Wojciech Tyczyński
a5772bd425
Implement resilient watchcache initialization post-start-hook
2024-07-01 12:54:57 +02:00
Kubernetes Prow Robot
522e2e5066
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
2024-06-27 20:39:51 -07:00
Vinayak Goyal
5e6a4937f5
KEP-4633: Allow health-only anonymous auth mode.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com >
2024-06-28 00:30:05 +00:00
Siyuan Zhang
379676c4be
add DefaultComponentGlobalsRegistry flags in ServerRunOptions
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
4352c4ad27
Add version mapping in ComponentGlobalsRegistry.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
701e5fc374
Add composition flags for emulation version and feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
403301bfdf
apiserver: Add API emulation versioning.
...
Co-authored-by: Siyuan Zhang <sizhang@google.com >
Co-authored-by: Joe Betz <jpbetz@google.com >
Co-authored-by: Alex Zielenski <zielenski@google.com >
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
TommyStarK
cce8551272
kube-apiserver: remove deprecated otel NewNoopTracerProvider
...
Signed-off-by: TommyStarK <thomasmilox@gmail.com >
2024-06-07 19:57:37 +02:00
Dr. Stefan Schimanski
3daae717c3
controlplane: split out SystemNamespaces
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-27 14:19:56 +02:00
Kubernetes Prow Robot
722503e9e5
Merge pull request #121390 from wojtek-t/disable_paging
...
Remove ability to disable pagination at store level
2023-10-24 18:55:16 +02:00
Wojciech Tyczyński
b386120da2
Remove storageConfig.Paging parameter
2023-10-20 15:35:58 +02:00
Nabarun Pal
22e5a806a7
Add --authorization-config flag to apiserver
...
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com >
2023-10-18 11:58:47 +05:30
Anish Ramasekar
9e1ff1e512
add loading config and wire feature flag
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com >
2023-08-30 23:14:56 +00:00
Dr. Stefan Schimanski
36e458612a
cmd/kube-apiserver: move back master count variable from generic controlplane
2023-07-03 13:20:29 +02:00
Dr. Stefan Schimanski
764da8a01d
FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
2023-06-26 21:50:38 +02:00
Dr. Stefan Schimanski
1b3779baa0
MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
2023-06-26 21:50:37 +02:00
Monis Khan
754cb3d601
kubelet/client: collapse transport wiring onto standard approach
...
Signed-off-by: Monis Khan <mok@microsoft.com >
2023-02-06 20:34:49 -05:00
Andrew Sy Kim
02020b20e7
kube-apiserver: remove flags --identity-lease-duration-seconds and --identity-lease-renew-interval-seconds
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com >
2022-11-07 19:36:22 -05:00
Di Jin
0b400cf6aa
Add an option for aggregator
2022-09-01 15:25:26 -07:00
Sally O'Malley
47e7d8034f
kubelet tracing
...
Signed-off-by: Sally O'Malley <somalley@redhat.com >
Co-authored-by: David Ashpole <dashpole@google.com >
2022-08-01 12:55:02 -04:00
Maciej Wyrzuc
b42045a64f
Add additional etcd check to readyz with 2 seconds timeout.
2022-07-27 12:23:02 +00:00
carlory
fcc282f9f2
remove audit.k8s.io/v1[alpha|beta]1 versions
2022-03-08 14:37:26 +08:00
Antonio Ojea
0cd75e8fec
run hack/update-netparse-cve.sh
2021-08-20 10:42:09 +02:00
David Ashpole
79550ed40c
Add distributed tracing to the apiserver using OpenTelemetry
2021-06-25 05:20:27 -07:00
Ling Samuel
c8db72c38c
api-server add --lease-max-object-count
...
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com >
2021-02-01 18:20:59 +08:00
Ling Samuel
7e9fe39cd7
apiserver add metric etcd_lease_object_counts
...
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com >
2021-01-11 21:22:07 +08:00
Ling Samuel
c99567005d
apiserver add --lease-reuse-duration-seconds to config lease reuse duration
...
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com >
2020-12-04 19:19:49 +08:00
Kubernetes Prow Robot
281866b35c
Merge pull request #95533 from roycaihw/apiserver-lease-controller
...
Add kube-apiserver lease controller
2020-11-06 18:09:37 -08:00
Haowei Cai
3761a00e5b
add kube-apiserver-lease-controller poststart hook
2020-11-06 13:33:08 -08:00
Shihang Zhang
4c593b268a
default service-account-extend-token-expiration
to true
2020-11-05 09:07:01 -08:00
Kubernetes Prow Robot
e0a51c9e6b
Merge pull request #93244 from Sh4d1/etcd_health_timeout
...
Allow configuration of etcd healthcheck timeout
2020-11-05 01:06:53 -08:00
Abu Kashem
53a1307f68
make backoff parameters configurable for webhook
...
Currently webhook retry backoff parameters are hard coded, we want
to have the ability to configure the backoff parameters for webhook
retry logic.
2020-11-01 10:18:25 -05:00
knight42
cfc2b330a7
refactor(apiserver): ignore the insecure flags
...
Leave the insecure flags intact but stop serving on insecure port.
2020-10-29 23:20:17 +08:00
Patrik Cyvoct
2e430ba622
Allow configuration of etcd healthcheck timeout
...
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io >
2020-10-07 19:13:19 +02:00
Daniel Smith
a86afc12df
update scripts
2020-09-02 10:49:40 -07:00
Daniel Smith
15e0e3e90e
rename
2020-09-02 10:48:26 -07:00
Kubernetes Prow Robot
8ec5747fe5
Merge pull request #91501 from tahsinrahman/add-apiserver-logging-flag
...
Add `--logging-format` flag for kube-apiserver
2020-07-03 12:24:47 -07:00
Kubernetes Prow Robot
7bd4c53b27
Merge pull request #91630 from liggitt/kube-apiserver-kubelet-https
...
Mark --kubelet-https deprecated, unconditionally use https for apiserver->kubelet connections
2020-06-02 02:02:14 -07:00
Jordan Liggitt
2e8461a5bc
Mark --kubelet-https deprecated, unconditionally use https for apiserver->kubelet connections
2020-06-01 20:54:49 -04:00
tahsinrahman
201f869c66
Add --logging-format flag for kube-apiserver
2020-05-28 11:39:04 +08:00
David Eads
ed4e6f1026
remove dynamic audit
2020-05-27 15:18:53 -04:00
Marek Siarkowicz
24321b2d4e
Refactor show-hidden-metric-for-version flag
2020-04-08 22:42:14 +02:00
Kubernetes Prow Robot
0804667ff1
Merge pull request #89151 from jingyih/add_metric_etcd_db_size
...
apiserver: add a metric exposing etcd database size
2020-03-31 12:37:00 -07:00
jingyih
922ec728de
Add a metric exposing etcd database size
2020-03-31 09:02:38 -07:00
Monis Khan
df292749c9
Remove support for basic authentication
...
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag. This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.
Similar functionality is available via the --token-auth-file flag
for development purposes.
Signed-off-by: Monis Khan <mok@vmware.com >
2020-03-11 20:55:47 -04:00
Jonathan Tomer
711c1e1720
Rename --enable-inflight-quota-handler to --enable-priority-and-fairness.
...
The old flag name doesn't make sense with the renamed API Priority and
Fairness feature, and it's still safe to change the flag since it hasn't done
anything useful in a released k8s version yet.
2020-02-27 14:04:37 -08:00
Mike Spreitzer
73614ddd4e
Added API Priority and Fairness filter and config consumer
2020-02-10 22:54:40 -05:00
Jordan Liggitt
d54a70db5c
Switch kubelet/aggregated API servers to use v1 subjectaccessreviews
2019-11-11 17:19:11 -05:00
Jordan Liggitt
5ef4fe959a
Switch kubelet/aggregated API servers to use v1 tokenreviews
2019-11-11 17:19:10 -05:00
Wenjia Zhang
9ead9373f3
Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle
2019-10-24 14:09:24 -07:00