Dr. Stefan Schimanski
b8045f98a4
kube-apiserver/leaderelection/tests: use fake clock
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-27 17:54:09 +00:00
Dr. Stefan Schimanski
8c971c5c15
kube-apiserver/leaderelection/test: fixing waiting for informer
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-27 17:54:08 +00:00
Dr. Stefan Schimanski
c7a1fa432a
Call non-blocking informerFactory.Start synchronously to avoid races
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-27 18:13:09 +02:00
Dr. Stefan Schimanski
87f40441d6
kube-apiserver/leaderelection: remove broken printf
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-26 09:27:05 +02:00
Jefftree
56b278d5d2
fix flake in TestLeaseCandidateCleanup
2024-07-24 14:41:13 +00:00
Jefftree
0c774d0b1f
Change PingTime to be persistent
2024-07-24 14:41:13 +00:00
Dr. Stefan Schimanski
a738daa88a
Review feedback: fix context handling in LeaseCandidateGCController
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-24 14:38:13 +00:00
Dr. Stefan Schimanski
15affefcab
Review feedback: handle non-kube strategy correctly
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-24 14:38:13 +00:00
Dr. Stefan Schimanski
a64418ba0a
Review feedback
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-24 14:38:13 +00:00
Jefftree
fac7581640
feedback: leasecandidate clients
2024-07-24 14:38:12 +00:00
Jefftree
e0c6987ca8
add gc and improve testing
2024-07-24 14:38:11 +00:00
Jefftree
c47ff1e1a9
CLE controller and client changes
2024-07-24 14:38:11 +00:00
Jefftree
e3e56eb1e2
CLE storage and type registration changes
2024-07-24 14:38:11 +00:00
Kubernetes Prow Robot
e83fca8dd9
Merge pull request #124530 from sttts/sttts-controlplane-plumbing-split
...
Step 12 - Add generic controlplane example
2024-07-23 12:21:02 -07:00
Kubernetes Prow Robot
bb350f7111
Merge pull request #125661 from mjudeikis/mjudeikis/poststarthookctx.stopch.cleanup
...
Clean deprecated context.StopCh
2024-07-23 02:12:22 -07:00
Dr. Stefan Schimanski
17970b291a
generic-controlplane: add generic-controlplane apiserver sample
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
generic
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-07-23 08:38:33 +02:00
Patrick Ohly
9f36c8d718
DRA: add DRAControlPlaneController feature gate for "classic DRA"
...
In the API, the effect of the feature gate is that alpha fields get dropped on
create. They get preserved during updates if already set. The
PodSchedulingContext registration is *not* restricted by the feature gate.
This enables deleting stale PodSchedulingContext objects after disabling
the feature gate.
The scheduler checks the new feature gate before setting up an informer for
PodSchedulingContext objects and when deciding whether it can schedule a
pod. If any claim depends on a control plane controller, the scheduler bails
out, leading to:
Status: Pending
...
Warning FailedScheduling 73s default-scheduler 0/1 nodes are available: resourceclaim depends on disabled DRAControlPlaneController feature. no new claims to deallocate, preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling.
The rest of the changes prepare for testing the new feature separately from
"structured parameters". The goal is to have base "dra" jobs which just enable
and test those, then "classic-dra" jobs which add DRAControlPlaneController.
2024-07-22 18:09:34 +02:00
Patrick Ohly
b51d68bb87
DRA: bump API v1alpha2 -> v1alpha3
...
This is in preparation for revamping the resource.k8s.io completely. Because
there will be no support for transitioning from v1alpha2 to v1alpha3, the
roundtrip test data for that API in 1.29 and 1.30 gets removed.
Repeating the version in the import name of the API packages is not really
required. It was done for a while to support simpler grepping for usage of
alpha APIs, but there are better ways for that now. So during this transition,
"resourceapi" gets used instead of "resourcev1alpha3" and the version gets
dropped from informer and lister imports. The advantage is that the next bump
to v1beta1 will affect fewer source code lines.
Only source code where the version really matters (like API registration)
retains the versioned import.
2024-07-21 17:28:13 +02:00
Jordan Liggitt
4d535db8be
Add selector authorization to the Node authorizer
2024-07-19 15:06:51 -04:00
David Eads
92e3445e9d
add field and label selectors to authorization attributes
...
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2024-07-19 15:06:47 -04:00
Jeffrey Ying
1c8204ded1
Remove impossible error check controlplane/apiserver/server.go
2024-07-02 20:41:54 -04:00
Wojciech Tyczyński
a5772bd425
Implement resilient watchcache initialization post-start-hook
2024-07-01 12:54:57 +02:00
Kubernetes Prow Robot
93d56511e6
Merge pull request #125021 from aojea/servicecidrbeta
...
KEP-1880 Multiple Service CIDRs: Graduate to Beta (2/2)
2024-06-30 08:53:25 -07:00
Antonio Ojea
0e1f9dadd6
modify components to use the networking v1beta1 API
2024-06-30 09:48:46 +00:00
Davanum Srinivas
a88dc632a4
kube-apiserver: default --enable-logs-handler flag to false
...
Co-Authored-By: Iceber Gu <wei.cai-nat@daocloud.io >
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2024-06-28 15:22:22 -04:00
Kubernetes Prow Robot
d40676c227
Merge pull request #122047 from aojea/treeless
...
KEP-1880 Multiple Service CIDRs: Graduate to Beta (1/2)
2024-06-28 01:00:20 -07:00
Kubernetes Prow Robot
522e2e5066
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
2024-06-27 20:39:51 -07:00
Vinayak Goyal
5e6a4937f5
KEP-4633: Allow health-only anonymous auth mode.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com >
2024-06-28 00:30:05 +00:00
Kubernetes Prow Robot
ef1d28aa52
Merge pull request #125177 from liggitt/dynamic-public-key
...
Move public key serviceaccount getter to interface, filter by key id
2024-06-27 11:57:06 -07:00
Mangirdas Judeikis
24ecb20e41
clean deprecated context.StopCh
2024-06-27 16:07:29 +03:00
Antonio Ojea
7c4726d016
allow to shutdown quickly the apiserver
2024-06-27 11:33:36 +00:00
Kubernetes Prow Robot
44c1a0eec2
Merge pull request #124667 from linxiulei/trim
...
controlplane/apiserver: Trim managedFields off self-requested informers
2024-06-26 08:10:20 -07:00
Siyuan Zhang
379676c4be
add DefaultComponentGlobalsRegistry flags in ServerRunOptions
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
4352c4ad27
Add version mapping in ComponentGlobalsRegistry.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
701e5fc374
Add composition flags for emulation version and feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
403301bfdf
apiserver: Add API emulation versioning.
...
Co-authored-by: Siyuan Zhang <sizhang@google.com >
Co-authored-by: Joe Betz <jpbetz@google.com >
Co-authored-by: Alex Zielenski <zielenski@google.com >
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Jordan Liggitt
3e037070bb
Move public key getter to interface
2024-06-25 18:10:08 -04:00
Kubernetes Prow Robot
7c780186d7
Merge pull request #125473 from liggitt/serviceaccount-cleanup
...
Clean up service account options completion and fallback
2024-06-21 17:50:55 -07:00
Jordan Liggitt
d6d78c5581
Ensure controller revision data is valid json
2024-06-17 14:32:51 -04:00
Jordan Liggitt
b8be6275b9
Clean up service account options completion and fallback
...
- Remove unused fallback to TLS serving key as service account verifying key
- Separate ServiceAccountTokenMaxExpiration setup from signer setup
- Separate the check for a signing method (private key) from the existence of issuers
2024-06-12 21:59:39 -04:00
Eric Lin
3730f2614a
controlplane/apiserver: Trim managedFields off self-requested informers
...
Signed-off-by: Eric Lin <exlin@google.com >
2024-06-12 08:53:52 +00:00
TommyStarK
cce8551272
kube-apiserver: remove deprecated otel NewNoopTracerProvider
...
Signed-off-by: TommyStarK <thomasmilox@gmail.com >
2024-06-07 19:57:37 +02:00
Kubernetes Prow Robot
99cb3eba35
Merge pull request #125101 from alexzielenski/apiserver/vap-storageversion-bump
...
store validatingadmissionpolicy and bindings at v1
2024-06-03 14:34:02 -07:00
Dr. Stefan Schimanski
3a3be8c704
controlplane: add generic storage construction
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-06-03 13:50:04 +02:00
Alexander Zielenski
cd41a7d8e1
store validatingadmissionpolicy and bindings at v1
2024-05-29 13:14:51 -07:00
Kubernetes Prow Robot
073c1596f2
Merge pull request #124602 from Iceber/fix_discovery_prioritized_versions
...
fix the version order of 'discovery.k8s.io'
2024-05-20 09:12:20 -07:00
Alvaro Aleman
6d0ac8c561
Use the generic/typed workqueue throughout
...
This change makes us use the generic workqueue throughout the project in
order to improve type safety and readability of the code.
2024-05-04 14:33:12 -04:00
Dr. Stefan Schimanski
89bafb2fed
controlplane/apiserver: unify options package name
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-05-01 20:08:20 +02:00
Dr. Stefan Schimanski
1aa24b0951
Make linter happy
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-05-01 19:44:20 +02:00
Dr. Stefan Schimanski
1d0c72d15a
aggregator: move construction to generic controlplane
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-05-01 19:44:20 +02:00