Commit Graph

13540 Commits

Author SHA1 Message Date
Tim Allclair
02a6187757 PodSecurity: admission: admission library
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe PodSecurity: test: framework 2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779 PodSecurity: policy: registry
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0 PodSecurity: metrics: stub interface
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16 PodSecurity: admission/api: configuration API
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers

Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773 PodSecurity: api: runtime API
Label keys, values, and parsing helper functions

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
556f8500ff Merge pull request #102859 from MikeSpreitzer/add-r-metrics
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e Merge pull request #103153 from josephburnett/v2beta2
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Kubernetes Prow Robot
5e06f173fb Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
49ac765b67 Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
d9ef459918 Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93 Allow delete with grace period 1s even if metadata period is negative 2021-06-28 11:49:39 +08:00
Sean Sullivan
4add8ed910 kubectl command headers as default in beta 2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277 Merge pull request #103001 from zshihang/csi
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664 Merge pull request #103126 from jdnurme/konn-21-update
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
7ab6c5322c Merge pull request #103190 from robscott/remove-app-protocol-gate
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
f7d2ecdc3e Merge pull request #96087 from VilledeMontreal/feat/goComp
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
JD Nurme
21fd224ebd Updated to use konnectivity client v0.0.21, and implemented placeholder context 2021-06-25 22:27:51 +00:00
Kubernetes Prow Robot
a1d9479d20 Merge pull request #103042 from tkashem/refactor-gt
apiserver: refactor graceful termination logic
2021-06-25 12:12:47 -07:00
Rob Scott
0cdd8c1c10 Removing ServiceAppProtocol feature gate
This feature gate went GA in 1.20 and can be safely removed as part of
1.22.
2021-06-25 10:24:50 -07:00
Abu Kashem
913c449a42 add unit test to verify graceful termination behavior 2021-06-25 12:32:23 -04:00
Abu Kashem
a84c1b7100 apiserver: NonBlockingRun should return a listener stopped channel
NonBlockingRun should also return a channel that gets closed when the
underlying http Server has stopped listening (during the graceful
shutdown period)
2021-06-25 12:17:31 -04:00
Abu Kashem
d85619030e apiserver: refactor graceful termination logic
- refactor graceful termination logic so we can write unit tests
  to assert on the expected behavior.
2021-06-25 12:17:26 -04:00
David Ashpole
79550ed40c Add distributed tracing to the apiserver using OpenTelemetry 2021-06-25 05:20:27 -07:00
Kubernetes Prow Robot
5c055c2b5a Merge pull request #103173 from mengjiao-liu/json-register-test-check
Narrow the scope of the json/register test case usage checking
2021-06-25 03:16:45 -07:00
Kubernetes Prow Robot
7163f8f810 Merge pull request #100771 from njuptlzf/fix_staticcheck_storage
Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/storage
2021-06-25 01:16:45 -07:00
Mengjiao Liu
16b7d473f2 Narrow the scope of the json/register test case usage checking 2021-06-25 15:09:48 +08:00
Kubernetes Prow Robot
859004b271 Merge pull request #103161 from MikeSpreitzer/comment-apf-types
Fix commenting oversights in APF types
2021-06-24 22:32:45 -07:00
Mike Spreitzer
179e48c4be Add missing comments in APF API types 2021-06-25 00:27:40 -04:00
Kubernetes Prow Robot
89ebe77aeb Merge pull request #95472 from ahmedtd/lru-remove-mpl
Remove MPL-licensed dep from lruexpirecache
2021-06-24 16:38:00 -07:00
Kubernetes Prow Robot
b27ad15779 Merge pull request #102540 from jpbetz/apply-client-docs
Add doc.go explaining client-go apply support
2021-06-24 14:17:41 -07:00
Kubernetes Prow Robot
2e93b3924a Merge pull request #101943 from saschagrunert/seccomp-default
Add kubelet `SeccompDefault` alpha feature
2021-06-24 13:07:41 -07:00
Taahir Ahmed
ecc5318247 Remove MPL-licensed dep from lruexpirecache
github.com/hashicorp/golang-lru is MPL 2 licensed, which means that
anyone who distributes code or binaries that incorporates it needs to
include its source code, even if they haven't made any modifications.

Since lrucacheexpire is picked up as a dependency of using the shared
informers in client-go, that's potentially a lot of distributors.
Most other deps of client-go are Apache 2.0, MIT, or BSD-like
licensed, which only requires including the license.

Rather than reverting to groupcache/lru, I just reimplemented the
functionality we need, which isn't much.
2021-06-24 12:36:35 -07:00
Kubernetes Prow Robot
79494183b7 Merge pull request #102869 from mengjiao-liu/json-register-move
Remove default JSON logging format registration from k8s.io/component-base/logs package
2021-06-24 11:59:41 -07:00
Joe Betz
7f893f6bd6 Split documentation according to both mechanisms available for migration 2021-06-24 08:53:02 -07:00
Mengjiao Liu
af825b4357 Remove default JSON logging format registration from component-base/logs package 2021-06-24 20:37:09 +08:00
Joseph Burnett
4233056f80 Move HPA v2beta2 deprecation to 1.23. 2021-06-24 13:31:17 +02:00
Kubernetes Prow Robot
902e507824 Merge pull request #102883 from liggitt/etcd-embed
Simplify embedded etcd server
2021-06-24 04:27:40 -07:00
Kubernetes Prow Robot
b0010c2d9e Merge pull request #103066 from MikeSpreitzer/apf-no-00
Add config checking for inflight limits
2021-06-23 18:25:40 -07:00
Kubernetes Prow Robot
53592b3222 Merge pull request #103079 from youhonglian/update-native-error-in-staging
update github.com/pkg/errors to go native errors pkg in staging
2021-06-23 12:48:10 -07:00
Matthew Cary
b259686b36 tests for statefulset PersistentVolumeClaimDeletePolicy api change
Change-Id: I07c8e31a8c76a6a1022c08fb749af7e353b731de
2021-06-23 11:55:35 -07:00
Mike Spreitzer
0762f492c5 Add config checking for inflight limits
When API Priority and Fairness is enabled, the inflight limits must
add up to something positive.
This rejects the configuration that prompted
https://github.com/kubernetes/kubernetes/issues/102885

Update help for max inflight flags
2021-06-23 14:06:50 -04:00
Matthew Cary
e4e735cd1c statefulset PersistentVolumeClaimDeletePolicy api change 2021-06-23 10:33:05 -07:00
Joe Betz
5d461adb3b Apply suggestions from code review
Co-authored-by: Daniel Smith <dbsmith@google.com>
2021-06-23 10:18:17 -07:00
njuptlzf
93365919b5 Fix staticcheck failures 2021-06-23 23:27:43 +08:00
Jordan Liggitt
730c21d386 Drop etcd tests dependency 2021-06-23 10:22:58 -04:00
Jordan Liggitt
01760927b8 Simplify running embedded etcd server in tests 2021-06-23 10:22:57 -04:00
Sascha Grunert
8b7003aff4 Add SeccompDefault feature
This adds the gate `SeccompDefault` as new alpha feature. Seccomp path
and field fallbacks are now passed to the helper functions, whereas unit
tests covering those code paths have been added as well.

Beside enabling the feature gate, the feature has to be enabled by the
`SeccompDefault` kubelet configuration or its corresponding
`--seccomp-default` CLI flag.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Apply suggestions from code review

Co-authored-by: Paulo Gomes <pjbgf@linux.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-06-23 10:22:57 +02:00
youhonglian
4b14021874 update github.com/pkg/errors to go native errors pkg in staging 2021-06-23 16:20:45 +08:00
Kubernetes Prow Robot
268cab5f44 Merge pull request #102022 from adtac/sbeta
graduate SuspendJob to beta
2021-06-22 17:18:10 -07:00