Commit Graph

14415 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
dba9975e3e Merge pull request #105857 from liggitt/runAsNonRoot-runAsUser
PodSecurity: Add runAsUser check to restricted policy
2021-10-26 00:15:30 -07:00
Kubernetes Prow Robot
e1f62e406d Merge pull request #105719 from yuanhh/master
sample-controller/docs: Use italics font on package name
2021-10-25 20:03:29 -07:00
Kubernetes Prow Robot
87d8a75b0e Merge pull request #105749 from tallclair/pod-security-cli
Add --version flag to podsecurity-webhook command
2021-10-25 13:34:25 -07:00
Jordan Liggitt
40635ca59e PodSecurity: runAsUser: generated fixtures 2021-10-25 16:17:10 -04:00
Jordan Liggitt
a476a5e00e PodSecurity: runAsUser 2021-10-25 16:17:10 -04:00
Jordan Liggitt
9b930e3728 PodSecurity: test: generate 1.23 fixtures 2021-10-25 16:17:10 -04:00
Jordan Liggitt
ef3bf86f5b PodSecurity: test: ensure fixtures are exercised for all relevant policy versions 2021-10-25 16:16:31 -04:00
Kubernetes Prow Robot
a6ffd29e5f Merge pull request #105314 from calvin0327/issue-podsecurity-errormessage
[PodSecurity]Add context to failure message
2021-10-25 11:25:02 -07:00
Tim Allclair
c7cdf19cbe Add --version flag to podsecurity-webhook command 2021-10-25 10:26:05 -07:00
Kubernetes Prow Robot
6166203f45 Merge pull request #105828 from ahg-g/ahg-legacy
Remove scheduler's legacy policy config
2021-10-25 09:38:23 -07:00
Maciej Borsz
f0c7c9abc9 Update writers.go 2021-10-25 13:35:43 +02:00
Kubernetes Prow Robot
f3551dd942 Merge pull request #105866 from MikeSpreitzer/clarify-phase
Clarify metrics help wrt APF execution phases
2021-10-25 02:42:23 -07:00
Wojciech Tyczyński
f609a8e0b5 Fix delete collection error channel size 2021-10-25 08:07:21 +02:00
Mike Spreitzer
d7a3bf0d26 Clarify metrics help wrt APF execution phases 2021-10-24 22:32:13 -04:00
Abdullah Gharaibeh
faf0ce68a0 Remove scheduler's legacy policy config 2021-10-24 21:58:12 -04:00
Kubernetes Prow Robot
89dd275dde Merge pull request #105584 from goofy-z/fix-extension-point-postfilter-comment
update extension point PostFilter comment
2021-10-22 20:00:20 -07:00
Patrick Ohly
e36d54ce62 component-base: test json output for KObj and KObjs
Thanks to the new klog, logr and zapr releases, ObjectRef is now
logged as struct in JSON output.
2021-10-22 15:32:20 +02:00
Patrick Ohly
169e8b65a0 klog 2.30.0, logr 1.2.0, zapr 1.2.0
The new releases fix logging of KObj in JSON output: klog implements the new
logr.Marshaler interface and zapr uses it instead of Stringer when logging the
ObjectRef created by KObj.
2021-10-22 15:32:20 +02:00
Kubernetes Prow Robot
cc25656b00 Merge pull request #105030 from liggitt/json-stdlib
switch from json-iterator to forked stdlib json decoder
2021-10-21 20:40:37 -07:00
Kubernetes Prow Robot
313b43a8cb Merge pull request #105511 from benluddy/apf-delegated-signal
Free APF seats for watches handled by an aggregated apiserver.
2021-10-21 16:50:37 -07:00
Kubernetes Prow Robot
c767c9d993 Merge pull request #105663 from Jefftree/feature-openapiv3
Add feature flag for OpenAPI v3
2021-10-21 10:17:37 -07:00
Kubernetes Prow Robot
4cfd2820ba Merge pull request #105514 from jpetazzo/tweak-kubectl-run-help
Minor improvements in 'kubectl run' flag help
2021-10-21 08:41:39 -07:00
Kubernetes Prow Robot
2dede1d4d4 Merge pull request #105606 from sxllwx/fix/goroutine-leak
fix goroutine leak in the DeleteCollection
2021-10-21 06:48:09 -07:00
scott
53df1caeef fix goroutine leak in the DeleteCollection 2021-10-21 19:19:38 +08:00
Yuanhao Hsueh
79a7caeb76 sample-controller/docs/controller-client-go.md: Use italics font on package name 2021-10-21 15:38:28 +08:00
calvin0327
12bfe734a8 add context to failure message. 2021-10-21 14:37:53 +08:00
Alkaid
ae9ca48f01 [PodSecurity] Implement metricRecorder for admission (#104217)
* init

Signed-off-by: jyz0309 <45495947@qq.com>

go fmt

Signed-off-by: jyz0309 <45495947@qq.com>

remove useless code

Signed-off-by: jyz0309 <45495947@qq.com>

add metrics.Attributes interface

Signed-off-by: jyz0309 <45495947@qq.com>

address comment

Signed-off-by: jyz0309 <45495947@qq.com>

go fmt code

Signed-off-by: jyz0309 <45495947@qq.com>

resolve import cycle

Signed-off-by: jyz0309 <45495947@qq.com>

fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

fix lints

Signed-off-by: jyz0309 <45495947@qq.com>

fix build error

Signed-off-by: jyz0309 <45495947@qq.com>

fix test

Signed-off-by: jyz0309 <45495947@qq.com>

try

Signed-off-by: jyz0309 <45495947@qq.com>

* try to compare version

Signed-off-by: jyz0309 <45495947@qq.com>

fix conflict

Signed-off-by: jyz0309 <45495947@qq.com>

remove unuse change

Signed-off-by: jyz0309 <45495947@qq.com>

* address comment

Signed-off-by: jyz0309 <45495947@qq.com>

* fix import error

Signed-off-by: jyz0309 <45495947@qq.com>

fix import

Signed-off-by: jyz0309 <45495947@qq.com>

address comment

Signed-off-by: jyz0309 <45495947@qq.com>

address comment

Signed-off-by: jyz0309 <45495947@qq.com>

* address comment

Signed-off-by: jyz0309 <45495947@qq.com>

* format code

Signed-off-by: jyz0309 <45495947@qq.com>

* remove exempt and error record

Signed-off-by: jyz0309 <45495947@qq.com>

* ignore pod

Signed-off-by: jyz0309 <45495947@qq.com>

* add decision default value

Signed-off-by: jyz0309 <45495947@qq.com>

* address comment

Signed-off-by: jyz0309 <45495947@qq.com>

* remore useless import

Signed-off-by: jyz0309 <45495947@qq.com>

* remove policy vaild check

Signed-off-by: jyz0309 <45495947@qq.com>

use init to register metric

Signed-off-by: jyz0309 <45495947@qq.com>

fix test

Signed-off-by: jyz0309 <45495947@qq.com>

remove check

Signed-off-by: jyz0309 <45495947@qq.com>

remove blank line

Signed-off-by: jyz0309 <45495947@qq.com>

add allowedImports

Signed-off-by: jyz0309 <45495947@qq.com>

Add mock recorder

Signed-off-by: jyz0309 <45495947@qq.com>

format code

Signed-off-by: jyz0309 <45495947@qq.com>

separe record into 3 function

Signed-off-by: jyz0309 <45495947@qq.com>

* fix comment

Signed-off-by: jyz0309 <45495947@qq.com>
2021-10-20 20:02:08 -07:00
Kubernetes Prow Robot
f355d0e738 Merge pull request #104886 from egernst/cri-pod-overhead
pass sandbox resource requirements  over CRI
2021-10-20 16:20:08 -07:00
Kubernetes Prow Robot
c269494ebc Merge pull request #105729 from MikeSpreitzer/do-not-assume-decision
Remove presumptions about what decision has been made
2021-10-20 15:16:16 -07:00
Eric Ernst
91be6f7926 autogenerated fun
Signed-off-by: Eric Ernst <eric_ernst@apple.com>
2021-10-20 11:30:23 -07:00
Eric Ernst
b8caa328d7 cri: add overhead, resources to linux sandbox config
Signed-off-by: Eric Ernst <eric_ernst@apple.com>
2021-10-20 11:30:23 -07:00
Kubernetes Prow Robot
9c97ae286c Merge pull request #105588 from kerthcet/cleanup/remove-servfice-affinity-plugin
Cleanup/remove service affinity plugin
2021-10-20 10:24:10 -07:00
Kubernetes Prow Robot
881980a5c6 Merge pull request #105490 from aojea/restclient-shared-transport
client-go: share the same transport for generated clientsets
2021-10-20 10:23:58 -07:00
Jordan Liggitt
434ce4336a vendor sigs.k8s.io/json 2021-10-20 13:12:08 -04:00
Jordan Liggitt
bba877d3a6 Switch from json-iterator to utiljson 2021-10-20 12:49:23 -04:00
Kubernetes Prow Robot
18104ecf1f Merge pull request #105405 from verb/1.23-ec-beta
Promote EphemeralContainers to beta
2021-10-20 09:24:10 -07:00
Mike Spreitzer
e70999becd Remove presumptions about what decision has been made 2021-10-20 11:05:53 -05:00
Antonio Ojea
032d0d6ea9 updated generated 2021-10-20 06:39:39 +02:00
Antonio Ojea
909a1738fd expose NewForConfigAndClient for the metadata client 2021-10-20 06:39:39 +02:00
Antonio Ojea
b584195e5c expose NewForConfigAndClient for the dynamic client 2021-10-20 06:39:39 +02:00
Antonio Ojea
be15e5ed78 client-go: share http client for all GV 2021-10-20 06:39:38 +02:00
Antonio Ojea
f519ab25ab NewDiscoveryClientForConfigAndClient constructor 2021-10-20 06:39:38 +02:00
Antonio Ojea
80fbc81726 RESTClient contructors for config and http client
Add two new constructors for versioned and unversioned RESTClients.

These new constructors allow to pass an http.Client to the RESTClient,
taking precence over the transport Config parameters.

Add a new helper function to generate an http.Client from the RESTClient
Config object.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-10-20 06:39:23 +02:00
Lee Verberne
b34e710972 Generated code for EphemeralContainers beta 2021-10-19 23:01:15 -04:00
Lee Verberne
f81c48cd0a Disallow subpath for ephemeral container mounts 2021-10-19 23:01:15 -04:00
Lee Verberne
d1d7882186 Add test for EphemeralContainerCommon struct tags
The tags for type EphemeralContainerCommon should be kept in sync with
those of type Container.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-10-19 23:01:07 -04:00
Lee Verberne
26e183b9d9 Clarify EphemeralContainer behavior in docs
- Apply doc style guide
- Specify behavior when namespace targeting isn't supported by runtime
2021-10-19 23:00:51 -04:00
Kubernetes Prow Robot
6cbe18544d Merge pull request #94165 from soltysh/fix_cp
Use separate pathSpec for local and remote to properly handle cleaning paths
2021-10-19 15:24:23 -07:00
Kubernetes Prow Robot
421cdec3a5 Merge pull request #105666 from nilo19/fix/cherry-pick-842
fix: skip instance not found when decoupling vmss from lb
2021-10-19 13:10:24 -07:00
Kubernetes Prow Robot
c733594040 Merge pull request #105687 from alculquicondor/job-tracking
Graduate JobTrackingWithFinalizers to beta
2021-10-19 11:40:37 -07:00