apiserver/pkg/server
Monis Khan 242620fc19 kmsv2: validate encrypt response at DEK generation time
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response.  This means that the
plugin could report healthy but all TransformToStorage calls would
fail.  Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.

Signed-off-by: Monis Khan <mok@microsoft.com>

Kubernetes-commit: 5469c198e5d074c7e88e14c3dcbc3ebb2b37cfa8
2023-03-22 21:27:47 -04:00
..
dynamiccertificates fsnotify: use event.Has instead of "event.Op&h == h" 2022-10-13 13:42:11 +08:00
egressselector Fix konnectivity-client metric registration. 2023-01-25 15:07:48 -08:00
filters apiserver: terminate watch with a rate limiter during shutdown 2023-01-13 18:04:13 -05:00
healthz Bump log level for health check warning for missing components 2022-10-17 09:42:09 -04:00
httplog Added simple tests and changed lazyVerb String method to the same as httplog uses 2022-11-07 17:13:26 +00:00
mux Check in OWNERS modified by update-yamlfmt.sh 2021-12-09 21:31:26 -05:00
options kmsv2: validate encrypt response at DEK generation time 2023-03-22 21:27:47 -04:00
resourceconfig reduce API surface area of whether a resource is enabled 2022-02-21 17:23:19 -05:00
routes Update kubernetes code for minor API changes to kube-openapi 2022-12-29 12:12:33 -08:00
storage kube-apiserver: print supported media types on failure to find a serializer 2022-11-05 23:03:23 +08:00
config.go Clear front proxy headers after authentication is complete 2023-03-20 13:11:38 -04:00
config_selfclient.go Move the comment to the right line 2021-04-23 00:05:15 +00:00
config_selfclient_test.go run hack/update-netparse-cve.sh 2021-08-20 01:16:14 +02:00
config_test.go Enable ComponentSLIs as beta feature 2023-01-09 17:25:50 -08:00
deleted_kinds.go Switch deprecated API serving back to gating on beta 2022-11-15 22:02:49 -05:00
deleted_kinds_test.go Implement Destroy() method for all registries 2022-04-05 12:26:22 +02:00
deprecated_insecure_serving.go Set idle and readheader timeouts 2021-07-27 11:58:45 -04:00
doc.go update docs.go files under staging/src/k8s.io/apiserver/pkg/server 2019-02-03 20:43:13 +00:00
genericapiserver.go allow multiple sources to add/remove from discovery without clobbering each other 2023-03-20 10:05:15 -07:00
genericapiserver_graceful_termination_test.go staging: fix "go vet" issues 2023-02-28 21:22:40 +01:00
genericapiserver_test.go apiserver: refactor WithWaitGroup handler 2023-01-10 15:55:19 -05:00
graceful_shutdown_test.go adds a unit test for checking if graceful shutdown of HTTP2 server works 2020-12-11 13:12:46 +01:00
handler.go Generate and format files 2022-07-19 20:54:13 -04:00
healthz.go Migrate to k8s.io/utils/clock in apiserver 2021-09-14 20:36:07 +02:00
healthz_test.go Migrate to k8s.io/utils/clock in apiserver 2021-09-14 20:36:07 +02:00
hooks.go Generate and format files 2022-07-19 20:54:13 -04:00
lifecycle_signals.go apiserver: watch gets notified on server shutdown signal 2023-01-13 18:02:41 -05:00
plugins.go Rename admission cel package to validatingadmissionpolicy 2022-11-08 14:18:26 +00:00
secure_serving.go API Server Changes 2022-03-07 09:20:45 -05:00
signal.go make Kubelet bootstrap certificate signal aware 2020-07-04 12:08:04 +08:00
signal_posix.go generated: Run hack/update-gofmt.sh 2021-08-12 17:13:11 -04:00
signal_windows.go apiservers: add synchronous shutdown mechanism on SIGTERM+INT 2017-08-29 13:16:11 +00:00