This PR enables unaryClientInterceptor in conjunction with Prometheus interceptor. Previously it was simply overwritten by the Prometheus interceptor. As a result etcd client didn't attempt to retry certain errors. The unaryClientInterceptor is important because it knows how to retry all sorts of errors from the etcd cluster. It will make the API server more resilient to failures - end users won't see certain errors. The full list of retriable (codes.Unavailable) errors can be found at https://github.com/etcd-io/etcd/blob/main/api/v3rpc/rpctypes/error.go#L72 Kubernetes-commit: b67cf46cf4dad696a4ffdec4d7d2deef2e78df36 |
||
---|---|---|
.github | ||
pkg | ||
plugin/pkg | ||
.import-restrictions | ||
CONTRIBUTING.md | ||
LICENSE | ||
OWNERS | ||
README.md | ||
SECURITY_CONTACTS | ||
code-of-conduct.md | ||
go.mod | ||
go.sum |
README.md
apiserver
Generic library for building a Kubernetes aggregated API server.
Purpose
This library contains code to create Kubernetes aggregation server complete with delegated authentication and authorization,
kubectl
compatible discovery information, optional admission chain, and versioned types. It's first consumers are
k8s.io/kubernetes
, k8s.io/kube-aggregator
, and github.com/kubernetes-incubator/service-catalog
.
Compatibility
There are NO compatibility guarantees for this repository, yet. It is in direct support of Kubernetes, so branches will track Kubernetes and be compatible with that repo. As we more cleanly separate the layers, we will review the compatibility guarantee. We have a goal to make this easier to use in the future.
Where does it come from?
apiserver
is synced from https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver.
Code changes are made in that location, merged into k8s.io/kubernetes
and later synced here.
Things you should NOT do
- Directly modify any files under
pkg
in this repo. Those are driven fromk8s.io/kubernetes/staging/src/k8s.io/apiserver
. - Expect compatibility. This repo is changing quickly in direct support of Kubernetes and the API isn't yet stable enough for API guarantees.