github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
90,326 Commits 1 Branch 31 Tags 1,019 MiB
59a28111be
Commit Graph

1268 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ee6b88ddf9
Merge pull request #90000 from SataQiu/staging-scheduler-20200409 
scheduler: remove direct import to pkg/master/ports
 2020-04-11 10:46:01 -07:00
SataQiu
41d3e44a2f scheduler: remove direct import to pkg/master/ports 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-04-11 13:56:53 +08:00
Artur Gadelshin
3ab5ea09ed Fix goling issues for pkg/registry/apps 2020-04-08 23:12:29 +02:00
Christian Huffman
c6fd25d100 Updated CSIDriver references 2020-03-06 08:21:26 -05:00
Mike Danese
c58e69ec79 automated refactor 2020-03-05 14:59:46 -08:00
Rob Scott
132d2afca0
Adding IngressClass to networking/v1beta1 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-01 18:17:09 -08:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints 
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-02-11 16:23:31 -08:00
Mike Danese
25651408ae generated: run refactor 2020-02-08 12:30:21 -05:00
Mike Danese
3aa59f7f30 generated: run refactor 2020-02-07 18:16:47 -08:00
Mike Danese
d55d6175f8 refactor 2020-01-29 08:50:45 -08:00
Elijah Oyekunle
bae4ff565f fix apiextensions reference in controller/clusterauthenticationtrust 2020-01-28 14:11:12 +01:00
Kubernetes Prow Robot
6a919f2b54
Merge pull request #85903 from liggitt/disable-deprecated-apis 
Remove ability to re-enable serving deprecated APIs
 2019-12-13 16:19:36 -08:00
Jordan Liggitt
0387cc7cb3 Update generated files 2019-12-13 12:23:39 -05:00
Jordan Liggitt
e9870c3076 Update storage hash to use ingress type for cross-group comparison 2019-12-13 12:21:33 -05:00
Jordan Liggitt
3df9e86a4e Remove ability to re-enable serving deprecated APIs 2019-12-13 12:21:33 -05:00
Jordan Liggitt
5d5b444c4d Remove use of testapi codecs, selflink, resourcepath functions 2019-12-13 11:56:29 -05:00
Han Kang
6de7082978 remove two unused metrics 2019-12-05 16:30:21 -08:00
Han Kang
aaac96c660 Two bug fixes: (1) at least log something out if we fail to register our health check, (2) actually register a prometheus metric. I delete the deprecated metric in this block because there isn't any point to it, since no one can be broken by changing a metric that doesn't get collected 2019-12-05 16:30:21 -08:00
Kubernetes Prow Robot
97a4e6683e
Merge pull request #85634 from hwdef/fix-staticcheck14 
pkg/master: Fix static check failures
 2019-12-04 07:18:57 -08:00
yue9944882
81471c36b1 [generated] bazels and vendor/modules.txt 
[generated] bazels

bazel
 2019-12-04 00:49:28 +08:00
yue9944882
15a883b067 s/apiextensions/apiextensionsv1/ for all imports in k/k 
rename alias import

fmt
 2019-12-04 00:49:27 +08:00
yue9944882
168f8f54f0 switch to v1 crd 
switch api helper functions to v1 CRD api

switch v1 CRD for apiserver internal

switch to v1 CRD for internal controllers

api storage/validation related changes

move local-defaulting utils private to prevent spreading

boilerplate

keep the subresource status/scale spec nil unless it's enabled

clean up empty space
 2019-12-04 00:49:26 +08:00
hwdef
e7172b3dbf pkg/master: Fix static check failures 2019-11-27 09:15:57 +08:00
Rob Scott
a7e589a8c6
Promoting EndpointSlices to beta 2019-11-13 14:20:19 -08:00
Kubernetes Prow Robot
c5609071d8
Merge pull request #84971 from robscott/endpointslice-iptypes 
Splitting IP address type into IPv4 and IPv6 for EndpointSlices
 2019-11-13 09:26:36 -08:00
Kubernetes Prow Robot
fb87f72b88
Merge pull request #84862 from yutedz/master-subset-check 
Check that endpoint has subset before accessing first subset
 2019-11-12 10:23:44 -08:00
Rob Scott
0fa9981e01
Splitting IP address type into IPv4 and IPv6 for EndpointSlices 2019-11-12 09:03:53 -08:00
Ted Yu
63aa70f78b Check that endpoint has subset before accessing first subset 2019-11-11 10:55:16 -08:00
Kubernetes Prow Robot
b15dfd778a
Merge pull request #84708 from yue9944882/feat/flowcontrol-storage 
Feature: Flowcontrol rest storage implementation
 2019-11-08 18:44:09 -08:00
Kubernetes Prow Robot
ae15368355
Merge pull request #84351 from wojtek-t/promote_node_lease_to_GA 
Promote node lease to GA
 2019-11-08 09:00:15 -08:00
yue9944882
3d1b5d0e9a flowcontrol rest storage implementation 2019-11-08 14:27:14 +08:00
Kubernetes Prow Robot
a5fe905be4
Merge pull request #82705 from deads2k/agg-authn-publish 
use controller to publish cluster authentication info
 2019-11-07 09:03:10 -08:00
David Eads
e08fe4400e remove clusterauthentinfo configmap if it is too large 2019-11-06 10:17:19 -05:00
David Eads
be8af0de1b remove exist client hooks 2019-11-06 10:17:19 -05:00
David Eads
7351c86860 publish cluster authentication trust via controller 2019-11-06 10:17:19 -05:00
yuxiaobo
81e9f21f83 Correct spelling mistakes 
Signed-off-by: yuxiaobo <yuxiaobogo@163.com>
 2019-11-06 20:25:19 +08:00
wojtekt
ffad401b4e Promote NodeLease feature to GA 2019-11-05 09:01:12 +01:00
Kubernetes Prow Robot
1d1385af91
Merge pull request #83474 from msau42/topology-ga 
CSI Topology ga
 2019-11-04 15:28:27 -08:00
Kubernetes Prow Robot
510fb38f27
Merge pull request #83671 from yue9944882/flow-control-api-model 
Apiserver flowcontrol api models
 2019-11-01 22:49:40 -07:00
Quan Tian
92ceb166e0 Ensure EndpointSlice exist if Endpoint is unchanged 
The EndpointSlice for masters was not created after enabling
EndpointSlice feature on a pre-existing cluster. This was because the
Endpoint object had been created and ReconcileEndpoints would skip
creating or updating it after EndpointSlice feature is enabled.

This patch ensures EndpointSlice is consistent with Endpoints after the
reconciler reconciles Endpoints even if Endpoints is unchanged. It also
avoids an update if the desired EndpointSlice matches the existing one.
 2019-10-31 07:28:38 -07:00
yue9944882
6db3edff10 [generated] ./hack/update-all.sh 
generated

generated

generated

rule

generated

generated
 2019-10-29 12:59:17 +08:00
yue9944882
7c28a4b70e non-generated api models misc 
rule list

rule

rule 2
 2019-10-29 12:26:12 +08:00
Michelle Au
603a2aa8a9 Add CSINode to storage/v1 2019-10-28 13:41:13 -07:00
Kubernetes Prow Robot
2152e1f0d5
Merge pull request #83864 from mrbobbytables/update-misc-api-machinery-owners 
Prune inactive owners from pkg/* misc api-machinery related OWNERS files
 2019-10-24 16:55:38 -07:00
Kubernetes Prow Robot
9fa1bc8003
Merge pull request #83422 from yastij/remove-ipallocator 
remove ipallocator in favor of k/utils net package
 2019-10-22 12:52:13 -07:00
Yassine TIJANI
f984b4c7a2 remove ipallocator in favor of k/utils net package 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-22 18:37:13 +02:00
Bob Killen
75f76d15bd
Prune inactive owners from pkg/* misc api-machinery related OWNERS files. 2019-10-13 08:46:12 -04:00
mengyang02
ed8767cded fix golint errors for pkg/master, together with cheftako 2019-10-05 21:42:52 +08:00
Han Kang
866ea74326 remove pkg/version and some of redundant copies of it 
Change-Id: Ia58367c1b1274bfb49c8a4784051463abaf795de
 2019-09-16 16:24:35 -07:00
Kubernetes Prow Robot
1d016cc1d3
Merge pull request #81668 from darshanime/remove_default_service_cidr 
Deprecate default service IP CIDR
 2019-09-10 14:31:45 -07:00