apiserver/pkg
Max Smythe 41adff8c93 Custom match criteria (#116350)
* Add custom match conditions for CEL admission

This PR is based off of, and dependent on the following PR:

https://github.com/kubernetes/kubernetes/pull/116261

Signed-off-by: Max Smythe <smythe@google.com>

* run `make update`

Signed-off-by: Max Smythe <smythe@google.com>

* Fix unit tests

Signed-off-by: Max Smythe <smythe@google.com>

* Fix unit tests

Signed-off-by: Max Smythe <smythe@google.com>

* Update compatibility test data

Signed-off-by: Max Smythe <smythe@google.com>

* Revert "Update compatibility test data"

This reverts commit 312ba7f9e74e0ec4a7ac1f07bf575479c608af28.

* Allow params during validation; make match conditions optional

Signed-off-by: Max Smythe <smythe@google.com>

* Add conditional ignoring of matcher CEL expression validation on update

Signed-off-by: Max Smythe <smythe@google.com>

* Run codegen

Signed-off-by: Max Smythe <smythe@google.com>

* Add more validation tests

Signed-off-by: Max Smythe <smythe@google.com>

* Short-circuit CEL matcher when no matchers specified

Signed-off-by: Max Smythe <smythe@google.com>

* Run codegen

Signed-off-by: Max Smythe <smythe@google.com>

* Address review comments

Signed-off-by: Max Smythe <smythe@google.com>

---------

Signed-off-by: Max Smythe <smythe@google.com>

Kubernetes-commit: e5fd204c33e90a7e8f5a0ee70242f1296a5ec7af
2023-03-16 04:20:31 +00:00
..
admission Custom match criteria (#116350) 2023-03-16 04:20:31 +00:00
apis Matchconditions admission webhooks alpha implementation for kep-3716 (#116261) 2023-03-15 07:36:02 +00:00
audit Combine RequestAuditConfig with RequestAuditConfigWithLevel 2022-11-02 15:23:48 -07:00
authentication token/cache: use go 1.20's approach for no-copy string/bytes conversions 2023-02-21 12:24:21 -05:00
authorization Check in OWNERS modified by update-yamlfmt.sh 2021-12-09 21:31:26 -05:00
cel Update CRD validation rules path accordingly. 2023-03-05 20:43:58 +00:00
endpoints apiserver: exclude APF queue wait time from SLO latency metrics (#116420) 2023-03-15 07:35:21 +00:00
features Matchconditions admission webhooks alpha implementation for kep-3716 (#116261) 2023-03-15 07:36:02 +00:00
quota/v1 go1.19: change some atomic.Value to atomic.Bool 2022-09-06 17:13:44 +08:00
registry pkg/registry: rename pod logs metrics 2022-12-14 23:40:21 +01:00
server [KMSv2] use encDEK, keyID and annotations to generate cache key 2023-03-14 19:38:30 +00:00
storage [KMSv2] use encDEK, keyID and annotations to generate cache key 2023-03-14 19:38:30 +00:00
storageversion go1.19: change some atomic.Value to atomic.Bool 2022-09-06 17:13:44 +08:00
util apiserver: exclude APF queue wait time from SLO latency metrics (#116420) 2023-03-15 07:35:21 +00:00
warning track legacy service account tokens 2022-03-21 14:21:41 -07:00