Commit Graph

20744 Commits

Author SHA1 Message Date
cpanato
e86e756c27 Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
Signed-off-by: cpanato <ctadeu@gmail.com>
2023-10-09 11:38:01 +02:00
calvin
6e0ece85c4 cleanup the retrun style for cp execute function
Signed-off-by: calvin <wen.chen@daocloud.io>
2023-10-07 19:05:50 +08:00
SataQiu
4a8267f26b kubectl: ensure '--duration' must be positive for 'kubectl create token' command 2023-10-07 11:19:33 +08:00
Kubernetes Prow Robot
9bea6bda05 Merge pull request #121021 from cpanato/update-go-1212
[go] Bump images, dependencies and versions to go 1.21.2
2023-10-06 22:34:58 +02:00
Kubernetes Prow Robot
e339e03ff8 Merge pull request #120814 from Jefftree/fix-openapiv2-aggregator-apiservice
Fix AddUpdateAPIService for openapiv2
2023-10-06 21:21:32 +02:00
Jefftree
89adbb4b4a Unit & integration tests for OpenAPIV2 AddUpdateAPIService 2023-10-06 12:57:57 -04:00
Jefftree
83fb504e46 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 2023-10-06 12:57:56 -04:00
cpanato
619abfec70 [go] Bump images, dependencies and versions to go 1.21.2
Signed-off-by: cpanato <ctadeu@gmail.com>
2023-10-06 15:18:34 +02:00
Kubernetes Prow Robot
5ff79611d5 Merge pull request #120400 from neolit123/1.29-fix-bootstrap-token-constant-time
cluster-bootstrap: address constant-time problems as in NCC-E003660-TTV
2023-10-06 11:57:55 +02:00
Kubernetes Prow Robot
d0dfe64334 Merge pull request #120975 from ardaguclu/close-heartbeat-explicitly
Close websocket heartbeat explicitly when unexpected closure received
2023-10-06 09:05:47 +02:00
Arda Güçlü
a888fef242 Use timeout function to detect transient errors 2023-10-06 08:55:22 +03:00
Jiahui Feng
0f63298829 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
(cd staging/src/k8s.io/api/ && env UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test)
2023-10-05 14:56:21 -07:00
Jiahui Feng
3808812de7 ValidatingAdmissionPolicySpec: Variables omitempty. 2023-10-05 13:06:13 -07:00
Lubomir I. Ivanov
1d519f1b08 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
The function uses BootstrapTokenRegexp.MatchString(token)
which is not a recommended practice.

Instead, break down the token into its components: ID, secret.
The ID is public thus we can use Regexp matching for it.
The secret needs constant time comparison. Iterate over
every character and make sure it fits the 0-9a-z range and that
it has a length of 16.
2023-10-05 13:47:23 +03:00
Arda Güçlü
914210ee9a revert back to IsUnexpectedCloseError check 2023-10-05 12:04:06 +03:00
Arda Güçlü
e1ae906048 Close websocket heartbeat explicitly when unexpected closure received 2023-10-05 11:22:11 +03:00
Jiahui Feng
c03579bfa4 typed variables support. 2023-10-04 16:39:24 -07:00
Tim Hockin
69a3e3d108 Add --extra-peer in conversion in kube_codegen
This is not used internally, but is needed by external projects which
use the old script, making this sort of a regression.
2023-10-04 13:26:59 -07:00
Kubernetes Prow Robot
6f5fa2eb2f Merge pull request #120985 from palnabarun/3221/fix-authorizer-name
[StructuredAuthorizationConfiguration] Fix the level at which authorizer name is surfaced
2023-10-04 15:45:29 +02:00
Kubernetes Prow Robot
f936f69cf9 Merge pull request #120729 from pohly/events-context
k8s.io/client-go/tools/[events|record]: support context
2023-10-04 15:45:16 +02:00
Kubernetes Prow Robot
56f330493c Merge pull request #120822 from akhilerm/change-from-deprecated-fields
update rules to switch from deprecated dir field
2023-10-04 14:00:38 +02:00
Kubernetes Prow Robot
c9bd841cdf Merge pull request #120984 from p0lyn0mial/upstream-reflector-always-fallback-to-listwatch
reflector: fallback to the previous mode on any error
2023-10-04 12:03:07 +02:00
Lukasz Szaszkiewicz
4b39150179 reflector: fallback to the previous mode on any error
originally we honored only apierrors.IsInvalid
but decided to fallback on every error
because it is better to make progress than deadlocking
2023-10-04 10:10:26 +02:00
Nabarun Pal
11ce6d2915 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-10-04 10:33:58 +05:30
Kubernetes Prow Robot
3c94af73e1 Merge pull request #118299 from rexagod/kep-2305
KEP-2305: introduce allow-metric-labels-manifest
2023-10-04 03:03:07 +02:00
Kubernetes Prow Robot
fe84992651 Merge pull request #120542 from alvaroaleman/condition-change
Apimeta Set/RemoveStatusCondition: Indicate change
2023-10-03 20:20:21 +02:00
Qiming Teng
c65fe450d8 Generated files 2023-10-03 20:16:10 +08:00
Lukasz Szaszkiewicz
26f113be2f reflector: close an established watcher when the StopCh was closed 2023-10-03 13:49:21 +02:00
Qiming Teng
e7b2aeee93 Fix API docs for audit APIs
The `*`s in the source comment is confusing the API reference generator.
They are treated as symbols for bold texts when generating reference docs.
This PR replaces the quote marks with backtiqs so that the reference
generator can properly handle them.
2023-10-03 17:18:23 +08:00
Kubernetes Prow Robot
6a84edb2ce Merge pull request #120222 from tkashem/apf-queue-wait-ctx
apf: manage request queue wait with context in APF Filter
2023-10-03 11:16:18 +02:00
Kubernetes Prow Robot
0b63390add Merge pull request #119303 from abidmunirmalik/kubectl_doc_fix
fixes the issue in the documentation of kubectl events
2023-10-01 09:50:44 -07:00
Dan Winship
6c9ddf300c update generated 2023-09-30 10:19:10 -04:00
Dan Winship
9242cb1934 Rearrange kube-proxy config fields / CLI flags to make more sense. 2023-09-30 10:19:07 -04:00
Dan Winship
44cb330aa0 Improve kube-proxy config / CLI documentation 2023-09-30 10:18:16 -04:00
Kubernetes Prow Robot
622509830c Merge pull request #120716 from xrstf/fix-typos
Fix typos
2023-09-30 00:25:56 -07:00
Kubernetes Prow Robot
46728a8fa2 Merge pull request #120896 from aramase/aramase/f/kmsv2_pkcs11
[KMSv2] pkcs11 reference implementation using SoftHSM
2023-09-29 12:11:56 -07:00
Anish Ramasekar
d2a3184c47 remove pkg/encrypt and pkg/value in kms
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:32 +00:00
Anish Ramasekar
e764e83fe8 remove mock aes, latency and ratelimit wrapper remote services
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:32 +00:00
Anish Ramasekar
2f5708833a [KMSv2] pkcs11 reference implementation using SoftHSM
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:26 +00:00
Kubernetes Prow Robot
46dea3015f Merge pull request #120050 from DamianSawicki/some-tests
Add tests for extract tag functions in prereleaselifecyclegenerators
2023-09-29 09:10:43 -07:00
Kubernetes Prow Robot
bf1fa0c669 Merge pull request #119865 from charles-chenzz/bump_deps
bump github.com/emicklei/go-restful/v3 to v3.11.0
2023-09-28 06:42:34 -07:00
Jefftree
61603d36d7 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec 2023-09-27 12:02:38 -04:00
Kubernetes Prow Robot
1020678366 Merge pull request #120908 from sttts/sttts-optional-authz
controlplane/apiserver: don't crash if authz or other options are explicitly disabled in options
2023-09-27 07:36:25 -07:00
Kubernetes Prow Robot
bdedc21fd9 Merge pull request #120490 from p0lyn0mial/upstream-watch-list-cache-metrics
collect watch-list requests latency metric
2023-09-27 07:36:12 -07:00
Dr. Stefan Schimanski
6395049176 controlplane: make option structs uniformly optional
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2023-09-27 11:22:37 +02:00
Lukasz Szaszkiewicz
a97f4b7a31 endpoints/metrics: define watchListLatencies metric and associated functions 2023-09-27 09:29:19 +02:00
Patrick Ohly
5dc540ff57 k8s.io/client-go/tools/events: pass context into EventSink methods
Because the EventBroadcaster code now has a a context, changing the EventSink
interface so that the methods accepts a context instead of using context.TODO
becomes possible.
2023-09-27 09:06:12 +02:00
Patrick Ohly
27a68aee3a k8s.io/client-go/tools: support context for event recording
Using StartRecordingToSinkWithContext instead of StartRecordingToSink and
StartLogging instead of StartStructuredLogging has several advantages:

- Spawned goroutines no longer get stuck for extended periods of
  time during shutdown when passing in a context that gets canceled.
- Log output can be directed towards a specific logger instead of the global
  default, for example one which writes to a testing.T instance.
- The new methods return an error when something went wrong instead of
  merely recording the error.

That last point is the reason for deprecating the old methods instead of merely
adding new alternatives.

Setting a context when constructing an EventBroadcaster makes calling Shutdown
optional. It can also be used to specify the logger.

Both EventRecorder interfaces in tools/events and tools/record now have a
WithLogger helper. Using that method is optional, but recommended to support
contextual logging properly. Without it, errors that occur while emitting an
event are not associated with the caller.
2023-09-27 09:06:09 +02:00
Lukasz Szaszkiewicz
772b1f4cd8 handlers/watch: calculate and record WatchList latency metric. 2023-09-27 09:03:52 +02:00
Kubernetes Prow Robot
139fa69620 Merge pull request #120877 from soltysh/unbound_variable
Default clientset_pkg and clientset_name variables
2023-09-26 12:05:09 -07:00