kubernetes
/
kube-controller-manager
mirror of https://github.com/kubernetes/kube-controller-manager.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ValidatingAdmissionPolicy controller for Type Checking (#117377) 

* [API REVIEW] ValidatingAdmissionPolicyStatucController config.

worker count.

* ValidatingAdmissionPolicyStatus controller.

* remove CEL typechecking from API server.

* fix initializer tests.

* remove type checking integration tests

from API server integration tests.

* validatingadmissionpolicy-status options.

* grant access to VAP controller.

* add defaulting unit test.

* generated: ./hack/update-codegen.sh

* add OWNERS for VAP status controller.

* type checking test case.

Kubernetes-commit: 049614f884e61d87fc5e277cf9fd7cb2e6571217
This commit is contained in:
Jiahui Feng 2023-07-13 13:41:50 -07:00 committed by Kubernetes Publisher
parent a74e3daaff
commit e6ba10fd39
4 changed files with 50 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
config/v1alpha1/types.go
View File

@ -165,6 +165,9 @@ type KubeControllerManagerConfiguration struct {
// TTLAfterFinishedControllerConfiguration holds configuration for
// TTLAfterFinishedController related features.
TTLAfterFinishedController TTLAfterFinishedControllerConfiguration
// ValidatingAdmissionPolicyStatusControllerConfiguration holds configuration for
// ValidatingAdmissionPolicyStatusController related features.
ValidatingAdmissionPolicyStatusController ValidatingAdmissionPolicyStatusControllerConfiguration
}
// AttachDetachControllerConfiguration contains elements describing AttachDetachController.
@ -481,3 +484,12 @@ type TTLAfterFinishedControllerConfiguration struct {
// allowed to sync concurrently.
ConcurrentTTLSyncs int32
}
// ValidatingAdmissionPolicyStatusControllerConfiguration contains elements describing ValidatingAdmissionPolicyStatusController.
type ValidatingAdmissionPolicyStatusControllerConfiguration struct {
// ConcurrentPolicySyncs is the number of policy objects that are
// allowed to sync concurrently. Larger number = quicker type checking,
// but more CPU (and network) load.
// The default value is 5.
ConcurrentPolicySyncs int32
}

17
config/v1alpha1/zz_generated.deepcopy.go
View File

@ -322,6 +322,7 @@ func (in *KubeControllerManagerConfiguration) DeepCopyInto(out *KubeControllerMa
out.SAController = in.SAController
out.ServiceController = in.ServiceController
out.TTLAfterFinishedController = in.TTLAfterFinishedController
out.ValidatingAdmissionPolicyStatusController = in.ValidatingAdmissionPolicyStatusController
return
}
@ -569,6 +570,22 @@ func (in *TTLAfterFinishedControllerConfiguration) DeepCopy() *TTLAfterFinishedC
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ValidatingAdmissionPolicyStatusControllerConfiguration) DeepCopyInto(out *ValidatingAdmissionPolicyStatusControllerConfiguration) {
*out = *in
return
}
// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ValidatingAdmissionPolicyStatusControllerConfiguration.
func (in *ValidatingAdmissionPolicyStatusControllerConfiguration) DeepCopy() *ValidatingAdmissionPolicyStatusControllerConfiguration {
if in == nil {
return nil
}
out := new(ValidatingAdmissionPolicyStatusControllerConfiguration)
in.DeepCopyInto(out)
return out
}
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *VolumeConfiguration) DeepCopyInto(out *VolumeConfiguration) {
*out = *in

24
go.mod
View File

@ -5,9 +5,9 @@ module k8s.io/kube-controller-manager
go 1.20
require (
k8s.io/apimachinery v0.0.0-20230619010326-2680937a8b38
k8s.io/cloud-provider v0.0.0-20230619014333-4f2ecbed4587
k8s.io/controller-manager v0.0.0-20230619014205-11f279f1267a
k8s.io/apimachinery v0.0.0-20230712210707-c9b3b3a37189
k8s.io/cloud-provider v0.0.0-20230707004032-514dc948dd52
k8s.io/controller-manager v0.0.0-20230622133526-f45e59bf2537
)
require (
@ -24,7 +24,7 @@ require (
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
gopkg.in/yaml.v2 v2.4.0 // indirect
k8s.io/component-base v0.0.0-20230619011537-46e907623809 // indirect
k8s.io/component-base v0.0.0-20230713173548-ea35e2fd8622 // indirect
k8s.io/klog/v2 v2.100.1 // indirect
k8s.io/utils v0.0.0-20230406110748-d93618cff8a2 // indirect
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
@ -32,13 +32,13 @@ require (
)
replace (
k8s.io/api => k8s.io/api v0.0.0-20230619010547-366128ee4928
k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20230619010326-2680937a8b38
k8s.io/apiserver => k8s.io/apiserver v0.0.0-20230619012149-15b83e44823c
k8s.io/client-go => k8s.io/client-go v0.0.0-20230619010903-808ebc843ba9
k8s.io/cloud-provider => k8s.io/cloud-provider v0.0.0-20230619014333-4f2ecbed4587
k8s.io/component-base => k8s.io/component-base v0.0.0-20230619011537-46e907623809
k8s.io/api => k8s.io/api v0.0.0-20230712211402-283b145385c0
k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20230712210707-c9b3b3a37189
k8s.io/apiserver => k8s.io/apiserver v0.0.0-20230713204150-36de07c4e7c3
k8s.io/client-go => k8s.io/client-go v0.0.0-20230711210844-560efb3b8995
k8s.io/cloud-provider => k8s.io/cloud-provider v0.0.0-20230707004032-514dc948dd52
k8s.io/component-base => k8s.io/component-base v0.0.0-20230713173548-ea35e2fd8622
k8s.io/component-helpers => k8s.io/component-helpers v0.0.0-20230619011650-92f9e3a8b815
k8s.io/controller-manager => k8s.io/controller-manager v0.0.0-20230619014205-11f279f1267a
k8s.io/kms => k8s.io/kms v0.0.0-20230619011758-484bb0d20287
k8s.io/controller-manager => k8s.io/controller-manager v0.0.0-20230622133526-f45e59bf2537
k8s.io/kms => k8s.io/kms v0.0.0-20230706235007-2273d4f89020
)

18
go.sum
View File

@ -77,15 +77,15 @@ gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
k8s.io/api v0.0.0-20230619010547-366128ee4928 h1:VtT+X4fQgmod0SJBrnSvLvzH8Ny1UhE+mFEnKqRfdVk=
k8s.io/apimachinery v0.0.0-20230619010326-2680937a8b38 h1:QFnx11raNywb2+JooNi2fDxSUWG5NF2Awqvyj6af/xs=
k8s.io/apimachinery v0.0.0-20230619010326-2680937a8b38/go.mod h1:tAiIbF8KB8+Ri2DfUWwZGwNOThIwM0fhXLnOymriu+4=
k8s.io/cloud-provider v0.0.0-20230619014333-4f2ecbed4587 h1:E8y21GFYrdITG8ja4/ykxS3j+Lj2UwHtPqO6klDIPzg=
k8s.io/cloud-provider v0.0.0-20230619014333-4f2ecbed4587/go.mod h1:W00pPEGw1flHhMxfpnSGxGHtFkqR5iVUM10FnnHX+uw=
k8s.io/component-base v0.0.0-20230619011537-46e907623809 h1:PzAl1HFRxZnop84w9Nmmxi+1PwFxBmPLgG9/mPPs8l8=
k8s.io/component-base v0.0.0-20230619011537-46e907623809/go.mod h1:oAWyW8i5ISHm/vwlYzkUSs5Nf7VdfGDMhiuLG4MC+uo=
k8s.io/controller-manager v0.0.0-20230619014205-11f279f1267a h1:KgwdTibo2Yog5sHs4LjnmQeTi9V9bxPZ9go652W3JZ4=
k8s.io/controller-manager v0.0.0-20230619014205-11f279f1267a/go.mod h1:r55+Mh+mRkvJC46jGU4ACAVLZ2hInGb1u85eSHNkSTE=
k8s.io/api v0.0.0-20230712211402-283b145385c0 h1:ZYimmBg4vO3b4K7TLYlznRgOsYsmugKun6VKvhlvew4=
k8s.io/apimachinery v0.0.0-20230712210707-c9b3b3a37189 h1:y3e8tHyqhvrwV/79166VbMgSTy6i9/z8Tk4VrKZc8dg=
k8s.io/apimachinery v0.0.0-20230712210707-c9b3b3a37189/go.mod h1:tAiIbF8KB8+Ri2DfUWwZGwNOThIwM0fhXLnOymriu+4=
k8s.io/cloud-provider v0.0.0-20230707004032-514dc948dd52 h1:7wjDn4BWfeUK+4yeNV0GfF1wFzMMc81sB/8lR6rQh8Y=
k8s.io/cloud-provider v0.0.0-20230707004032-514dc948dd52/go.mod h1:VU+NI+b+Me54xevR8+E+DDqODaapU3JLW8z2usBrw3U=
k8s.io/component-base v0.0.0-20230713173548-ea35e2fd8622 h1:BXv43X6tUb54xT61nujFqdk+k9IczwmvzozlpuJ8fDg=
k8s.io/component-base v0.0.0-20230713173548-ea35e2fd8622/go.mod h1:8ZC41kwK0dvUNquR5Dhcexss/5xGONDrQ37ZjY0pmmE=
k8s.io/controller-manager v0.0.0-20230622133526-f45e59bf2537 h1:o02IkFVBqsgXdSX/S9N9YtQcrWA6i5IWPfYCnrKIvv8=
k8s.io/controller-manager v0.0.0-20230622133526-f45e59bf2537/go.mod h1:hryC2vGC/rb6x/PvWdXOb6jJ6N2JwizRzI3ij5XsK6c=
k8s.io/klog/v2 v2.100.1 h1:7WCHKK6K8fNhTqfBhISHQ97KrnJNFZMcQvKp7gP/tmg=
k8s.io/klog/v2 v2.100.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
k8s.io/utils v0.0.0-20230406110748-d93618cff8a2 h1:qY1Ad8PODbnymg2pRbkyMT/ylpTrCM8P2RJ0yroCyIk=