Commit Graph

773 Commits

Author SHA1 Message Date
Sean Sullivan
32b2eea50d EgressSelectorConfiguration now uses strict validation 2024-10-13 16:09:35 -07:00
Joe Betz
875d163ce6 Use t.Cleanup instead of defer to shut down servers 2024-10-09 20:16:01 -04:00
Kubernetes Prow Robot
78d6490412 Merge pull request #127302 from cici37/costFG
Promote cost related feature gate to default true
2024-10-09 23:02:23 +01:00
Kubernetes Prow Robot
d9c46d8ecb Merge pull request #127909 from richabanker/mvp-cleanup
Reduce IdentityLeaseRenewIntervalPeriod in peer_proxy test
2024-10-09 13:28:23 +01:00
Joe Betz
3570feb2fc Cancel informers for shutdown server in peerproxy test 2024-10-08 21:49:09 -04:00
Richa Banker
fe97e41f29 add more logging for peer_proxy_test, also tweak IdentityLeaseGCPeriod and IdentityLeaseRenewIntervalPeriod 2024-10-08 17:18:27 -07:00
Cici Huang
baeeb66613 Update tests 2024-10-08 17:02:07 +00:00
Kubernetes Prow Robot
80941e3e87 Merge pull request #127643 from Jefftree/set-emulation-integration-test
Allow emulation version to be set in integration test
2024-09-27 21:56:01 +01:00
Jefftree
dacc2e1f5d Allow emulation version to be set in integration test 2024-09-25 22:01:15 -04:00
Kubernetes Prow Robot
15d08bf7c8 Merge pull request #127323 from vrutkovs/tracing-cacher-get
tracing: add span for get cacher
2024-09-23 10:27:59 +01:00
Vadim Rutkovsky
dff0075e7c tracing: add span for cacher.Get
Also updates tracing integration tests for cacher.GetList
2024-09-21 09:53:43 +02:00
Kubernetes Prow Robot
920e9e34b0 Merge pull request #126977 from aaron-prindle/compat-version-132
chore: bump DefaultKubeBinaryVersion to 1.32, make 1.32 CEL changes, fix int tests to handle 1 version off API deprecation, and fix prerelease-lifecycle-gen for # of APIs
2024-09-17 23:50:43 +01:00
Aaron Prindle
701e6c7ab1 chore: bump DefaultKubeBinaryVersion to 1.32, make 1.32 CEL changes, fix int tests to handle 1 version off API deprecation, and fix prerelease-lifecycle-gen for # of APIs 2024-09-17 19:32:14 +00:00
Omer Aplatony
6aa674dc5a Improve message prefer a domain-qualified finalizer
Signed-off-by: Omer Aplatony <omerap12@gmail.com>
2024-09-11 22:19:58 +03:00
Harry Li
9bd3826bf1 fix(typo): correct 'reources' to 'resources' 2024-09-05 00:01:28 +08:00
Kubernetes Prow Robot
89fbb3f2d2 Merge pull request #127017 from carlory/flowcontrolv1beta3
remove resource flowschemas and prioritylevelconfigurations from legacyBetaEnabledByDefaultResources in v1.32
2024-09-03 21:21:17 +01:00
carlory
49b2c969a3 remove resource flowschemas and prioritylevelconfigurations from legacyBetaEnabledByDefaultResources in v1.32 2024-09-02 11:30:17 +08:00
Anish Ramasekar
c22a41e879 Set credential-id in userinfo.extra for jwt authenticators if jti claim present
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-08-30 11:02:44 -07:00
Cici Huang
0f19faf9be Remove feature gate ValiatingAdmissionPolicy after stable. 2024-08-22 17:39:18 +00:00
Richa Banker
4acedb5132 init a common apiserver for TestAuthorizationDecisionCaching testcases 2024-08-16 10:52:30 -07:00
Richa Banker
342ecab56a init a common apiserver for Test_ValidateSecondaryAuthorization testcases 2024-08-16 10:52:30 -07:00
Richa Banker
99eaa71f0e init a common apiserver for TestCRDParams testcases 2024-08-16 10:52:30 -07:00
Richa Banker
de2730a9a6 split Test_CostLimitForValidation into feature-enabled and feature-disabled tests, init a common apiserver for all testcases 2024-08-16 10:52:30 -07:00
Richa Banker
1e03472fe8 init a common apiserver for Test_ValidateNamespace_WithConfigMapParams testcases 2024-08-16 10:52:29 -07:00
Richa Banker
9df04b7c78 split Test_ValidateNamespace_NoParams into successes and failures tests, init a common apiserver for all testcases 2024-08-16 10:52:29 -07:00
Kubernetes Prow Robot
114900ab1f Merge pull request #126523 from enj/enj/i/ssa_authz_create_err
SSA: improve create authz error message
2024-08-16 08:38:38 -07:00
Monis Khan
857127f7c4 SSA: improve create authz error message
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-08-02 17:20:53 -04:00
Monis Khan
d76eae46fc SSA: add integration test to exercise authz
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-08-02 17:04:51 -04:00
Anish Ramasekar
d8d0bbff2d Run apiserver/oidc integration tests in parallel
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-07-29 16:58:47 -07:00
Jefftree
56b278d5d2 fix flake in TestLeaseCandidateCleanup 2024-07-24 14:41:13 +00:00
Jefftree
0c774d0b1f Change PingTime to be persistent 2024-07-24 14:41:13 +00:00
Jefftree
fac7581640 feedback: leasecandidate clients 2024-07-24 14:38:12 +00:00
Dr. Stefan Schimanski
68226b0501 Review feedback
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-24 14:38:12 +00:00
Jefftree
e0c6987ca8 add gc and improve testing 2024-07-24 14:38:11 +00:00
Jefftree
c47ff1e1a9 CLE controller and client changes 2024-07-24 14:38:11 +00:00
Kubernetes Prow Robot
49ff255074 Merge pull request #126308 from cici37/hotFix
Update with stdlib errors
2024-07-23 18:02:07 -07:00
Cici Huang
a48a92c72e Allowing direct CEL reserved keyword usage in CRD (#126188)
* automatically escape reserved keywords for direct usage

* Add reserved keyword support in a ratcheting way, add tests.

---------

Co-authored-by: Wenxue Zhao <ballista01@outlook.com>
2024-07-23 15:45:20 -07:00
cici37
ac2c450da7 Update with stdlib errors 2024-07-23 21:16:53 +00:00
Cici Huang
5420b2fe9a Hot fix for panic on schema conversion. (#126167) 2024-07-22 19:43:45 -07:00
Patrick Ohly
91d7882e86 DRA: new API for 1.31
This is a complete revamp of the original API. Some of the key
differences:
- refocused on structured parameters and allocating devices
- support for constraints across devices
- support for allocating "all" or a fixed amount
  of similar devices in a single request
- no class for ResourceClaims, instead individual
  device requests are associated with a mandatory
  DeviceClass

For the sake of simplicity, optional basic types (ints, strings) where the null
value is the default are represented as values in the API types. This makes Go
code simpler because it doesn't have to check for nil (consumers) and values
can be set directly (producers). The effect is that in protobuf, these fields
always get encoded because `opt` only has an effect for pointers.

The roundtrip test data for v1.29.0 and v1.30.0 changes because of the new
"request" field. This is considered acceptable because the entire `claims`
field in the pod spec is still alpha.

The implementation is complete enough to bring up the apiserver.
Adapting other components follows.
2024-07-22 18:09:34 +02:00
Patrick Ohly
b51d68bb87 DRA: bump API v1alpha2 -> v1alpha3
This is in preparation for revamping the resource.k8s.io completely. Because
there will be no support for transitioning from v1alpha2 to v1alpha3, the
roundtrip test data for that API in 1.29 and 1.30 gets removed.

Repeating the version in the import name of the API packages is not really
required. It was done for a while to support simpler grepping for usage of
alpha APIs, but there are better ways for that now. So during this transition,
"resourceapi" gets used instead of "resourcev1alpha3" and the version gets
dropped from informer and lister imports. The advantage is that the next bump
to v1beta1 will affect fewer source code lines.

Only source code where the version really matters (like API registration)
retains the versioned import.
2024-07-21 17:28:13 +02:00
Kubernetes Prow Robot
8f265b6305 Merge pull request #126136 from cici37/removeFG
Remove feature gate CustomResourceValidationExpressions
2024-07-20 00:08:52 -07:00
Jordan Liggitt
83bd512861 Adjust CEL cost calculation and versioning for authorization library 2024-07-19 15:06:49 -04:00
Cici Huang
67a171a142 Remove feature gate CustomResourceValidationExpressions. 2024-07-16 10:39:00 -07:00
Vinayak Goyal
843d6f2d5d KEP-4633: Add intgration tests for Anonymous Auth Configurable Endpoints.
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-07-16 00:17:44 +00:00
Kubernetes Prow Robot
cf33bef284 Merge pull request #125908 from aojea/race_pforward
fix race on integration test for portforward
2024-07-08 17:25:10 -07:00
Kubernetes Prow Robot
4a48562a81 Merge pull request #125557 from MikeSpreitzer/apf-int-test-tolerate-more-noise
Increase noise margin for TestConcurrencyIsolation
2024-07-08 16:21:34 -07:00
Kubernetes Prow Robot
07cc20a750 Merge pull request #125922 from dims/update_otel_27
Update opentelemetry dependencies to the latest release (Take 2)
2024-07-06 17:31:14 -07:00
David Ashpole
2180ec8e8f fix tracing integration test
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-07-05 21:23:57 -04:00
Ben Luddy
d4e146c861 Add integration test for rejecting non-JSON RawExtensions.
The content of a RawExtension isn't constrained on its own, but there is a de facto requirement that
the object in a request body can be converted to unstructured. Currently, a RawExtension can only be
converted to unstructured if its Raw field is nil or if it contains valid JSON.
2024-07-05 11:54:14 -04:00