Commit Graph

20744 Commits

Author SHA1 Message Date
Antonio Ojea
632081a907 add ServiceCIDR APIs
Change-Id: Ia084c5505e43033ac34449031a1d32418ca326fd

Change-Id: Iafc236d456f7185a5c89a65d7b96245e04060013
2023-10-31 21:05:04 +00:00
Kubernetes Prow Robot
3631efd85c Merge pull request #121651 from jiahuif-forks/fix/cel/type-resolver-safe-guard
CEL type resolvers: avoid infinite recursion for type resolvers.
2023-10-31 21:50:37 +01:00
Anish Ramasekar
26e3a03d12 Implement CEL and wire it with OIDC authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-10-31 20:16:09 +00:00
Kubernetes Prow Robot
dba565193c Merge pull request #121104 from carlory/kep-3751-api-changes
[KEP-3571] introduce the VolumeAttributesClass API
2023-10-31 20:23:50 +01:00
Kubernetes Prow Robot
07d2da75bd Merge pull request #120707 from Jefftree/csa-openapiv3
Use OpenAPI V3 for client side SMP
2023-10-31 20:23:27 +01:00
Lukasz Szaszkiewicz
7e35823690 cacher: when forgeting a watcher, call stopWatcherLocked multiple times
It's possible that the watcher is already not in the structure (e.g. in case of
simultaneous Stop() and terminateAllWatchers(), but it is safe to call stopLocked()
on a watcher multiple times.
2023-10-31 19:43:35 +01:00
Kubernetes Prow Robot
0294521985 Merge pull request #121649 from enj/enj/c/ec_controller_ctx
encryptionconfig/controller: run unit tests faster
2023-10-31 19:16:56 +01:00
Kubernetes Prow Robot
3570075e4f Merge pull request #121647 from aojea/fixrace
Revert "cacher: when forgeting a watcher, call stopWatcherLocked mult…
2023-10-31 19:16:47 +01:00
Kubernetes Prow Robot
be636a436b Merge pull request #121646 from kubernetes/revert-121614-decode-respect-timeout-context
Revert "Make the decode function respect the timeout context"
2023-10-31 19:16:38 +01:00
Kubernetes Prow Robot
d1113c9a00 Merge pull request #121577 from cici37/celFixPick
Bump cel-go to v0.17.7 and introduce set ext library with new options
2023-10-31 19:16:29 +01:00
Kubernetes Prow Robot
418e9d08a4 Merge pull request #120592 from AxeZhan/validation_sets
Use generic set in package "/pkg/apis/core/validation"
2023-10-31 19:16:02 +01:00
Kubernetes Prow Robot
5d03ce7ae4 Merge pull request #120354 from aroradaman/proxy-conntrack-api
Add support for `nf_conntrack_tcp_be_liberal` sysctl to kube-proxy
2023-10-31 19:15:44 +01:00
Jiahui Feng
e4776e0f85 avoid infinite recursion for type resolvers. 2023-10-31 10:23:50 -07:00
Jefftree
eb32969ab8 Lazy load OpenAPIV2 2023-10-31 12:45:45 -04:00
Jefftree
f23ab829be Add feature toggle for OpenAPI V3 apply in kubectl 2023-10-31 12:45:45 -04:00
Jefftree
e7216c6623 use OpenAPIV3 for kubectl diff 2023-10-31 12:45:45 -04:00
Jefftree
4f3b0b1518 Use OpenAPI V3 for client side SMP 2023-10-31 12:45:45 -04:00
Anish Ramasekar
6b971153d7 add new fields in v1alpha1 StructuredAuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-10-31 16:45:01 +00:00
Monis Khan
6ac7da1da8 encryptionconfig/controller: run unit tests faster
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-10-31 11:59:37 -04:00
Antonio Ojea
c2cb320913 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
This reverts commit bbca4a4b9a.
2023-10-31 15:28:01 +00:00
Wojciech Tyczynski
98a2f22e74 Revert "Make the decode function respect the timeout context" 2023-10-31 16:27:17 +01:00
Kubernetes Prow Robot
74fefd877f Merge pull request #121638 from tkashem/apf-ga
apiserver: set APF featuregate to stable
2023-10-31 15:57:57 +01:00
Abu Kashem
c7fcef1875 apiserver: set APF featuregate to ga 2023-10-31 08:46:24 -04:00
Kubernetes Prow Robot
5bac451d1f Merge pull request #121615 from p0lyn0mial/upstream-cacher-forget-watcher
cacher: when forgeting a watcher, call stopWatcherLocked multiple times
2023-10-31 13:14:14 +01:00
Kubernetes Prow Robot
064e86b3d0 Merge pull request #121223 from ritazh/authz-cel
[StructuredAuthorizationConfig] - CEL integration
2023-10-31 13:13:56 +01:00
Kubernetes Prow Robot
e8d45596df Merge pull request #121049 from siyuanfoundation/refactor
k8s.io/apiserver/storage/etcd: refactor etcd GetList.
2023-10-31 10:49:33 +01:00
Rita Zhang
31c76e9abb authz: add cel expression to webhook matchconditions
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-10-30 21:48:00 -07:00
carlory
56ab6c5942 generated changes 2023-10-31 11:26:35 +08:00
carlory
ae90a69677 volumeattributesclass and core api changes 2023-10-31 11:18:56 +08:00
Kubernetes Prow Robot
f5a5d83d7c Merge pull request #121089 from tkashem/apf-v1
Promote APF API to v1
2023-10-31 02:39:30 +01:00
Kubernetes Prow Robot
ab13d0b47c Merge pull request #120780 from munnerz/bound-token-improvements
Including JTI & node reference in issued service account tokens (kep 4193)
2023-10-31 01:22:56 +01:00
Kubernetes Prow Robot
2a4d5c5fd5 Merge pull request #120300 from wojtek-t/refactor_streaming_watch_encoder
Refactor streaming watch encoder to enable caching
2023-10-31 00:09:12 +01:00
Antoine Pelisse
9d1847c196 managedfields: Allow duplicates for built-in updates associative lists 2023-10-30 15:55:50 -07:00
Antoine Pelisse
dec443b305 Update sigs.k8s.io/structured-merge-diff to v4.4.1 2023-10-30 15:34:18 -07:00
Abu Kashem
b8cd792b36 rename the roundtrip annotation, forbid it in v1 2023-10-30 18:22:51 -04:00
Kubernetes Prow Robot
2a1140305c Merge pull request #121614 from HirazawaUi/decode-respect-timeout-context
Make the decode function respect the timeout context
2023-10-30 22:42:26 +01:00
Kubernetes Prow Robot
c7bb17ebd0 Merge pull request #121600 from seans3/load-openapi-explain
Lazy-load OpenAPI V2 Specifications for kubectl explain
2023-10-30 22:42:17 +01:00
Kubernetes Prow Robot
08070433cc Merge pull request #121373 from cici37/crdGA
[KEP-2876] Promote CRD validation rule to GA
2023-10-30 22:42:09 +01:00
Kubernetes Prow Robot
07515c0021 Merge pull request #121311 from nilekhc/validation-doc
chore: updates api doc
2023-10-30 22:41:59 +01:00
Kubernetes Prow Robot
4106366b6d Merge pull request #121065 from byako/issue121063
DRA: notify ResourceClaim or ResourceClass of params error
2023-10-30 22:41:41 +01:00
James Munnelly
76463e21d4 KEP-4193: bound service account token improvements 2023-10-30 21:15:10 +00:00
Kubernetes Prow Robot
d4592dc70a Merge pull request #121310 from nilekhc/polling
[KMSv2] feat: updates encryption config file watch logic to polling
2023-10-30 21:11:42 +01:00
Kubernetes Prow Robot
ceea5fd0cb Merge pull request #119109 from jiahuif-forks/feature/validating-admission-policy/crd-typechecking
ValidatingAdmissionPolicy - Type Checking for API Expensions types
2023-10-30 21:11:19 +01:00
Siyuan Zhang
a968f51fa2 k8s.io/apiserver/storage/etcd: refactor etcd GetList.
Reorder some code.

Signed-off-by: Siyuan Zhang <sizhang@google.com>
2023-10-30 12:48:32 -07:00
Siyuan Zhang
84ec5e2ecc k8s.io/apiserver/storage/etcd: refactor etcd GetList.
reduce redundant update of withRev after request.

Signed-off-by: Siyuan Zhang <sizhang@google.com>
2023-10-30 12:38:34 -07:00
Cici Huang
8d804078f9 Add set ext library into Kubernetes and pick up the new option cel provides 2023-10-30 19:08:42 +00:00
Cici Huang
70c1f2143f Bump cel-go to v0.17.7 2023-10-30 19:08:22 +00:00
Kubernetes Prow Robot
16fc00493b Merge pull request #121307 from cici37/celUpdate
Add cel new validator into Kubernetes
2023-10-30 20:02:55 +01:00
Nilekh Chaudhari
d3de47ceee chore: updates api doc
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2023-10-30 18:43:30 +00:00
Jiahui Feng
4fa3247a61 use context for lazy evaluation. 2023-10-30 11:29:57 -07:00