Commit Graph

27 Commits

Author SHA1 Message Date
Monis Khan 5b2f02f6dc csr: add expirationSeconds field to control cert lifetime
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>

Kubernetes-commit: cd91e59f7c351fce47c064a5162c2cb79075159c
2021-06-25 22:08:10 -04:00
Marek Siarkowicz b433ee0148 Remove legacy metrics client from podautoscaler
Kubernetes-commit: 4ebc0c94a4e43116539fc588e259e9954cc11cfa
2020-04-22 20:07:26 +02:00
Andrew Sy Kim 25018199bf move service controller config to k8s.io/cloud-provider/controllers/service/config
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

Kubernetes-commit: b1e0decce19563fc6c9aa188105b7c03ab5ee358
2020-11-10 01:32:27 -05:00
Alay Patel 15e5114a51 update violation_exceptions.list and make generated
Kubernetes-commit: 38bb53555e8b48ffa70d3dd84c00eb7eac35e77a
2020-10-11 02:51:37 -04:00
cici37 a5e0b394fd Move CCM to staging k8s.io/cloud-provider
Kubernetes-commit: 9465d95ea69bb5ee140df605f0b7960d5ca0b758
2020-10-20 10:28:15 -07:00
cici37 a6b3b090e4 Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider.
Kubernetes-commit: ae8ce0d190eb07b7cc12096843932c7b4ff40f63
2020-10-08 01:55:39 -07:00
Matthew Cary d1dc775ba5 Adds filtering of hosts to DialContexts.
The provided DialContext wraps existing clients' DialContext in an attempt to
preserve any existing timeout configuration. In some cases, we may replace
infinite timeouts with golang defaults.

- scaleio: tcp connect/keepalive values changed from 0/15 to 30/30
- storageos: no change

Kubernetes-commit: f2e23afcf13fef805ad5341bd7a5625de5982d6c
2020-06-09 21:30:40 +00:00
David Eads b8ebe56032 generated
Kubernetes-commit: 1233a6f63ede98085e83daad67945067e04d911a
2020-05-11 08:49:33 -04:00
David Eads a64c0efcf0 allow setting different certificates for kube-controller-managed CSR signers
Kubernetes-commit: e88fecf26bf5a0738cf9ba197a0521c8fa81a39b
2020-05-06 16:02:31 -04:00
Rob Scott 0ec4be8283 Enabling the EndpointSliceMirroring controller, adding related config
Kubernetes-commit: e701cb020533d657850738e74df8b9147a3caef0
2020-06-26 16:17:22 -07:00
Maciej Borsz 4f8784b13a Implement simple endpoint slice batching
Kubernetes-commit: 49b11b5431d01cf9ac954b97cbec51e92d33c7f6
2020-03-02 21:00:06 +01:00
Anish Ramasekar 6401846ba5 Allow multiple node cidr masks in cm
update tests

add comment

amend var name

update comment

add check for empty slice

fix tests

fix mask size in test

review feedback

add ipv4 and ipv6 flag for mask sizes

add to violation exception list

remove import alias

run update-openapi-spec

review feedback

run update-bazel

review feedback

review feedback

Kubernetes-commit: 796faba4ac96db07194c4811585abe52fd682064
2019-07-09 14:47:01 -07:00
Jordan Liggitt bd4e323589 Switch debugger configuration fields to pointers
Kubernetes-commit: 81efef4695a0f80100a55c4ed29c907aa53803e4
2019-11-04 13:18:51 -05:00
Rob Scott d36241cc2d Adding EndpointSlice controller
Kubernetes-commit: 75f6c249235b40b24e9ea1efdb1ff81dd76a8d68
2019-07-30 15:42:01 -07:00
Khaled Henidak(Kal) 0934ae14bb phase 2: ipam filter secondary service cidr
Kubernetes-commit: 313a5c57347026055fdcfefcdd626a7ab3357f84
2019-08-19 20:53:18 +00:00
YueHonghui 9f42e95dd9 add flag concurrent-statefulset-syncs to kube-controller-manager (#79169)
* add flag `concurrent-statefulset-syncs` to set number of concurrent workers for statefulset controller

* change default value of ConcurrentStatefulSetSyncs from 1 to 5

* 1. fix doc comment of statefulset config types.go
2. add missing deps k8s.io/kubernetes/pkg/controller/statefulset/config

* add missing dep k8s.io/kubernetes/pkg/controller/statefulset/config/v1alpha1

* updated bazel BUILD files

* update kube-controller-manager options testcase

* fix codegen

* fix golint error

* fix testcase

Kubernetes-commit: d29f1944746f2453f48fefe6a4ae6aa626acef29
2019-08-01 13:36:14 +08:00
Maciej Borsz 0ff8dccd56 Autogenerated files
Kubernetes-commit: d96f24262d5e75fe6911ff1b4105d434ea54538d
2019-07-24 11:01:57 +02:00
Maciej Borsz db64c761fc Add simple batching to endpoints controller
Kubernetes-commit: 2fae3cbcfe82156dada603158f657b25fb3494eb
2019-07-24 11:01:42 +02:00
Roy Lenferink b896f92bc1 Updated OWNERS files to include link to docs
Kubernetes-commit: b43c04452f3b563473b5c2a765d4ac18cc0ff58f
2019-01-30 20:05:00 +01:00
Lucas Käldström cf53619e0c Updated references from k8s.io/{apiserver,apimachinery} to the new k8s.io/component-base repo. Co-authored-by @Klaven
Kubernetes-commit: 0140c82c16ebd87a771393a4d39f47435b40c12d
2019-01-06 14:01:26 +02:00
Jordan Liggitt ca466fe0b0 Update API-related owners files
Kubernetes-commit: 8c20bdaf4661f8764c7a7f2e42674aa6a9bf5d70
2018-10-30 17:05:08 -04:00
Lucas Käldström 2f5cf004fe Standardize componentconfig code/comment patterns
Kubernetes-commit: 83d53ea1c2aeda3619c3aafeb9cf7e50c124058e
2018-09-06 13:42:02 +03:00
Janet Kuo a8d03f8010 Autogen
make clean && make generated_files

Kubernetes-commit: 13b76d5fb4eb680a78eb9760f8bf0b2dd4d75d9c
2018-09-04 11:24:24 -07:00
Janet Kuo 2c92bd60c2 Make number of workers configurable
Kubernetes-commit: cbdc9b671f33b0f0679e790cc462b25d1476a3af
2018-08-14 15:31:32 -07:00
stewart-yu b26487f065 [kube-controller-manager] auto-generated file
Kubernetes-commit: cef2ab756cc69415ef4af741da1b669c9a612ad2
2018-09-04 13:39:13 +08:00
stewart-yu 8d7e64fff8 [kube-controller-manager] create package to hold kube-controller-manager component api
Kubernetes-commit: 1c6c45563f4fb959de2880cd57e490ba5b921766
2018-09-04 19:02:08 +08:00
stewart-yu b18b7e2ada [kube-controller-manager] just only remove struct and default about KubeControllerManagerConfiguration from pkg/apis/componentconfig
Kubernetes-commit: be4a437e71f11f5d2467ae515a2487a58b9e4ecb
2018-09-04 17:57:13 +08:00