github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
119,874 Commits 1 Branch 31 Tags
22cb31467d20e503a43255cd1868e0885f67f5e8
Commit Graph

19891 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a8f6ea2420 Merge pull request #121927 from alexanderConstantinescu/fix-flaky-TestSlowNodeSync 
`TestSlowNodeSync`: attempt fixing flake by allowing informer cache to get populated
 2023-11-29 05:23:20 +01:00
Jeremy Rickard
f042994cb0 releng: update publishing bot rules for 1.29 
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
 2023-11-21 18:05:46 -07:00
Patrick Ohly
af34f62170 code-generator: fix invalid replace of klog 
The replace statement must have come from a experimental draft PR. It wasn't
meant to be merged as part of 878d037d3b.
 2023-11-20 15:51:04 +01:00
Alexander Constantinescu
dd6e286a1a TestSlowNodeSync: fix flake by allowing informer cache to get populated 2023-11-17 15:21:16 +01:00
Kubernetes Prow Robot
8509ab82b9 Merge pull request #121851 from andyzhangx/fix-smb-IsCorruptedMnt 
fix: statle smb mount issue when smb file share is deleted and then unmount
 2023-11-16 17:02:35 +01:00
Kubernetes Prow Robot
620bc81d97 Merge pull request #121881 from cji/5528 
Use golang library instead of mklink
 2023-11-14 23:02:08 +01:00
Kubernetes Prow Robot
1bb2773153 Merge pull request #121870 from cpanato/rulesup 
Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
 2023-11-14 20:05:10 +01:00
cpanato
8c68aa656b Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-14 18:56:52 +01:00
Kubernetes Prow Robot
77d72a30e1 Merge pull request #121091 from alexanderConstantinescu/kccm-service-sync-fix 
KCCM: fix transient node addition + removal while syncing load balancers
 2023-11-14 17:17:10 +01:00
Kubernetes Prow Robot
68e3cedce2 Merge pull request #121822 from ritazh/webhookauthz-benchmark 
[StructuredAuthz] Webhookauthz benchmark
 2023-11-14 14:50:37 +01:00
Rita Zhang
7c5dfceff8 add false matchCondition benchmark 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-13 09:22:24 -08:00
Alexander Constantinescu
f9ab24bf48 Refine test case 2023-11-13 17:54:22 +01:00
andyzhangx
172f680326 fix: smb file share unavailable issue when it's deleted 2023-11-13 05:04:34 +00:00
Rita Zhang
11cdb8fd01 split compile and eval 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 16:37:10 -08:00
Rita Zhang
fe53db0dbd authz: add benchmark for webhook authorizer 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 15:38:11 -08:00
cpanato
9e5b8402bb update go.mod 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 09:32:17 -06:00
cpanato
88e124ecaa [go] Bump images, dependencies and versions to go 1.21.4 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 08:25:30 -06:00
Kubernetes Prow Robot
e4b74dd12f Merge pull request #121765 from mimowo/ready-pods-stable-api 
Fix API comment for the Job ready field
 2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot
0193fae084 Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api 
Fix API comment for the FailIndex Job pod failure policy action
 2023-11-07 23:52:03 +01:00
HirazawaUi
b12db6d9b5 fix test store delete collection function failed 2023-11-08 00:34:53 +08:00
Michal Wozniak
9d5b2a4476 Fix API comment for the Job ready field 2023-11-07 07:38:51 +01:00
Michal Wozniak
1395e2e02c Fix API comment for the FailIndex Job pod failure policy action 2023-11-06 17:47:13 +01:00
Kubernetes Prow Robot
22866ca5eb Merge pull request #121034 from alexzielenski/apiserver/apiextensions/ratcheting-oldself-create 
KEP-4008: CRDValidationRatcheting: Add support for optional `oldSelf`
 2023-11-04 02:57:46 +01:00
Alexander Zielenski
42a70cdbd1 codegen 2023-11-03 15:34:13 -07:00
Alexander Zielenski
bba0c9a81e validate defaults across an update from nil to ensure create ratcheting rules work 2023-11-03 15:34:13 -07:00
Alexander Zielenski
eef1515815 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 2023-11-03 15:34:13 -07:00
Alexander Zielenski
5edb27aa38 ratcheting-cel: add optionalOldSelf field 2023-11-03 15:23:23 -07:00
Taahir Ahmed
e83baddbb1 LRUExpireCache: Allow removing multiple keys under lock 2023-11-03 11:40:48 -07:00
Taahir Ahmed
599fdb7add Regenerate for ClusterTrustBundlePEM projected volume API 2023-11-03 11:40:48 -07:00
Taahir Ahmed
ecfdc8fda5 Define ClusterTrustBundlePEM projected volume 
This commit defines the ClusterTrustBundlePEM projected volume types.
These types have been renamed from the KEP (PEMTrustAnchors) in order to
leave open the possibility of a similar projection drawing from a
yet-to-exist namespaced-scoped TrustBundle object, which came up during
KEP discussion.

* Add the projection field to internal and v1 APIs.
* Add validation to ensure that usages of the project must specify a
  name and path.
* Add TODO covering admission control to forbid mirror pods from using
  the projection.

Part of KEP-3257.
 2023-11-03 11:40:48 -07:00
Taahir Ahmed
0fd1362782 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2023-11-03 11:40:48 -07:00
Alexander Constantinescu
9ae1fc366b Store nodes before calling EnsureLoadBalancer 
I am having difficulties convincing myself if this is better or worse.
I didn't implement this originally because I didn't want to store nodes that
we weren't sure we've configured. However: if EnsureLoadBalancer fails we
should retry the call from the service controller. Doing it like this might
save us one update call from the node controller side for calls which have
already started executing from the service controller's side...is this really
that expensive at this point though? Is it really that dangerous to not do
either, given that we retry failed calls? Ahhhhh!!! Opinions, please! Help, please!
 2023-11-03 11:42:53 +01:00
Alexander Constantinescu
60338c79d7 KCCM: fix slow node sync + service update 2023-11-03 11:42:53 +01:00
Alexander Constantinescu
a8673fa5b4 KCCM: add test validating slow node sync issue 2023-11-03 11:42:53 +01:00
Kubernetes Prow Robot
c3eebb233d Merge pull request #121709 from aramase/aramase/f/authn_user_info_fix 
[StructuredAuthn] Ensure empty fields of user object are accessible by CEL
 2023-11-03 03:16:04 +01:00
Kubernetes Prow Robot
fb9c94b3a5 Merge pull request #121705 from liggitt/authz-config-webhook-test 
Add multi-webhook integration test
 2023-11-03 01:29:52 +01:00
Anish Ramasekar
b693f09d54 [StructuredAuthn] Ensure empty fields of user object are accessible by 
CEL

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-11-02 22:53:06 +00:00
Jordan Liggitt
44d89c8cf8 Include empty string attributes for CEL authz evaluation 2023-11-02 16:56:52 -04:00
Jordan Liggitt
2e2f51a441 Plumb failure policy from config to webhook construction 2023-11-02 16:56:51 -04:00
Jordan Liggitt
a000af25ff Require match condition version only if matchConditions are specified 2023-11-02 13:54:39 -04:00
Mohamed Omar Zaian
3c268b7524 etcd: Update to version 3.5.10 2023-11-02 10:30:41 +01:00
Kubernetes Prow Robot
227d1b2357 Merge pull request #119762 from AxeZhan/PollUntilContextCancel 
wait.PollUntilContextCancel immediately executes condition once
 2023-11-02 05:40:03 +01:00
James Sturtevant
2d9128116b Use golang library instead of mklink 
Signed-off-by: James Sturtevant <jstur@microsoft.com>
 2023-11-01 22:30:12 +00:00
Alexander Zielenski
18adc30933 refactor: rename TransitionRule to UsesOldSelf 
not all rules that use OldSelf are transition rules, and this flag was used to check for oldSelf usage anyway, not specifically whether the rule was a transition rule
 2023-11-01 09:31:52 -07:00
Kubernetes Prow Robot
974735854b Merge pull request #121573 from tukwila/bump_etcd_v3.5.10 
bump etcd newest version: v3.5.10
 2023-11-01 15:33:13 +01:00
Patrick Ohly
878d037d3b dependencies: klog v2.110.1 
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378)
 2023-11-01 09:32:20 +01:00
guangli.bao
bc1df9e7da bump to newest etcd: v3.5.10 
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
 2023-11-01 11:59:31 +08:00
Humble Chirammal
3890546265 Update APIs and adjust tests 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-11-01 09:28:36 +05:30
Kubernetes Prow Robot
6abff7457e Merge pull request #116516 from aojea/servicecidr 
KEP-1880 Multiple ServiceCIDR ( and IPAddress allocation)
 2023-11-01 03:52:24 +01:00
Kubernetes Prow Robot
593a17d3b6 Merge pull request #121575 from apelisse/update-smd 
Update sigs.k8s.io/structured-merge-diff to v4.4.0
 2023-11-01 01:51:17 +01:00