Dr. Stefan Schimanski
8083d0d22e
pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver
2023-06-26 21:50:38 +02:00
Dr. Stefan Schimanski
764da8a01d
FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
2023-06-26 21:50:38 +02:00
Dr. Stefan Schimanski
1b3779baa0
MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
2023-06-26 21:50:37 +02:00
Dr. Stefan Schimanski
77cf37ee54
STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane
2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski
7961812bed
STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane
2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski
43be9c3a0a
MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package
2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski
f7d4e90b5c
MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane
2023-06-07 10:05:43 +03:00
Dr. Stefan Schimanski
e9e4acb1dd
k8s.io/apiserver: remove skewed completion from EtcdOptions
2023-06-06 08:32:34 +03:00
Dr. Stefan Schimanski
f351c6d1ec
k8s.io/apiserver: apply storage object count tracker implicitly
2023-06-02 20:24:06 +02:00
Shihang Zhang
182cd425d3
graduate LegacyServiceAccountTokenTracking to GA
2023-05-19 10:33:34 -07:00
Jordan Liggitt
1daf74d25c
Initialize data if nil
2023-05-16 17:51:26 -04:00
Joe Betz
f0f92853ad
Add api-machinery TL owners permissions for jpbetz
2023-05-15 11:09:54 -04:00
Daniel Smith
1ffe3f467e
lavalamp is taking a long break
2023-05-11 16:43:38 +00:00
Kubernetes Prow Robot
a9b08f4cc2
Merge pull request #117642 from carlory/fix-001
...
remove ability to re-enable serving deprecated node.k8s.io/v1beta1 types
2023-05-09 09:35:56 -07:00
Kubernetes Prow Robot
78833e1b33
Merge pull request #117713 from flant/ssr-ga
...
KEP-3325: Promote SelfSubjectReview to GA
2023-05-03 08:54:24 -07:00
carlory
e7396e3551
remove ability to re-enable serving deprecated versions of the runtimeclasses kind
2023-05-02 22:40:26 +08:00
m.nabokikh
40de26dcff
KEP-3325: Promote SelfSubjectReview to GA
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2023-05-02 14:50:40 +02:00
Alexander Zielenski
ffb9c076d7
add OpenAPIV3 config to tests and server options
2023-05-01 13:18:44 -07:00
Stephen Kitt
94410ee807
api-machinery: replace intstr.FromInt with intstr.FromInt32
...
This touches cases where FromInt() is used on numeric constants, or
values which are already int32s, or int variables which are defined
close by and can be changed to int32s with little impact.
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2023-05-01 09:16:27 +02:00
carlory
da922f0af6
Remove ability to re-enable serving deprecated discoveryv1beta1 APIs
2023-04-30 19:21:46 +08:00
carlory
944a4cd311
Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs
2023-04-29 16:51:48 +08:00
Kubernetes Prow Robot
4ca7bcec24
Merge pull request #117665 from carlory/fix-007
...
Remove ability to re-enable serving deprecated eventv1beta1 APIs
2023-04-28 11:08:27 -07:00
Kubernetes Prow Robot
f2073fff6c
Merge pull request #117662 from carlory/fix-005
...
Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
2023-04-28 11:08:15 -07:00
Kubernetes Prow Robot
f66e1a3386
Merge pull request #116685 from czybjtu/fix_lease_remove_endpoints
...
Remove last endpoint for kubernetes Service during graceful shutdown of final kube-apiserver
2023-04-28 06:02:16 -07:00
carlory
f81b49d873
Remove ability to re-enable serving deprecated eventv1beta1 APIs
2023-04-28 14:58:59 +08:00
carlory
48d01d6d9b
Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
2023-04-28 14:08:31 +08:00
Hao Ruan
c4e1b01416
replace spew methods with dump methods
2023-04-14 08:05:53 +08:00
Tim Hockin
bc302fa414
Replace uses of ObjectReflectDiff with cmp.Diff
...
ObjectReflectDiff is already a shim over cmp.Diff, so no actual output
or behavior changes
2023-04-12 08:48:03 -07:00
czybjtu
e567490317
fix: remove last ip when apiserver was shut down
2023-03-20 21:14:00 +08:00
Taahir Ahmed
6a75e7c40c
ClusterTrustBundles: Define types
...
This commit is the main API piece of KEP-3257 (ClusterTrustBundles).
This commit:
* Adds the certificates.k8s.io/v1alpha1 API group
* Adds the ClusterTrustBundle type.
* Registers the new type in kube-apiserver.
* Implements the type-specfic validation specified for
ClusterTrustBundles:
- spec.pemTrustAnchors must always be non-empty.
- spec.signerName must be either empty or a valid signer name.
- Changing spec.signerName is disallowed.
* Implements the "attest" admission check to restrict actions on
ClusterTrustBundles that include a signer name.
Because it wasn't specified in the KEP, I chose to make attempts to
update the signer name be validation errors, rather than silently
ignored.
I have tested this out by launching these changes in kind and
manipulating ClusterTrustBundle objects in the resulting cluster using
kubectl.
2023-03-15 20:10:18 -07:00
Antonio Ojea
756f1bfe99
add repair loop
...
Change-Id: I63464bdd5db706ddf7dc5d828b8d03ad532d7981
2023-03-14 22:58:11 +00:00
Antonio Ojea
e6f197a991
plumb new ipallocators in the apiserver
...
plumb the new allocators from the control-plane instance to the
registry_core
Change-Id: I240cc91942260f725492597f1b599f7480560b1e
2023-03-14 22:58:11 +00:00
Patrick Ohly
29941b8d3e
api: resource.k8s.io v1alpha1 -> v1alpha2
...
For Kubernetes 1.27, we intend to make some breaking API changes:
- rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283 )
- extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802 )
We need to switch from v1alpha1 to v1alpha2 for that.
2023-03-14 07:52:03 +01:00
Paco Xu
49032c394c
The storage.k8s.io/v1beta1 API version of CSIStorageCapacity will no longer be served in v1.27.
2023-03-13 15:06:04 +08:00
Kubernetes Prow Robot
cc3855e0cf
Merge pull request #116170 from aojea/watch_instead_poll_system_namespaces
...
Watch instead poll system namespaces
2023-03-11 11:24:39 -08:00
Kubernetes Prow Robot
d8fe845415
Merge pull request #116108 from Jefftree/agg-discovery-enb
...
Enable Aggregated Discovery for Beta
2023-03-10 10:48:39 -08:00
Antonio Ojea
6e78e3279a
consider default a system namespace to be managed by the namespace controller
...
Change-Id: I08d68c18234404c1258aa003211d82e2e72dadb1
2023-03-10 17:49:53 +00:00
Antonio Ojea
eecfaf658e
decouple system namespaces from bootstrap controller
...
Use an informer instead of polling.
Change-Id: Ib071e53addb914fcb31d8a1346cf61ca6d22520b
2023-03-10 17:49:47 +00:00
Maksim Nabokikh
c1431af4f8
KEP-3325: Promote SelfSubjectReview to Beta ( #116274 )
...
* Promote SelfSubjectReview to Beta
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Fix whoami API
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Fixes according to code review
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
---------
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2023-03-08 15:42:33 -08:00
Jefftree
361391117d
Enable aggregated discovery
2023-03-08 23:03:52 +00:00
Patrick Ohly
dad95e1be6
update lease controller
...
Passing in a context instead of a stop channel has several advantages:
- ensures that client-go calls return as soon as the controller is asked to stop
- contextual logging can be used
By passing that context down to its own functions and checking it while
waiting, the lease controller also doesn't get stuck in backoffEnsureLease
anymore (https://github.com/kubernetes/kubernetes/issues/116196 ).
2023-03-02 15:06:00 +01:00
SataQiu
571582b5b2
apiserver: update serialization version priority for policy API
2023-01-19 14:42:26 +08:00
Andrew Sy Kim
a7de3e15a5
apiserver: use the identity value in the apiserver identity hash
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-01-13 16:20:14 -05:00
Andrew Sy Kim
3da0f1809c
apiserver: update lease label key to apiserver.kubernetes.io/identity
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-01-13 15:37:22 -05:00
SataQiu
950c147db5
apiserver: update serialization version priority for flowcontrol API
2023-01-13 22:19:39 +08:00
Jordan Liggitt
78cb3862f1
Fix indentation/spacing in comments to render correctly in godoc
2022-12-17 23:27:38 -05:00
SataQiu
40a6d6306a
autoscaling: advance v2 as the preferred API version over v1
2022-12-11 13:09:39 +08:00
Iceber Gu
034292718a
remove enabled by default beta resources that have been removed
...
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
2022-12-08 13:28:24 +08:00
Wojciech Tyczyński
4ffca653ff
Fix endpoint reconciler failing to delete masterlease
...
add regression test for endpoint reconciler leases
2022-11-25 08:13:20 +00:00
Patrick Ohly
5cca60f0b8
api: dynamic resource allocation API
...
This adds a new resource.k8s.io API group with v1alpha1 as version. It contains
four new types: resource.ResourceClaim, resource.ResourceClass, resource.ResourceClaimTemplate, and
resource.PodScheduling.
2022-11-10 20:08:24 +01:00