github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
115,151 Commits 1 Branch 31 Tags
main
Commit Graph

4046 Commits

Author SHA1 Message Date
Mohammad Zuber Khan
f86acbad68 add superuser fallback to authorizer (#111558) 
* add superuser fallback to authorizer

* change the order of authorizers

* change the order of authorizers

* remove the duplicate superuser authorizer

* add integration test for superuser permissions
 2022-10-18 18:57:00 -07:00
David Ashpole
00bcd6cf01 Fix bug in which APIServerTracing did not work with some egress selectors 2022-10-18 19:41:07 +00:00
Antonio Ojea
bea96abac3 test dualstack services with assigned clusterIPs 2022-10-14 15:53:49 +00:00
Kubernetes Prow Robot
9bedff1147 Merge pull request #112948 from mimowo/112873-fix-job-finished-metric 
Fix the job finished metric issue due to the final job status update occasionally failing
 2022-10-14 06:24:57 -07:00
Oscar Utbult
e4f776f230 grammar: replace all occurrences of "the the" with "the" 2022-10-14 09:03:14 +02:00
Kubernetes Prow Robot
01019770cf Merge pull request #112789 from enj/enj/r/kms_load_once_v2 
Load encryption config once (second approach)
 2022-10-13 11:25:02 -07:00
Michal Wozniak
b64e5b2d15 Fix the occasional double-counting job_finished_total metric 
The reason for the issue is that the metrics were bumped before the
final job status update. In case the update failed the path was
repeated by the next syncJob leading to double-counting of the metrics.

The solution is to delay recording metrics and broadcasting events
after the job status update succeeds.
 2022-10-13 17:23:03 +02:00
Monis Khan
f507bc2553 Load encryption config once 
This change updates the API server code to load the encryption
config once at start up instead of multiple times.  Previously the
code would set up the storage transformers and the etcd healthz
checks in separate parse steps.  This is problematic for KMS v2 key
ID based staleness checks which need to be able to assert that the
API server has a single view into the KMS plugin's current key ID.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-10-13 10:52:29 -04:00
Kubernetes Prow Robot
525280d285 Merge pull request #112643 from SergeyKanzhelev/removeDynamicKubeletConfig 
remove DynamicKubeletConfig feature gate from the code
 2022-10-12 01:33:00 -07:00
Gunju Kim
2ee024a4df Update daemonSet status even if syncDaemonSet fails 2022-10-11 22:55:50 +09:00
Tim Hockin
70c1c795e8 Remove generated file rules in make 
This is all covered by update-codegen.sh now.

The old `make generated_files` rule still exists, but just prints a
warning.
 2022-10-04 08:50:30 -07:00
Kubernetes Prow Robot
a6bee7d5fc Merge pull request #112575 from tkashem/apf-fix-reset-fields-test 
apf: don't omit flowschemas from reset fields test
 2022-10-03 13:20:13 -07:00
Kubernetes Prow Robot
9720af2ba3 Merge pull request #112306 from tkashem/v1beta3 
add v1beta3 for Priority And Fairness
 2022-10-03 10:06:14 -07:00
kerthcet
55dcde737d typo fixed 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-09-29 18:08:15 +08:00
Jordan Liggitt
2d397e8530 Avoid following redirects in aggregator availability controller 2022-09-28 10:56:21 -04:00
Wojciech Tyczyński
57c95fbfa1 Lock ServerSideApply feature to true 2022-09-27 13:48:28 +02:00
Kubernetes Prow Robot
24377fa7a1 Merge pull request #112703 from enj/enj/r/kms_cleanup 
encryption config: no-op refactor to prepare for single loading
 2022-09-26 14:50:26 -07:00
Monis Khan
db850931a8 encryption config: no-op refactor to prepare for single loading 
Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-09-26 15:35:03 -04:00
Abu Kashem
66fc0d7037 rename assuredConcurrencyShares for flowcontrol v1beta3 2022-09-26 15:34:10 -04:00
Anish Ramasekar
c3794e2377 Add staging directory for kms 
- Moves kms proto apis to the staging repo
- Updates generate and verify kms proto scripts to check staging repo

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-09-26 19:23:35 +00:00
Sergey Kanzhelev
39e49a91d7 remove DynamicKubeletConfig feature gate from the code 2022-09-23 23:14:19 +00:00
Kubernetes Prow Robot
a2dc82f0b8 Merge pull request #112590 from liggitt/authorizer_config 
improve integration test customization of authn/authz
 2022-09-22 09:41:04 -07:00
Abu Kashem
6edc251686 apiserver: update apf tests to use v1beta3 2022-09-21 18:54:20 -04:00
Abu Kashem
e1a764d635 apiserver: enable v1beta3 for apf 2022-09-21 18:54:19 -04:00
Jordan Liggitt
93ae6b1fb8 Make serviceaccount integation tests coexist with default API server config 2022-09-21 12:42:50 -04:00
Jordan Liggitt
6473f8c7e3 Make controlplane integation tests coexist with default API server config 2022-09-21 12:42:49 -04:00
Jordan Liggitt
e5c4c9b2c0 Make auth integation tests coexist with default API server config 2022-09-21 12:42:49 -04:00
Kubernetes Prow Robot
6dbec8e255 Merge pull request #112120 from pohly/klog-flag-removal 
logs: remove deprecated klog flags
 2022-09-21 00:44:53 -07:00
Kubernetes Prow Robot
6820a383be Merge pull request #112545 from dims/update-etcd-3.5.5-and-all-otel-related-to-latest 
Update etcd 3.5.5 and all otel related libraries to newer versions
 2022-09-19 19:15:31 -07:00
Kubernetes Prow Robot
59c21a2515 Merge pull request #112474 from liggitt/concurrency-cleanup 
Simplify P&F concurrency test
 2022-09-19 13:17:44 -07:00
Abu Kashem
aa04af3f5c apf: don't omit flowschemas from reset fields test 2022-09-19 13:46:38 -04:00
Jordan Liggitt
9cfc128b8e Simplify P&F concurrency test 2022-09-19 08:26:29 -04:00
Michal Wozniak
e11039b6f5 Cleanup the TestEvictionForNoExecuteTaintAddedByUser test 2022-09-19 10:07:54 +02:00
Michal Wozniak
ca90621b2a Simplify the integration test for node lifecycle manager 2022-09-19 10:07:35 +02:00
Davanum Srinivas
a1635fa702 fix how we look for our request 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-09-18 17:21:19 -04:00
Davanum Srinivas
3eaca7cf51 update code to use newer otel api 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-09-17 21:48:20 -04:00
Kubernetes Prow Robot
3e5e5cc7ee Merge pull request #112357 from SataQiu/deprecated-20220907 
kube-scheduler: add taints filtering logic consistent with TaintToleration plugin for PodTopologySpread plugin
 2022-09-16 18:14:27 -07:00
m.nabokikh
00dfba473b Add auth API to get self subject attributes 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-09-14 18:00:26 +02:00
SataQiu
bc9c494319 kube-scheduler: add taints filtering logic consistent with TaintToleration plugin for PodTopologySpread plugin 
Signed-off-by: SataQiu <shidaqiu2018@gmail.com>
 2022-09-10 09:04:30 +08:00
Kante Yin
096dafe757 Feat: unify the status handle when return in bindingCycle (#112103) 
Signed-off-by: kerthcet <kerthcet@gmail.com>

Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-09-09 08:31:23 -07:00
Kubernetes Prow Robot
a7936658ba Merge pull request #112193 from jindijamie/master 
Add an option for aggregator
 2022-09-08 17:21:24 -07:00
Kubernetes Prow Robot
cc4b7dc3c5 Merge pull request #111986 from enj/enj/i/transformer_leak 
kms: fix go routine leak in gRPC connection
 2022-09-08 09:49:46 -07:00
Di Jin
6d78a25374 Add integration test 
Add integration test to ensure aggregator is not forwarding redirect response
 2022-09-08 09:36:12 -07:00
Monis Khan
4e68e9b5ad kms: fix go routine leak in gRPC connection 
Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-09-08 11:46:57 -04:00
Kubernetes Prow Robot
a488f4b95c Merge pull request #107515 from MikeSpreitzer/explain-reset-fields-failure 
Make TestApplyResetFields exhibit surprising object
 2022-09-07 07:14:37 -07:00
Patrick Ohly
41619ace15 stop using deprecated klog flags 
Some scripts and tools still relied on the deprecated flags, the ones
which are about to be removed.

This is intentionally not a complete removal of all those flags in the entire
repo. This would lead to much more code churn also in places where commands
still accept the flags because they use klog directly.
 2022-09-04 21:02:43 +02:00
SataQiu
f09e136aca cloud-provider: remove deprecated insecure serving from Config 2022-09-01 10:54:23 +08:00
SataQiu
1ae5237a66 controller-manager: remove deprecated insecure serving from Config 2022-08-31 17:32:21 +08:00
Kubernetes Prow Robot
4f66f8c408 Merge pull request #112069 from enj/enj/t/aggregated_apis 
Expand aggregated API server integration test to include CRUD
 2022-08-30 08:52:55 -07:00
Monis Khan
ec283e526b Expand aggregated API server integration test to include CRUD 
This change updates TestAggregatedAPIServer and the related test
server wiring to exercise the full network path between the Kube API
server and the aggregated API server.  We now assert that the wardle
API service and Kube API server discovery endpoints are fully healthy.
CRUD operations are performed through the Kube API server to the
wardle API server.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-08-30 10:44:01 -04:00