Kubernetes Prow Robot
92726bf0f3
Merge pull request #103248 from sttts/sttts-crd-converison-test
...
apiextension: fix typo and test case in conversion integration test
2021-06-29 11:20:03 -07:00
Kubernetes Prow Robot
dae03ba921
Merge pull request #99364 from p0lyn0mial/upstream-delegated-authn-metrics
...
adds metrics for delegated authn
2021-06-29 11:19:38 -07:00
Kubernetes Prow Robot
01819dd322
Merge pull request #102028 from chrishenzie/read-write-once-pod-access-mode
...
ReadWriteOncePod access mode for PVs and PVCs
2021-06-29 10:04:40 -07:00
Dr. Stefan Schimanski
903d76f558
apiextension: fix typo and test case in conversion integration test
2021-06-29 11:03:24 +02:00
Lukasz Szaszkiewicz
322c18c147
adds metrics for authentication webhook
2021-06-29 09:49:14 +02:00
Kubernetes Prow Robot
adf561fb96
Merge pull request #96699 from tengqm/kubelet-config-norm
...
Tweak kubelet config comments for consistency and readability
2021-06-28 23:26:40 -07:00
Chris Henzie
5f98f6cfa4
Update helper methods to print and parse ReadWriteOncePod access mode
2021-06-28 21:25:37 -07:00
Chris Henzie
48ba5020a2
ReadWriteOncePod PV access mode and feature gate
2021-06-28 21:25:35 -07:00
Chris Henzie
358d2e0bd1
Export contains access mode helper method
...
Will be used during validation of PVs and PVCs
2021-06-28 21:24:56 -07:00
Jordan Liggitt
6f9011a4ae
PodSecurity: vendor: generated files
...
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:46:00 -04:00
Jordan Liggitt
b8bdcf6441
PodSecurity: update dependencies
2021-06-28 17:46:00 -04:00
Jordan Liggitt
724fbfbb69
PodSecurity: test: generate fixture data
2021-06-28 17:46:00 -04:00
Jordan Liggitt
93c6f8969a
PodSecurity: check: addCapabilities
2021-06-28 17:45:59 -04:00
Jordan Liggitt
3733e209c9
PodSecurity: check: allowPrivilegeEscalation
2021-06-28 17:45:36 -04:00
Jordan Liggitt
a8206ef58b
PodSecurity: check: runAsNonRoot
2021-06-28 17:45:36 -04:00
Jordan Liggitt
12ea930aae
PodSecurity: check: selinux
...
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:45:36 -04:00
Tim Allclair
02a6187757
PodSecurity: admission: admission library
...
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe
PodSecurity: test: framework
2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779
PodSecurity: policy: registry
...
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0
PodSecurity: metrics: stub interface
...
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16
PodSecurity: admission/api: configuration API
...
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773
PodSecurity: api: runtime API
...
Label keys, values, and parsing helper functions
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
556f8500ff
Merge pull request #102859 from MikeSpreitzer/add-r-metrics
...
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e
Merge pull request #103153 from josephburnett/v2beta2
...
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Kubernetes Prow Robot
5e06f173fb
Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
...
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
49ac765b67
Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
...
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
d9ef459918
Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
...
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93
Allow delete with grace period 1s even if metadata period is negative
2021-06-28 11:49:39 +08:00
Sean Sullivan
4add8ed910
kubectl command headers as default in beta
2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi
...
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664
Merge pull request #103126 from jdnurme/konn-21-update
...
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
7ab6c5322c
Merge pull request #103190 from robscott/remove-app-protocol-gate
...
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
f7d2ecdc3e
Merge pull request #96087 from VilledeMontreal/feat/goComp
...
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
JD Nurme
21fd224ebd
Updated to use konnectivity client v0.0.21, and implemented placeholder context
2021-06-25 22:27:51 +00:00
Kubernetes Prow Robot
a1d9479d20
Merge pull request #103042 from tkashem/refactor-gt
...
apiserver: refactor graceful termination logic
2021-06-25 12:12:47 -07:00
Rob Scott
0cdd8c1c10
Removing ServiceAppProtocol feature gate
...
This feature gate went GA in 1.20 and can be safely removed as part of
1.22.
2021-06-25 10:24:50 -07:00
Abu Kashem
913c449a42
add unit test to verify graceful termination behavior
2021-06-25 12:32:23 -04:00
Abu Kashem
a84c1b7100
apiserver: NonBlockingRun should return a listener stopped channel
...
NonBlockingRun should also return a channel that gets closed when the
underlying http Server has stopped listening (during the graceful
shutdown period)
2021-06-25 12:17:31 -04:00
Abu Kashem
d85619030e
apiserver: refactor graceful termination logic
...
- refactor graceful termination logic so we can write unit tests
to assert on the expected behavior.
2021-06-25 12:17:26 -04:00
David Ashpole
79550ed40c
Add distributed tracing to the apiserver using OpenTelemetry
2021-06-25 05:20:27 -07:00
Kubernetes Prow Robot
5c055c2b5a
Merge pull request #103173 from mengjiao-liu/json-register-test-check
...
Narrow the scope of the json/register test case usage checking
2021-06-25 03:16:45 -07:00
Kubernetes Prow Robot
7163f8f810
Merge pull request #100771 from njuptlzf/fix_staticcheck_storage
...
Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/storage
2021-06-25 01:16:45 -07:00
Mengjiao Liu
16b7d473f2
Narrow the scope of the json/register test case usage checking
2021-06-25 15:09:48 +08:00
Kubernetes Prow Robot
859004b271
Merge pull request #103161 from MikeSpreitzer/comment-apf-types
...
Fix commenting oversights in APF types
2021-06-24 22:32:45 -07:00
Mike Spreitzer
179e48c4be
Add missing comments in APF API types
2021-06-25 00:27:40 -04:00
Kubernetes Prow Robot
89ebe77aeb
Merge pull request #95472 from ahmedtd/lru-remove-mpl
...
Remove MPL-licensed dep from lruexpirecache
2021-06-24 16:38:00 -07:00
Kubernetes Prow Robot
b27ad15779
Merge pull request #102540 from jpbetz/apply-client-docs
...
Add doc.go explaining client-go apply support
2021-06-24 14:17:41 -07:00
Kubernetes Prow Robot
2e93b3924a
Merge pull request #101943 from saschagrunert/seccomp-default
...
Add kubelet `SeccompDefault` alpha feature
2021-06-24 13:07:41 -07:00
Taahir Ahmed
ecc5318247
Remove MPL-licensed dep from lruexpirecache
...
github.com/hashicorp/golang-lru is MPL 2 licensed, which means that
anyone who distributes code or binaries that incorporates it needs to
include its source code, even if they haven't made any modifications.
Since lrucacheexpire is picked up as a dependency of using the shared
informers in client-go, that's potentially a lot of distributors.
Most other deps of client-go are Apache 2.0, MIT, or BSD-like
licensed, which only requires including the license.
Rather than reverting to groupcache/lru, I just reimplemented the
functionality we need, which isn't much.
2021-06-24 12:36:35 -07:00
Kubernetes Prow Robot
79494183b7
Merge pull request #102869 from mengjiao-liu/json-register-move
...
Remove default JSON logging format registration from k8s.io/component-base/logs package
2021-06-24 11:59:41 -07:00