Commit Graph

5920 Commits

Author SHA1 Message Date
k8s-ci-robot
9e2820e4c9 Merge pull request #71067 from sttts/sttts-handler-panic
apiserver: preserve stack trace in handler panic beyond timeout handler
2018-11-16 03:57:11 -08:00
Daniel Kłobuszewski
7a10f4eda7 Add option to k8s apiserver to reject incoming requests upon audit failure 2018-11-16 10:32:49 +01:00
saad-ali
9d4810f25a Bump grpc from 1.7.5 to 1.13.0 2018-11-15 16:39:42 -08:00
Haowei Cai
94e3c2899f generated 2018-11-15 11:03:04 -08:00
Haowei Cai
e0d4c65b53 Convert and construct OpenAPI v2 spec from CRD
validation OpenAPI v3 Schema
2018-11-15 11:02:47 -08:00
Haowei Cai
3222a7033c Apiextensions-apiserver aggregates CRD schemas
efficiently without checking conflicts, and wire up CRD discovery
controller to serve OpenAPI spec.
2018-11-15 11:02:11 -08:00
Haowei Cai
92d95df0ba Enable aggregator apiserver resyncing openapi spec
from delegation apiservers
2018-11-15 11:00:25 -08:00
Jordan Liggitt
0952c9ee96 apiserver: propagate panics from REST handlers correctly 2018-11-15 12:35:51 -05:00
Dr. Stefan Schimanski
96fd0482f4 apiserver: preserve stack trace in handler panic beyond timeout handler 2018-11-15 17:36:11 +01:00
Hannes Hörl
0d4b5c98f8 Bump k8s.io/uitls to 8e7ff06
The reason for the bump is the new functionality of the
k8s.io/utils/exec package which allows
- to get a hold of the process' std{out,err} as `io.Reader`s
- to `Start` a process and `Wait` for it

This should help on addressing #70890 by allowing to wrap std{out,err}
of the process to be wrapped with a `io.limitedReader`.

It also updates
- k8s.io/kubernetes/pkg/probe/exec.FakeCmd
- k8s.io/kubernetes/pkg/kubelet/prober.execInContainer
- k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet.fakeCmd
to implement the changed interface.

The dependency on 'k8s.io/utils/pointer' to the new version has also
been bumped in some staging repos:
- apiserver
- kube-controller-manager
- kube-scheduler
2018-11-15 13:25:12 +00:00
k8s-ci-robot
b7e2980a57 Merge pull request #68576 from jennybuckley/openapi-optimize
Build OpenAPI Definitions per group instead of per resource
2018-11-15 05:04:57 -08:00
k8s-ci-robot
b1a52a38e9 Merge pull request #67257 from pbarker/audit
dynamic audit configuration
2018-11-15 02:42:59 -08:00
k8s-ci-robot
f48e18faa4 Merge pull request #70971 from cheftako/leaseCheck
Report KCM as unhealthy if leader election is wedged.
2018-11-15 01:30:59 -08:00
Dr. Stefan Schimanski
e43e5e2e45 apiserver: in timeout_test separate out handler 2018-11-15 09:56:53 +01:00
xichengliudui
3b9798efe9 update notes 2018-11-15 01:29:59 -05:00
k8s-ci-robot
726c07eb26 Merge pull request #69929 from jsafrane/csi-ga
Promote CSIPersistentVolume feature to GA
2018-11-14 20:34:58 -08:00
k8s-ci-robot
22eb2b0dae Merge pull request #70966 from awly/cert-triple-cleanup
Remove k8s.io/client-go/util/cert/triple
2018-11-14 19:20:07 -08:00
k8s-ci-robot
4fb368e5fd Merge pull request #70801 from Adirio/deltafifo-cleanup
DeltaFIFO cleanup
2018-11-14 19:19:57 -08:00
Patrick Barker
5cb70e369f adds dynamic audit configuration generated 2018-11-15 01:03:45 +00:00
Walter Fender
9c43ee6d6e Report KCM as unhealthy if leader election is wedged.
Feedback from lavalamp and deads2k.
Changed Check() logic to be central to LeaderElector.
Further changes, especially cleaning up the test code.
2018-11-14 16:57:37 -08:00
Patrick Barker
eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
jennybuckley
d02a543f37 Update generated 2018-11-14 12:50:11 -08:00
jennybuckley
758e8623e9 Build OpenAPI Definitions per group instead of per resource 2018-11-14 12:50:02 -08:00
k8s-ci-robot
68fb529ec1 Merge pull request #70969 from awly/node-csr-move
Move csr.RequestNodeCertificate into kubelet bootstrap package
2018-11-14 11:37:58 -08:00
k8s-ci-robot
ca338b91f5 Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params
2018-11-14 11:37:48 -08:00
k8s-ci-robot
774f162884 Merge pull request #70999 from liggitt/oversized-spdystream-frames
Ensure oversized data frames are not written to spdystreams
2018-11-14 09:26:06 -08:00
Jan Safranek
e95b188656 Generated files 2018-11-14 14:01:16 +01:00
Jan Safranek
b9d9b7f16f Promote VolumeAttachment to storage.k8s.io/v1 API 2018-11-14 14:01:16 +01:00
Adrián Orive
0b16c43f59 DeltaFIFO cleanup
Remove non-needed else condition
Remove non-needed swallow copy
Simplify return for IsClosed()
Keep amount decrement next to element extraction from the queue

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
2018-11-14 09:00:02 +01:00
Adrián Orive
b09c1ce5dd Add newInformer documentation
Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
2018-11-14 08:37:14 +01:00
Jordan Liggitt
0202e269a3 Fix sending oversided data frames to spdy stream 2018-11-13 22:13:09 -05:00
k8s-ci-robot
d399e079f2 Merge pull request #71002 from awly/certutil-cleanup
Remove unused funcs in certutil
2018-11-13 14:59:46 -08:00
k8s-ci-robot
bc6aee19b0 Merge pull request #70884 from lavalamp/workqueue
add a metric that can be used to notice stuck worker threads
2018-11-13 14:59:27 -08:00
Han Kang
f1f1bc83fd add ability to exclude health checks from failing healthz by passing in a query param 2018-11-13 14:48:44 -08:00
k8s-ci-robot
1777be5fbe Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0
Use watch cache when rv=0 even when limit is set
2018-11-13 13:45:13 -08:00
Andrew Lytvynov
09db5bc951 Remove k8s.io/client-go/util/cert/triple
The package is unused.
2018-11-13 13:08:50 -08:00
xichengliudui
9a25d46e8b Delete some redundant code
Delete some redundant code
2018-11-13 14:19:36 -05:00
Andrew Lytvynov
5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
2018-11-13 10:27:51 -08:00
Andrew Lytvynov
162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
Stanislav Laznicka
628d1fef37 autogen files 2018-11-13 18:06:12 +01:00
wojtekt
4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Slava Semushin
c21cb548e6 Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
stewart-yu
217dbeafaf remove duplicated import 2018-11-13 20:08:39 +08:00
k8s-ci-robot
efd19d3c94 Merge pull request #70970 from awly/unexport-csr-parsecsr
Unexport csr.ParseCSR
2018-11-12 18:31:45 -08:00
Andrew Lytvynov
41334cfdd3 Unexport csr.ParseCSR
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
2018-11-12 17:15:09 -08:00
k8s-ci-robot
27cf50d85e Merge pull request #70322 from mikedanese/audoidc
make oidc authenticator (more?) audience aware
2018-11-12 17:03:29 -08:00
Daniel Smith
680ddd49d8 fixup! add longest_running_processor_microseconds metric
fix data race
2018-11-12 12:57:42 -08:00
Mike Danese
a714d9cd04 make oidc authenticator (more?) audience aware
Part of https://github.com/kubernetes/kubernetes/issues/69893
2018-11-12 12:43:21 -08:00
Mike Spreitzer
fc20359fed Clarified syntax doc on --watch-cache-sizes
Noted that group must be omitted for resources of apiVersion v1 (the
legacy core API) and included for others.

Fixes #65393
2018-11-12 14:45:45 -05:00
Daniel Smith
fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00