Commit Graph

17147 Commits

Author SHA1 Message Date
Andrew Sy Kim
efdd067186 apiserver: use the correct error when logging errors updating managedFields
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-08 14:10:39 -05:00
Kubernetes Prow Robot
bbbb79712c Merge pull request #113116 from brianpursley/allowlist
kubectl apply: Deprecate --prune-whitelist in favor of --prune-allowlist
2022-11-08 10:38:43 -08:00
Kubernetes Prow Robot
7752c3a8e0 Merge pull request #112679 from dgrisonnet/fix-apiserver-sli
Improve apiserver SLI metric name
2022-11-08 10:38:31 -08:00
Kubernetes Prow Robot
114594e1d2 Merge pull request #111384 from harche/evented_pleg_pr
Add Support for Evented PLEG
2022-11-08 10:38:19 -08:00
Harshal Patil
86284d42f8 Add support for Evented PLEG
Signed-off-by: Harshal Patil <harpatil@redhat.com>
Co-authored-by: Swarup Ghosh <swghosh@redhat.com>
2022-11-08 20:06:16 +05:30
Marly Puckett
e721272d10 Update redacting functionality to redact all sensitive info in config when printing with view (#109189)
* Add RedactSecrets function

* Move RedactSecrets method to existing RawBytesData case

* Update TestRedactSecrets to use new pattern of os.CreateTemp()
2022-11-08 06:16:25 -08:00
Paweł Banaszewski
e4169d7f43 Added scope as tracing attribute 2022-11-08 11:22:57 +00:00
Kubernetes Prow Robot
e3d7cb5bc5 Merge pull request #113664 from laphets/kubectl-empty-ingress-backend-fix
Fix kubectl describe ingress when default backend is empty
2022-11-08 01:44:36 -08:00
Kubernetes Prow Robot
5a1fb17e2e Merge pull request #112137 from MikeSpreitzer/add-concurrency-allocation-algorithm
Add solver for APF concurrency rebalancing
2022-11-08 01:44:21 -08:00
Kubernetes Prow Robot
95bd687a28 Merge pull request #113275 from Huang-Wei/kep-3521-B
[KEP-3521] Part 2: Core scheduling implementation
2022-11-07 23:18:19 -08:00
Brian Pursley
f7ebf4d885 kubectl apply: Deprecate --prune-whitelist in favor of --prune-allowlist
Changes in kubectl apply --prune to support k8s Inclusive Naming Initiative:
* Deprecated the --prune-whitelist flag.
* Deprecated the PruneWhitelist field on ApplyFlags struct.
* Removed PruneWhitelist field (not used anywhere) from ApplyOptions struct.
* Added --prune-allowlist flag.
* Added PruneAllowlist field on ApplyFlags struct.
* Added unit tests for prune with allowlist

This commit also fixes a bug where the command would fail if you specified
the sameGVK multiple times for --allow-whitelist. Now it only attempts to
prune the unique set of allowed GVKs.
2022-11-07 22:17:07 -05:00
Jordan Liggitt
fc69084bf1 Update workload selector validation 2022-11-07 20:52:02 -05:00
Manjusaka
0843c4dfca Add extra value validation for matchExpression field in LabelSelector 2022-11-07 20:48:21 -05:00
Kubernetes Prow Robot
aa66cec6fa Merge pull request #113696 from tallclair/path
Fix etcd path construction
2022-11-07 17:08:40 -08:00
Kubernetes Prow Robot
595ea32411 Merge pull request #113314 from cici37/celIntegration
CEL validation in Admission chain
2022-11-07 17:08:33 -08:00
Kubernetes Prow Robot
2f837dc113 Merge pull request #112905 from alexzielenski/kubectl-apply-csa-migration
kubectl: `apply --server-side` managed fields migration
2022-11-07 17:08:21 -08:00
Kubernetes Prow Robot
a236e4ca6f Merge pull request #113697 from aramase/kms-duplication-name-validation-part-2
[KMS]: add validation for duplicate kms config name when auto reload is enabled
2022-11-07 16:02:07 -08:00
Kubernetes Prow Robot
fa2e203a6b Merge pull request #113688 from dashpole/update_utils
Update k8s.io/utils to fix util tracing panic
2022-11-07 16:02:00 -08:00
Kubernetes Prow Robot
887d92d20b Merge pull request #113682 from pawbana/add-verb-resource-to-api-server-tracing
Add verb resource to api server tracing
2022-11-07 16:01:52 -08:00
Kubernetes Prow Robot
56a0823730 Merge pull request #113636 from marckhouzam/feat/compBashDesc
Enable shell completion descriptions for bash
2022-11-07 16:01:30 -08:00
Kubernetes Prow Robot
c326b2713f Merge pull request #113500 from kerthcet/feat/graduate-nodeInclusionPoplicy-to-beta
Graduate kube-scheduler NodeInclusionPolicy to beta
2022-11-07 16:01:08 -08:00
Kubernetes Prow Robot
68875cf4a7 Merge pull request #113047 from everpeace/improve-supplemental-groups-description
Improve the API  description of `PodSecurityContext.SupplementalGroups` to clarify its unfamiliar behavior
2022-11-07 16:01:00 -08:00
Kubernetes Prow Robot
243ba086e7 Merge pull request #112914 from PiotrProkop/topology-manager-policies-flag
node: topologymanager:  Improved multi-numa alignment in Topology Manager
2022-11-07 16:00:51 -08:00
Kubernetes Prow Robot
47952e0917 Merge pull request #112360 from mimowo/handling-pod-failures-beta-kubelet
Add pod disruption conditions for kubelet-initiated failures
2022-11-07 16:00:40 -08:00
Wei Huang
2de75d92bf API, Codegen, UT for PreEnqueue extension point 2022-11-07 14:02:57 -08:00
Cici Huang
e7d83a1fb7 Integrate cel admission with API.
Co-authored-by: Alexander Zielenski <zielenski@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
2022-11-07 21:38:55 +00:00
Cici Huang
46f97d4662 Add match check for policy and binding.
Co-authored-by: Max Smythe <smythe@google.com>
2022-11-07 21:33:17 +00:00
Cici Huang
c8a089de46 Update admission initializers.
Moved RestMapper and add DynamicClient
2022-11-07 21:24:46 +00:00
Cici Huang
a949227be1 Vendor update 2022-11-07 20:51:52 +00:00
Cici Huang
19b2df8715 API - make update
API - Auto update

API - make update

API - make update
2022-11-07 20:51:52 +00:00
Cici Huang
0486e06261 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control 2022-11-07 20:51:51 +00:00
Kubernetes Prow Robot
2ef00038d3 Merge pull request #112961 from marosset/windows-hostnetwork-alpha
Windows hostnetwork alpha
2022-11-07 12:42:16 -08:00
Anish Ramasekar
47f8c4bec6 [KMS]: validate duplicate kms config name for v1 and v2 when reload=true
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-11-07 20:16:04 +00:00
Tim Allclair
f1693a02c4 Validate etcd paths 2022-11-07 12:08:59 -08:00
Anish Ramasekar
176919c4cf [KMSv2]: add validation for duplicate kms config name
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-11-07 19:53:55 +00:00
David Ashpole
3f1511c8e9 update k8s.io/utils to fix util tracing panic 2022-11-07 19:30:21 +00:00
Kubernetes Prow Robot
3d5725d9c0 Merge pull request #113649 from andrewsykim/apiserver-identity-hash
apiserver identity : use SHA256 hash in lease names
2022-11-07 11:20:49 -08:00
Kubernetes Prow Robot
b1dd1cd2f1 Merge pull request #113529 from enj/enj/i/kms_single_healthz
kms: add wiring to support automatic encryption config reload
2022-11-07 11:20:42 -08:00
Kubernetes Prow Robot
8c3777aa63 Merge pull request #112877 from ConnorJC3/format-options
Add ability to pass format options in mount-utils
2022-11-07 11:20:30 -08:00
Kubernetes Prow Robot
9349688d40 Merge pull request #112223 from astraw99/fix-ownerRef-validate
Fix ownerRef controller validate err msg
2022-11-07 11:20:18 -08:00
Mike Spreitzer
b2f69fb887 apiserver: add solver for APF concurrency rebalancing 2022-11-07 10:17:27 -08:00
Kubernetes Prow Robot
f8750e2faf Merge pull request #113666 from wojtek-t/storage_standard_test_naming
Standardize naming in generic storage tests
2022-11-07 09:18:40 -08:00
Paweł Banaszewski
b313392313 Added simple tests and changed lazyVerb String method to the same as httplog uses 2022-11-07 17:14:21 +00:00
Paweł Banaszewski
fad094cb70 Added Verb and Resource to request trace attributes 2022-11-07 17:14:21 +00:00
Monis Khan
22e540bc48 kms: add wiring to support automatic encryption config reload
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>
2022-11-07 12:03:18 -05:00
Andrew Sy Kim
5b3a9e2d75 apiserver identity : use SHA256 hash in lease names
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-07 12:02:57 -05:00
Wenqing Luo
653edeb507 Fix kubectl describe ingress when default backend is empty 2022-11-07 10:11:28 -06:00
Kubernetes Prow Robot
b4156ea47b Merge pull request #113648 from SataQiu/improve-supported-media-type-20221105
kube-apiserver: print supported media types on failure to find a serializer
2022-11-07 08:06:53 -08:00
Kubernetes Prow Robot
ac95e5b701 Merge pull request #113510 from alculquicondor/finalizers-stable
Graduate JobTrackingWithFinalizers to stable
2022-11-07 08:06:41 -08:00
Kubernetes Prow Robot
f33209a6ed Merge pull request #111545 from jlsong01/rewrite_signature_of_StartEventWatcher
rewrite signature of function StartEventWatcher
2022-11-07 08:06:18 -08:00