fdfc990c33
wiring existing oidc flags with internal API struct
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: 1bad3cbbf59a61805a48f609b8cc0a2a40c168ef
2023-06-28 06:04:45 +00:00
496ba1943b
add AuthenticationConfiguration v1alpha1 api
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Kubernetes-commit: f909eb630cac310adf7267b85922f1340508ca79
2023-06-27 21:07:47 +00:00
a78d1b9b03
Merge pull request #120162 from tkashem/apf-promise-refactor
...
apf: refactor promise to use a context
Kubernetes-commit: 714e77595c8b19b693925bda2a96ab80c307d38f
2023-08-24 22:40:35 +00:00
89074f262b
Merge pull request #120152 from p0lyn0mial/upstream-annotate-initial-ev-bookmark
...
storage/util: introduce AnnotateInitialEventsEndBookmark function
Kubernetes-commit: 9ce03d9254cbd47d82a4b2d88e2a915943d90e26
2023-08-24 14:56:06 +00:00
4e53a5e5a8
Merge pull request #120102 from p0lyn0mial/upstream-storage-etcd-new-params
...
storage/factory: extend the Create method by newList and resourcePrefix params
Kubernetes-commit: df8bfdf55ed8ed2c7ddc2757cf0829040f851abd
2023-08-24 14:56:05 +00:00
f42313972c
Merge pull request #120124 from p0lyn0mial/upstream-watch-terminated-logs-improv
...
storage/cacher: remove duplicate logging when a watch is closed due to unresponsiveness
Kubernetes-commit: 3737b764841b6f8d5327323884a7c8078e209cde
2023-08-24 14:56:03 +00:00
c1ab2b8033
Merge pull request #120060 from jpbetz/cel-features-1_29
...
Bump cel version to 1.17.5 and bump CEL strings library to version 2
Kubernetes-commit: dd3b1de79251f4105b33f0beae9c505afff41eff
2023-08-24 10:56:37 +00:00
d8d65bebc5
storage/util: introduce AnnotateInitialEventsEndBookmark function
...
// AnnotateInitialEventsEndBookmark adds a special annotation to the given object
// which indicates that the initial events have been sent.
//
// Note that this function assumes that the obj's annotation
// field is a reference type (i.e. a map).
Kubernetes-commit: 47d9a47a08856613e2e6ae6aa8a1bdeb1e281f97
2023-08-24 12:19:10 +02:00
01011a76dc
Merge pull request #120087 from divyasri537/incorporating-feedback-PR-119341
...
Incorporating feedback on 119341
Kubernetes-commit: 8290c4c9c1904f160b8d297ffc052ce58222bc91
2023-08-24 03:01:39 +00:00
3780c610f6
Merge pull request #119503 from wojtek-t/pagination_ga
...
Graduate APIListChunking to GA
Kubernetes-commit: 2e6eafca3f466b072f23aff4ff4d6d8a973f5606
2023-08-23 21:40:56 +00:00
eedba684cf
Add CEL library lifecycle linter
...
Kubernetes-commit: 980fa6a2b9edae577d1b71a28834afe1ca7dfe82
2023-08-23 17:17:32 -04:00
52849e2b21
storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
...
Kubernetes-commit: 1327a57aaf8f5ffaea3d33204dbe64dccef4e0ef
2023-08-23 12:51:50 +02:00
2538d7ca48
Merge pull request #120097 from jpbetz/fix-ppc64le
...
Fix CEL cost handling of zero length replacement strings
Kubernetes-commit: 07f47d8b407ace1cf85f814b787718ba1e65ef6a
2023-08-23 00:01:40 +00:00
6ab39bb78f
Merge pull request #120090 from MikeSpreitzer/fix-120032
...
Handle edge cases in seat demand stats
Kubernetes-commit: 2792d913674ae44983505a3265df2ac6408b85b9
2023-08-22 20:02:09 +00:00
f0fbaa3fab
Bump cel string lib to v2, add tests
...
Kubernetes-commit: 3fb14cf4e7a0230d57f579b86262d9df6997e5e3
2023-08-22 13:05:09 -04:00
6f6cacf8bf
check for overflow
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: b1223e0d1ac626d5472436ed2cd0bc2962394004
2023-08-22 10:02:10 -07:00
3e172f1316
Fix CEL cost handling of zero length replacement strings
...
Kubernetes-commit: 87cf890632c538e83e961035e73f0f2e8d3ceeba
2023-08-21 22:48:11 -04:00
7c7ff34a5a
Handle edge cases in seat demand stats
...
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
Kubernetes-commit: b0e249f657a18c1435ace391fa752711dafce732
2023-08-21 15:26:38 -04:00
08f8ff0d3f
Merge pull request #119790 from seantywork/added-comment
...
added comment for clarifying steps related to kubernetes mutual (2-wa…
Kubernetes-commit: 55c86d6ad930d437931079318d740bdf8dac34f0
2023-08-21 20:27:23 +00:00
27772523df
apf: refactor promise to use a context
...
Kubernetes-commit: 0039f24d74d0f57c8ba868ae361821d37fd908d6
2023-08-21 15:19:31 -04:00
956f1b4799
Incorporating feedback on 119341
...
Kubernetes-commit: 24877f96fbb60f34c1c808e7ac76870019eee86b
2023-08-21 15:20:30 +00:00
d5379f908e
Merge pull request #120081 from p0lyn0mial/upstream-storage-etcd-watcher-refactor
...
storage/etcd: no-op, simplify watcher construction
Kubernetes-commit: bcbceea11778ae5316bc02da904a17758c1ea2c7
2023-08-21 05:37:22 -07:00
7ecfbf7914
storage/etcd: simplify passing the transformer
...
Kubernetes-commit: a5600b6925169a7d99376d52472e5f8e8635082b
2023-08-21 12:27:41 +02:00
dc7ff6e034
storage/etcd: remove newWatcher function
...
Kubernetes-commit: 6161752ecbe434b8fb157dd3a30bb5c0cef7a23e
2023-08-21 12:13:12 +02:00
6ca5f179c2
Merge pull request #119975 from p0lyn0mial/upstream-storage-get-current-rv
...
storage/util: move GetCurrentResourceVersionFromStorage
Kubernetes-commit: ba10ee7671099254db18f9fe9e779ef6339e935b
2023-08-21 12:27:16 +00:00
634c3a6da4
Merge pull request #119972 from p0lyn0mial/upstream-storage-etcd-ref-watcher-method
...
storage/etcd: no-op, refactor watcher.Watch method signature
Kubernetes-commit: 2f729f05b6ec4c348cf1b3f8792f94f3defae968
2023-08-21 12:27:15 +00:00
ba70a1768a
Merge pull request #119824 from aojea/deflake_TestCreateHealthcheck
...
fix race creating etcd client for healthchecks
Kubernetes-commit: f46583dcaafc1b5d47b79ceb17ea78e7781f7014
2023-08-21 12:27:13 +00:00
d4f3c15bbd
Merge pull request #119714 from ritazh/kmsv2-feature-enablement-ut
...
kmsv2 test feature enablement unit test
Kubernetes-commit: db64cc4a55f826ac83b7f64b1ca124b0b318e932
2023-08-19 04:02:54 +00:00
5711af83ff
Merge pull request #119878 from ritazh/kmsv2-metrics-dekcachesize
...
kmsv2: add metric for DEK cache filled
Kubernetes-commit: 16310c959dfc5fefc70e9041e0029feffa62d791
2023-08-19 04:02:53 +00:00
c6c8291384
Update k8s code to handle cel-go changes
...
Kubernetes-commit: 640a2ec33274f4b6311afc7dbb0c7e15bd5d792a
2023-08-18 17:32:41 -04:00
0c5d0edf6d
Bump cel-go to v0.17.6
...
Kubernetes-commit: 1a850a00630ebefcef6ba56349277ca127983c11
2023-08-18 14:20:35 -04:00
bf05e35835
kubernetes mutual (2-way) x509 comment
...
Kubernetes-commit: 48260b4a77b423b178ec5e262ac67be52d49f455
2023-08-18 01:31:22 +00:00
9d077dc364
Merge pull request #119800 from jpbetz/cost-fix
...
Fixes CEL estimated cost to propagate result sizes correctly
Kubernetes-commit: 210a97e48bc6caac338663cfb917f60e61c84962
2023-08-17 00:17:04 +00:00
3981055a63
Merge pull request #119844 from enj/enj/i/upgrade_regex
...
wsstream: use a single approach to detect connection upgrade
Kubernetes-commit: 1ebb5e608b34b02d466181866d2fe64bac8565a4
2023-08-16 08:13:04 +00:00
41188ea6a1
Merge pull request #119825 from Jefftree/add-gv
...
Move adding GroupVersion log until after an update is confirmed
Kubernetes-commit: 47f75709326a737ea1880c9fd148ab32771d797c
2023-08-16 08:13:03 +00:00
1f19e00d1c
Merge pull request #119795 from sttts/sttts-httplog-impersonation
...
apiserver/httplog: pretty up impersonation output
Kubernetes-commit: 19f6d5be8269d4051acffc5709ec4bee7274268a
2023-08-16 08:12:58 +00:00
a11da9bae8
Merge pull request #119577 from jiahuif-forks/tests/validating-admission-policy/lazy-map-short-circuiting
...
CEL lazy map: add test for boolean short-circuiting
Kubernetes-commit: 112a4726a4af33b5e3d7cb3f6d51547262587669
2023-08-16 04:21:03 +00:00
6b6cfe5d12
Merge pull request #119385 from andrewsykim/current_inqueue_seats_metric
...
Add apiserver flowcontrol metric `current_inqueue_seats`
Kubernetes-commit: 338d68bbc2b5e69c18fed5eea11cc683e72dcbdf
2023-08-16 00:32:47 +00:00
9ece5c3b70
Merge pull request #118399 from skitt/ioutil-sig-api-machinery
...
api-machinery: stop using deprecated io/ioutil
Kubernetes-commit: 10beda334e360b6b2988d5d2d30c011cc50d4aa8
2023-08-16 00:32:44 +00:00
e78a7391c4
Merge pull request #119888 from dgrisonnet/panic-storage-metric
...
Fix segfault during storage size metric collection
Kubernetes-commit: 8a7df727820bafed8cef27e094a0212d758fcd40
2023-08-11 04:46:45 +00:00
245d131967
apiserver/etcd3: fix segv during metric collection
...
Fix a segfault when collecting the storage size metrics when the getters
used to collect the data on etcd haven't been initialized properly. This
happens when the EtcdOptions are not applied which is the case for
aggregated apiservers that don't care about storage.
Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
Kubernetes-commit: c6efaf16c1ed07ce37485b7a272628f653cbf06f
2023-08-10 17:01:17 +02:00
e7a7329b64
Merge pull request #119835 from liggitt/mitigate-aggregated-discovery-npe
...
Avoid returning nil responseKind in v1beta1 aggregated discovery
Kubernetes-commit: 3d941afece97b284c764e5320cc8c80b0e88cba8
2023-08-10 01:27:20 +00:00
7ebae7f76f
kmsv2: add metric for DEK cache filled
...
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Kubernetes-commit: 3cbecf218dfea2e99ae95310ac03406d1d87a072
2023-08-09 12:28:01 -07:00
1edd7d6157
Avoid returning nil responseKind in v1beta1 aggregated discovery
...
Kubernetes-commit: 1876ddf71497bad349f7c4df24c2e22356d3bad9
2023-08-08 14:25:56 -04:00
35302d6383
Move adding GroupVersion log until after an update is confirmed
...
Kubernetes-commit: 49e00e8bdeec6b1cdaf691ec85ba8510892ebbc2
2023-08-08 14:28:54 +00:00
49f7deccb5
fix race on etcd client constructor for healthchecks
...
Change-Id: Id29b5b377989dcb5377316cfcdea367071a47365
Kubernetes-commit: 77b3bb0f69bfa4e5eb56ba484f724476304616cc
2023-08-08 13:55:14 +00:00
cc544e7bf1
Merge pull request #119725 from MadhavJivrajani/bump-net-dep
...
[CVE-2023-3978] .*: bump golang.org/x/net to v0.13.0
Kubernetes-commit: 1620473a9a01dd6bbef3398c0acb2e581d0a13c3
2023-08-07 21:21:27 +00:00
539b445fa2
Add test coverage of result size of string operations
...
Kubernetes-commit: e4d16f34c15affdf4411d5bd1b19991b5fa27f2a
2023-08-07 12:41:52 -04:00
a1fc973692
Bump cel-go to v0.16.1
...
Kubernetes-commit: 69a5a528967500199a6748d0b7fac2a0fcc6df6d
2023-08-07 15:51:36 -04:00
13a3aab581
apiserver/httplog: pretty up impersonation output
...
```
I0807 09:09:16.419239 1 httplog.go:132] "HTTP" verb="GET" URI="/apis/batch/v1?timeout=32s" latency="214.666µs" userAgent="kubernetes-provider/v0.0.0 (linux/arm64) kubernetes/$Format" audit-ID="948ef6b2-474d-45a7-ad5f-894ce93d05f7" srcIP="192.168.139.202:35542" apf_pl="exempt" apf_fs="exempt" apf_execution_time="129.5µs" resp=200 addedInfo=<
&{kubernetes-admin [system:masters system:authenticated] map[]} is acting as &{foo [system:authenticated] map[]}
>
```
to
```
I0807 09:09:16.419239 1 httplog.go:132] "HTTP" verb="GET" URI="/apis/batch/v1?timeout=32s" latency="214.666µs" userAgent="kubernetes-provider/v0.0.0 (linux/arm64) kubernetes/$Format" audit-ID="948ef6b2-474d-45a7-ad5f-894ce93d05f7" srcIP="192.168.139.202:35542" apf_pl="exempt" apf_fs="exempt" apf_execution_time="129.5µs" resp=200 addedInfo="kubernetes-admin[system:masters system:authenticated] is impersonating foo[system:authenticated]"
```
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
Kubernetes-commit: 37730c07dd658ba585ffee3861780e18947ca534
2023-08-07 11:23:30 +02:00
Anish Ramasekar