Han Kang
54dcf5c9c4
add readyz endpoint for kube-apiserver readiness checks
...
add startup sequence duration and readyz endpoint
add rbac bootstrapping policy for readyz
add integration test around grace period and readyz
rename startup sequence duration flag
copy health checks to fields
rename health-check installed boolean, refactor clock injection logic
cleanup clock injection code
remove todo about poststarthook url registration from healthz
2019-06-17 11:16:13 -07:00
wangqingcan
52f3380ef3
change preempting to PreemptionPolicy
2019-05-31 12:42:05 +08:00
wangqingcan
5c9438c691
non-preempting-priorityclass
...
Co-authored-by: Vallery Lancey <vallery@zeitgeistlabs.io>
Co-authored-by: Tan shanshan <tan.shanshan@zte.com.cn>
2019-05-31 12:37:07 +08:00
Kubernetes Prow Robot
b8eecd671d
Merge pull request #69941 from miguelbernadi/fix-golint-issues-68026
...
Fix golint issues in plugin/pkg/admission
2019-05-30 08:38:26 -07:00
Vladimir Vivien
8e0cf65310
Enforce pod security policy for CSI inline
2019-05-29 15:38:21 -04:00
Joe Betz
cc2e3616f0
Add WithReinvocationTesting utility for ensuring that admission plugin reinvocation is idempotent
2019-05-28 15:10:22 -07:00
Joe Betz
9b504c474c
Fix podpreset merging of envFrom to be idempontent
2019-05-28 11:16:56 -07:00
Morten Torkildsen
f1883c9e8c
Support scale subresource for PDBs ( #76294 )
...
* Support scale subresource for PDBs
* Check group in finder functions
* Small fixes and more tests
2019-05-23 22:24:17 -07:00
Miguel Bernabeu
f47da8a75d
Fix golint violations in several plugins
2019-05-23 20:00:06 +02:00
Kubernetes Prow Robot
d5876954e1
Merge pull request #76178 from humblec/endpoint
...
Create endpoint/service early to avoid unwanted create/delete volume transaction.
2019-05-22 09:58:09 -07:00
Zihong Zheng
bff5f08e19
Allow service controller role to patch service status
...
Co-authored-by: Josh Horwitz <horwitzja@gmail.com>
2019-05-16 17:30:43 -07:00
Joe Betz
900d652a9a
Update tests for: Pass {Operation}Option to Webhooks
2019-05-14 10:49:43 -07:00
Kubernetes Prow Robot
09c4e10333
Merge pull request #74021 from andrewsykim/move-features-component-base
...
Move feature gate package from k8s.io/apiserver to k8s.io/component-base
2019-05-08 13:06:34 -07:00
Daniel (Shijun) Qian
5268f69405
fix duplicated imports of k8s code ( #77484 )
...
* fix duplicated imports of api/core/v1
* fix duplicated imports of client-go/kubernetes
* fix duplicated imports of rest code
* change import name to more reasonable
2019-05-08 10:12:47 -07:00
Andrew Kim
c919139245
update import of generic featuregate code from k8s.io/apiserver/pkg/util/feature -> k8s.io/component-base/featuregate
2019-05-08 10:01:50 -04:00
Jordan Liggitt
58f2cdccf7
Add quota admission test for decreasing usage without covering quota
2019-05-02 10:29:08 -04:00
Mansi Agarwal
4466f97d0e
Accept admission request if resource is being deleted
2019-04-30 10:59:27 -07:00
Jordan Liggitt
4e6a8fbd15
Short-circuit quota admission rejection on zero-delta updates
2019-04-26 17:30:20 -07:00
Humble Chirammal
7544b53693
Create endpoint/service early to avoid unwanted create/delete volume transaction.
...
At times, for some reason endpoint/service creation can fail in a setup. As we
currently create endpoint/service after volume creation, later we need rollback
of this volume transaction if endpoint/service creation failed. Considering
endpoint/service creation is light weight, this patch promote endpoint/service
creation to an early stage.
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2019-04-10 19:06:27 +05:30
Bobby (Babak) Salamat
16a7cbd320
generated files
2019-04-05 14:30:52 -07:00
Bobby (Babak) Salamat
8574e3e3f4
Use Scheduling V1 API instead of Scheduling v1beta1
2019-04-05 14:21:45 -07:00
Kubernetes Prow Robot
16db83b257
Merge pull request #75985 from ravisantoshgudimetla/fix-pod-toleration
...
Fix besteffort pods for conflicting tolerations
2019-04-05 07:43:20 -07:00
ravisantoshgudimetla
82ffd14c0d
Fix besteffort pods for conflicting tolerations
...
Signed-off-by: ravisantoshgudimetla <ravisantoshgudimetla@gmail.com>
2019-04-02 10:37:27 -04:00
Guoliang Wang
128fd8843d
Move cloud-specific roles out of RBAC bootstrap
2019-04-02 19:17:53 +08:00
Kubernetes Prow Robot
484043a6d1
Merge pull request #75627 from ialidzhikov/fix-lint-error
...
Fix lint issues
2019-03-29 14:48:59 -07:00
Kubernetes Prow Robot
a8cbb22506
Merge pull request #74747 from liggitt/quota-deadlock
...
quota controller fixes
2019-03-27 09:04:48 -07:00
Kubernetes Prow Robot
ccc90b2ba6
Merge pull request #75680 from tallclair/psp-refactor
...
Clean up some PodSecurityPolicy code
2019-03-26 21:59:01 -07:00
Jordan Liggitt
bef996d0a4
Only reject quota admission if status is missing relevant usage
2019-03-26 23:15:40 -04:00
Kubernetes Prow Robot
531dbd409f
Merge pull request #75445 from shinytang6/enhance/fmt
...
Replace all time.Now().Sub with time.Since
2019-03-26 13:55:17 -07:00
Tim Allclair
e5d2cad7b9
Refactor PSP provider
2019-03-25 11:46:36 -07:00
WanLinghao
244b244f9d
Migrate the controller to use TokenRequest and rotate token periodically
2019-03-25 14:54:22 +08:00
ialidzhikov
8272fc54cb
Fix lint issues
...
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-03-23 14:46:18 +02:00
shinytang6
5c9f4d9dc6
replace time.Now().Sub with time.Since
2019-03-21 18:02:55 +08:00
Tim Allclair
0604256d6c
Update tests for RuntimeClass beta
2019-03-08 13:21:52 -08:00
David Zhu
41b3579345
Address review comments
2019-03-07 17:17:09 -08:00
David Zhu
7d2f4e97b8
Add ADC Fallback if Node doesn't have driver installed
2019-03-07 14:47:38 -08:00
Antoine Pelisse
55f9eeed6c
Ignore changes to managed field in noderestriction
...
The validation is failing because the managedfields are changed when the
object is updated. We don't have a good way to verify that the changes
are only the ones that are supposed to happen, so we'll just ignore them
for now.
2019-03-06 13:48:38 -08:00
Kubernetes Prow Robot
890b5c1d9a
Merge pull request #74582 from SataQiu/fix-golint-2019022602
...
fix some golint failures for plugin/pkg/admission/...
2019-03-05 06:50:46 -08:00
Kubernetes Prow Robot
6c31101257
Merge pull request #74283 from xing-yang/csi_crd_controller
...
CSINodeInfo and CSIDriver Controller Changes
2019-03-05 04:44:42 -08:00
Kubernetes Prow Robot
02bd34e7b0
Merge pull request #74531 from liggitt/ingress-rbac
...
Update RBAC roles for networking.k8s.io ingresses
2019-03-05 00:48:01 -08:00
Xing Yang
85867e5625
Modify node admission and node authorizer
2019-03-04 16:42:12 -08:00
Kubernetes Prow Robot
f16035600a
Merge pull request #73807 from dekkagaijin/discovery-hardening
...
harden the default RBAC discovery clusterrolebindings
2019-03-01 21:49:30 -08:00
Jake Sanders
9c7d31928d
harden the default RBAC discovery clusterrolebindings
2019-03-01 18:45:05 -08:00
Kubernetes Prow Robot
55a65763c0
Merge pull request #71479 from soggiest/podpreset-initcontainers
...
PodPreset: Add same functionality for init containers as standard containers
2019-02-28 20:35:45 -08:00
Andrew Kim
01933b02a3
replace usage of v1beta1 VolumeAttachments with v1
2019-02-27 15:42:12 -05:00
Jordan Liggitt
d1e865ee34
Update client callers to use explicit versions
2019-02-26 08:36:30 -05:00
SataQiu
f8c4aba0cb
fix some golint failures for plugin/pkg/admission/...
2019-02-26 17:12:40 +08:00
Jordan Liggitt
85165b40fa
Update RBAC roles for networking.k8s.io ingresses
2019-02-25 11:40:44 -05:00
danielqsj
3c9ba7f298
fix typo
2019-02-22 22:38:48 +08:00
danielqsj
5733241f7a
fix shellcheck in plugin/pkg/admission/imagepolicy/gencerts.sh
2019-02-22 15:10:06 +08:00