Commit Graph

2950 Commits

Author SHA1 Message Date
Pranshu Srivastava eb80c09755
enhancement: add `livez` endpoint
Add a `livez` endpoint to identify network outages. This helps in
restarting the binary if such as case is observed.

Signed-off-by: Pranshu Srivastava <rexagod@gmail.com>

Signed-off-by: Pranshu Srivastava <rexagod@gmail.com>
2024-06-25 14:35:16 +05:30
Kubernetes Prow Robot 086af0cbaf
Merge pull request #2398 from ricardoapl/publish-openvex-on-release
ci: publish openvex on release
2024-06-18 07:32:39 -07:00
Kubernetes Prow Robot 2aa41eef9a
Merge pull request #2426 from kubernetes/dependabot/github_actions/kubernetes-sigs/release-actions-0.2.0
build(deps): Bump kubernetes-sigs/release-actions from 0.1.4 to 0.2.0
2024-06-18 07:28:38 -07:00
Ricardo Lopes 4269ab10ab Apply consistent format across workflow files
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-06-18 09:16:02 +01:00
Ricardo Lopes fba4a75753 Fix permissions for uploading to release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-06-18 09:16:02 +01:00
Ricardo Lopes 2bd0b60b5a Avoid trigger OpenVEX on pre-release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-06-18 09:16:02 +01:00
Ricardo Lopes 9dfddac86a Publish OpenVEX data on release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-06-18 09:16:02 +01:00
dependabot[bot] 5ac3eff94b
build(deps): Bump kubernetes-sigs/release-actions from 0.1.4 to 0.2.0
Bumps [kubernetes-sigs/release-actions](https://github.com/kubernetes-sigs/release-actions) from 0.1.4 to 0.2.0.
- [Release notes](https://github.com/kubernetes-sigs/release-actions/releases)
- [Changelog](https://github.com/kubernetes-sigs/release-actions/blob/main/RELEASE.md)
- [Commits](841d76a188...2f8b9ec22a)

---
updated-dependencies:
- dependency-name: kubernetes-sigs/release-actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 10:26:19 +00:00
Kubernetes Prow Robot c99e26a229
Merge pull request #2425 from kubernetes/dependabot/github_actions/actions/checkout-4.1.7
build(deps): Bump actions/checkout from 4.1.3 to 4.1.7
2024-06-17 03:25:43 -07:00
Kubernetes Prow Robot f954f30419
Merge pull request #2423 from kubernetes/dependabot/go_modules/github.com/spf13/cobra-1.8.1
build(deps): Bump github.com/spf13/cobra from 1.8.0 to 1.8.1
2024-06-17 03:23:28 -07:00
Kubernetes Prow Robot 124117ff27
Merge pull request #2412 from grafana/fix/add-server-timeouts
fix(server): Add read and write timeouts
2024-06-17 03:21:13 -07:00
Kubernetes Prow Robot 5d387b0f89
Merge pull request #2422 from kubernetes/dependabot/go_modules/k8s-dependencies-8f95eb128b
build(deps): Bump the k8s-dependencies group with 6 updates
2024-06-17 03:18:53 -07:00
dependabot[bot] dba6d4d7e4
build(deps): Bump actions/checkout from 4.1.3 to 4.1.7
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.3 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.3...692973e3d937129bcbf40652eb9f2f61becf3332)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 09:41:29 +00:00
dependabot[bot] 9f61037781
build(deps): Bump github.com/spf13/cobra from 1.8.0 to 1.8.1
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 09:12:47 +00:00
dependabot[bot] 8760088b49
build(deps): Bump the k8s-dependencies group with 6 updates
Bumps the k8s-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.30.1` | `0.30.2` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.1` | `0.30.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.1` | `0.30.2` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.30.1` | `0.30.2` |
| [k8s.io/klog/v2](https://github.com/kubernetes/klog) | `2.120.1` | `2.130.0` |
| [k8s.io/sample-controller](https://github.com/kubernetes/sample-controller) | `0.30.1` | `0.30.2` |


Updates `k8s.io/api` from 0.30.1 to 0.30.2
- [Commits](https://github.com/kubernetes/api/compare/v0.30.1...v0.30.2)

Updates `k8s.io/apimachinery` from 0.30.1 to 0.30.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.1...v0.30.2)

Updates `k8s.io/client-go` from 0.30.1 to 0.30.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.1...v0.30.2)

Updates `k8s.io/component-base` from 0.30.1 to 0.30.2
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.1...v0.30.2)

Updates `k8s.io/klog/v2` from 2.120.1 to 2.130.0
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.120.1...v2.130.0)

Updates `k8s.io/sample-controller` from 0.30.1 to 0.30.2
- [Commits](https://github.com/kubernetes/sample-controller/compare/v0.30.1...v0.30.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/sample-controller
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-17 09:12:42 +00:00
Kubernetes Prow Robot 89f0db6dd2
Merge pull request #2395 from ricardoapl/fix-github-token-permissions
ci: least privileged GITHUB_TOKEN permissions
2024-06-14 03:13:26 -07:00
pokom cd460fef29 Update cli-arguments.md 2024-06-11 06:48:22 -04:00
Kubernetes Prow Robot 669b5018f2
Merge pull request #2381 from ricardoapl/generate-sbom-workflow
ci: generate sbom on release
2024-06-10 09:01:52 -07:00
Kubernetes Prow Robot 3a81bf3528
Merge pull request #2416 from kubernetes/dependabot/go_modules/github.com/prometheus/common-0.54.0
build(deps): Bump github.com/prometheus/common from 0.53.0 to 0.54.0
2024-06-10 04:17:55 -07:00
dependabot[bot] 698f76a8d5
build(deps): Bump github.com/prometheus/common from 0.53.0 to 0.54.0
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.53.0 to 0.54.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](https://github.com/prometheus/common/compare/v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-10 10:01:12 +00:00
Mark ee3913967e
Update docs/developer/cli-arguments.md
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2024-06-07 14:13:44 -04:00
pokom 28dbd26540 Create variables for default values of new flags 2024-06-07 13:14:57 -04:00
pokom b4f032ecfd Add additional flags for IdleTimeouts 2024-06-06 13:11:00 -04:00
pokom e97933bcb9 fix(server): Add read and write timeouts
There are a few documented scenarios where `kube-state-metrics` will
lock up(#995, #1028). I believe a much simpler solution to ensure
`kube-state-metrics` doesn't lock up and require a restart to server
`/metrics` requests is to add default read and write timeouts and to
allow them to be configurable. At Grafana, we've experienced a few
scenarios where `kube-state-metrics` running in larger clusters falls
behind and starts getting scraped multiple times. When this occurs,
`kube-state-metrics` becomes completely unresponsive and requires a
reboot. This is somewhat easily reproduceable(I'll provide a script in
an issue) and causes other critical workloads(KEDA, VPA) to fail in
weird ways.

Adds two flags:
- `server-read-timeout`
- `server-write-timeout`

Updates the metrics http server to set the `ReadTimeout` and
`WriteTimeout` to the configured values.
2024-06-05 14:18:43 -04:00
Kubernetes Prow Robot 7995d5fd23
Merge pull request #2402 from ricardoapl/add-dependencies-policy
docs: add policy for consuming and upgrading dependencies
2024-06-04 09:33:40 -07:00
Kubernetes Prow Robot f28abc9258
Merge pull request #2347 from pkoutsovasilis/pkoutsovasilis/autosharding_field_selector
fix(pod autosharding): transition from labelselector to fieldselector
2024-06-04 05:23:23 -07:00
Kubernetes Prow Robot a4ddfe6ed9
Merge pull request #2410 from kubernetes/dependabot/go_modules/github.com/spf13/viper-1.19.0
build(deps): Bump github.com/spf13/viper from 1.18.2 to 1.19.0
2024-06-03 03:39:35 -07:00
Kubernetes Prow Robot ab03a29d46
Merge pull request #2409 from kubernetes/dependabot/go_modules/tools/github.com/hairyhenderson/gomplate/v3-3.11.8
build(deps): Bump github.com/hairyhenderson/gomplate/v3 from 3.11.7 to 3.11.8 in /tools
2024-06-03 03:37:16 -07:00
dependabot[bot] c38f24b2aa
build(deps): Bump github.com/spf13/viper from 1.18.2 to 1.19.0
Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](https://github.com/spf13/viper/compare/v1.18.2...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-03 09:58:53 +00:00
dependabot[bot] bb0a33c7a6
build(deps): Bump github.com/hairyhenderson/gomplate/v3 in /tools
Bumps [github.com/hairyhenderson/gomplate/v3](https://github.com/hairyhenderson/gomplate) from 3.11.7 to 3.11.8.
- [Release notes](https://github.com/hairyhenderson/gomplate/releases)
- [Changelog](https://github.com/hairyhenderson/gomplate/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hairyhenderson/gomplate/compare/v3.11.7...v3.11.8)

---
updated-dependencies:
- dependency-name: github.com/hairyhenderson/gomplate/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-03 09:44:31 +00:00
Ricardo Lopes 9917008f7e docs: lint markdown
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-05-28 10:31:31 +01:00
Ricardo Lopes 8c75a8b589 docs: add policy for consuming and upgrading dependencies
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-05-27 11:52:06 +01:00
Kubernetes Prow Robot 85762cdf97
Merge pull request #2401 from kubernetes/dependabot/github_actions/amannn/action-semantic-pull-request-5.5.2
build(deps): Bump amannn/action-semantic-pull-request from 5.4.0 to 5.5.2
2024-05-27 03:35:54 -07:00
dependabot[bot] d01fb796da
build(deps): Bump amannn/action-semantic-pull-request
Bumps [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) from 5.4.0 to 5.5.2.
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md)
- [Commits](e9fabac35e...cfb60706e1)

---
updated-dependencies:
- dependency-name: amannn/action-semantic-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-27 09:16:49 +00:00
Kubernetes Prow Robot d8dd6e0704
Merge pull request #2396 from ricardoapl/pin-github-actions
chore: pin dependencies in GitHub Actions by hash
2024-05-24 07:55:10 -07:00
Ricardo Lopes b6697e5166 ci: rename asset to pass CLOMonitor checks
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-05-24 09:18:22 +01:00
Ricardo Lopes b983ed5f42 Pin dependencies in GitHub Actions by hash
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-05-22 17:14:24 +01:00
Ricardo Lopes 8867e6ece9 Restrict permissions for GITHUB_TOKEN
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-05-22 15:49:26 +01:00
Kubernetes Prow Robot 7caed2384c
Merge pull request #2394 from kubernetes/dependabot/go_modules/k8s-dependencies-ac34a464a8
build(deps): Bump the k8s-dependencies group with 5 updates
2024-05-20 04:17:27 -07:00
dependabot[bot] 2b2d1dc133
build(deps): Bump the k8s-dependencies group with 5 updates
Bumps the k8s-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.30.0` | `0.30.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.0` | `0.30.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.0` | `0.30.1` |
| [k8s.io/component-base](https://github.com/kubernetes/component-base) | `0.30.0` | `0.30.1` |
| [k8s.io/sample-controller](https://github.com/kubernetes/sample-controller) | `0.30.0` | `0.30.1` |


Updates `k8s.io/api` from 0.30.0 to 0.30.1
- [Commits](https://github.com/kubernetes/api/compare/v0.30.0...v0.30.1)

Updates `k8s.io/apimachinery` from 0.30.0 to 0.30.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.0...v0.30.1)

Updates `k8s.io/client-go` from 0.30.0 to 0.30.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.0...v0.30.1)

Updates `k8s.io/component-base` from 0.30.0 to 0.30.1
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.0...v0.30.1)

Updates `k8s.io/sample-controller` from 0.30.0 to 0.30.1
- [Commits](https://github.com/kubernetes/sample-controller/compare/v0.30.0...v0.30.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/sample-controller
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-20 09:15:39 +00:00
Kubernetes Prow Robot fa083b53d0
Merge pull request #2385 from jwilder/jwilder/cves
build: bump deps to fix CVEs
2024-05-13 08:26:30 -07:00
Kubernetes Prow Robot 63a7bc9bc7
Merge pull request #2389 from kubernetes/dependabot/go_modules/github.com/prometheus/client_golang-1.19.1
build(deps): Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1
2024-05-13 03:04:58 -07:00
dependabot[bot] 93e8d99a7d
build(deps): Bump github.com/prometheus/client_golang
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-13 09:07:30 +00:00
Jason Wilder a5e168f269 build: bump deps to fix CVEs
Updates all deps flagging for fixed CVEs and updates go to 1.22.2.

Fixes CVE-2022-21698 CVE-2022-46146 CVE-2021-43565 CVE-2022-27191
    CVE-2023-48795 CVE-2022-27664 CVE-2022-41723 CVE-2023-39325
    CVE-2023-3978 CVE-2023-44487 CVE-2023-45288 CVE-2022-29526
    CVE-2021-38561 CVE-2022-32149 CVE-2024-24786 CVE-2022-28948
2024-05-02 14:38:13 -06:00
Kubernetes Prow Robot 2b8eea4e27
Merge pull request #2379 from mrueg/k8s-1.30.0
feat: Support k8s 1.30
2024-05-02 11:47:13 -07:00
Ricardo Lopes 2a23510019 ci: trigger on release but not on pre-release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-04-25 16:22:16 +01:00
Ricardo Lopes 7fc6c5dd2e ci: fetch tag name on release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-04-25 15:44:33 +01:00
Ricardo Lopes a0f5ebef42 ci: generate sbom on release
Signed-off-by: Ricardo Lopes <ricardoapl.dev@gmail.com>
2024-04-24 17:17:59 +01:00
Kubernetes Prow Robot 9e6e70d328
Merge pull request #2370 from ricardoapl/kube_persistentvolume_volume_mode
feat: add kube_persistentvolume_volume_mode metric
2024-04-22 14:23:52 -07:00
Manuel Rüger 6d8f7573aa feat: Support k8s 1.30 2024-04-22 20:16:33 +02:00