 max streams per connection setting 
This PR makes two changes.  One is to introduce a parameter
for the HTTP/2 setting that an api-server sends to its clients
telling them how many streams they may have concurrently open in
an HTTP/2 connection.  If left at its default value of zero,
this means to use the default in golang's HTTP/2 code (which
is currently 250).

The other change is to make the recommended options for an aggregated
api-server set this limit to 1000.  The limit of 250 is annoyingly low
for the use case of many controllers watching objects of Kinds served
by an aggregated api-server reached through the main api-server (in
its mode as a proxy for the aggregated api-server, in which it uses a
single HTTP/2 connection for all calls proxied to that aggregated
api-server).

Fixes #60042

Kubernetes-commit: 201c11f147c85b029665915bee3a62eea19d6d57
 2018-02-19 14:18:07 -05:00
Marek Grabowski 25b054a72f generated 
Kubernetes-commit: fb7101ef7c9892e0a5d3a718038b93e84b9314b5
 2018-02-14 16:15:12 +00:00
Marek Grabowski e36f8069aa Add a metric exposing number of objects per type 
Kubernetes-commit: f6e9ebffa2df10f7792fbea0a0fbe5ab8e388a26
 2018-02-12 15:58:57 +00:00
Dr. Stefan Schimanski 1d8690c3c5 apiserver: fix testing etcd config in preparation for etcd 3.2.16+ 
Kubernetes-commit: 73971e69ac3d855b6ecbfa15c5bbe454d96e89b7
 2018-02-23 13:58:08 +01:00
hzxuzhonghu 7fb69020af fix typo and remove inaccurate TODO 
Kubernetes-commit: d94925af8854031f1548466c655afd3119613785
 2018-02-23 09:27:37 +08:00
Mike Danese 3ec7dfbb59 kms: rename KMSService to KeyManagmentService 
KMSService is redundent.

Kubernetes-commit: fc8ff61eb9e153d9e3f67549b8454cdea89bab30
 2018-02-22 19:36:03 -08:00