Commit Graph

2657 Commits

Author SHA1 Message Date
Dan Winship
09abfa46be Update knftables, with new sigs.k8s.io module name 2024-01-23 08:09:05 -05:00
Qi Ni
3bf2bf8191 chore: Cleanup in-tree credential provider azure and cloud provider azure 2024-01-20 15:18:31 +08:00
Jefftree
a2be736c02 vendor update 2024-01-19 12:03:44 -05:00
Kubernetes Prow Robot
b27b56a46c Merge pull request #122842 from pohly/klog-update
dependencies: klog v2.120.1
2024-01-18 20:11:00 +01:00
Kubernetes Prow Robot
c82da711b0 Merge pull request #122839 from pohly/ginkgo-gomega-update
dependencies: ginkgo v2.15.0, gomega v1.31.0
2024-01-18 20:10:50 +01:00
Patrick Ohly
e2222f1e30 dependencies: klog v2.120.1 2024-01-18 16:58:40 +01:00
Patrick Ohly
18f0af1f00 dependencies: ginkgo v2.15.0, gomega v1.31.0
The main reason for updating is support for reporting the cause of context
cancellation: Ginkgo provides that information when canceling a context and
Gomega polling code includes that when generating a failure message.
2024-01-18 15:24:31 +01:00
Ben Luddy
995135973d Inject feature gate instance into client-go for kube components.
In order to avoid a dependency cycle between component-base and client-go, client-go maintains
parallel definitions of component-base's feature types and constants. Passing kube's default feature
gate instance to client-go requires an adapter.
2024-01-16 12:51:00 -05:00
Paco Xu
3c86d21316 bump klog to v2.120.0 2024-01-11 17:35:07 +08:00
Kubernetes Prow Robot
627416325c Merge pull request #122552 from yankay/runc/update-to-1.1.11
Bump runc to v1.1.11
2024-01-08 18:37:47 +01:00
Kubernetes Prow Robot
a7af34e1b8 Merge pull request #122347 from aramase/aramase/c/move_kms_apis
kmsv2: move encryption config types to standard API server config location
2024-01-03 16:16:18 +01:00
bzsuni
5405dd0f9b Update goleak from v1.2.1 to v1.3.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-01-03 00:20:48 +08:00
Lan Liang
d3b8eba690 Update konnectivity to 0.29.0
update konnectivity server&agent images to 0.29.0

  bump konnectivity deps to 0.29.0

Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-01-02 14:24:35 +00:00
Kay Yan
7503440ba8 bump runc to v1.1.11
Signed-off-by: Kay Yan <kay.yan@daocloud.io>
2024-01-02 07:26:31 +00:00
Madhav Jivrajani
a8da4202c0 .*: bump golang.org/x/tools to v0.16.1
Bumping tools to include the fix for a nil pointer
deref error in go/types. See golang/go#64812
for more details.

This fix is needed for when we bump to go1.22.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
2023-12-20 14:31:31 +05:30
Patrick Ohly
c8f9ebfb72 dependencies: gomega v1.30.0 + ginkgo v2.13.2
The new gomega.BeTrueBecause and gomega.BeFalseBecause are going to be useful
for https://github.com/kubernetes/kubernetes/issues/105678.
2023-12-19 16:18:05 +01:00
Anish Ramasekar
75695dae10 move encryption config types to standard API server config location
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-12-18 20:54:24 +00:00
Kubernetes Prow Robot
e12d4b63d6 Merge pull request #121773 from pohly/zapr-update
dependencies: zapr v1.3.0, zap v1.26.0
2023-12-14 18:14:22 +01:00
Kubernetes Prow Robot
60cde601a8 Merge pull request #121814 from danwinship/kubemark-iptables
Remove --use-real-proxier support from kubemark
2023-12-13 23:55:01 +01:00
Tim Hockin
1f55357d99 Re-vendor k8s.io/kube-openapi
./hack/pin-dependency.sh k8s.io/kube-openapi 778a5567bc1edaed92a4de9c07f90199c67953fa

./hack/update-vendor.sh
2023-11-27 12:06:19 -08:00
Kubernetes Prow Robot
56d7898510 Merge pull request #121739 from ty-dc/runc/update-to-1.1.10
bump runc to v1.1.10
2023-11-15 23:29:35 +01:00
Dan Winship
ae3235aa01 Remove --use-real-proxier support from kubemark
kubemark's proxy mode exists to test how kube-proxy affects the load
on the apiserver, not how it affects the load on the node. There's no
need to generate fake iptables commands, because that all happens
entirely independently of the api watchers.
2023-11-09 06:52:10 -05:00
cpanato
9e5b8402bb update go.mod
Signed-off-by: cpanato <ctadeu@gmail.com>
2023-11-08 09:32:17 -06:00
Patrick Ohly
166b71757b dependencies: zapr v1.3.0, zap v1.26.0
The new zapr adds support for slog. The new zap has various improvements. It no
longer depends on go.uber.org/atomic which enables dropping it from the
Kubernetes dependencies. github.com/pkg/errors is also no longer needed.
2023-11-07 20:24:28 +01:00
tao.yang
bb315d1339 bump runc to v1.1.10
Signed-off-by: tao.yang <tao.yang@daocloud.io>
2023-11-06 10:42:39 +08:00
Kubernetes Prow Robot
974735854b Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
bump etcd newest version: v3.5.10
2023-11-01 15:33:13 +01:00
Patrick Ohly
878d037d3b dependencies: klog v2.110.1
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378)
2023-11-01 09:32:20 +01:00
guangli.bao
bc1df9e7da bump to newest etcd: v3.5.10
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-11-01 11:59:31 +08:00
Kubernetes Prow Robot
593a17d3b6 Merge pull request #121575 from apelisse/update-smd
Update sigs.k8s.io/structured-merge-diff to v4.4.0
2023-11-01 01:51:17 +01:00
Kubernetes Prow Robot
257b8c3666 Merge pull request #121046 from danwinship/nftables
kube-proxy nftables backend
2023-11-01 01:50:59 +01:00
Kubernetes Prow Robot
fafccc0c9a Merge pull request #121078 from aramase/aramase/f/kep_3331_cel_integration
Implement CEL for StructuredAuthenticationConfig
2023-11-01 00:33:21 +01:00
Dan Winship
abb1a458a9 Create an nftables.Interface in nftables proxier
And update most of the comments to refer to "nftables" rather than
"iptables" (even though it doesn't actually do any nftables updating
at this point).

For now the proxy also internally creates a
utiliptablestesting.FakeIPTables to keep the existing sync code
compiling.
2023-10-31 17:38:29 -04:00
Anish Ramasekar
26e3a03d12 Implement CEL and wire it with OIDC authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-10-31 20:16:09 +00:00
Davanum Srinivas
8b9fc325e2 Update to new cadvisor v0.48.1
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-10-31 14:30:54 -04:00
Kubernetes Prow Robot
d1113c9a00 Merge pull request #121577 from cici37/celFixPick
Bump cel-go to v0.17.7 and introduce set ext library with new options
2023-10-31 19:16:29 +01:00
Kubernetes Prow Robot
064e86b3d0 Merge pull request #121223 from ritazh/authz-cel
[StructuredAuthorizationConfig] - CEL integration
2023-10-31 13:13:56 +01:00
Rita Zhang
31c76e9abb authz: add cel expression to webhook matchconditions
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-10-30 21:48:00 -07:00
Antoine Pelisse
dec443b305 Update sigs.k8s.io/structured-merge-diff to v4.4.1 2023-10-30 15:34:18 -07:00
Cici Huang
70c1f2143f Bump cel-go to v0.17.7 2023-10-30 19:08:22 +00:00
Abu Kashem
5972037ffd apiserver: generate code for apf flowcontrol v1 API
run:
- hack/update-codegen.sh
- hack/update-openapi-spec.sh
2023-10-30 07:48:22 -04:00
carlory
760abc2a82 bump gomega to 1.29.0 2023-10-27 12:51:56 +08:00
Davanum Srinivas
702d911e22 working-config-otel
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-10-25 16:31:21 -04:00
bzsuni
d5085c9cbe Bumped the fsnotify from version v1.6.0 to v1.7.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-10-23 10:32:35 +08:00
Kubernetes Prow Robot
239537e74d Merge pull request #121364 from sxd/update_grpc
bump golang.org/grpc to v1.56.3
2023-10-20 06:14:16 +02:00
Jonathan Gonzalez V
a7adde53be bump golang.org/grpc to v1.56.3
Bumping golang.org/grpc in light of CVE-2023-44487.

Signed-off-by: Jonathan Gonzalez V <jonathan.abdiel@gmail.com>
2023-10-19 15:20:07 -03:00
Alexander Zielenski
4d21a23be3 pin openapi 2023-10-18 16:07:06 -07:00
Nabarun Pal
22e5a806a7 Add --authorization-config flag to apiserver
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-10-18 11:58:47 +05:30
Kubernetes Prow Robot
2ae300f9e9 Merge pull request #120870 from lvedder/chore/update-dependency-filepath-securejoin-to-0.2.4
update filepath-securejoin to 0.2.4 to fix transitional security vulnerability
2023-10-17 18:50:19 +02:00
lvedder
fced85b27a run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly 2023-10-17 10:58:11 +02:00
Kubernetes Prow Robot
ac66f3d466 Merge pull request #121010 from Jefftree/decouple-openapi-v2v3-config
Decouple openapi v2v3 config
2023-10-16 23:41:11 +02:00