Commit Graph

20258 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
689dca08e1 Merge pull request #123479 from Jefftree/sample-apiserver-129
Fix sample-apiserver rbac and bump to 1.29
2024-02-25 16:41:38 -08:00
Kubernetes Prow Robot
4b3da38651 Merge pull request #123417 from soltysh/kube_codegen-applyexternal
kube_codegen: expose external-applyconfigurations flag for client generation
2024-02-25 16:41:31 -08:00
Kubernetes Prow Robot
2a44cb0ab3 Merge pull request #122569 from IvoGoman/wrap-nomatcherror
feat(cli-runtime): wrap meta.NoKindMatchErrors
2024-02-24 10:01:33 -08:00
Jefftree
b3216214f9 Fix sample-apiserver rbac for v1.27 and bump e2e 2024-02-23 23:53:54 -05:00
Kubernetes Prow Robot
31a482a149 Merge pull request #120344 from rohitssingh/disable_force_detach
Add a flag to disable force detach behavior in kube-controller-manager
2024-02-22 13:02:38 -08:00
Kubernetes Prow Robot
446afd90b2 Merge pull request #123427 from alexzielenski/apiserver/policy/matching-refactor
ValidatingAdmissionPolicy: Factor out matching and params logic for reuse with MutatingAdmissionPolicy
2024-02-22 10:51:18 -08:00
Rohit Singh
13dddca6a2 Add "disable-force-detach-on-timeout" flag to kube-controller-manager 2024-02-22 18:31:52 +00:00
Alexander Zielenski
4760e0cc44 refactor: use shared CollectParams from VAP 2024-02-22 09:47:18 -08:00
Alexander Zielenski
64cd09f720 refactor: use match from generic pkg in vap
It is same exact code, but uses accessors now
2024-02-22 09:47:18 -08:00
Alexander Zielenski
96c418a7b7 add generic policy dispatcher
similar to the generic policy source, applies common match logic

for code sharing with validating/mutating
2024-02-22 09:47:18 -08:00
Cici Huang
9bc5257c45 [KEP-3962]Add feature gate for MAP (#123425)
* Add feature gate for MAP

* sort feature gates.

---------

Co-authored-by: Jiahui Feng <jhf@google.com>
2024-02-21 17:00:13 -08:00
Alexander Zielenski
11ed3032c0 test: infer gvk of objects
avoids relying on the GVK to be written to the object
2024-02-21 15:07:34 -08:00
Alexander Zielenski
acf1d850c6 refactor: handle paramKind directly
remove hacks that might conceal errors
2024-02-21 15:07:34 -08:00
Kubernetes Prow Robot
3ae6c051a0 Merge pull request #123223 from mmerkes/labels
Add AdditionalLabels to cloudprovider.InstanceMetadata
2024-02-21 14:41:50 -08:00
Kubernetes Prow Robot
3d3d705a6d Merge pull request #122883 from Jefftree/agg-discovery-block-stale
Aggregated Discovery, mark APIServices stale before initial health check
2024-02-21 12:02:41 -08:00
Jefftree
81e4c3002a add nil check to avoid passing fakeCh for all discovery tests 2024-02-21 12:54:58 -05:00
Kubernetes Prow Robot
9a90289838 Merge pull request #123348 from hoskeri/update-go-x-crypto-19
Update x/crypto to 0.19.
2024-02-21 09:11:50 -08:00
Maciej Szulik
16794502ee kube_codegen: expose external-applyconfigurations flag for client generation 2024-02-21 13:37:27 +01:00
Kubernetes Prow Robot
11785bb815 Merge pull request #123392 from thockin/depreciate
Cleanup: s/depreciated/deprecated/g
2024-02-21 01:40:39 -08:00
Kubernetes Prow Robot
e613eb3388 Merge pull request #123342 from logicalhan/storage-metric
bump the stability level of apiserver_storage_size_bytes to STABLE
2024-02-21 01:40:25 -08:00
Kubernetes Prow Robot
6049a1bca4 Merge pull request #122880 from Jefftree/agg-discovery-v2-types
Add aggregated discovery v2 types
2024-02-20 21:03:22 -08:00
Jefftree
6726e65619 Aggregated Discovery, mark stale before initial health check 2024-02-20 18:15:13 -05:00
Kubernetes Prow Robot
5275bb0502 Merge pull request #123268 from benluddy/cbor-appendix-a-tests
KEP-4222: Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
2024-02-20 13:04:00 -08:00
Kubernetes Prow Robot
930f60173b Merge pull request #123267 from benluddy/cbor-marshaling-tests
KEP-4222: Add decode and roundtrip tests for CBOR marshaling.
2024-02-20 13:03:42 -08:00
Kubernetes Prow Robot
df1803f601 Merge pull request #123387 from soltysh/kube_codegen
kube_codegen: add plural-exceptions and use grep for finding API types
2024-02-20 11:58:50 -08:00
Kubernetes Prow Robot
b069ef6e13 Merge pull request #123397 from thockin/kube_codegen_no_git
Don't use git commands in kube_codegen.sh
2024-02-20 10:48:24 -08:00
Tim Hockin
4172d36486 Codegen: use plain find instead of git ls-files
Some consumers want to operate across repositories, so git just gets in
the way.
2024-02-20 08:17:39 -08:00
Tim Hockin
527d2ea9d0 Codegen: use plain grep instead of git grep
Some consumers want to operate across repositories, so git just gets in
the way.
2024-02-20 08:15:43 -08:00
Tim Hockin
9f4b82bf3b Cleanup: s/depreciated/deprecated/g 2024-02-20 07:45:02 -08:00
Maciej Szulik
c6b483ea05 kube_codegen: expose plural-exceptions flag for client generation 2024-02-19 16:50:58 +01:00
Michal Wozniak
fe8e896df8 Improve the doc comment for the Job status.active field 2024-02-19 14:27:30 +01:00
Kubernetes Prow Robot
8a0147c882 Merge pull request #123330 from alexzielenski/flake-workaround
flake: avoid flake by ensuring params appear in the initial list
2024-02-17 19:55:42 -08:00
Kubernetes Prow Robot
6ff6b51904 Merge pull request #123333 from liggitt/authz-metrics
Add allowed/denied metrics for authorizers
2024-02-17 18:28:55 -08:00
Kubernetes Prow Robot
ad432bc523 Merge pull request #123356 from kinvolk/rata/userns-cri
cri: add user_namespace field to RuntimeHandlerFeatures
2024-02-17 14:45:21 -08:00
Giuseppe Scrivano
01ce36dd9e KEP-127: add RuntimeHandler message to cri-api
so the CRI runtime can report what features are supported by each
handler.

It is currently used to report support for the user namespace.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-17 17:36:48 -03:00
Kubernetes Prow Robot
1dce896e2c Merge pull request #123261 from skitt/allow-codegen-verification
codegen: don't nuke files if only verifying
2024-02-16 19:03:36 -08:00
Abhijit Hoskeri
d3a0e296de Update x/crypto to 0.19.
Main reason is to pick up updated CA roots.

Full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.19.0
2024-02-16 20:27:57 +00:00
Kubernetes Prow Robot
e43003195d Merge pull request #123272 from AkihiroSuda/rro-cri
cri-api: KEP-3857: Recursive Read-only (RRO) mounts [Split from #123180 for ease of review]
2024-02-16 11:09:46 -08:00
Han Kang
f38852768e bump the stability level of apiserver_storage_size_bytes to STABLE 2024-02-16 10:03:39 -08:00
Matt Merkes
3e431adb03 Add AdditionalLabels to cloudprovider.InstanceMetadata
Signed-off-by: Matt Merkes <merkes@amazon.com>

Emits event when overriding labels in node controller

Signed-off-by: Matt Merkes <merkes@amazon.com>

Discard kubernetes.io additional labels in node controller

Signed-off-by: Matt Merkes <merkes@amazon.com>

Exclude kubernetes reserved label namespaces
2024-02-16 17:00:17 +00:00
Jordan Liggitt
d5d3eddb95 Add allowed/denied metrics for authorizers 2024-02-16 08:20:59 -05:00
Kubernetes Prow Robot
6c04679617 Merge pull request #120902 from linxiulei/watch_stack
Add handler to run execution in separate goroutine
2024-02-16 03:21:33 -08:00
Eric Lin
7b2698a5e5 Add handler to run watch serving in separate goroutine
This handler allows running execution prior to actual serving in a separate
goroutine when serving requests. Doing so benefits cases in serving long running
requests because it allows freeing memory used by the separate goroutine
and keeps the serving routines slim.

Signed-off-by: Eric Lin <exlin@google.com>
2024-02-16 10:22:16 +00:00
Kubernetes Prow Robot
91ee30074b Merge pull request #123174 from danwinship/cidr-validation-cleanup
Make CIDR validation consistent
2024-02-15 18:37:20 -08:00
Kubernetes Prow Robot
66d038d84d Merge pull request #121946 from liggitt/reload-authz
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Alexander Zielenski
6d5133f3ec add functions to policy accessors for getting match information and params 2024-02-15 17:01:57 -08:00
Alexander Zielenski
def05a20e2 flake: avoid flake by ensuring params appear in the initial list
sometimes they would not appear in the initial list if they were added while the informer was starting up due to ObjectTracker race
2024-02-15 13:58:29 -08:00
Ben Luddy
57fc5d2401 Add decode and roundtrip tests for CBOR marshaling.
Co-authored-by: Suriyan Subbarayan <suriyansub710@gmail.com>
2024-02-15 13:59:47 -05:00
Ben Luddy
871279978f Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
The examples of encoded data items in Appendix A cover all major types and various alternative
representations, including different ways of encoding a data item's "argument" (Section 3), fixed
and indefinite-length containers (Section 3.2), and tags from the extended generic data
model (Section 2.1).
2024-02-15 13:59:36 -05:00
Kubernetes Prow Robot
8a57e3cc2b Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
move OWNERS from validating to all new parent policy folder
2024-02-15 10:57:49 -08:00