github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
120,408 Commits 1 Branch 31 Tags 1,019 MiB
c019b51be4
Commit Graph

2595 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a7af34e1b8
Merge pull request #122347 from aramase/aramase/c/move_kms_apis 
kmsv2: move encryption config types to standard API server config location
 2024-01-03 16:16:18 +01:00
bzsuni
5405dd0f9b Update goleak from v1.2.1 to v1.3.0 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2024-01-03 00:20:48 +08:00
Madhav Jivrajani
a8da4202c0 .*: bump golang.org/x/tools to v0.16.1 
Bumping tools to include the fix for a nil pointer
deref error in go/types. See golang/go#64812
for more details.

This fix is needed for when we bump to go1.22.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2023-12-20 14:31:31 +05:30
Patrick Ohly
c8f9ebfb72 dependencies: gomega v1.30.0 + ginkgo v2.13.2 
The new gomega.BeTrueBecause and gomega.BeFalseBecause are going to be useful
for https://github.com/kubernetes/kubernetes/issues/105678.
 2023-12-19 16:18:05 +01:00
Anish Ramasekar
75695dae10
move encryption config types to standard API server config location 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-12-18 20:54:24 +00:00
Kubernetes Prow Robot
e12d4b63d6
Merge pull request #121773 from pohly/zapr-update 
dependencies: zapr v1.3.0, zap v1.26.0
 2023-12-14 18:14:22 +01:00
Kubernetes Prow Robot
60cde601a8
Merge pull request #121814 from danwinship/kubemark-iptables 
Remove --use-real-proxier support from kubemark
 2023-12-13 23:55:01 +01:00
Tim Hockin
1f55357d99
Re-vendor k8s.io/kube-openapi 
./hack/pin-dependency.sh k8s.io/kube-openapi 778a5567bc1edaed92a4de9c07f90199c67953fa

./hack/update-vendor.sh
 2023-11-27 12:06:19 -08:00
Kubernetes Prow Robot
56d7898510
Merge pull request #121739 from ty-dc/runc/update-to-1.1.10 
bump runc to v1.1.10
 2023-11-15 23:29:35 +01:00
Dan Winship
ae3235aa01 Remove --use-real-proxier support from kubemark 
kubemark's proxy mode exists to test how kube-proxy affects the load
on the apiserver, not how it affects the load on the node. There's no
need to generate fake iptables commands, because that all happens
entirely independently of the api watchers.
 2023-11-09 06:52:10 -05:00
cpanato
9e5b8402bb
update go.mod 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 09:32:17 -06:00
Patrick Ohly
166b71757b dependencies: zapr v1.3.0, zap v1.26.0 
The new zapr adds support for slog. The new zap has various improvements. It no
longer depends on go.uber.org/atomic which enables dropping it from the
Kubernetes dependencies. github.com/pkg/errors is also no longer needed.
 2023-11-07 20:24:28 +01:00
tao.yang
bb315d1339 bump runc to v1.1.10 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-11-06 10:42:39 +08:00
Kubernetes Prow Robot
974735854b
Merge pull request #121573 from tukwila/bump_etcd_v3.5.10 
bump etcd newest version: v3.5.10
 2023-11-01 15:33:13 +01:00
Patrick Ohly
878d037d3b dependencies: klog v2.110.1 
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378)
 2023-11-01 09:32:20 +01:00
guangli.bao
bc1df9e7da bump to newest etcd: v3.5.10 
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
 2023-11-01 11:59:31 +08:00
Kubernetes Prow Robot
593a17d3b6
Merge pull request #121575 from apelisse/update-smd 
Update sigs.k8s.io/structured-merge-diff to v4.4.0
 2023-11-01 01:51:17 +01:00
Kubernetes Prow Robot
257b8c3666
Merge pull request #121046 from danwinship/nftables 
kube-proxy nftables backend
 2023-11-01 01:50:59 +01:00
Kubernetes Prow Robot
fafccc0c9a
Merge pull request #121078 from aramase/aramase/f/kep_3331_cel_integration 
Implement CEL for StructuredAuthenticationConfig
 2023-11-01 00:33:21 +01:00
Dan Winship
abb1a458a9 Create an nftables.Interface in nftables proxier 
And update most of the comments to refer to "nftables" rather than
"iptables" (even though it doesn't actually do any nftables updating
at this point).

For now the proxy also internally creates a
utiliptablestesting.FakeIPTables to keep the existing sync code
compiling.
 2023-10-31 17:38:29 -04:00
Anish Ramasekar
26e3a03d12
Implement CEL and wire it with OIDC authenticator 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-10-31 20:16:09 +00:00
Davanum Srinivas
8b9fc325e2
Update to new cadvisor v0.48.1 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-10-31 14:30:54 -04:00
Kubernetes Prow Robot
d1113c9a00
Merge pull request #121577 from cici37/celFixPick 
Bump cel-go to v0.17.7 and introduce set ext library with new options
 2023-10-31 19:16:29 +01:00
Kubernetes Prow Robot
064e86b3d0
Merge pull request #121223 from ritazh/authz-cel 
[StructuredAuthorizationConfig] - CEL integration
 2023-10-31 13:13:56 +01:00
Rita Zhang
31c76e9abb
authz: add cel expression to webhook matchconditions 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-10-30 21:48:00 -07:00
Antoine Pelisse
dec443b305 Update sigs.k8s.io/structured-merge-diff to v4.4.1 2023-10-30 15:34:18 -07:00
Cici Huang
70c1f2143f Bump cel-go to v0.17.7 2023-10-30 19:08:22 +00:00
Abu Kashem
5972037ffd
apiserver: generate code for apf flowcontrol v1 API 
run:
- hack/update-codegen.sh
- hack/update-openapi-spec.sh
 2023-10-30 07:48:22 -04:00
carlory
760abc2a82 bump gomega to 1.29.0 2023-10-27 12:51:56 +08:00
Davanum Srinivas
702d911e22
working-config-otel 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-10-25 16:31:21 -04:00
bzsuni
d5085c9cbe Bumped the fsnotify from version v1.6.0 to v1.7.0 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-10-23 10:32:35 +08:00
Kubernetes Prow Robot
239537e74d
Merge pull request #121364 from sxd/update_grpc 
bump golang.org/grpc to v1.56.3
 2023-10-20 06:14:16 +02:00
Jonathan Gonzalez V
a7adde53be
bump golang.org/grpc to v1.56.3 
Bumping golang.org/grpc in light of CVE-2023-44487.

Signed-off-by: Jonathan Gonzalez V <jonathan.abdiel@gmail.com>
 2023-10-19 15:20:07 -03:00
Alexander Zielenski
4d21a23be3 pin openapi 2023-10-18 16:07:06 -07:00
Nabarun Pal
22e5a806a7
Add --authorization-config flag to apiserver 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2023-10-18 11:58:47 +05:30
Kubernetes Prow Robot
2ae300f9e9
Merge pull request #120870 from lvedder/chore/update-dependency-filepath-securejoin-to-0.2.4 
update filepath-securejoin to 0.2.4 to fix transitional security vulnerability
 2023-10-17 18:50:19 +02:00
lvedder
fced85b27a run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly 2023-10-17 10:58:11 +02:00
Kubernetes Prow Robot
ac66f3d466
Merge pull request #121010 from Jefftree/decouple-openapi-v2v3-config 
Decouple openapi v2v3 config
 2023-10-16 23:41:11 +02:00
Jefftree
e3098225ea bump kube-openapi 2023-10-16 15:05:13 -04:00
Kubernetes Prow Robot
580304cb22
Merge pull request #118006 from liyuerich/dependency-b 
dependencies: update github.com/ishidawataru/sctp
 2023-10-15 07:05:29 +02:00
Kubernetes Prow Robot
d6b8e487e2
Merge pull request #117859 from Penguin-zlh/bump-dependencies-godbus-dbus 
bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
 2023-10-15 07:05:15 +02:00
Jefftree
555c1b8091 bump kube-openapi 2023-10-11 11:12:47 -04:00
John Howard
dc334b953d
dependencies: update otel-go dependencies 2023-10-10 19:16:07 +00:00
Madhav Jivrajani
fc7c951d5a .: bump golang.org/x/net to v0.17.0 
Bumping golang.org/x/net in light of CVE-2023-39325 and CVE-2023-44487.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2023-10-10 23:07:19 +05:30
Patrick Ohly
79355caa56 dependencies: ginkgo v2.13.0, gomega v1.28.0 
Besides simply staying up-to-date, ginkgo v2.13.0 adds a `PreviewSpecs` which
will be used for introspection of the E2E test suites.
 2023-10-09 19:27:06 +02:00
Kubernetes Prow Robot
f936f69cf9
Merge pull request #120729 from pohly/events-context 
k8s.io/client-go/tools/[events|record]: support context
 2023-10-04 15:45:16 +02:00
Kubernetes Prow Robot
bf1fa0c669
Merge pull request #119865 from charles-chenzz/bump_deps 
bump github.com/emicklei/go-restful/v3 to v3.11.0
 2023-09-28 06:42:34 -07:00
Patrick Ohly
27a68aee3a k8s.io/client-go/tools: support context for event recording 
Using StartRecordingToSinkWithContext instead of StartRecordingToSink and
StartLogging instead of StartStructuredLogging has several advantages:

- Spawned goroutines no longer get stuck for extended periods of
  time during shutdown when passing in a context that gets canceled.
- Log output can be directed towards a specific logger instead of the global
  default, for example one which writes to a testing.T instance.
- The new methods return an error when something went wrong instead of
  merely recording the error.

That last point is the reason for deprecating the old methods instead of merely
adding new alternatives.

Setting a context when constructing an EventBroadcaster makes calling Shutdown
optional. It can also be used to specify the logger.

Both EventRecorder interfaces in tools/events and tools/record now have a
WithLogger helper. Using that method is optional, but recommended to support
contextual logging properly. Without it, errors that occur while emitting an
event are not associated with the caller.
 2023-09-27 09:06:09 +02:00
Joseph Anttila Hall
1b602ffd9a
Bump Konnectivity to 0.28.0 2023-09-22 13:10:24 -07:00
Madhav Jivrajani
fc6b19a4ba .: bump govmomi to v0.30.6 
Bumping govmomi to include an error check fix needed
to work with go1.20. We made this fix in the CI, but
were reliant on the text matching of error strings,
which is why it didn't catch the actual issue. This

Fix in b4eac19369
PR to bump govmomi in cloud-provider-vsphere: https://github.com/kubernetes/cloud-provider-vsphere/pull/738

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2023-09-18 22:15:49 +05:30