Tim Allclair
7537cec567
Fix MatchConditions webhook validation testing ( #116784 )
...
* Fix MatchConditions webhook validation testing
* #squash verify error type
* #squash fix duplicate registration
* #squash uncomment validation test
2023-03-21 21:38:35 -07:00
Kubernetes Prow Robot
8dd3807f4d
Merge pull request #116770 from alexzielenski/agg-discovery-err-sources
...
Fix aggregated discovery race when using CRD and Aggregated APIService under same group
2023-03-21 15:18:12 -07:00
Alexander Zielenski
933dfe3a51
use longer timeouts to avoid flakes on heavily loaded systems
2023-03-21 14:18:34 -07:00
Alexander Zielenski
0740b11073
allow multiple sources to add/remove from discovery without clobbering each other
2023-03-21 14:14:23 -07:00
Monis Khan
e9866d2794
Clear front proxy headers after authentication is complete
...
This matches the logic we have for the Authorization header as well
as the impersonation headers.
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-03-21 10:51:22 -04:00
Igor Velichkovich
5e5b3029f3
Matchconditions admission webhooks alpha implementation for kep-3716 ( #116261 )
...
* api changes adding match conditions
* feature gate and registry strategy to drop fields
* matchConditions logic for admission webhooks
* feedback
* update test
* import order
* bears.com
* update fail policy ignore behavior
* update docs and matcher to hold fail policy as non-pointer
* update matcher error aggregation, fix early fail failpolicy ignore, update docs
* final cleanup
* openapi gen
2023-03-14 20:28:26 -07:00
Patrick Ohly
fec5233668
api: resource.k8s.io PodScheduling -> PodSchedulingContext
...
The name "PodScheduling" was unusual because in contrast to most other names,
it was impossible to put an article in front of it. Now PodSchedulingContext is
used instead.
2023-03-14 10:18:08 +01:00
Patrick Ohly
29941b8d3e
api: resource.k8s.io v1alpha1 -> v1alpha2
...
For Kubernetes 1.27, we intend to make some breaking API changes:
- rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283 )
- extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802 )
We need to switch from v1alpha1 to v1alpha2 for that.
2023-03-14 07:52:03 +01:00
Jiahui Feng
0a954cc10d
always get fresh object before updating.
2023-03-08 15:17:58 -08:00
Jiahui Feng
82eb24156a
add test for reset fields.
2023-03-08 15:01:06 -08:00
Jiahui Feng
feb18b3f5f
implmementing type checking
...
with multi-type support.
2023-03-07 15:49:19 -08:00
Jiahui Feng
54283a1d38
exempt validatingadmissionpolicies/status
...
because admission control object does not apply to themselves.
2023-03-07 15:48:21 -08:00
Kubernetes Prow Robot
2e3c5003b9
Merge pull request #115630 from Jefftree/agg-discovery-metrics
...
Add metrics for aggregated discovery
2023-03-10 07:44:41 -08:00
Kubernetes Prow Robot
16d2d55bc0
Merge pull request #115969 from DangerOnTheRanger/messageExpression-for-crd
...
Add messageExpression field for CRD validation
2023-03-09 22:43:19 -08:00
Kubernetes Prow Robot
e8ae6658ed
Merge pull request #115065 from apelisse/apimachinery-managed-fields
...
managedfields: Move most of fieldmanager package to managefields
2023-03-09 21:34:22 -08:00
Kermit Alexander II
4e26f680a9
Implement MessageExpression.
2023-03-09 23:37:59 +00:00
Jefftree
387d97605e
Add metrics for aggregated discovery
2023-03-09 17:24:02 +00:00
Maksim Nabokikh
c1431af4f8
KEP-3325: Promote SelfSubjectReview to Beta ( #116274 )
...
* Promote SelfSubjectReview to Beta
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Fix whoami API
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
* Fixes according to code review
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
---------
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2023-03-08 15:42:33 -08:00
Antoine Pelisse
4f3859ce91
managedfields: Move most of fieldmanager package to managefields
2023-03-08 13:44:00 -08:00
David Ashpole
4014d0fbbf
graduate API Server tracing to beta
2023-03-07 21:39:39 +00:00
Joe Betz
c2b3871502
Add integration tests
2023-03-06 21:51:33 -05:00
Joe Betz
4d30c43494
Add integration tests for secondary authz
2023-03-06 12:08:53 -05:00
Patrick Ohly
c008732948
test/integration: add StartEtcd
...
In contrast to EtcdMain, it can be called by individual tests or benchmarks and
each caller will get a fresh etcd instance. However, it uses the same
underlying code and the same port for all instances, so tests cannot run in
parallel.
2023-02-28 23:05:17 +01:00
Jiahui Feng
5c6d8a939c
add int. test for CEL type resolution.
2022-12-14 09:19:36 -08:00
Kubernetes Prow Robot
22b88dea36
Merge pull request #115315 from enj/enj/i/kas_kubelet_conn_close
...
kubelet/client: collapse transport wiring onto standard approach
2023-02-07 07:01:14 -08:00
Madhav Jivrajani
5e1f440d0a
*: Fix linter warnings
...
Adapt to newly improved linters in golangci-lint v1.51.1
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
2023-02-07 13:01:41 +05:30
Monis Khan
754cb3d601
kubelet/client: collapse transport wiring onto standard approach
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-02-06 20:34:49 -05:00
Kubernetes Prow Robot
0e6f4d3a35
Merge pull request #115271 from kevindelgado/field-validation-conformance
...
Field validation e2e tests and GA graduation
2023-01-26 09:34:26 -08:00
Kevin Delgado
2d5ceb9b15
drop Enabled() checks for ServerSideFieldValidation feature gate
2023-01-26 14:16:58 +00:00
Kubernetes Prow Robot
84200d0470
Merge pull request #115135 from Jefftree/rename-enum-integration
...
Rename enum openapi test
2023-01-17 16:06:47 -08:00
Jefftree
a26174155d
Rename enum integration test
2023-01-17 17:22:24 +00:00
Kubernetes Prow Robot
7e97b4b322
Merge pull request #114868 from apelisse/private-internal-managers
...
fieldmanager: Make internal managers private
2023-01-10 16:33:19 -08:00
Antoine Pelisse
adfc65ec23
Make internal managers private
...
This significantly reduces the surface area of the fieldmanager package
by hiding all the private "managers" objects, as well as the interface
that was made specifically for these. There is no reason to configure
these.
2023-01-09 10:10:17 -08:00
Kubernetes Prow Robot
be9d9a850d
Merge pull request #113959 from Jefftree/jefftree-owners
...
Update OWNERS for jefftree
2023-01-06 09:59:58 -08:00
Kubernetes Prow Robot
12c71fdf1c
Merge pull request #113542 from ardaguclu/fix-shortname-disperancy
...
Set singular names for core types to pass to discovery
2023-01-03 09:29:43 -08:00
Kubernetes Prow Robot
659a792f84
Merge pull request #114709 from thockin/remove_gengo_dep
...
Remove dep on gengo
2022-12-27 02:15:27 -08:00
Tim Hockin
5b17cd61a9
Remove dep on gengo
2022-12-26 16:23:36 -08:00
Kubernetes Prow Robot
2bb77a13b1
Merge pull request #113730 from wojtek-t/generalize_cacher_tests_3
...
Reuse generic GetList test for watchcache and fix inconsistency issues for both etcd3 and watchcache
2022-12-22 01:29:25 -08:00
Wojciech Tyczyński
cbbc8ec69e
Add microbenchmark for listing from watchcache
2022-12-21 08:45:27 +01:00
Jefftree
6b443c2304
Add jefftree to OWNERS
2022-12-20 19:30:42 +00:00
Kubernetes Prow Robot
e6bc669227
Merge pull request #113795 from DangerOnTheRanger/validatingadmissionpolicy-crd-integration-tests
...
Add CRD integration tests for ValidatingAdmissionPolicy
2022-12-13 10:27:34 -08:00
Kubernetes Prow Robot
e1709e59d1
Merge pull request #113922 from alexzielenski/owners-alexzielenski
...
add alexzielenski to OWNERS
2022-12-09 14:35:24 -08:00
Arda Güçlü
43a889fc65
Add integration test to test singularnames for all resources
2022-11-21 09:59:37 +03:00
Kermit Alexander II
19242ec349
Add TestBindingRemoval.
2022-11-17 02:10:07 +00:00
Kermit Alexander II
cd3d014614
Add TestCRDParams.
2022-11-17 02:09:47 +00:00
Alexander Zielenski
10b9a1fe19
add alexzielenski to OWNERS
2022-11-15 08:46:46 -08:00
Andrew Sy Kim
34a2d265d7
test/integration/apiserver/cel: update createAndWaitReady to retry on error including 'not yet synced to use for admission'
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 22:27:16 -05:00
Andrew Sy Kim
7127f565f6
test/integration/apiserver/cel: add Test_ValidatingAdmissionPolicy_UpdateParamResource
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Andrew Sy Kim
0fb038fb15
test/integration/apiserver/cel: add lifecycle tests for deleting/recreating policy, policy bindings, and param resources
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Andrew Sy Kim
3f477f847d
test/integration/apiserver/cel: update feature gate name CELValidatingAdmission -> ValidatingAdmissionPolicy
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00