Harshal Neelkamal
6fdacf0411
Add plugin and key-cache for ExternalJWTSigner integration
2024-11-07 03:16:23 +00:00
Patrick Ohly
2e64c72249
DRA API: register v1beta1
...
This is the minimal set of changes that are needed to make the new version
usable. The storage version is still v1alpha3. More changes will follow.
2024-11-06 13:03:18 +01:00
Richa Banker
9274a584b8
Split k8s.io/component-base/registry and add into k8s.io/component-base/version and k8s.io/component-base/featuregate
2024-10-24 19:09:30 -07:00
Richa Banker
81cd728c66
Move k8s.io/apiserver/pkg/util/version to component-base
2024-10-22 13:03:42 -07:00
Aaron Prindle
4e2562e0bb
test: enable featureGate AddMetrics on kube-apiserver testserver
2024-10-09 03:14:15 +00:00
Kubernetes Prow Robot
80941e3e87
Merge pull request #127643 from Jefftree/set-emulation-integration-test
...
Allow emulation version to be set in integration test
2024-09-27 21:56:01 +01:00
Jeffrey Ying
ff13ffc6e0
Update cmd/kube-apiserver/app/testing/testserver.go
...
Co-authored-by: Joe Betz <jpbetz@google.com >
2024-09-26 15:29:33 -04:00
Jeffrey Ying
396d36596c
Update cmd/kube-apiserver/app/testing/testserver.go
...
Co-authored-by: Joe Betz <jpbetz@google.com >
2024-09-26 15:29:24 -04:00
Jefftree
dacc2e1f5d
Allow emulation version to be set in integration test
2024-09-25 22:01:15 -04:00
Kubernetes Prow Robot
f9a57ba82d
Merge pull request #126760 from ncdc/ncdc/emeritus
...
Move ncdc to emeritus
2024-09-20 21:01:58 +01:00
Aaron Prindle
701e6c7ab1
chore: bump DefaultKubeBinaryVersion to 1.32, make 1.32 CEL changes, fix int tests to handle 1 version off API deprecation, and fix prerelease-lifecycle-gen for # of APIs
2024-09-17 19:32:14 +00:00
Stanislav Láznička
26902de531
delegate authn: don't default the ReqHeaders UID header
2024-09-05 14:32:55 +02:00
Patrick Ohly
6ee2c63135
testserver: allow caller to set up ktesting
...
In scheduler_perf, the caller configures ktesting without per-test output. When
StartTestServer initialized it again, it did so with per-test output. In other
cases it might have been simply redundant.
2024-08-23 14:31:17 +02:00
Andy Goldstein
0e228be96f
Use emeritus_*
...
Signed-off-by: Andy Goldstein <andy.goldstein@gmail.com >
2024-08-22 17:48:27 -04:00
Andy Goldstein
3ab816dcab
Move ncdc to emeritus
...
I am moving myself to emeritus as I am now firmly on the end-user side
of things.
Signed-off-by: Andy Goldstein <andy.goldstein@gmail.com >
2024-08-17 13:06:45 -04:00
Kubernetes Prow Robot
5f7cfdef11
Merge pull request #125993 from macsko/increase_server_timeout_in_scheduler_perf_tests
...
Increase API server timeout in scheduler_perf integration tests
2024-07-16 08:15:10 -07:00
Maciej Skoczeń
ad59b4026e
Increase API server timeout in scheduler_perf tests
2024-07-10 07:34:59 +00:00
Siyuan Zhang
40cddbe215
add emulated-version flag to kube-scheduler to control the feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-07-09 09:04:41 -07:00
Wojciech Tyczyński
a5772bd425
Implement resilient watchcache initialization post-start-hook
2024-07-01 12:54:57 +02:00
Antonio Ojea
0e1f9dadd6
modify components to use the networking v1beta1 API
2024-06-30 09:48:46 +00:00
Kubernetes Prow Robot
d40676c227
Merge pull request #122047 from aojea/treeless
...
KEP-1880 Multiple Service CIDRs: Graduate to Beta (1/2)
2024-06-28 01:00:20 -07:00
Kubernetes Prow Robot
522e2e5066
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
2024-06-27 20:39:51 -07:00
Vinayak Goyal
5e6a4937f5
KEP-4633: Allow health-only anonymous auth mode.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com >
2024-06-28 00:30:05 +00:00
Antonio Ojea
9b1bad431b
implement dual write on Service ClusterIP allocator
...
MultiCIDRServiceAllocator implements a new ClusterIP allocator based on
IPAddress object to solve the problems and limitations caused by
existing bitmap allocators.
However, during the rollout of new versions, deployments need to support
a skew of one version between kube-apiservers. To avoid the possible
problem where there are multiple Services requests on the skewed
apiservers and that both allocate the same IP to different Services,
the new allocator will implement a dual-write strategy under the
feature gate DisableAllocatorDualWrite.
After the MultiCIDRServiceAllocator is GA, the DisableAllocatorDualWrite
can be enabled safely as all apiservers will run with the new
allocators. The graduation of DisableAllocatorDualWrite can also
be used to clean up the opaque API object that contains the old bitmaps.
If MultiCIDRServiceAllocator is enabled and DisableAllocatorDualWrite is disable
and is a new environment, there is no bitmap object created, hence, the
apiserver will initialize it to be able to write on it.
2024-06-27 11:33:36 +00:00
Siyuan Zhang
379676c4be
add DefaultComponentGlobalsRegistry flags in ServerRunOptions
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
4352c4ad27
Add version mapping in ComponentGlobalsRegistry.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
701e5fc374
Add composition flags for emulation version and feature gate.
...
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
Siyuan Zhang
403301bfdf
apiserver: Add API emulation versioning.
...
Co-authored-by: Siyuan Zhang <sizhang@google.com >
Co-authored-by: Joe Betz <jpbetz@google.com >
Co-authored-by: Alex Zielenski <zielenski@google.com >
Signed-off-by: Siyuan Zhang <sizhang@google.com >
2024-06-25 22:12:11 +00:00
TommyStarK
cce8551272
kube-apiserver: remove deprecated otel NewNoopTracerProvider
...
Signed-off-by: TommyStarK <thomasmilox@gmail.com >
2024-06-07 19:57:37 +02:00
carlory
ab0205bb33
remove pkg/cloudprovider
2024-05-10 15:44:58 +08:00
Kubernetes Prow Robot
4d17d30029
Merge pull request #124519 from dims/drop-all-the-providery-things-take-2
...
Remove gcp in-tree cloud provider and credential providers
2024-05-06 08:03:14 -07:00
Dr. Stefan Schimanski
1d0c72d15a
aggregator: move construction to generic controlplane
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-05-01 19:44:20 +02:00
Davanum Srinivas
bf268f02a3
Remove gcp in-tree cloud provider and credential provider
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2024-05-01 09:03:53 -04:00
Dr. Stefan Schimanski
d8c5f71403
kube-apiserver: split up config creation into generic and non-generic part
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-05-01 11:28:25 +02:00
Kubernetes Prow Robot
6abdfb97c0
Merge pull request #124621 from sttts/sttts-controlplane-admission-initializers
...
kube-apiserver: split admission initializers into generic and non-generic
2024-05-01 01:10:15 -07:00
Kubernetes Prow Robot
d0fddf143b
Merge pull request #122148 from pohly/controllers-context-support
...
controllers + apiserver: enhance context support
2024-04-30 01:30:09 -07:00
Dr. Stefan Schimanski
acbb89d9b9
kube-apiserver: split admission initializers into generic and non-generic
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-29 23:28:42 +02:00
Dr. Stefan Schimanski
be7b6c90bf
Address comments
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-29 21:22:35 +02:00
Patrick Ohly
b92273a760
apiserver + controllers: enhance context support
...
27a68aee3a introduced context support for events. Creating an event
broadcaster with context makes tests more resilient against leaking goroutines
when that context gets canceled at the end of a test and enables per-test
output via ktesting.
The context could get passed to the constructor. A cleaner solution is to
enhance context support for the apiserver and then pass the context into the
controller's run method. This ripples up the call stack to all places which
start an apiserver.
2024-04-29 20:59:21 +02:00
Dr. Stefan Schimanski
03ae7fcbdf
aggregator: split API priority map into generic and non-generic
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-29 16:19:51 +02:00
Dr. Stefan Schimanski
3b6d2a66a4
pkg/controlplane: split apart generic server part of instance.go
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-29 10:15:02 +02:00
Kubernetes Prow Robot
c6b6163e2e
Merge pull request #124576 from sttts/sttts-peer-proxy-generic-move
...
controlplane/apiserver: move peer proxy code to allow generic aggregator construction
2024-04-29 01:11:06 -07:00
Dr. Stefan Schimanski
c252ebe50c
controlplane/apiserver: move peer proxy code to allow aggregator construction
...
This reverts commit 0bb6ff5e454cfc99c0b611e22162391eaa31e103.
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-29 08:13:43 +02:00
Dr. Stefan Schimanski
3daae717c3
controlplane: split out SystemNamespaces
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-27 14:19:56 +02:00
Dr. Stefan Schimanski
7e0fea2331
kube-apiserver/aggregator: remove unused PeerCAFile in config
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-26 23:22:09 +02:00
Kubernetes Prow Robot
563885e4bd
Merge pull request #124551 from sttts/sttts-kube-apiserver-config-split
...
pkg/controlplane: split up config into generic controlplane and kube-related part
2024-04-26 14:16:12 -07:00
Dr. Stefan Schimanski
96a144c977
Address comments
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-26 17:47:30 +02:00
Dr. Stefan Schimanski
e37917fea7
pkg/controlplane: split up config into generic controlplane and kube-related part
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-26 14:14:06 +02:00
Dr. Stefan Schimanski
91de83b694
kube-apiserver/aggregator: fix panic with crds disabled
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com >
2024-04-26 09:05:20 +02:00
Marek Siarkowicz
3ee8178768
Cleanup defer from SetFeatureGateDuringTest function call
2024-04-24 20:25:29 +02:00