Kubernetes Prow Robot
dba9975e3e
Merge pull request #105857 from liggitt/runAsNonRoot-runAsUser
...
PodSecurity: Add runAsUser check to restricted policy
2021-10-26 00:15:30 -07:00
Kubernetes Prow Robot
e1f62e406d
Merge pull request #105719 from yuanhh/master
...
sample-controller/docs: Use italics font on package name
2021-10-25 20:03:29 -07:00
Kubernetes Prow Robot
87d8a75b0e
Merge pull request #105749 from tallclair/pod-security-cli
...
Add --version flag to podsecurity-webhook command
2021-10-25 13:34:25 -07:00
Jordan Liggitt
40635ca59e
PodSecurity: runAsUser: generated fixtures
2021-10-25 16:17:10 -04:00
Jordan Liggitt
a476a5e00e
PodSecurity: runAsUser
2021-10-25 16:17:10 -04:00
Jordan Liggitt
9b930e3728
PodSecurity: test: generate 1.23 fixtures
2021-10-25 16:17:10 -04:00
Jordan Liggitt
ef3bf86f5b
PodSecurity: test: ensure fixtures are exercised for all relevant policy versions
2021-10-25 16:16:31 -04:00
Kubernetes Prow Robot
a6ffd29e5f
Merge pull request #105314 from calvin0327/issue-podsecurity-errormessage
...
[PodSecurity]Add context to failure message
2021-10-25 11:25:02 -07:00
Tim Allclair
c7cdf19cbe
Add --version flag to podsecurity-webhook command
2021-10-25 10:26:05 -07:00
Kubernetes Prow Robot
6166203f45
Merge pull request #105828 from ahg-g/ahg-legacy
...
Remove scheduler's legacy policy config
2021-10-25 09:38:23 -07:00
Maciej Borsz
f0c7c9abc9
Update writers.go
2021-10-25 13:35:43 +02:00
Kubernetes Prow Robot
f3551dd942
Merge pull request #105866 from MikeSpreitzer/clarify-phase
...
Clarify metrics help wrt APF execution phases
2021-10-25 02:42:23 -07:00
Wojciech Tyczyński
f609a8e0b5
Fix delete collection error channel size
2021-10-25 08:07:21 +02:00
Mike Spreitzer
d7a3bf0d26
Clarify metrics help wrt APF execution phases
2021-10-24 22:32:13 -04:00
Abdullah Gharaibeh
faf0ce68a0
Remove scheduler's legacy policy config
2021-10-24 21:58:12 -04:00
Kubernetes Prow Robot
89dd275dde
Merge pull request #105584 from goofy-z/fix-extension-point-postfilter-comment
...
update extension point PostFilter comment
2021-10-22 20:00:20 -07:00
Patrick Ohly
e36d54ce62
component-base: test json output for KObj and KObjs
...
Thanks to the new klog, logr and zapr releases, ObjectRef is now
logged as struct in JSON output.
2021-10-22 15:32:20 +02:00
Patrick Ohly
169e8b65a0
klog 2.30.0, logr 1.2.0, zapr 1.2.0
...
The new releases fix logging of KObj in JSON output: klog implements the new
logr.Marshaler interface and zapr uses it instead of Stringer when logging the
ObjectRef created by KObj.
2021-10-22 15:32:20 +02:00
Kubernetes Prow Robot
cc25656b00
Merge pull request #105030 from liggitt/json-stdlib
...
switch from json-iterator to forked stdlib json decoder
2021-10-21 20:40:37 -07:00
Kubernetes Prow Robot
313b43a8cb
Merge pull request #105511 from benluddy/apf-delegated-signal
...
Free APF seats for watches handled by an aggregated apiserver.
2021-10-21 16:50:37 -07:00
Kubernetes Prow Robot
c767c9d993
Merge pull request #105663 from Jefftree/feature-openapiv3
...
Add feature flag for OpenAPI v3
2021-10-21 10:17:37 -07:00
Kubernetes Prow Robot
4cfd2820ba
Merge pull request #105514 from jpetazzo/tweak-kubectl-run-help
...
Minor improvements in 'kubectl run' flag help
2021-10-21 08:41:39 -07:00
Kubernetes Prow Robot
2dede1d4d4
Merge pull request #105606 from sxllwx/fix/goroutine-leak
...
fix goroutine leak in the DeleteCollection
2021-10-21 06:48:09 -07:00
scott
53df1caeef
fix goroutine leak in the DeleteCollection
2021-10-21 19:19:38 +08:00
Yuanhao Hsueh
79a7caeb76
sample-controller/docs/controller-client-go.md: Use italics font on package name
2021-10-21 15:38:28 +08:00
calvin0327
12bfe734a8
add context to failure message.
2021-10-21 14:37:53 +08:00
Alkaid
ae9ca48f01
[PodSecurity] Implement metricRecorder for admission ( #104217 )
...
* init
Signed-off-by: jyz0309 <45495947@qq.com >
go fmt
Signed-off-by: jyz0309 <45495947@qq.com >
remove useless code
Signed-off-by: jyz0309 <45495947@qq.com >
add metrics.Attributes interface
Signed-off-by: jyz0309 <45495947@qq.com >
address comment
Signed-off-by: jyz0309 <45495947@qq.com >
go fmt code
Signed-off-by: jyz0309 <45495947@qq.com >
resolve import cycle
Signed-off-by: jyz0309 <45495947@qq.com >
fix comment
Signed-off-by: jyz0309 <45495947@qq.com >
fix lints
Signed-off-by: jyz0309 <45495947@qq.com >
fix build error
Signed-off-by: jyz0309 <45495947@qq.com >
fix test
Signed-off-by: jyz0309 <45495947@qq.com >
try
Signed-off-by: jyz0309 <45495947@qq.com >
* try to compare version
Signed-off-by: jyz0309 <45495947@qq.com >
fix conflict
Signed-off-by: jyz0309 <45495947@qq.com >
remove unuse change
Signed-off-by: jyz0309 <45495947@qq.com >
* address comment
Signed-off-by: jyz0309 <45495947@qq.com >
* fix import error
Signed-off-by: jyz0309 <45495947@qq.com >
fix import
Signed-off-by: jyz0309 <45495947@qq.com >
address comment
Signed-off-by: jyz0309 <45495947@qq.com >
address comment
Signed-off-by: jyz0309 <45495947@qq.com >
* address comment
Signed-off-by: jyz0309 <45495947@qq.com >
* format code
Signed-off-by: jyz0309 <45495947@qq.com >
* remove exempt and error record
Signed-off-by: jyz0309 <45495947@qq.com >
* ignore pod
Signed-off-by: jyz0309 <45495947@qq.com >
* add decision default value
Signed-off-by: jyz0309 <45495947@qq.com >
* address comment
Signed-off-by: jyz0309 <45495947@qq.com >
* remore useless import
Signed-off-by: jyz0309 <45495947@qq.com >
* remove policy vaild check
Signed-off-by: jyz0309 <45495947@qq.com >
use init to register metric
Signed-off-by: jyz0309 <45495947@qq.com >
fix test
Signed-off-by: jyz0309 <45495947@qq.com >
remove check
Signed-off-by: jyz0309 <45495947@qq.com >
remove blank line
Signed-off-by: jyz0309 <45495947@qq.com >
add allowedImports
Signed-off-by: jyz0309 <45495947@qq.com >
Add mock recorder
Signed-off-by: jyz0309 <45495947@qq.com >
format code
Signed-off-by: jyz0309 <45495947@qq.com >
separe record into 3 function
Signed-off-by: jyz0309 <45495947@qq.com >
* fix comment
Signed-off-by: jyz0309 <45495947@qq.com >
2021-10-20 20:02:08 -07:00
Kubernetes Prow Robot
f355d0e738
Merge pull request #104886 from egernst/cri-pod-overhead
...
pass sandbox resource requirements over CRI
2021-10-20 16:20:08 -07:00
Kubernetes Prow Robot
c269494ebc
Merge pull request #105729 from MikeSpreitzer/do-not-assume-decision
...
Remove presumptions about what decision has been made
2021-10-20 15:16:16 -07:00
Eric Ernst
91be6f7926
autogenerated fun
...
Signed-off-by: Eric Ernst <eric_ernst@apple.com >
2021-10-20 11:30:23 -07:00
Eric Ernst
b8caa328d7
cri: add overhead, resources to linux sandbox config
...
Signed-off-by: Eric Ernst <eric_ernst@apple.com >
2021-10-20 11:30:23 -07:00
Kubernetes Prow Robot
9c97ae286c
Merge pull request #105588 from kerthcet/cleanup/remove-servfice-affinity-plugin
...
Cleanup/remove service affinity plugin
2021-10-20 10:24:10 -07:00
Kubernetes Prow Robot
881980a5c6
Merge pull request #105490 from aojea/restclient-shared-transport
...
client-go: share the same transport for generated clientsets
2021-10-20 10:23:58 -07:00
Jordan Liggitt
434ce4336a
vendor sigs.k8s.io/json
2021-10-20 13:12:08 -04:00
Jordan Liggitt
bba877d3a6
Switch from json-iterator to utiljson
2021-10-20 12:49:23 -04:00
Kubernetes Prow Robot
18104ecf1f
Merge pull request #105405 from verb/1.23-ec-beta
...
Promote EphemeralContainers to beta
2021-10-20 09:24:10 -07:00
Mike Spreitzer
e70999becd
Remove presumptions about what decision has been made
2021-10-20 11:05:53 -05:00
Antonio Ojea
032d0d6ea9
updated generated
2021-10-20 06:39:39 +02:00
Antonio Ojea
909a1738fd
expose NewForConfigAndClient for the metadata client
2021-10-20 06:39:39 +02:00
Antonio Ojea
b584195e5c
expose NewForConfigAndClient for the dynamic client
2021-10-20 06:39:39 +02:00
Antonio Ojea
be15e5ed78
client-go: share http client for all GV
2021-10-20 06:39:38 +02:00
Antonio Ojea
f519ab25ab
NewDiscoveryClientForConfigAndClient constructor
2021-10-20 06:39:38 +02:00
Antonio Ojea
80fbc81726
RESTClient contructors for config and http client
...
Add two new constructors for versioned and unversioned RESTClients.
These new constructors allow to pass an http.Client to the RESTClient,
taking precence over the transport Config parameters.
Add a new helper function to generate an http.Client from the RESTClient
Config object.
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-10-20 06:39:23 +02:00
Lee Verberne
b34e710972
Generated code for EphemeralContainers beta
2021-10-19 23:01:15 -04:00
Lee Verberne
f81c48cd0a
Disallow subpath for ephemeral container mounts
2021-10-19 23:01:15 -04:00
Lee Verberne
d1d7882186
Add test for EphemeralContainerCommon struct tags
...
The tags for type EphemeralContainerCommon should be kept in sync with
those of type Container.
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2021-10-19 23:01:07 -04:00
Lee Verberne
26e183b9d9
Clarify EphemeralContainer behavior in docs
...
- Apply doc style guide
- Specify behavior when namespace targeting isn't supported by runtime
2021-10-19 23:00:51 -04:00
Kubernetes Prow Robot
6cbe18544d
Merge pull request #94165 from soltysh/fix_cp
...
Use separate pathSpec for local and remote to properly handle cleaning paths
2021-10-19 15:24:23 -07:00
Kubernetes Prow Robot
421cdec3a5
Merge pull request #105666 from nilo19/fix/cherry-pick-842
...
fix: skip instance not found when decoupling vmss from lb
2021-10-19 13:10:24 -07:00
Kubernetes Prow Robot
c733594040
Merge pull request #105687 from alculquicondor/job-tracking
...
Graduate JobTrackingWithFinalizers to beta
2021-10-19 11:40:37 -07:00