Tim Allclair
02a6187757
PodSecurity: admission: admission library
...
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe
PodSecurity: test: framework
2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779
PodSecurity: policy: registry
...
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0
PodSecurity: metrics: stub interface
...
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16
PodSecurity: admission/api: configuration API
...
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers
Co-authored-by: Tim Allclair <timallclair@gmail.com >
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773
PodSecurity: api: runtime API
...
Label keys, values, and parsing helper functions
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
556f8500ff
Merge pull request #102859 from MikeSpreitzer/add-r-metrics
...
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e
Merge pull request #103153 from josephburnett/v2beta2
...
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Kubernetes Prow Robot
5e06f173fb
Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
...
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
49ac765b67
Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
...
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
d9ef459918
Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
...
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93
Allow delete with grace period 1s even if metadata period is negative
2021-06-28 11:49:39 +08:00
Sean Sullivan
4add8ed910
kubectl command headers as default in beta
2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi
...
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664
Merge pull request #103126 from jdnurme/konn-21-update
...
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
7ab6c5322c
Merge pull request #103190 from robscott/remove-app-protocol-gate
...
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
f7d2ecdc3e
Merge pull request #96087 from VilledeMontreal/feat/goComp
...
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
JD Nurme
21fd224ebd
Updated to use konnectivity client v0.0.21, and implemented placeholder context
2021-06-25 22:27:51 +00:00
Kubernetes Prow Robot
a1d9479d20
Merge pull request #103042 from tkashem/refactor-gt
...
apiserver: refactor graceful termination logic
2021-06-25 12:12:47 -07:00
Rob Scott
0cdd8c1c10
Removing ServiceAppProtocol feature gate
...
This feature gate went GA in 1.20 and can be safely removed as part of
1.22.
2021-06-25 10:24:50 -07:00
Abu Kashem
913c449a42
add unit test to verify graceful termination behavior
2021-06-25 12:32:23 -04:00
Abu Kashem
a84c1b7100
apiserver: NonBlockingRun should return a listener stopped channel
...
NonBlockingRun should also return a channel that gets closed when the
underlying http Server has stopped listening (during the graceful
shutdown period)
2021-06-25 12:17:31 -04:00
Abu Kashem
d85619030e
apiserver: refactor graceful termination logic
...
- refactor graceful termination logic so we can write unit tests
to assert on the expected behavior.
2021-06-25 12:17:26 -04:00
David Ashpole
79550ed40c
Add distributed tracing to the apiserver using OpenTelemetry
2021-06-25 05:20:27 -07:00
Kubernetes Prow Robot
5c055c2b5a
Merge pull request #103173 from mengjiao-liu/json-register-test-check
...
Narrow the scope of the json/register test case usage checking
2021-06-25 03:16:45 -07:00
Kubernetes Prow Robot
7163f8f810
Merge pull request #100771 from njuptlzf/fix_staticcheck_storage
...
Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/storage
2021-06-25 01:16:45 -07:00
Mengjiao Liu
16b7d473f2
Narrow the scope of the json/register test case usage checking
2021-06-25 15:09:48 +08:00
Kubernetes Prow Robot
859004b271
Merge pull request #103161 from MikeSpreitzer/comment-apf-types
...
Fix commenting oversights in APF types
2021-06-24 22:32:45 -07:00
Mike Spreitzer
179e48c4be
Add missing comments in APF API types
2021-06-25 00:27:40 -04:00
Kubernetes Prow Robot
89ebe77aeb
Merge pull request #95472 from ahmedtd/lru-remove-mpl
...
Remove MPL-licensed dep from lruexpirecache
2021-06-24 16:38:00 -07:00
Kubernetes Prow Robot
b27ad15779
Merge pull request #102540 from jpbetz/apply-client-docs
...
Add doc.go explaining client-go apply support
2021-06-24 14:17:41 -07:00
Kubernetes Prow Robot
2e93b3924a
Merge pull request #101943 from saschagrunert/seccomp-default
...
Add kubelet `SeccompDefault` alpha feature
2021-06-24 13:07:41 -07:00
Taahir Ahmed
ecc5318247
Remove MPL-licensed dep from lruexpirecache
...
github.com/hashicorp/golang-lru is MPL 2 licensed, which means that
anyone who distributes code or binaries that incorporates it needs to
include its source code, even if they haven't made any modifications.
Since lrucacheexpire is picked up as a dependency of using the shared
informers in client-go, that's potentially a lot of distributors.
Most other deps of client-go are Apache 2.0, MIT, or BSD-like
licensed, which only requires including the license.
Rather than reverting to groupcache/lru, I just reimplemented the
functionality we need, which isn't much.
2021-06-24 12:36:35 -07:00
Kubernetes Prow Robot
79494183b7
Merge pull request #102869 from mengjiao-liu/json-register-move
...
Remove default JSON logging format registration from k8s.io/component-base/logs package
2021-06-24 11:59:41 -07:00
Joe Betz
7f893f6bd6
Split documentation according to both mechanisms available for migration
2021-06-24 08:53:02 -07:00
Mengjiao Liu
af825b4357
Remove default JSON logging format registration from component-base/logs package
2021-06-24 20:37:09 +08:00
Joseph Burnett
4233056f80
Move HPA v2beta2 deprecation to 1.23.
2021-06-24 13:31:17 +02:00
Kubernetes Prow Robot
902e507824
Merge pull request #102883 from liggitt/etcd-embed
...
Simplify embedded etcd server
2021-06-24 04:27:40 -07:00
Kubernetes Prow Robot
b0010c2d9e
Merge pull request #103066 from MikeSpreitzer/apf-no-00
...
Add config checking for inflight limits
2021-06-23 18:25:40 -07:00
Kubernetes Prow Robot
53592b3222
Merge pull request #103079 from youhonglian/update-native-error-in-staging
...
update github.com/pkg/errors to go native errors pkg in staging
2021-06-23 12:48:10 -07:00
Matthew Cary
b259686b36
tests for statefulset PersistentVolumeClaimDeletePolicy api change
...
Change-Id: I07c8e31a8c76a6a1022c08fb749af7e353b731de
2021-06-23 11:55:35 -07:00
Mike Spreitzer
0762f492c5
Add config checking for inflight limits
...
When API Priority and Fairness is enabled, the inflight limits must
add up to something positive.
This rejects the configuration that prompted
https://github.com/kubernetes/kubernetes/issues/102885
Update help for max inflight flags
2021-06-23 14:06:50 -04:00
Matthew Cary
e4e735cd1c
statefulset PersistentVolumeClaimDeletePolicy api change
2021-06-23 10:33:05 -07:00
Joe Betz
5d461adb3b
Apply suggestions from code review
...
Co-authored-by: Daniel Smith <dbsmith@google.com >
2021-06-23 10:18:17 -07:00
njuptlzf
93365919b5
Fix staticcheck failures
2021-06-23 23:27:43 +08:00
Jordan Liggitt
730c21d386
Drop etcd tests dependency
2021-06-23 10:22:58 -04:00
Jordan Liggitt
01760927b8
Simplify running embedded etcd server in tests
2021-06-23 10:22:57 -04:00
Sascha Grunert
8b7003aff4
Add SeccompDefault feature
...
This adds the gate `SeccompDefault` as new alpha feature. Seccomp path
and field fallbacks are now passed to the helper functions, whereas unit
tests covering those code paths have been added as well.
Beside enabling the feature gate, the feature has to be enabled by the
`SeccompDefault` kubelet configuration or its corresponding
`--seccomp-default` CLI flag.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
Apply suggestions from code review
Co-authored-by: Paulo Gomes <pjbgf@linux.com >
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2021-06-23 10:22:57 +02:00
youhonglian
4b14021874
update github.com/pkg/errors to go native errors pkg in staging
2021-06-23 16:20:45 +08:00
Kubernetes Prow Robot
268cab5f44
Merge pull request #102022 from adtac/sbeta
...
graduate SuspendJob to beta
2021-06-22 17:18:10 -07:00