github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
123,012 Commits 1 Branch 31 Tags
ae5543e4c8f99cb1555102a8ebc310aed3c82596
Commit Graph

245 Commits

Author SHA1 Message Date
Davanum Srinivas
7187d9af81 address comments during review 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-05-01 18:01:25 -04:00
Davanum Srinivas
bf268f02a3 Remove gcp in-tree cloud provider and credential provider 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-05-01 09:03:53 -04:00
Marek Siarkowicz
3ee8178768 Cleanup defer from SetFeatureGateDuringTest function call 2024-04-24 20:25:29 +02:00
Qi Ni
3bf2bf8191 chore: Cleanup in-tree credential provider azure and cloud provider azure 2024-01-20 15:18:31 +08:00
Zhecheng Li
af6e653f17 Use errors.Is() to handle err returned by LookPath() 
Signed-off-by: Zhecheng Li <zhechengli@microsoft.com>
 2024-01-05 05:07:28 +00:00
Kubernetes Prow Robot
2efed1f1cb Merge pull request #120291 from lzhecheng/fix-credentialprovider-win-bin-path 
Fix Windows credential provider cannot find binary
 2024-01-04 17:58:54 +01:00
Kubernetes Prow Robot
510b49a406 Merge pull request #118431 from testwill/plugin_slice 
chore: loop optimization
 2023-12-13 21:25:24 +01:00
Kubernetes Prow Robot
925a8dd3d3 Merge pull request #119947 from saschagrunert/keyring-unit 
Add unit tests for subdomain match in keyring
 2023-10-25 03:32:05 +02:00
Zhecheng Li
61023579c1 Fix Windows credential provider cannot find binary 
Windows credential provider binary path may have ".exe" suffix so
it is better to use LookPath() to support it flexibly.

Signed-off-by: Zhecheng Li <zhechengli@microsoft.com>
 2023-09-12 02:47:39 +00:00
Davanum Srinivas
42e8cfa28a fix failing metadata test 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-09-01 15:22:07 -04:00
Sascha Grunert
3edae95e5a Add unit tests for subdomain match in keyring 
This ensures that the amount of subdomains should always match the
glob+dot (`*.`) pattern.

Refers to https://github.com/kubernetes/kubernetes/issues/119941

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-08-15 12:47:22 +02:00
guoguangwu
c2049c7961 chore: loop optimization 2023-06-03 13:31:18 +08:00
HirazawaUi
82e3fa0930 fix fd leaks and failed file removing for main pkg and cmd 2023-05-09 09:24:11 -05:00
Kubernetes Prow Robot
3187a3333b Merge pull request #117477 from HirazawaUi/replace-pkg-credentialprovider-ioutil 
Replace the deprecated ioutil method in the credentialprovider directory
 2023-05-08 07:01:17 -07:00
HirazawaUi
062f146d32 Replace the deprecated ioutil method in the pkg/credentialprovider directory 2023-04-19 23:11:57 +08:00
Carter McKinnon
766f6c3ad4 Include stderr in cred provider plugin errors 2023-04-18 10:35:30 -07:00
Davanum Srinivas
90d185b7e1 Drop AWS kubelet credential provider and cleanup AWS storage e2e tests 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-07 09:00:12 -05:00
HirazawaUi
3b18e80fb4 delete unused functions in pkg directory 2023-01-16 21:43:36 +08:00
Kubernetes Prow Robot
870e872ebb Merge pull request #114343 from skitt/autorest-to 
Use k8s utils pointer instead of Azure autorest/to
 2022-12-10 09:05:55 -08:00
Kubernetes Prow Robot
c5792ad96b Merge pull request #113138 from claudiubelu/unittests-skip-gce 
unittests: Skip test if not on GCE
 2022-12-09 21:13:41 -08:00
Stephen Kitt
56d8302bc8 Use k8s utils pointer instead of Azure autorest/to 
Since k/u includes pointer functions which are equivalent to the
autorest/to pointer functions, and the latter are deprecated, it seems
useful to switch to the former:
* to.FooPtr becomes pointer.Foo
* to.Foo becomes pointer.FooDeref with an appropriate default
* to.StringSlicePtr becomes &

This doesn't remove anything from vendor, but it does turn the
dependency into an indirect one, ready to be removed when the rest of
the Azure migration happens.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2022-12-07 18:16:16 +01:00
Claudiu Belu
1129f57143 unittests: Skip test if not on GCE 
The test in pkg/credentialprovider/gcp/metadata_test.go is meant to
run only on GCE, which means that it will fail in any other case.

We should skip the test if we're not testing in GCE or Windows in GCE.
 2022-11-28 13:54:14 +00:00
Han Kang
a09c6f6ca9 fix credential provider metric names 
Change-Id: Idccdf419d53b04f1d8a1968f554a0b6ef32ab992
 2022-11-08 12:59:53 -08:00
Slavik Panasovets
864e41f16d Fix time.Since() in defer. Wrap in anonymous function 
Function arguments in defer evaluated during definition of defer, not
during execution
 2022-10-25 12:38:35 +00:00
Davanum Srinivas
09968e6c03 (aws_credentials): update ecr url validation regex 
Updates the regex for ECR URL validation to support isolated regions
and includes additional testcases for these.

Signed-off-by: Jyoti Mahapatra <jyotima@amazon.com>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-10-16 19:13:47 -04:00
Dixita Narang
977a8ebb3a Renaming usage of v1beta1 to v1, and adding API violation exceptions and 
vendor module for v1
 2022-09-09 06:11:06 +00:00
Davanum Srinivas
a9593d634c Generate and format files 
- Run hack/update-codegen.sh
- Run hack/update-generated-device-plugin.sh
- Run hack/update-generated-protobuf.sh
- Run hack/update-generated-runtime.sh
- Run hack/update-generated-swagger-docs.sh
- Run hack/update-openapi-spec.sh
- Run hack/update-gofmt.sh

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-07-26 13:14:05 -04:00
andyzhangx
8b0ac045e2 fix image pulling failure when IMDS is unavailalbe in kubelet startup 
fix test failure
 2022-06-12 04:57:42 +00:00
Stephen Augustus
621c4aa599 etcd: Update container repo to gcr.io/etcd-development/etcd 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2022-04-13 19:04:01 -04:00
Aditi Sharma
ed16ef2206 Move feature flag credential provider to beta 
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
 2022-03-24 22:43:38 +05:30
Kubernetes Prow Robot
f50e076756 Merge pull request #107590 from ialidzhikov/golint/credentialprovider-plugin 
Nit: Replace `errors.New(fmt.Sprintf(...))` with `fmt.Errorf(...)`
 2022-02-21 06:34:14 -08:00
ialidzhikov
f3fcfef5a7 Replace errors.New(fmt.Sprintf(...)) with fmt.Errorf(...) 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2022-02-20 11:23:48 +02:00
andyzhangx
3867b3e1f8 increase Azure ACR credential provider timeout 2022-02-18 12:29:10 +00:00
Davanum Srinivas
9682b7248f OWNERS cleanup - Jan 2021 Week 1 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-10 08:14:29 -05:00
Davanum Srinivas
497e9c1971 Cleanup OWNERS files (No Activity in the last year) 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-15 10:34:02 -05:00
Davanum Srinivas
9405e9b55e Check in OWNERS modified by update-yamlfmt.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:26 -05:00
Kubernetes Prow Robot
5130d43200 Merge pull request #102802 from adisky/metrics-credential-provider-1 
Add Metrics for Kubelet credential provider
 2021-09-27 11:02:22 -07:00
wojtekt
d9b08c611d Migrate to k8s.io/utils/clock 2021-09-17 15:19:08 +02:00
Aditi Sharma
7c5d6c0844 Add metric for credential provider 
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
 2021-09-17 11:03:36 +00:00
qulifeng
054271445e fix Log attempts to output resp.Body 2021-09-06 23:01:03 +08:00
Stephen Augustus
481cf6fbe7 generated: Run hack/update-gofmt.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-08-24 15:47:49 -04:00
Owen Strain
a947c32783 Add feature gate to disable in-tree credential providers 2021-08-05 16:50:13 +00:00
Kubernetes Prow Robot
d1479ea431 Merge pull request #103231 from n4j/bug/CredentialProviderFailsOnECR 
Appended OS's environment variables to the ones configured in Credent…
 2021-08-04 18:59:59 -07:00
Neeraj Shah
75f0007d2b Overlaid OS's environment variables with the ones specified in the CredentialProviderConfig 
- Removed dependency with cmd.Run's stub
- Added test cases

Signed-off-by: Neeraj Shah <neerajx86@gmail.com>
 2021-07-23 09:45:19 +05:30
Davanum Srinivas
26cc8e40a8 fix deadcode issues 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-07-14 08:41:21 -04:00
Aditi Sharma
def93317b4 Kubelet Credential Provider 
Improve concurrency and cache for credential provider

Removed lock from "Provide" as it can be called in parallel
from image puller. To avoid execing for the same image concurrently
wrapped exec in singleflight.

Purging the cache for expried data with 15mins interval only when
a request for credential is made.

KEP:2133

Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
 2021-06-28 21:15:03 +05:30
Kubernetes Prow Robot
43a32c14f5 Merge pull request #100686 from hasheddan/azure-credential-client 
Add timeout to Azure ACR credential provider
 2021-04-21 01:10:11 -07:00
Kubernetes Prow Robot
24350a922e Merge pull request #101086 from enj/enj/i/auth_owners_gen 
Prune stale entries from OWNERS files
 2021-04-15 08:27:50 -07:00
Kubernetes Prow Robot
3c20c5aa2f Merge pull request #100177 from wangyx1992/wrapped-error 
fix errors in wrapped format
 2021-04-13 23:24:42 -07:00
Monis Khan
91241eac9b Prune stale entries from OWNERS files 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-04-13 20:54:50 -04:00