github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
72,541 Commits 1 Branch 31 Tags
679d88c1a0e4edf82e0b94de2e4903db557ec2a8
Commit Graph

5215 Commits

Author SHA1 Message Date
k8s-ci-robot
5d8e93cbc4 Merge pull request #71525 from logicalhan/api-service-condition-tests 
add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType
 2018-11-30 08:20:18 -08:00
k8s-ci-robot
96516bd961 Merge pull request #71263 from ZYecho/fix-spellings 
fix typo: namspace -> namespace
 2018-11-30 06:33:50 -08:00
k8s-ci-robot
3e1c0d47c2 Merge pull request #71318 from sttts/sttts-etcd-v 
apiserver: set klog as etcdclient logger
 2018-11-29 21:45:22 -08:00
k8s-ci-robot
79e5cb2cb7 Merge pull request #71302 from liggitt/verify-unit-test-feature-gates 
Split mutable and read-only access to feature gates, limit tests to readonly access
 2018-11-29 21:45:12 -08:00
k8s-ci-robot
15556551be Merge pull request #68942 from nikhita/csi-api-staging-restrict-imports 
Add import restrictions for csi-api
 2018-11-29 21:44:42 -08:00
k8s-ci-robot
1fd45cfb24 Merge pull request #71272 from sttts/sttts-unstructured-accessor-intermediate-not-found 
unstructured: return not-found if intermediate path is not found
 2018-11-29 19:04:55 -08:00
k8s-ci-robot
a08d89c0f5 Merge pull request #70959 from MikeSpreitzer/group-still-not-optional 
Clarified syntax doc on --watch-cache-sizes
 2018-11-29 19:04:46 -08:00
k8s-ci-robot
81eb9ce491 Merge pull request #71217 from jsafrane/status-update-unit-test 
CSI v1 leftovers
 2018-11-29 15:26:53 -08:00
k8s-ci-robot
4372d62ff5 Merge pull request #71211 from jsafrane/meta-status-reset 
Refactor status PrepareForUpdate into standalone method
 2018-11-29 15:26:42 -08:00
k8s-ci-robot
409bfc4337 Merge pull request #71047 from pivotal-k8s/bump-k8s-utils 
Bump k8s.io/uitls to 8e7ff06
 2018-11-29 11:17:08 -08:00
k8s-ci-robot
163b54dc4d Merge pull request #70995 from stewart-yu/stewart-sample-controller-redurabce-import 
remove duplicated import
 2018-11-29 11:16:39 -08:00
k8s-ci-robot
d0ac922996 Merge pull request #70440 from nikhita/add-license-headers 
Add license header to non-generated proto files
 2018-11-29 00:48:05 -08:00
k8s-ci-robot
86d4d95e0d Merge pull request #70426 from sttts/sttts-testserver-run-errors 
testservers: return Run method errors correctly
 2018-11-29 00:47:45 -08:00
Han Kang
47ed1019a3 add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType 2018-11-28 15:26:36 -08:00
Nikhita Raghunath
b3ad9e697c csi-api: fix Saad Ali's username in SECURITY_CONTACTS 2018-11-27 00:51:26 +05:30
Jordan Liggitt
f199f3d5a3 Set deadline for returning backend error 2018-11-26 09:15:13 -05:00
Dr. Stefan Schimanski
a00d08610f apiserver: set klog as etcdclient logger 2018-11-26 11:46:04 +01:00
Jordan Liggitt
b84e3dd6f8 Verify backend upgraded connection 2018-11-25 14:25:38 -05:00
k8s-ci-robot
2b0212de9c Merge pull request #71206 from stlaz/enc_config_opt 
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
 2018-11-21 11:30:12 -08:00
Jordan Liggitt
2498ca7606 drop VerifyFeatureGatesUnchanged 2018-11-21 11:51:33 -05:00
Jordan Liggitt
d440ecdd3b Update non-test code to use DefaultMutableFeatureGate 2018-11-21 11:51:33 -05:00
Jordan Liggitt
1d6db5924f Tighten feature gate interface to split out mutating methods 2018-11-21 11:51:32 -05:00
k8s-ci-robot
3d5998edcd Merge pull request #71298 from stewart-yu/stewart-controller-manager-flags 
add missing flags in *-controller-manager --help
 2018-11-21 05:58:20 -08:00
Jay Lim
10dd5d6631 *-controller-manager: fix missing global flags for --help 2018-11-21 17:39:14 +08:00
Christoph Blecker
c7d3951927 Update github.com/json-iterator/go to 1.1.4 2018-11-20 18:13:01 -08:00
Dr. Stefan Schimanski
52b1718a63 unstructured: return not-found if intermediate path is not found 2018-11-20 17:21:52 +01:00
zhangyue
596a20ca8a fix typo: namspace -> namespace 
Signed-off-by: zhangyue <zy675793960@yeah.net>
 2018-11-20 21:47:27 +08:00
Sergei Orlov
21c1bb8830 kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'. 
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-19 16:34:09 +01:00
Jan Safranek
0c4b89fad6 Fix typo 2018-11-19 15:28:14 +01:00
Jan Safranek
787611a614 Refactor status PrepareForUpdate into standalone method 
Someone else might find reseting metadata fields useful.
 2018-11-19 14:46:06 +01:00
k8s-ci-robot
7ba79c3183 Merge pull request #71128 from yue9944882/chore/add-reviewer 
Add yue9944882 to CRD/CR apiserver reviewer
 2018-11-18 14:14:17 -08:00
Clayton Coleman
3464222267 Revert "Make bootstrap client cert loading part of rotation" 
This reverts commit 0af19875ad.

Revert "Ensure the bootstrap rotation code is tested by forcing rotation"

This reverts commit de293b2d7d.
 2018-11-17 10:24:39 -05:00
k8s-ci-robot
46ebebcc4f Merge pull request #65763 from x13n/audit-logging 
Add option to k8s apiserver to reject incoming requests upon audit failure
 2018-11-17 04:39:56 -08:00
k8s-ci-robot
3be3510814 Merge pull request #69890 from smarterclayton/bootstrap_retry 
Make bootstrap client cert loading part of rotation
 2018-11-16 22:46:33 -08:00
k8s-ci-robot
ec2e767e59 Merge pull request #71167 from msau42/block-beta 
Promote raw block volume support to beta
 2018-11-16 20:28:03 -08:00
k8s-ci-robot
f38cc95505 Merge pull request #62692 from mikedanese/trev2 
authn: extend authenticator.Token to support audience validation
 2018-11-16 20:27:25 -08:00
Clayton Coleman
de293b2d7d Ensure the bootstrap rotation code is tested by forcing rotation 
Expose both a Stop() method (for cleanup) and a method to force
cert rotation, but only expose Stop() on the interface.

Verify that we choose the correct client.
 2018-11-16 21:50:52 -05:00
Clayton Coleman
0af19875ad Make bootstrap client cert loading part of rotation 
Ensure that bootstrap+clientcert-rotation in the Kubelet can:

1. happen in the background so that static pods aren't blocked by bootstrap
2. collapse down to a single call path for requesting a CSR
3. reorganize the code to allow future flexibility in retrieving bootstrap creds

Fetching the first certificate and later certificates when the kubelet
is using client rotation and bootstrapping should share the same code
path. We also want to start the Kubelet static pod loop before
bootstrapping completes. Finally, we want to take an incremental step
towards improving how the bootstrap credentials are loaded from disk
(potentially allowing for a CLI call to get credentials, or a remote
plugin that better integrates with cloud providers or KSMs).

Reorganize how the kubelet client config is determined. If rotation is
off, simplify the code path. If rotation is on, load the config
from disk, and then pass that into the cert manager. The cert manager
creates a client each time it tries to request a new cert.

Preserve existing behavior where:

1. bootstrap kubeconfig is used if the current kubeconfig is invalid/expired
2. we create the kubeconfig file based on the bootstrap kubeconfig, pointing to
   the location that new client certs will be placed
3. the newest client cert is used once it has been loaded
 2018-11-16 21:50:26 -05:00
k8s-ci-robot
39c8219999 Merge pull request #71158 from liggitt/revert-openapi-publish 
Revert openapi publish
 2018-11-16 18:22:43 -08:00
k8s-ci-robot
1e22f080ec Merge pull request #67383 from stlaz/enc_config_promotion 
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
 2018-11-16 16:31:30 -08:00
Mike Danese
effad15ecc patch webhook authenticator to support token review with arbitrary audiences 2018-11-16 19:30:42 -05:00
Mike Danese
162699ca30 autogenerated 2018-11-16 17:54:33 -05:00
Mike Danese
04837fdef1 authn: add Audiences to TokenReview 2018-11-16 17:54:33 -05:00
Jordan Liggitt
8799eb4e2e Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec" 
This reverts commit 54ee58b2d6, reversing
changes made to 9e2820e4c9.
 2018-11-16 16:36:24 -05:00
Jordan Liggitt
ad2b916d7c Revert "Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune" 
This reverts commit 3ea3cfc3be, reversing
changes made to fab7009997.
 2018-11-16 16:36:04 -05:00
k8s-ci-robot
3ea3cfc3be Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune 
apiextensions: prune {any,one}Of + Not recursively on OpenAPI v2 conversion
 2018-11-16 13:20:25 -08:00
k8s-ci-robot
c418e2a04f Merge pull request #71120 from WanLinghao/audit_log_fix 
fix a description error in DynamicAuditing feature
 2018-11-16 13:20:07 -08:00
k8s-ci-robot
9878253c3c Merge pull request #70998 from deads2k/client-07-listwatchtimeout 
update the client generator to set a client-side timeout
 2018-11-16 13:19:57 -08:00
Matthew Wong
7a6acefd21 Generate code for BlockVolume beta promotion 2018-11-16 13:38:59 -05:00
Matthew Wong
2ff98f7832 Promote BlockVolume to beta 2018-11-16 13:38:59 -05:00