Commit Graph

4499 Commits

Author SHA1 Message Date
Jordan Liggitt
d5d3eddb95 Add allowed/denied metrics for authorizers 2024-02-16 08:20:59 -05:00
Kubernetes Prow Robot
66d038d84d Merge pull request #121946 from liggitt/reload-authz
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Kubernetes Prow Robot
50b4cfc414 Merge pull request #123321 from mimowo/job-reset-metrics
Reset metrics in the Job integration test before testing
2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot
47f92ce231 Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests
Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests
2024-02-15 09:54:53 -08:00
Michal Wozniak
ab8cdae3b1 Reset metrics in the Job integration test before testing 2024-02-15 14:50:24 +01:00
Michal Wozniak
115dc90633 Increase accuracy of the pods_creation_total metric and improve test exec time 2024-02-15 10:59:01 +01:00
Anish Ramasekar
0feb1d5173 Add integration test for multiple audience in structured authn
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
72c3c7c924 Merge pull request #123282 from enj/enj/i/authn_config_algs
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
ba450636a4 Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Jordan Liggitt
5dc92ada06 Implement authz config file reloading 2024-02-14 18:09:15 -05:00
Anish Ramasekar
18c563546a support multiple audiences with jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Monis Khan
b5e0068325 Support all key algs with structured authn config
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
Monis Khan
b8a59346fe test/oidc: extract key type to allow testing different algs
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-13 17:05:33 -05:00
Anish Ramasekar
77241d3125 Add apiserver_encryption_config_controller_automatic_reloads_total
metric

- Adds `apiserver_encryption_config_controller_automatic_reloads_total`
  metric with status label for encryption config reload success/failure.
- Deprecated `apiserver_encryption_config_controller_automatic_reload_failures_total` and `apiserver_encryption_config_controller_automatic_reload_success_total`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 21:47:46 -08:00
Kubernetes Prow Robot
3bf9477b52 Merge pull request #122472 from pacoxu/flowcontrolv1
flowcontrol: set the serialization version to v1
2024-02-12 13:17:48 -08:00
Kubernetes Prow Robot
42941cb88a Merge pull request #122635 from carlory/KEP-2799
Promote LegacyServiceAccountTokenCleanUp to GA
2024-02-02 12:47:23 -08:00
Alexander Zielenski
b636984004 test: remove unnecessary skip healthz check from test
snuck in there while I was working on the test, but is ultimately not necessary to test the functionality.

skipping healthz check resulted in leaking goroutines from poststarthooks.
2024-02-01 14:50:54 -08:00
Alexander Zielenski
71559bd026 bugfix: dont skip reconcile for unchanged policy if last sync failed 2024-01-29 11:16:59 -08:00
Lukasz Szaszkiewicz
41e706600a client-go/reflector: make UseWatchList a pointer
until #115478(use streaming against the etcd storage)
is resolved the cacher need a way to disable the streaming.
2024-01-19 14:40:18 +01:00
Kensei Nakada
f29d6970c9 doc(scheduler_perf): enrich the documentation 2024-01-15 08:50:08 +00:00
carlory
0fc1b9c9aa Promote LegacyServiceAccountTokenCleanUp to GA 2024-01-08 10:58:49 +08:00
Davanum Srinivas
7a236bd7e0 Add providerless tags appropriately in test/
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-01-07 08:16:05 -05:00
Kubernetes Prow Robot
60dcf7fd8d Merge pull request #119079 from sanposhiho/decouple-scheduler-perf-from-kk
make scheduler_perf usable from other repositories
2024-01-07 12:12:13 +01:00
Kubernetes Prow Robot
9bd0ef5f17 Merge pull request #122558 from linxiulei/webhook-http2
Use http/2 for localhost webhook
2024-01-04 19:11:26 +01:00
Eric Lin
246e69fb99 Use http/2 for localhost webhook
Signed-off-by: Eric Lin <exlin@google.com>
2024-01-04 09:09:10 +00:00
Kubernetes Prow Robot
a7af34e1b8 Merge pull request #122347 from aramase/aramase/c/move_kms_apis
kmsv2: move encryption config types to standard API server config location
2024-01-03 16:16:18 +01:00
Paco Xu
f73bba51c9 flowcontrol: set the serialization version to v1 2023-12-25 14:24:50 +08:00
Kubernetes Prow Robot
f68a965e5a Merge pull request #122032 from carlory/remove-fg-APISelfSubjectReview
remove feature-gate APISelfSubjectReview in 1.30
2023-12-20 16:46:53 +01:00
Anish Ramasekar
75695dae10 move encryption config types to standard API server config location
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-12-18 20:54:24 +00:00
AxeZhan
be48c93689 Sched framework: expose NodeInfo in all functions of PluginsRunner interface 2023-12-15 11:30:06 +08:00
Kubernetes Prow Robot
4189053453 Merge pull request #121755 from kerthcet/fix/node-update-event
Fix nodeUpdate event missing some potential changes
2023-12-13 22:36:03 +01:00
Kubernetes Prow Robot
bd4c29b7e3 Merge pull request #115502 from pwschuurman/speedup-autodelete-sts-integration-tests
Reduce running time of TestAutodeleteOwnerRefs StatefulSet Integration Tests
2023-12-13 22:33:57 +01:00
Kubernetes Prow Robot
c5473f1710 Merge pull request #117667 from carlory/fix-009
Remove ability to re-enable serving deprecated storage APIs
2023-12-13 21:25:15 +01:00
Peter Schuurman
16aad468b6 Replace test.name with test.namespace 2023-12-13 10:28:26 -08:00
Peter Schuurman
a3a4192eb9 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests 2023-12-13 10:28:24 -08:00
Kensei Nakada
3b8f25dfdd fix: disable SchedulerQueueingHints feature flag by default 2023-12-13 04:16:43 +00:00
Kensei Nakada
74a6a4581f fix by linters 2023-12-02 09:58:34 +00:00
Kensei Nakada
5310abe14a make scheduler_perf usable from other repositories 2023-12-01 12:43:08 +00:00
Jordan Liggitt
233949e05d Add an integration test to verify root path cleanup 2023-11-30 14:57:21 -05:00
kerthcet
e5b86c1034 Fix node update event will miss some potential changes
Signed-off-by: kerthcet <kerthcet@gmail.com>
2023-11-27 15:33:47 +08:00
carlory
57a5db8da3 remove feature-gate APISelfSubjectReview 2023-11-24 16:59:21 +08:00
Kubernetes Prow Robot
5ce0bd95cc Merge pull request #121677 from kerthcet/cleanup/remove-evnet
Unregister events in schedulingGates for performance
2023-11-10 05:03:33 +01:00
Jordan Liggitt
b53134f129 Test anonymous and RBAC handling via config file 2023-11-08 14:36:05 -06:00
kerthcet
f77a4543d1 Unregister events in schedulingGates plugin
Signed-off-by: kerthcet <kerthcet@gmail.com>
2023-11-06 10:01:13 +08:00
Kubernetes Prow Robot
f883370b8a Merge pull request #121679 from bzsuni/fix/integration/apiserver/discovery/service-go/WaitForReady
Fix parameter passing error in function WaitForReady in file test/integration/apiserver/discovery
2023-11-03 13:02:46 +01:00
kerthcet
50f092c136 Add kubernetes.io/hostname to faked nodes in tests
Signed-off-by: kerthcet <kerthcet@gmail.com>
2023-11-03 11:47:36 +08:00
Jordan Liggitt
0112d91a05 Add multi-webhook integration test 2023-11-02 19:21:06 -04:00
carlory
1186e25a45 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2023-11-02 20:51:06 +08:00
Kubernetes Prow Robot
515d1ce6c0 Merge pull request #121393 from mimowo/backoff-limit-per-index-load-test
Benchmark job with backoff limit per index
2023-11-02 09:58:26 +01:00
bzsuni
003e4886c6 Fix parameter passing error
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-11-02 01:14:45 +08:00