Commit Graph

13502 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
92726bf0f3 Merge pull request #103248 from sttts/sttts-crd-converison-test
apiextension: fix typo and test case in conversion integration test
2021-06-29 11:20:03 -07:00
Kubernetes Prow Robot
dae03ba921 Merge pull request #99364 from p0lyn0mial/upstream-delegated-authn-metrics
adds metrics for delegated authn
2021-06-29 11:19:38 -07:00
Kubernetes Prow Robot
01819dd322 Merge pull request #102028 from chrishenzie/read-write-once-pod-access-mode
ReadWriteOncePod access mode for PVs and PVCs
2021-06-29 10:04:40 -07:00
Dr. Stefan Schimanski
903d76f558 apiextension: fix typo and test case in conversion integration test 2021-06-29 11:03:24 +02:00
Lukasz Szaszkiewicz
322c18c147 adds metrics for authentication webhook 2021-06-29 09:49:14 +02:00
Kubernetes Prow Robot
adf561fb96 Merge pull request #96699 from tengqm/kubelet-config-norm
Tweak kubelet config comments for consistency and readability
2021-06-28 23:26:40 -07:00
Chris Henzie
5f98f6cfa4 Update helper methods to print and parse ReadWriteOncePod access mode 2021-06-28 21:25:37 -07:00
Chris Henzie
48ba5020a2 ReadWriteOncePod PV access mode and feature gate 2021-06-28 21:25:35 -07:00
Chris Henzie
358d2e0bd1 Export contains access mode helper method
Will be used during validation of PVs and PVCs
2021-06-28 21:24:56 -07:00
Jordan Liggitt
6f9011a4ae PodSecurity: vendor: generated files
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:46:00 -04:00
Jordan Liggitt
b8bdcf6441 PodSecurity: update dependencies 2021-06-28 17:46:00 -04:00
Jordan Liggitt
724fbfbb69 PodSecurity: test: generate fixture data 2021-06-28 17:46:00 -04:00
Jordan Liggitt
93c6f8969a PodSecurity: check: addCapabilities 2021-06-28 17:45:59 -04:00
Jordan Liggitt
3733e209c9 PodSecurity: check: allowPrivilegeEscalation 2021-06-28 17:45:36 -04:00
Jordan Liggitt
a8206ef58b PodSecurity: check: runAsNonRoot 2021-06-28 17:45:36 -04:00
Jordan Liggitt
12ea930aae PodSecurity: check: selinux
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:36 -04:00
Tim Allclair
02a6187757 PodSecurity: admission: admission library
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe PodSecurity: test: framework 2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779 PodSecurity: policy: registry
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0 PodSecurity: metrics: stub interface
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16 PodSecurity: admission/api: configuration API
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers

Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773 PodSecurity: api: runtime API
Label keys, values, and parsing helper functions

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
556f8500ff Merge pull request #102859 from MikeSpreitzer/add-r-metrics
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e Merge pull request #103153 from josephburnett/v2beta2
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Kubernetes Prow Robot
5e06f173fb Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
49ac765b67 Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
d9ef459918 Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93 Allow delete with grace period 1s even if metadata period is negative 2021-06-28 11:49:39 +08:00
Sean Sullivan
4add8ed910 kubectl command headers as default in beta 2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277 Merge pull request #103001 from zshihang/csi
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664 Merge pull request #103126 from jdnurme/konn-21-update
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
7ab6c5322c Merge pull request #103190 from robscott/remove-app-protocol-gate
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
f7d2ecdc3e Merge pull request #96087 from VilledeMontreal/feat/goComp
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
JD Nurme
21fd224ebd Updated to use konnectivity client v0.0.21, and implemented placeholder context 2021-06-25 22:27:51 +00:00
Kubernetes Prow Robot
a1d9479d20 Merge pull request #103042 from tkashem/refactor-gt
apiserver: refactor graceful termination logic
2021-06-25 12:12:47 -07:00
Rob Scott
0cdd8c1c10 Removing ServiceAppProtocol feature gate
This feature gate went GA in 1.20 and can be safely removed as part of
1.22.
2021-06-25 10:24:50 -07:00
Abu Kashem
913c449a42 add unit test to verify graceful termination behavior 2021-06-25 12:32:23 -04:00
Abu Kashem
a84c1b7100 apiserver: NonBlockingRun should return a listener stopped channel
NonBlockingRun should also return a channel that gets closed when the
underlying http Server has stopped listening (during the graceful
shutdown period)
2021-06-25 12:17:31 -04:00
Abu Kashem
d85619030e apiserver: refactor graceful termination logic
- refactor graceful termination logic so we can write unit tests
  to assert on the expected behavior.
2021-06-25 12:17:26 -04:00
David Ashpole
79550ed40c Add distributed tracing to the apiserver using OpenTelemetry 2021-06-25 05:20:27 -07:00
Kubernetes Prow Robot
5c055c2b5a Merge pull request #103173 from mengjiao-liu/json-register-test-check
Narrow the scope of the json/register test case usage checking
2021-06-25 03:16:45 -07:00
Kubernetes Prow Robot
7163f8f810 Merge pull request #100771 from njuptlzf/fix_staticcheck_storage
Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/storage
2021-06-25 01:16:45 -07:00
Mengjiao Liu
16b7d473f2 Narrow the scope of the json/register test case usage checking 2021-06-25 15:09:48 +08:00
Kubernetes Prow Robot
859004b271 Merge pull request #103161 from MikeSpreitzer/comment-apf-types
Fix commenting oversights in APF types
2021-06-24 22:32:45 -07:00
Mike Spreitzer
179e48c4be Add missing comments in APF API types 2021-06-25 00:27:40 -04:00
Kubernetes Prow Robot
89ebe77aeb Merge pull request #95472 from ahmedtd/lru-remove-mpl
Remove MPL-licensed dep from lruexpirecache
2021-06-24 16:38:00 -07:00
Kubernetes Prow Robot
b27ad15779 Merge pull request #102540 from jpbetz/apply-client-docs
Add doc.go explaining client-go apply support
2021-06-24 14:17:41 -07:00
Kubernetes Prow Robot
2e93b3924a Merge pull request #101943 from saschagrunert/seccomp-default
Add kubelet `SeccompDefault` alpha feature
2021-06-24 13:07:41 -07:00
Taahir Ahmed
ecc5318247 Remove MPL-licensed dep from lruexpirecache
github.com/hashicorp/golang-lru is MPL 2 licensed, which means that
anyone who distributes code or binaries that incorporates it needs to
include its source code, even if they haven't made any modifications.

Since lrucacheexpire is picked up as a dependency of using the shared
informers in client-go, that's potentially a lot of distributors.
Most other deps of client-go are Apache 2.0, MIT, or BSD-like
licensed, which only requires including the license.

Rather than reverting to groupcache/lru, I just reimplemented the
functionality we need, which isn't much.
2021-06-24 12:36:35 -07:00
Kubernetes Prow Robot
79494183b7 Merge pull request #102869 from mengjiao-liu/json-register-move
Remove default JSON logging format registration from k8s.io/component-base/logs package
2021-06-24 11:59:41 -07:00