Commit Graph

20744 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
599d92f1fb Merge pull request #123190 from padlar/add-apiserver-wait-cache-metric
Add apiserver_watch_cache_read_wait metric to cache refresh time
2024-03-04 11:23:32 -08:00
Sean Sullivan
3d56ff21fd adds comments to tunnelingResponseWriter 2024-03-04 11:10:30 -08:00
Sean Sullivan
33af937b4a re-write fallback dialer unit test 2024-03-04 11:10:30 -08:00
Sean Sullivan
e8bbb221d3 removes extra upgrade aware proxy logging; returns tunneling connection close error 2024-03-04 11:10:30 -08:00
Jordan Liggitt
2443b3fa69 Fix headerInterceptingConn handling 2024-03-04 11:10:30 -08:00
Sean Sullivan
9e15462843 adds return context in RunPortForward() 2024-03-04 11:10:30 -08:00
Sean Sullivan
8b447d8c97 portforward: tunnel spdy through websockets 2024-03-04 11:10:30 -08:00
Jordan Liggitt
79b344d85e Add authorization webhook duration/count/failopen metrics 2024-03-04 14:01:15 -05:00
Marek Siarkowicz
1cf4cec449 Test that separation of streams work by using progress notifies 2024-03-04 19:02:04 +01:00
Monis Khan
8345ad0bac jwt: fail on empty username via CEL expression
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal
606cae9b47 Add new metric servicesCountByTrafficDistribution 2024-03-04 09:33:40 -08:00
Monis Khan
05e1eff793 Prevent conflicts between service account and jwt issuers
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 11:40:02 -05:00
Marek Siarkowicz
31d404b182 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior 2024-03-04 12:51:06 +01:00
Patrick Ohly
02b4e99c9f cel: fix conversion of quantity to quantity
The code in ConvertToType checked for conversion into typeValue (=
"kubernetes.URL") instead of conversion into quantityTypeValue (=
"kubernetes.Quantity") and thus most likely failed with an incorrect "type
conversion error".
2024-03-04 12:23:54 +01:00
Kubernetes Prow Robot
a4eaf6e120 Merge pull request #123660 from xigang/cacher/watch
cleanup: if triggerValue has a value fast break
2024-03-04 01:17:02 -08:00
Gaurav Ghildiyal
51a3fa2e6f Start reconciling on the new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
9513f75089 Add trafficdist package for handling reconciliation of new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
646fd200b8 Run 'make update' 2024-03-03 22:46:00 -08:00
Gaurav Ghildiyal
996d11d4e8 Add new field trafficDistribution to Service spec 2024-03-03 22:34:17 -08:00
Kubernetes Prow Robot
e4a14fe0f5 Merge pull request #123575 from Huang-Wei/pod-scheduling-readiness-stable
Graduate PodSchedulingReadiness to stable
2024-03-03 22:29:38 -08:00
xigang
d72448a41c cleanup: if triggerValue has a value, fast break
Signed-off-by: xigang <wangxigang2014@gmail.com>
2024-03-04 10:29:31 +08:00
Anish Ramasekar
78fb0bae22 wire up discovery url in authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 17:34:51 -08:00
Anish Ramasekar
84852ff56f Add DiscoveryURL to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 16:57:24 -08:00
Kubernetes Prow Robot
6d2ee131eb Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
2024-03-03 16:27:50 -08:00
Anish Ramasekar
0da5e8137b Add apiserver_authentication_jwt_authenticator_latency_seconds metric
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-02 17:12:19 -08:00
Kubernetes Prow Robot
4164e7c3a7 Merge pull request #123629 from thockin/master
Get rid of unused API type NodeResources
2024-03-02 12:33:18 -08:00
Kubernetes Prow Robot
8674282a05 Merge pull request #123640 from liggitt/authz-beta-config
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
2024-03-02 10:26:26 -08:00
Jordan Liggitt
30256c8909 Promote StructuredAuthorizationConfiguration feature gate to beta 2024-03-02 02:12:36 -05:00
Jordan Liggitt
0605a75c5e Duplicate v1alpha1 AuthorizationConfiguration to v1beta1 2024-03-02 02:00:31 -05:00
Kubernetes Prow Robot
0a31504ee1 Merge pull request #123635 from seans3/remotecommand-write-deadline
Increase client-side websocket write deadline
2024-03-01 22:05:51 -08:00
Kubernetes Prow Robot
95875b7723 Merge pull request #123634 from liggitt/handler-race
Fix discovery v2 conversion registration data race
2024-03-01 19:48:37 -08:00
Sean Sullivan
1d4be7527f increases client-side websocket write deadline to 30 seconds 2024-03-01 19:34:36 -08:00
Kubernetes Prow Robot
3e1da21801 Merge pull request #123611 from ritazh/authz-mcmetrics
Add authz webhook matchcondition metrics
2024-03-01 18:49:17 -08:00
Kubernetes Prow Robot
65d75501f7 Merge pull request #123484 from erikgb/csa-upgrade-subresource
Add option to upgrade subresource from CSA to SSA
2024-03-01 18:49:08 -08:00
Kubernetes Prow Robot
4e8674f4e5 Merge pull request #122975 from aramase/aramase/c/cleanup_authn_validation
cleanup structured authn/authz error logic
2024-03-01 16:59:47 -08:00
Jordan Liggitt
0e9cdf76ad Fix discovery v2 conversion registration data race 2024-03-01 19:29:39 -05:00
Kubernetes Prow Robot
55e4172a0d Merge pull request #123536 from benluddy/cbor-roundtrip-unit-via-interface
KEP-4222: Make CBOR roundtrip tests pass through interface{}.
2024-03-01 15:59:31 -08:00
Tim Hockin
467d5d745c Get rid of unused API type NodeResources 2024-03-01 15:13:50 -08:00
Rita Zhang
e76fce7566 add authz webhook matchcondition metrics
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Signed-off-by: Jordan Liggitt <liggitt@google.com>
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2024-03-01 14:41:27 -08:00
Kubernetes Prow Robot
138f99b41a Merge pull request #123436 from dinhxuanvu/cbor-tests
KEP-4222: Add duplicate key and field case-sensitivity CBOR decode tests.
2024-03-01 14:41:11 -08:00
Kubernetes Prow Robot
3f25211d69 Merge pull request #122882 from Jefftree/agg-discovery-v2-usage
Use Aggregated Discovery v2 types and promote to GA
2024-03-01 14:41:02 -08:00
Erik Godding Boye
9633e25579 feat: add csaupgrade option to upgrade subresource 2024-03-01 23:27:30 +01:00
Ben Luddy
1503997b4f Make CBOR roundtrip cases pass through interface{} as well. 2024-03-01 16:48:12 -05:00
Kubernetes Prow Robot
fc4613f996 Merge pull request #123570 from Jefftree/filter-openapi-agg
Filter aggregated apiservice gv filter for OpenAPI
2024-03-01 13:41:11 -08:00
Jefftree
9a404b590b Filter aggregated apiservice gv 2024-03-01 20:39:57 +00:00
Jefftree
462dd326c2 Use v2 types with agg discovery 2024-03-01 13:15:22 -05:00
Jefftree
301e804c3f Promote AggregatedDiscovery to GA 2024-03-01 13:15:22 -05:00
Jefftree
0593746f60 Remove test for disabling aggregated discovery 2024-03-01 13:15:22 -05:00
Kubernetes Prow Robot
df366107d1 Merge pull request #123529 from thockin/go-workspaces
Go workspaces for k/k and k/staging/*
2024-03-01 08:43:03 -08:00
Kubernetes Prow Robot
d51e2da869 Merge pull request #123613 from aojea/revert_ccm
Revert "[cloud-provider] require providerID to initialize node"
2024-03-01 05:35:47 -08:00