github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
124,588 Commits 1 Branch 31 Tags
v1.31.8-k3s1-mzq
Commit Graph

1350 Commits

Author SHA1 Message Date
Darren Shepherd
834b2acae4 Notify startup to grab a hold of handler and authenticator 
Fix to the completed options config

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2025-04-23 13:20:06 -03:00
Darren Shepherd
4e407fa5b5 Add stopCh to apiserver & context to kublet commands 
Remove SetupSignalContext call from the apiserver

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2025-04-23 13:20:06 -03:00
Kubernetes Prow Robot
5f7cfdef11 Merge pull request #125993 from macsko/increase_server_timeout_in_scheduler_perf_tests 
Increase API server timeout in scheduler_perf integration tests
 2024-07-16 08:15:10 -07:00
Maciej Skoczeń
ad59b4026e Increase API server timeout in scheduler_perf tests 2024-07-10 07:34:59 +00:00
Siyuan Zhang
40cddbe215 add emulated-version flag to kube-scheduler to control the feature gate. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-07-09 09:04:41 -07:00
Wojciech Tyczyński
a5772bd425 Implement resilient watchcache initialization post-start-hook 2024-07-01 12:54:57 +02:00
Antonio Ojea
0e1f9dadd6 modify components to use the networking v1beta1 API 2024-06-30 09:48:46 +00:00
Kubernetes Prow Robot
d40676c227 Merge pull request #122047 from aojea/treeless 
KEP-1880 Multiple Service CIDRs: Graduate to Beta (1/2)
 2024-06-28 01:00:20 -07:00
Kubernetes Prow Robot
522e2e5066 Merge pull request #124917 from vinayakankugoyal/kep4633 
KEP-4633: Only allow anonymous auth for configured endpoints.
 2024-06-27 20:39:51 -07:00
Vinayak Goyal
5e6a4937f5 KEP-4633: Allow health-only anonymous auth mode. 
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
 2024-06-28 00:30:05 +00:00
Antonio Ojea
9b1bad431b implement dual write on Service ClusterIP allocator 
MultiCIDRServiceAllocator implements a new ClusterIP allocator based on
IPAddress object to solve the problems and limitations caused by
existing bitmap allocators.

However, during the rollout of new versions, deployments need to support
a skew of one version between kube-apiservers. To avoid the possible
problem where there are multiple Services requests on the skewed
apiservers and that both allocate the same IP to different Services,
the new allocator will implement a dual-write strategy under the
feature gate DisableAllocatorDualWrite.

After the MultiCIDRServiceAllocator is GA, the DisableAllocatorDualWrite
can be enabled safely as all apiservers will run with the new
allocators. The graduation of DisableAllocatorDualWrite can also
be used to clean up the opaque API object that contains the old bitmaps.

If MultiCIDRServiceAllocator is enabled and DisableAllocatorDualWrite is disable
and is a new environment, there is no bitmap object created, hence, the
apiserver will initialize it to be able to write on it.
 2024-06-27 11:33:36 +00:00
Siyuan Zhang
379676c4be add DefaultComponentGlobalsRegistry flags in ServerRunOptions 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-06-25 22:12:11 +00:00
Siyuan Zhang
4352c4ad27 Add version mapping in ComponentGlobalsRegistry. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-06-25 22:12:11 +00:00
Siyuan Zhang
701e5fc374 Add composition flags for emulation version and feature gate. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-06-25 22:12:11 +00:00
Siyuan Zhang
403301bfdf apiserver: Add API emulation versioning. 
Co-authored-by: Siyuan Zhang <sizhang@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
Co-authored-by: Alex Zielenski <zielenski@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-06-25 22:12:11 +00:00
TommyStarK
cce8551272 kube-apiserver: remove deprecated otel NewNoopTracerProvider 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2024-06-07 19:57:37 +02:00
carlory
ab0205bb33 remove pkg/cloudprovider 2024-05-10 15:44:58 +08:00
Kubernetes Prow Robot
4d17d30029 Merge pull request #124519 from dims/drop-all-the-providery-things-take-2 
Remove gcp in-tree cloud provider and credential providers
 2024-05-06 08:03:14 -07:00
Dr. Stefan Schimanski
1d0c72d15a aggregator: move construction to generic controlplane 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-05-01 19:44:20 +02:00
Davanum Srinivas
bf268f02a3 Remove gcp in-tree cloud provider and credential provider 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-05-01 09:03:53 -04:00
Dr. Stefan Schimanski
d8c5f71403 kube-apiserver: split up config creation into generic and non-generic part 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-05-01 11:28:25 +02:00
Kubernetes Prow Robot
6abdfb97c0 Merge pull request #124621 from sttts/sttts-controlplane-admission-initializers 
kube-apiserver: split admission initializers into generic and non-generic
 2024-05-01 01:10:15 -07:00
Kubernetes Prow Robot
d0fddf143b Merge pull request #122148 from pohly/controllers-context-support 
controllers + apiserver: enhance context support
 2024-04-30 01:30:09 -07:00
Dr. Stefan Schimanski
acbb89d9b9 kube-apiserver: split admission initializers into generic and non-generic 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-29 23:28:42 +02:00
Dr. Stefan Schimanski
be7b6c90bf Address comments 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-29 21:22:35 +02:00
Patrick Ohly
b92273a760 apiserver + controllers: enhance context support 
27a68aee3a introduced context support for events. Creating an event
broadcaster with context makes tests more resilient against leaking goroutines
when that context gets canceled at the end of a test and enables per-test
output via ktesting.

The context could get passed to the constructor. A cleaner solution is to
enhance context support for the apiserver and then pass the context into the
controller's run method. This ripples up the call stack to all places which
start an apiserver.
 2024-04-29 20:59:21 +02:00
Dr. Stefan Schimanski
03ae7fcbdf aggregator: split API priority map into generic and non-generic 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-29 16:19:51 +02:00
Dr. Stefan Schimanski
3b6d2a66a4 pkg/controlplane: split apart generic server part of instance.go 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-29 10:15:02 +02:00
Kubernetes Prow Robot
c6b6163e2e Merge pull request #124576 from sttts/sttts-peer-proxy-generic-move 
controlplane/apiserver: move peer proxy code to allow generic aggregator construction
 2024-04-29 01:11:06 -07:00
Dr. Stefan Schimanski
c252ebe50c controlplane/apiserver: move peer proxy code to allow aggregator construction 
This reverts commit 0bb6ff5e454cfc99c0b611e22162391eaa31e103.

Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-29 08:13:43 +02:00
Dr. Stefan Schimanski
3daae717c3 controlplane: split out SystemNamespaces 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-27 14:19:56 +02:00
Dr. Stefan Schimanski
7e0fea2331 kube-apiserver/aggregator: remove unused PeerCAFile in config 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-26 23:22:09 +02:00
Kubernetes Prow Robot
563885e4bd Merge pull request #124551 from sttts/sttts-kube-apiserver-config-split 
pkg/controlplane: split up config into generic controlplane and kube-related part
 2024-04-26 14:16:12 -07:00
Dr. Stefan Schimanski
96a144c977 Address comments 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-26 17:47:30 +02:00
Dr. Stefan Schimanski
e37917fea7 pkg/controlplane: split up config into generic controlplane and kube-related part 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-26 14:14:06 +02:00
Dr. Stefan Schimanski
91de83b694 kube-apiserver/aggregator: fix panic with crds disabled 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-04-26 09:05:20 +02:00
Marek Siarkowicz
3ee8178768 Cleanup defer from SetFeatureGateDuringTest function call 2024-04-24 20:25:29 +02:00
Nilekh Chaudhari
91a7708cdc feat: implements Storage Version Migration API in-tree 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2024-03-08 04:18:56 +00:00
cici37
de506ce7ac Promote ValidatingAdmissionPolicy to GA. 2024-03-05 16:00:21 -08:00
Antonio Ojea
e3a0df26a8 remove flag cidr max size validation if gate enable 2023-10-31 21:05:06 +00:00
Abu Kashem
b24dd44904 apiserver: enable apf v1 API 2023-10-30 07:48:22 -04:00
Kubernetes Prow Robot
722503e9e5 Merge pull request #121390 from wojtek-t/disable_paging 
Remove ability to disable pagination at store level
 2023-10-24 18:55:16 +02:00
Wojciech Tyczyński
b386120da2 Remove storageConfig.Paging parameter 2023-10-20 15:35:58 +02:00
Nabarun Pal
22e5a806a7 Add --authorization-config flag to apiserver 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2023-10-18 11:58:47 +05:30
Dr. Stefan Schimanski
0f989046d0 kube-apiserver: move cloud provider validation into options 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2023-10-10 22:43:23 +02:00
Kubernetes Prow Robot
f68c66f96d Merge pull request #119142 from aramase/aramase/f/kep_3331_add_feature_flag 
[StructuredAuthenticationConfig] Add feature flag and wire up `--authentication-config` flag
 2023-09-05 13:08:51 -07:00
Lubomir I. Ivanov
7c75b018d5 cmd/kube-apiserver: add .import-restrictions 
Allow only /pkg, /plugin, /third_party, /cmd/kube-apiserver, /test/utils.
This disallows imports of other cmd packages like cmd/kubeadm.
 2023-09-05 16:03:28 +03:00
Lubomir I. Ivanov
6ec8dbe5b5 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package 
The package "k8s.io/kubernetes/cmd/kubeadm/app/util/pkiutil"
is used for a couple of function calls:
- pkiutil.NewCertAndKey() to generate a cert/key pair
- pkiutil.WriteCertAndKey() to write the pair to disk

Unroll and simplify the functions to obtain the same functionality
while removing the cmd/kubeadm dependency.
 2023-09-05 14:14:47 +03:00
Davanum Srinivas
ceaed508ce Validate the cloud-provider passed in and the corresponding feature flags 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-09-02 13:08:04 -04:00
Anish Ramasekar
9e1ff1e512 add loading config and wire feature flag 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-08-30 23:14:56 +00:00