Commit Graph

20744 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
df1803f601 Merge pull request #123387 from soltysh/kube_codegen
kube_codegen: add plural-exceptions and use grep for finding API types
2024-02-20 11:58:50 -08:00
Kubernetes Prow Robot
b069ef6e13 Merge pull request #123397 from thockin/kube_codegen_no_git
Don't use git commands in kube_codegen.sh
2024-02-20 10:48:24 -08:00
Tim Hockin
4172d36486 Codegen: use plain find instead of git ls-files
Some consumers want to operate across repositories, so git just gets in
the way.
2024-02-20 08:17:39 -08:00
Tim Hockin
527d2ea9d0 Codegen: use plain grep instead of git grep
Some consumers want to operate across repositories, so git just gets in
the way.
2024-02-20 08:15:43 -08:00
Tim Hockin
9f4b82bf3b Cleanup: s/depreciated/deprecated/g 2024-02-20 07:45:02 -08:00
Maciej Szulik
c6b483ea05 kube_codegen: expose plural-exceptions flag for client generation 2024-02-19 16:50:58 +01:00
Jaime Caamaño Ruiz
aa0e47e863 Describe NetworkPolicy port ranges
Signed-off-by: Jaime Caamaño Ruiz <jcaamano@redhat.com>
2024-02-19 13:28:09 +00:00
Michal Wozniak
fe8e896df8 Improve the doc comment for the Job status.active field 2024-02-19 14:27:30 +01:00
Kubernetes Prow Robot
8a0147c882 Merge pull request #123330 from alexzielenski/flake-workaround
flake: avoid flake by ensuring params appear in the initial list
2024-02-17 19:55:42 -08:00
Kubernetes Prow Robot
6ff6b51904 Merge pull request #123333 from liggitt/authz-metrics
Add allowed/denied metrics for authorizers
2024-02-17 18:28:55 -08:00
Kubernetes Prow Robot
ad432bc523 Merge pull request #123356 from kinvolk/rata/userns-cri
cri: add user_namespace field to RuntimeHandlerFeatures
2024-02-17 14:45:21 -08:00
Giuseppe Scrivano
01ce36dd9e KEP-127: add RuntimeHandler message to cri-api
so the CRI runtime can report what features are supported by each
handler.

It is currently used to report support for the user namespace.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-17 17:36:48 -03:00
Kubernetes Prow Robot
1dce896e2c Merge pull request #123261 from skitt/allow-codegen-verification
codegen: don't nuke files if only verifying
2024-02-16 19:03:36 -08:00
Abhijit Hoskeri
d3a0e296de Update x/crypto to 0.19.
Main reason is to pick up updated CA roots.

Full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.19.0
2024-02-16 20:27:57 +00:00
Kubernetes Prow Robot
e43003195d Merge pull request #123272 from AkihiroSuda/rro-cri
cri-api: KEP-3857: Recursive Read-only (RRO) mounts [Split from #123180 for ease of review]
2024-02-16 11:09:46 -08:00
Han Kang
f38852768e bump the stability level of apiserver_storage_size_bytes to STABLE 2024-02-16 10:03:39 -08:00
Maksym Pavlenko
19d9405a1c Update comments and error messages
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:56:01 -08:00
Maksym Pavlenko
d9e2487d0c Add PodLogsPath to kubelet config
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:55:59 -08:00
Matt Merkes
3e431adb03 Add AdditionalLabels to cloudprovider.InstanceMetadata
Signed-off-by: Matt Merkes <merkes@amazon.com>

Emits event when overriding labels in node controller

Signed-off-by: Matt Merkes <merkes@amazon.com>

Discard kubernetes.io additional labels in node controller

Signed-off-by: Matt Merkes <merkes@amazon.com>

Exclude kubernetes reserved label namespaces
2024-02-16 17:00:17 +00:00
Jordan Liggitt
d5d3eddb95 Add allowed/denied metrics for authorizers 2024-02-16 08:20:59 -05:00
Kubernetes Prow Robot
6c04679617 Merge pull request #120902 from linxiulei/watch_stack
Add handler to run execution in separate goroutine
2024-02-16 03:21:33 -08:00
Eric Lin
7b2698a5e5 Add handler to run watch serving in separate goroutine
This handler allows running execution prior to actual serving in a separate
goroutine when serving requests. Doing so benefits cases in serving long running
requests because it allows freeing memory used by the separate goroutine
and keeps the serving routines slim.

Signed-off-by: Eric Lin <exlin@google.com>
2024-02-16 10:22:16 +00:00
Arda Güçlü
7faa8bbac3 Add e2e test for kubectl interactive delete 2024-02-16 11:24:56 +03:00
Kubernetes Prow Robot
91ee30074b Merge pull request #123174 from danwinship/cidr-validation-cleanup
Make CIDR validation consistent
2024-02-15 18:37:20 -08:00
Kubernetes Prow Robot
66d038d84d Merge pull request #121946 from liggitt/reload-authz
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Alexander Zielenski
6d5133f3ec add functions to policy accessors for getting match information and params 2024-02-15 17:01:57 -08:00
Alexander Zielenski
def05a20e2 flake: avoid flake by ensuring params appear in the initial list
sometimes they would not appear in the initial list if they were added while the informer was starting up due to ObjectTracker race
2024-02-15 13:58:29 -08:00
Ben Luddy
57fc5d2401 Add decode and roundtrip tests for CBOR marshaling.
Co-authored-by: Suriyan Subbarayan <suriyansub710@gmail.com>
2024-02-15 13:59:47 -05:00
Ben Luddy
871279978f Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
The examples of encoded data items in Appendix A cover all major types and various alternative
representations, including different ways of encoding a data item's "argument" (Section 3), fixed
and indefinite-length containers (Section 3.2), and tags from the extended generic data
model (Section 2.1).
2024-02-15 13:59:36 -05:00
Kubernetes Prow Robot
8a57e3cc2b Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
move OWNERS from validating to all new parent policy folder
2024-02-15 10:57:49 -08:00
Kubernetes Prow Robot
542fe51046 Merge pull request #122881 from benluddy/cbor-serializer-only
KEP-4222: Add CBOR Serializer implementation.
2024-02-15 10:57:39 -08:00
Kubernetes Prow Robot
50bf3a2060 Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
Add integration test for multiple audience in structured authn
2024-02-15 08:16:27 -08:00
Kubernetes Prow Robot
b65508b477 Merge pull request #123158 from AkihiroSuda/nodeconditiontype-godoc
core/v1: remove comment about non-existing constants
2024-02-15 08:16:20 -08:00
Ben Luddy
066421f108 Add CBOR Serializer implementation. 2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot
109491f3cb Merge pull request #123299 from liggitt/guard-accepted-names
Guard empty status.acceptedNames
2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot
58c77d7b63 Merge pull request #122887 from jpbetz/retry-generate-name-create
Implement KEP-4420: Retry Generate Name
2024-02-14 21:07:24 -08:00
Anish Ramasekar
0feb1d5173 Add integration test for multiple audience in structured authn
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
72c3c7c924 Merge pull request #123282 from enj/enj/i/authn_config_algs
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
ba450636a4 Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Alexander Zielenski
bd27c99262 move OWNERS from validating to all new parent policy folder
meant to do this in refactor PR
2024-02-14 16:32:08 -08:00
Kubernetes Prow Robot
e305e773bb Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0
Bump github.com/fxamacker/cbor/v2 to v2.6.0.
2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot
8e11104f0b Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
5b2c919583 Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements
kubelet: enable configurable rotation duration and parallel rotate
2024-02-14 15:56:38 -08:00
Jordan Liggitt
5dc92ada06 Implement authz config file reloading 2024-02-14 18:09:15 -05:00
Kubernetes Prow Robot
684a9975fe Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial
Refactor AdmissionPolicy for code sharing with mutating
2024-02-14 14:52:26 -08:00
Jordan Liggitt
41435d045d Guard empty status.acceptedNames 2024-02-14 16:26:56 -05:00
Anish Ramasekar
18c563546a support multiple audiences with jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Ben Luddy
aac43dc96f Bump github.com/fxamacker/cbor/v2 to v2.6.0. 2024-02-14 10:09:15 -05:00
Monis Khan
b5e0068325 Support all key algs with structured authn config
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
Kubernetes Prow Robot
ed84e7f6d3 Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race
DRA: fix data race in resourceclaim.Lookup
2024-02-14 03:24:57 -08:00