github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-22 03:11:40 +00:00
Code Issues Projects Releases Wiki Activity
115,151 Commits 42 Branches 7,905 Tags 1.3 GiB
master
Commit Graph

570 Commits

Author SHA1 Message Date
Abu Kashem
e2b8701545
apf: ebable v1beta2 2021-09-09 08:28:53 -04:00
Kubernetes Prow Robot
98bd200217
Merge pull request #104102 from tnqn/dynamic-file 
Improve dynamic cert file change detection
 2021-08-05 16:36:26 -07:00
Quan Tian
3cfe3d048f Improve dynamic cert file change detection 
DynamicFileCAContent and DynamicCertKeyPairContent used periodical job
to check whether the file content has changed, leading to 1 minute of
delay in worst case. This patch improves it by leveraging fsnotify
watcher. The content change will be reflected immediately.
 2021-08-06 01:45:24 +08:00
KeZhang
952aa1b2d2 add integration test for apiserver hsts 2021-08-05 10:41:52 +08:00
David Ashpole
e5a1f86e0a add apiserver tracing integration test, and fix endpoint validation 2021-07-15 20:56:57 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Mengjiao Liu
e977740ae6 Rename master to apiserver in test/integration 2021-06-18 17:40:46 +08:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
Mengjiao Liu
257b494478 test/integration: Rename masterConfig to instanceConfig 2021-06-08 17:21:47 +08:00
Mengjiao Liu
ac5535c949 test/integration: Rename MasterConfigOptions to ControlPlaneConfigOptions 2021-06-08 16:58:46 +08:00
Mengjiao Liu
6871b2b3c7 Rename masterConfig to controlPlaneConfig 2021-06-04 20:55:08 +08:00
Mengjiao Liu
387154f1a9 Part3: master to controlplane in test/integration 
Rename RunAMaster to RunAControlPlane
 2021-06-03 11:06:19 +08:00
Kubernetes Prow Robot
fc9aacecca
Merge pull request #102272 from mengjiao-liu/term-NewIntegrationTestMasterConfig 
Part2: master to controlplane in test/integration(1.22)
 2021-05-27 19:46:23 -07:00
SataQiu
9cfbf06225 cleanup PodPreset testdata 2021-05-26 19:57:29 +08:00
Mengjiao Liu
c9ec486287 Part of master to controlplane in test/integration 
Rename NewIntegrationTestMasterConfig to NewIntegrationTestControlPlaneConfig
 2021-05-25 13:26:28 +08:00
Monis Khan
440ea3ef49
client-go transport: assert that final CA data is valid 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-05-03 21:08:01 -04:00
Kubernetes Prow Robot
66d27ff1a4
Merge pull request #101380 from kwiesmueller/flake-apply-mutating-webhook 
[flake] fix TestMutatingWebhookResetsInvalidManagedFields flakes
 2021-04-22 17:44:31 -07:00
Kevin Wiesmueller
96a8df455c fix TestMutatingWebhookResetsInvalidManagedFields flakes 2021-04-23 00:09:31 +02:00
Kubernetes Prow Robot
0f4de95e5b
Merge pull request #101330 from deads2k/apply-remove-beta 
apply test for manager limit to only use v1 apis
 2021-04-22 13:19:49 -07:00
David Eads
b1ce579517 apply test for manager limit to only use v1 apis 2021-04-21 14:38:24 -04:00
Andrea Nodari
8e4b5c849b Do not add managed fields if a scale entry doesn't own replicas 
This happens when a request changes the .status.replicas but not
.spec.replicas
 2021-04-21 20:27:45 +02:00
Andrea Nodari
09649e58b5 Check request info when updating managed fields during scale 
- Test all versions to make sure each resource version is in the
  mappings
- Fail when request info contains an unrecognized version. We have tests
  that guarantee that all known versions are in the mappings. If we
  get a version in request info that is not there we should fail fast to
  prevent inconsistent behaviour (e.g. for some reason the mappings is
  not up to date).

Ensure all known versions are in mappings
 2021-04-21 20:27:02 +02:00
Antoine Pelisse
816e80206c Use ScaleHandler for all scalable resources 2021-04-21 18:41:40 +02:00
Andrea Nodari
a9ea98b3b9 Track ownership of deployments scale subresource 2021-04-21 18:41:40 +02:00
Kubernetes Prow Robot
1eccb41fa8
Merge pull request #101248 from deads2k/integration 
update more integration tests for v1beta1 removal
 2021-04-19 18:54:56 -07:00
David Eads
b74c542de5 skip printing test for removed APIs 2021-04-19 13:55:32 -04:00
Shihang Zhang
925900317e allow multiple of --service-account-issuer 2021-04-19 09:54:11 -07:00
Andrea Nodari
862d256195 Add "subresource" field to ManagedFieldEntry 
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.
 2021-04-16 14:13:18 -07:00
Jordan Liggitt
33ad842480 allow evictions subresource to accept policy/v1 and policy/v1beta1 2021-04-13 21:22:25 -04:00
Niekvdplas
fec272a7b2 Fixed several spelling mistakes 2021-03-30 23:02:09 +02:00
Kubernetes Prow Robot
c2ff2910fd
Merge pull request #98797 from sxllwx/fix/issue98606 
(integration) adjust the test's client-side detection of a successful timeout case to include the connection reset
 2021-03-10 12:28:22 -08:00
Kevin Delgado
a1fac8cbd9 Server-Side Apply: Status Wiping/Reset Fields 
Adds and implements ResetFieldsProvder interface in order to ensure that
the fieldmanager no longer owns fields that get reset before the object
is persisted.

Co-authored-by: Kevin Wiesmueller <kwiesmul@redhat.com>
Co-authored-by: Kevin Delgado <kevindelgado@google.com>
 2021-03-10 01:02:18 +00:00
Kubernetes Prow Robot
046ad61479
Merge pull request #99290 from mortent/PromotePDBsToGA 
Promote PodDisruptionBudget to policy/v1
 2021-03-09 11:05:05 -08:00
Kubernetes Prow Robot
8a599510d3
Merge pull request #99935 from MikeSpreitzer/ratelimit-realtest 
Enable, rate limit, and test APF controller fights
 2021-03-09 09:19:36 -08:00
Morten Torkildsen
621aed4d32 generated 2021-03-09 10:29:11 -05:00
Morten Torkildsen
21fba79d45 Promote PDBs to GA 2021-03-09 10:29:11 -05:00
David Eads
80ff06fe84 Enable, rate limit, and test APF controller fights 
Using real time.
 2021-03-08 16:24:39 -05:00
Patrick Ohly
5ca0814165 CSIStorageCapacity: use beta API 2021-03-08 20:52:50 +01:00
Kubernetes Prow Robot
4fccba9e06
Merge pull request #99800 from deads2k/beta-more 
remove more CRD v1beta1 client dependencies from test integration
 2021-03-08 07:51:54 -08:00
Kubernetes Prow Robot
4cf8823fba
Merge pull request #98074 from kwiesmueller/admission-reset-managedFields 
Reset managedFields corrupted by admission controllers
 2021-03-06 21:15:42 -08:00
Kubernetes Prow Robot
36244f31ef
Merge pull request #99662 from swetharepakula/eps-ga-api-changes 
Graduate EndpointSlice API to GA
 2021-03-06 15:23:54 -08:00
Swetha Repakula
a9891b4b9b Graduate EndpointSlice API to GA 
* Removes discovery v1alpha1 API
  * Replaces per Endpoint Topology with a read only DeprecatedTopology
  in GA API
  * Adds per Endpoint Zone field in GA API
 2021-03-05 12:02:41 -08:00
David Eads
c14ff1a674 remove more CRD v1beta1 client dependencies 2021-03-05 08:10:47 -05:00
Maciej Szulik
9364d0fc81
Promote CronJobs to batch/v1 2021-03-05 12:44:23 +01:00
Maciej Szulik
f8b2cf653c
Drop batch/v2alpha1 leftovers 2021-03-05 12:44:21 +01:00
Kubernetes Prow Robot
9d34bfd601
Merge pull request #99736 from deads2k/beta-policy 
clean usage of admissionregistration/v1beta1 from integration tests
 2021-03-04 05:42:22 -08:00
Kubernetes Prow Robot
7b0ad65d4d
Merge pull request #99288 from supriya-premkumar/ineffassign 
Adds ineffassign to GO linter script.
 2021-03-03 14:40:46 -08:00
David Eads
f3597cbf2a clean usage of admissionregistration/v1beta1 from tests 2021-03-03 17:39:31 -05:00
David Eads
a473ef6c0a use direct etcd creation to verify migrated v1beta1 admissionwebhooks 2021-03-03 17:33:27 -05:00
David Eads
fa1c57d34d update print test to remove beta dependencies 2021-03-03 17:26:02 -05:00
Supriya Premkumar
e52e5e486c
Adds ineffassign to GO linter script. 
Changes:
 - Enables ineffassign check in the verify scripts.
 - Fixes lint errs.
 2021-03-03 08:28:10 -08:00
scott
d258e005e8 add client-side detection of a successful timeout case to include the connection reset 2021-03-03 10:15:57 +08:00
David Eads
b90179e0f2 write CRD validation function only valid in beta1 direct to etcd to test apply on migrated data 2021-03-02 15:57:57 -05:00
David Eads
734e9b7dd6 fix up CRD validation tests 2021-03-02 14:34:41 -05:00
David Eads
06eb2f5d41 switch apiserver integration tests to CRD v1 2021-03-02 14:34:41 -05:00
David Eads
c72b4b3f89 coerce apply tests to CRD v1. skip CRDs that are no longer valid 2021-03-02 14:34:41 -05:00
David Eads
b261364025 try to tidy up crd v1beta1 usage 2021-03-02 14:34:41 -05:00
Kevin Wiesmueller
98d498117b only use managedFields decoding for admission check 2021-03-01 20:29:15 +01:00
Kevin Wiesmueller
ba2f6104f6 add warning check to managedFields integration test 2021-03-01 19:59:59 +01:00
Kevin Wiesmueller
711f2dab47 fix test 2021-03-01 19:59:58 +01:00
Kevin Wiesmueller
ffbae9c5b4 disable webhook for testing 2021-03-01 19:59:55 +01:00
Kevin Wiesmueller
f18d21d6eb test managedFields admission validation 2021-03-01 19:59:06 +01:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Kubernetes Prow Robot
4f1dd5d2fb
Merge pull request #96987 from soltysh/drop_batch-alpha 
Drop batch/v2alpha1
 2021-02-17 06:35:06 -08:00
Antoine Pelisse
801aaac2b6 Fix test now that empty struct are tracked in mangaed fields 2021-02-12 10:36:15 -08:00
Maciej Szulik
7d9f36cd85
Generated changes 2021-02-12 17:51:15 +01:00
Maciej Szulik
3dab7462d1
Drop batch/v2alpha1 API 2021-02-12 17:51:12 +01:00
Kubernetes Prow Robot
0a0490e34f
Merge pull request #98576 from kevindelgado/ssa 
Fix SSA for APIService
 2021-01-29 17:21:58 -08:00
Jordan Liggitt
46699bf9de Use apply to create objects in TestApplyStatus 2021-01-29 18:30:35 +00:00
Jordan Liggitt
0f6873c025 Stop skipping APIService in apply test 2021-01-29 18:30:35 +00:00
Abu Kashem
e416c9e574
apiserver: plumb context with request deadline 
- as soon as a request is received by the apiserver, determine the
  timeout of the request and set a new request context with the deadline.
- the timeout filter that times out non-long-running requests should
  use the request context as opposed to a fixed 60s wait today.
- admission and storage layer uses the same request context with the
  deadline specified.

we use the default timeout enforced by the apiserver:
- if the user has specified a timeout of 0s, this implies no timeout on the user's part.
- if the user has specified a timeout that exceeds the maximum deadline allowed by the apiserver.
 2021-01-28 14:15:04 -05:00
David Eads
37cc89ed8d finish removal of exportoptions 2021-01-22 13:47:31 -05:00
Jefftree
32a64cf14c tests for buildOpenAPIModelsForApply 2020-12-10 15:33:18 -08:00
Jordan Liggitt
afd92b3b3e Revert "plumb context with request deadline" 
This reverts commit 83f869ee13.
 2020-11-19 18:15:04 -05:00
Haowei Cai
7a6afe7989 make sure managedFields are written 2020-11-18 19:21:25 -08:00
Haowei Cai
40a65577c7 generated 2020-11-18 12:48:26 -08:00
Haowei Cai
8bcf34a203 unit and integration tests 
apiserver dedups and adds warning in CREATE/UPDATE/PATCH requests;
also handles duplication caused by mutating admission.
 2020-11-18 12:46:20 -08:00
Abu Kashem
83f869ee13
plumb context with request deadline 
- as soon as a request is received by the apiserver, determine the
timeout of the request and set a new request context with the deadline.
- the timeout filter that times out non-long-running requests should
use the request context as opposed to a fixed 60s wait today.
- admission and storage layer uses the same request context with the
deadline specified.
 2020-11-14 11:54:17 -05:00
Kubernetes Prow Robot
05d1b94a70
Merge pull request #96317 from Jefftree/test-ssa 
Integrate defaults marker to defaulter-gen
 2020-11-13 22:35:03 -08:00
Antoine Pelisse
d3e641e84e Add default for protocol and test that it works 2020-11-13 17:06:35 -08:00
yue9944882
849be447f5 APF: graduate API and types to beta 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-13 23:20:39 +00:00
Sergey Kanzhelev
06da0e5e74 GA of RuntimeClass feature gate and API 2020-11-11 19:22:32 +00:00
Adhityaa Chandrasekar
f9d57a8d5d APF: use snake_case in metric labels 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-04 22:19:54 +00:00
Kubernetes Prow Robot
5549a0d9bb
Merge pull request #95012 from nodo/add-namespace-to-post-based-namespace-creation 
Make the creation of namespace using POST and PATCH consistent
 2020-10-01 17:37:20 -07:00
Andrea Nodari
3cb510e33e Make the creation of namespace using POST and PATCH consistent 
PATCH verb is used when creating a namespace using server-side apply,
while POST verb is used when creating a namespace using client-side
apply.

The difference in path between the two ways to create a namespace led to
an inconsistency when calling webhooks. When server-side apply is used,
the request sent to webhooks has the field "namespace" populated with
the name of namespace being created. On the other hand, when using
client-side apply the "namespace" field is omitted.

This commit aims to make the behaviour consistent and populates the
"namespace" field when creating a namespace using POST verb (i.e.
client-side apply).
 2020-10-01 18:05:49 +02:00
Kubernetes Prow Robot
def8fe3b4e
Merge pull request #94685 from verb/ec-admission 
Convert to EphemeralContainers for validation in EphemeralContainersREST
 2020-09-30 00:29:25 -07:00
Kubernetes Prow Robot
0f39af90ed
Merge pull request #94364 from wojtek-t/efficient_watch_resumption 
Efficient watch resumption
 2020-09-25 15:42:48 -07:00
Kubernetes Prow Robot
396dd2555d
Merge pull request #91993 from nodo/89274-change-of-managefields-via-subresources 
Do not allow manual changes to manageFields via subresources
 2020-09-15 12:26:43 -07:00
wojtekt
af61e8fbdf Test watchcache being updated in multietcd setup 2020-09-15 08:19:13 +02:00
David Eads
c0c033b12f generated 2020-09-14 09:24:41 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
Lee Verberne
bf0a33d1de Use EphemeralContainers for storage validation 
When updating ephemeral containers, convert Pod to EphemeralContainers
in storage validation. This resolves a bug where admission webhook
validation fails for ephemeral container updates because the webhook
client cannot perform the conversion.

Also enable the EphemeralContainers feature gate for the admission
control integration test, which would have caught this bug.
 2020-09-10 17:24:52 +02:00
Haowei Cai
07506ab384 generated 2020-09-08 19:14:36 -07:00
Chao Xu
86dd4ce3b5 Let kube-apiserver host the storage version API 
Co-authored-by: Haowei Cai <haoweic@google.com>
 2020-09-08 19:14:36 -07:00
Kubernetes Prow Robot
f736be5721
Merge pull request #94397 from wojtek-t/stop_setting_selflink 
Stop setting SelfLink in kube-apiserver.
 2020-09-03 12:31:55 -07:00
Daniel Smith
a86afc12df update scripts 2020-09-02 10:49:40 -07:00
Daniel Smith
15e0e3e90e rename 2020-09-02 10:48:26 -07:00
wojtekt
2539912a22 Stop setting SelfLink in kube-apiserver. 2020-09-01 20:57:38 +02:00
Kubernetes Prow Robot
936fadb56a
Merge pull request #93380 from yue9944882/apf-int-test-reject 
Integration: Ensure no rejections in PL isolation test
 2020-08-28 06:37:02 -07:00
Kubernetes Prow Robot
0eeb676468
Merge pull request #93162 from julianvmodesto/before-first-apply-test 
Add tests for stopped managed fields tracking
 2020-08-28 06:35:35 -07:00
Kubernetes Prow Robot
c143ea4bbf
Merge pull request #90522 from beautytiger/fix/nilranger 
cleanup: no need nil check before range
 2020-08-27 17:54:31 -07:00
Andrea Nodari
c522ee08a3 Do not allow manual changes to manageFields via subresources 
If a request tries to change managedFields, the response returns the
managedField of the live object.
 2020-08-18 13:33:39 +02:00
Julian V. Modesto
f2deb2417a Add tests for managed fields tracking. 
- Test that client-side apply users don't encounter a conflict with
server-side apply for objects that previously didn't track managedFields
- Test that we stop tracking managed fields with `managedFields: []`
- Test that we stop tracking managed fields when the feature is disabled
 2020-08-05 18:22:44 -04:00
yue9944882
40f3242cd9 apf integration test: ensure no rejection 2020-07-27 10:42:37 +08:00
Jordan Liggitt
8f9be8af13 Stabilize integration test names 2020-07-22 11:58:54 -04:00
Kubernetes Prow Robot
6079cebfae
Merge pull request #90187 from julianvmodesto/last-applied-updater 
Implement server-side apply upgrade and downgrade
 2020-07-13 16:45:20 -07:00
Kubernetes Prow Robot
888255bf3a
Merge pull request #92879 from liggitt/short-integration-tests 
Skip expensive integration tests in short run mode
 2020-07-11 20:57:52 -07:00
Joe Betz
3c2842fbc6 Add ownership transfer test 2020-07-09 06:18:59 -07:00
Joe Betz
ec136db9ce Add server side apply unsetting field tests 2020-07-09 06:18:58 -07:00
Kubernetes Prow Robot
94a08e159a
Merge pull request #92387 from pohly/csi-storage-capacity 
CSI storage capacity check
 2020-07-09 00:04:59 -07:00
Julian V. Modesto
e4368eb67e Implement server-side apply upgrade & downgrade. 
- Allow client-side to server-side apply upgrade.

  Ensure that a user can change management of an object from client-side apply to
  server-side apply without conflicts.

- Allow server-side apply to client-side downgrade.

  For an object managed with client-side apply, a user may upgrade to
  managing the object with server-side apply, then decide to downgrade.

  We can support this downgrade by keeping the last-applied-configuration
  annotation for client-side apply updated with server-side apply.
 2020-07-08 19:14:03 -04:00
Jordan Liggitt
1c8c850944 Skip expensive integration tests in short run mode 2020-07-07 14:41:21 -04:00
Jordan Liggitt
dcc536097a Deflake timeout admission test 2020-07-07 13:36:07 -04:00
Kubernetes Prow Robot
865cbf0bdf
Merge pull request #91517 from gaurav1086/Remove_unnecessary_Sprintfs 
cleanup: Remove_unnecessary_Sprintfs
 2020-07-05 05:26:49 -07:00
Patrick Ohly
9a66e8e1b5 CSIStorageCapacity: 'make update' 2020-07-03 21:54:14 +02:00
Patrick Ohly
22aeb81e84 CSIStorageCapacity: CSIStorageCapacity API 
This adds the CSIStorageCapacity API change for
https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1472-storage-capacity-tracking
 2020-07-03 21:54:14 +02:00
Kubernetes Prow Robot
3f585835d0
Merge pull request #92713 from liggitt/deflake-list-rv-0 
Deflake TestListResourceVersion0
 2020-07-02 04:18:07 -07:00
Jordan Liggitt
017a6febe5 Deflake TestListResourceVersion0 2020-07-01 13:59:40 -04:00
Jordan Liggitt
5eef60a00a Add warnings capability for admission webhooks 2020-07-01 12:14:06 -04:00
Joe Betz
e214f2408b Add ResourceVersionMatch parameter to make Resource Version semantics consistent for list 2020-06-25 20:49:57 -07:00
Kubernetes Prow Robot
7a68eac8f7
Merge pull request #91873 from kwiesmueller/fix-crd-update-bug 
Fix FieldManager Conversion Error for CRD Updates
 2020-06-18 19:04:51 -07:00
Kubernetes Prow Robot
53f3699cf9
Merge pull request #89778 from cmluciano/cml/ingressv1 
ingress: Add Ingress to v1 API and update backend to defaultBackend
 2020-06-16 23:10:39 -07:00
Kevin
bd961781d7 prevent update handler being called on disallowed CreateOnUpdate 2020-06-12 13:04:17 +00:00
Kubernetes Prow Robot
dbfc3aa877
Merge pull request #91748 from apelisse/resetting-managed-fields-and-fieldtype 
Resetting managed fields and fieldtype
 2020-06-09 14:49:40 -07:00
Kubernetes Prow Robot
3f8bb1bf50
Merge pull request #91685 from liggitt/csr-v1 
CertificateSigningRequest v1 API
 2020-06-05 15:30:14 -07:00
Antoine Pelisse
ed2cf6ef2c FieldManager: Reset if we receive nil or a list with one empty item 2020-06-05 12:49:13 -07:00
Jordan Liggitt
e0f5cca410 Copy CSR v1beta1 to v1 
* Remove prerelease tags
* Update copyright, package, imports to v1
* Remove signerName, usages, and condition status defaulting
 2020-06-05 00:47:24 -04:00
Antoine Pelisse
5378a788e4 fieldManager: Ignore and log all errors when updating managedFields 2020-06-04 09:32:23 -07:00
Gaurav Singh
adcd8909fb cleanup: Remove_unnecessary_Sprintfs 
Removed unused fmt

Signed-off-by: Gaurav Singh <gaurav1086@gmail.com>
 2020-05-28 13:43:13 -04:00
David Eads
e857adbdfd remove-api 2020-05-27 16:58:05 -04:00
Christopher M. Luciano
2b091f60ca
ingress: Add Ingress to v1 API and update backend to defaultBackend 
ingress: use new serviceBackend split

ingress: remove all v1beta1 restrictions on creation

This change removes creation and update restrictions enforced by
k8s 1.18 for not allowing resource backends.

Paths are no longer
required to be valid regex and a PathType is now user-specified
and no longer defaulted.

Also remove all TODOs in staging/net/v1 types

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-05-22 11:57:41 -04:00
Davanum Srinivas
07d88617e5
Run hack/update-vendor.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:33 -04:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:27 -04:00
Kubernetes Prow Robot
8876563700
Merge pull request #90360 from tnozicka/fix-client-ca-reload 
Fix client-ca dynamic reload in apiserver
 2020-04-30 01:10:18 -07:00
Tomas Nozicka
b22a170d46 Fix client-ca dynamic reload in apiserver 2020-04-29 16:03:09 +02:00
Guangming Wang
e92a91eb72 cleanup: no need nil check before range 2020-04-27 22:12:12 +08:00
Jordan Liggitt
5efcc9e633 Restore cache-control header filter 2020-04-24 15:38:51 -04:00
yue9944882
df5dfb46b7 assert shared concurrency 2020-04-18 01:15:54 +08:00
yue9944882
875407a450 add flowcontrol integration test to import whitelist 2020-04-13 22:33:08 +08:00
yue9944882
30bc0fce48 integration test for priority-level isolation 2020-04-13 22:33:07 +08:00
Antoine Pelisse
94cb60e0e8 Use discovery to test apply all status 2020-03-19 09:58:46 -07:00
Kubernetes Prow Robot
f52cbea102
Merge pull request #88910 from liggitt/metadata-context 
Metadata client: plumb context
 2020-03-06 13:18:04 -08:00
Jordan Liggitt
04a72d5ef9 client-go metadata: update callers 2020-03-06 11:07:54 -05:00
Jordan Liggitt
b7c2faf26c client-go dynamic client: add context to callers 2020-03-06 10:56:23 -05:00
Jordan Liggitt
b19dc3a474 client-go dynamic client: update DeleteOptions callers 2020-03-06 10:21:23 -05:00
Mike Danese
76f8594378 more artisanal fixes 
Most of these could have been refactored automatically but it wouldn't
have been uglier. The unsophisticated tooling left lots of unnecessary
struct -> pointer -> struct transitions.
 2020-03-05 14:59:47 -08:00
Mike Danese
c58e69ec79 automated refactor 2020-03-05 14:59:46 -08:00
Kubernetes Prow Robot
a019609d5d
Merge pull request #87508 from jennybuckley/large-obj 
Don't save managedFields if object is too large
 2020-03-02 16:16:05 -08:00
Elijah Oyekunle
2e187415fd extend CRD map and set validation 2020-02-28 16:00:59 +01:00
jennybuckley
ccd9e4e2de Don't save managedFields if object is too large 2020-02-27 12:41:44 -08:00
Mike Danese
25651408ae generated: run refactor 2020-02-08 12:30:21 -05:00
Kubernetes Prow Robot
334d788f08 Merge pull request #87299 from mikedanese/ctx 
context in client-go
 2020-02-08 06:43:52 -08:00
Kubernetes Prow Robot
b61f89dd25
Merge pull request #85321 from MikeSpreitzer/apf-printers 
Added server-side printers for API priority and fairness
 2020-02-07 18:31:58 -08:00
Mike Danese
3aa59f7f30 generated: run refactor 2020-02-07 18:16:47 -08:00
wojtekt
5dcf08c199 Switch pager to return whether the result was paginated 2020-01-31 11:50:23 +01:00
Mike Danese
d55d6175f8 refactor 2020-01-29 08:50:45 -08:00
jennybuckley
b33fbc84d9 Update Structured Merge Diff to V3 2020-01-21 15:23:13 -08:00
Mike Spreitzer
ce12105edc Added server-side printers for the API object types for API priority and fairness 2020-01-20 01:49:05 -05:00
gavinfish
68532e0c0f Remove redundant nil check 2020-01-08 15:28:46 +08:00
danielqsj
6596a14d39 add missing alias of api errors under test 2019-12-26 17:29:38 +08:00
Jordan Liggitt
749eea7e0f Prune server-side print exemption list 2019-12-13 12:23:39 -05:00
Jordan Liggitt
0387cc7cb3 Update generated files 2019-12-13 12:23:39 -05:00
Jordan Liggitt
f2f22b84cd Delete ReplicationControllerDummy 2019-12-13 12:21:33 -05:00
Jordan Liggitt
18ba6f9482 Remove references to unserved types 2019-12-13 12:21:33 -05:00
tanjunchen
06c5901769 fix staticcheck in test/integration/apiserver 2019-12-06 23:05:20 +08:00
Jordan Liggitt
d620493b74 Ensure webhook backend requests are not artificially rate-limited 2019-12-02 12:01:51 -05:00
Kubernetes Prow Robot
567b13487f
Merge pull request #85162 from apelisse/strip-nullable 
Strip nullable for Server-side apply
 2019-11-14 11:19:48 -08:00
Kubernetes Prow Robot
64f4be5b32
Merge pull request #84390 from robscott/endpointslice-beta 
Promoting EndpointSlices to beta
 2019-11-13 17:27:50 -08:00
Kubernetes Prow Robot
02af1dd62c
Merge pull request #85004 from deads2k/dynamic-agg-cert 
dynamic reload cluster authentication info for aggregated API servers
 2019-11-13 14:50:54 -08:00
Rob Scott
a7e589a8c6
Promoting EndpointSlices to beta 2019-11-13 14:20:19 -08:00
Antoine Pelisse
5038f80b45 Strip nullable for Server-side apply 2019-11-13 10:43:51 -08:00
David Eads
e44352f31a create utilities inspecting server TLS certs 2019-11-12 12:34:19 -05:00
Rob Scott
0fa9981e01
Splitting IP address type into IPv4 and IPv6 for EndpointSlices 2019-11-12 09:03:53 -08:00
Kubernetes Prow Robot
15f586a6c1
Merge pull request #84963 from liggitt/feature-json-codes 
Fix json patch limit check
 2019-11-08 10:12:51 -08:00
Jordan Liggitt
3d5f11bda3 Add testcases covering large valid patches 2019-11-07 22:58:46 -05:00
David Eads
7351c86860 publish cluster authentication trust via controller 2019-11-06 10:17:19 -05:00
Mike Danese
a4ca9e6c93 migrate callers to g/g/uuid 2019-11-04 23:15:29 -08:00
Kubernetes Prow Robot
510fb38f27
Merge pull request #83671 from yue9944882/flow-control-api-model 
Apiserver flowcontrol api models
 2019-11-01 22:49:40 -07:00
yue9944882
6db3edff10 [generated] ./hack/update-all.sh 
generated

generated

generated

rule

generated

generated
 2019-10-29 12:59:17 +08:00
yue9944882
7c28a4b70e non-generated api models misc 
rule list

rule

rule 2
 2019-10-29 12:26:12 +08:00
Jack Kleeman
d9adf535f3 Dynamic SNI certificates 
Reload SNI certificate cert and key file from disk every minute and notify
the dynamic certificate controller when they change, allowing serving
tls config to be updated.
 2019-10-25 16:38:51 +01:00
Jack Kleeman
4e99b5d26a Add integration test for serving cert rotation 2019-10-24 09:15:44 +01:00
David Eads
6beb96261e wire up a means to dynamically reload ca bundles for kube-apiserver 2019-10-23 11:01:56 -04:00
David Eads
867ee1d5ff add insecurebackendproxy 2019-10-16 11:43:17 -04:00
jennybuckley
61b19c7298 Cap the number of managedFields entries for updates at 10 2019-10-03 16:24:58 -07:00
jennybuckley
d72260b9da Refactor fieldmanager to be more modular 2019-10-03 16:24:58 -07:00
Jordan Liggitt
8ef4566cef Limit YAML/JSON decode size 2019-10-02 21:52:19 -04:00
Joe Betz
2c8ffc329b Fix reinvokation test flake by isolating webhooks and markers 2019-09-17 15:30:37 -07:00
Ted Yu
5e5824f9c5 Check the length of recorder.invocations 2019-09-15 16:43:12 -07:00
Kubernetes Prow Robot
4dd1e3fa43
Merge pull request #82585 from wojtek-t/fix_meta_internalversion_codecs 
Ensure conversions are registered for metainternalversion codecs
 2019-09-12 17:26:31 -07:00
wojtekt
54163527a6 Ensure conversions are registered for metainternalversion codecs 2019-09-12 19:32:02 +02:00
Kubernetes Prow Robot
50b8b42c1b
Merge pull request #82498 from liggitt/race-flake 
Avoid encoding from competing goroutines
 2019-09-11 21:23:50 -07:00
Kubernetes Prow Robot
f5ae0604ad
Merge pull request #82175 from yutedz/fld-mgr-conflict 
Move Update Apply conflict test to field manager test
 2019-09-11 10:40:14 -07:00
Jordan Liggitt
510140ee27 Avoid encoding from competing goroutines 2019-09-09 12:03:38 -04:00
Jordan Liggitt
3904e14b40 Fallback to schemaless apply behavior for custom resources with unhandled schemas 2019-09-06 15:39:28 -04:00
Jordan Liggitt
e734c70e03 Add integration test for webhook client auth 2019-09-03 13:58:54 -04:00
Kubernetes Prow Robot
ab162cd28c
Merge pull request #77354 from jennybuckley/crd-apply 
Use CRD validation field in server-side apply
 2019-08-30 23:53:47 -07:00
Ted Yu
9828f986af Move Update Apply conflict test to field manager test 2019-08-30 14:47:39 -07:00
Kubernetes Prow Robot
81f997b3c8
Merge pull request #82129 from liggitt/webhook-timeout-flake 
Fix out of bounds error in timeout tests
 2019-08-30 09:40:35 -07:00
Kubernetes Prow Robot
f442b6ef32
Merge pull request #82090 from liggitt/webhook-http2 
Use http/1.1 for apiserver->webhook clients
 2019-08-30 06:26:54 -07:00
jennybuckley
badd5b9a26 Update generated 2019-08-29 19:10:28 -07:00
jennybuckley
cf24968309 Fix validation and add many tests 2019-08-29 19:10:28 -07:00
jennybuckley
c0617933d4 Use CRD validation field in server-side apply 2019-08-29 18:42:24 -07:00
Jordan Liggitt
b451b86131 Fix out of bounds error in timeout tests 2019-08-29 10:33:20 -04:00
Kubernetes Prow Robot
6c9f26ca3a
Merge pull request #80766 from robscott/discovery-api 
Adding Discovery API for EndpointSlice
 2019-08-28 14:44:09 -07:00
Jordan Liggitt
ddc697866a Use http/1.1 in apiserver->webhook clients 2019-08-28 16:51:57 -04:00
Kubernetes Prow Robot
61e2f52e38
Merge pull request #81754 from apelisse/version-fields 
Add FieldsType field to ManagedFields to track content format
 2019-08-28 01:37:50 -07:00
Kubernetes Prow Robot
0a784c5dc9
Merge pull request #78738 from jennybuckley/apply-only 
Don't start tracking field management until object has been applied
 2019-08-27 22:41:18 -07:00
Jennifer Buckley
f99252f2c6
Add issue to TODO 2019-08-27 15:00:15 -07:00
Antoine Pelisse
ff4e1f3592 Add new FieldsType to clarify the format of Fields 2019-08-27 14:52:36 -07:00
Rob Scott
f80cee9280
Adding discovery/v1alpha1 API for EndpointSlices 2019-08-26 14:50:00 -07:00
Kubernetes Prow Robot
e2f57be0c0
Merge pull request #77824 from roycaihw/webhook-trace 
mutating webhook: audit log mutation existence and patch
 2019-08-23 22:26:24 -07:00
jennybuckley
2e669a7f22 Fix failing test 2019-08-23 13:11:09 -07:00
jennybuckley
3279c73945 Add tests 2019-08-23 12:45:36 -07:00
jennybuckley
9a12e37a6d Only update managedFields on update if it already exists 2019-08-23 12:38:08 -07:00
Haowei Cai
98ad20cc8f generated 2019-08-23 11:08:54 -07:00
Haowei Cai
d35757c653 tests 2019-08-23 11:08:54 -07:00
Kubernetes Prow Robot
9ac0c5942d
Merge pull request #81673 from jennybuckley/grouping-etcd 
Make sure no op updates don't affect the resource version due to serverside apply
 2019-08-22 20:07:57 -07:00
Di Xu
2771503626 drop unused check 2019-08-22 11:46:12 +08:00
jennybuckley
aa1f01ec7e Make sure no op updates don't affect the resource version 2019-08-21 10:27:01 -07:00
Jordan Liggitt
c63284b1f3 Use lesser of context or webhook-specific timeout in webhooks 2019-08-20 22:20:19 -04:00
Kubernetes Prow Robot
6f13032fb4
Merge pull request #81524 from jennybuckley/apply-group-updates-by-manager 
Group managedFieldsEntries for update by manager name
 2019-08-20 01:59:46 -07:00
jennybuckley
87eabcdbfa Group update managedFieldsEntries by manager name 2019-08-19 13:50:15 -07:00
Kubernetes Prow Robot
3f00331452
Merge pull request #80944 from apelisse/add-update-bench 
Add benchmark for updates and get with/without server-side apply
 2019-08-17 13:30:06 -07:00
Antoine Pelisse
4de7b6ddfb Add benchmark for updates and get with/without server-side apply 2019-08-16 15:18:22 -07:00
Kubernetes Prow Robot
44c0f64411
Merge pull request #80801 from SataQiu/fix-cert-length 
Follow up #80734: update RSA keys to 2048 bits
 2019-08-14 21:44:44 -07:00
Jordan Liggitt
0feb99f9bd Remove unnecessary serializer override for CRD status, test proto requests on CRD status 2019-08-08 12:49:08 -04:00
Jordan Liggitt
38ec458703 Test webhooks with and without watch cache enabled 2019-08-07 00:45:25 -04:00
Kubernetes Prow Robot
9743d7f270
Merge pull request #80730 from jennybuckley/apply-raw 
Use raw bytes instead of nested map in metav1.Fields
 2019-08-01 20:11:52 -07:00
Kubernetes Prow Robot
c981c65c90
Merge pull request #80231 from liggitt/admissionreview-v1 
Promote admissionreview to v1
 2019-08-01 17:20:05 -07:00
Jordan Liggitt
308c23cf89 Generated 2019-08-01 17:17:42 -04:00
Jordan Liggitt
dda9bcb082 AdmissionReview: Allow webhook admission to dispatch v1 or v1beta1 2019-08-01 17:17:42 -04:00
jennybuckley
addad99b6f Use raw bytes in metav1.Fields instead of map 
Also define custom proto unmarshaller that understands the old format
 2019-07-31 16:05:54 -07:00
SataQiu
b5d5e7a9b4 update RSA keys to 2048 bits 2019-07-31 17:48:35 +08:00
Sean Sullivan
6c96a059dd Move pkg/kubectl/cmd/util and subdirs to staging 2019-07-29 13:08:41 -07:00
Lee Verberne
013f049ce0 Add Ephemeral Containers to the Kubernetes core API 2019-07-22 11:19:22 +00:00
Kubernetes Prow Robot
3dd8add5d2
Merge pull request #79549 from liggitt/admission-webhooks-v1 
Promote admission webhook API to v1
 2019-07-11 17:01:34 -07:00
Clayton Coleman
98d87a4f03
Rename metadata.NewConfigOrDie to be consistent 
Updated name to match dynamic client
 2019-07-11 12:18:51 -04:00
Kubernetes Prow Robot
4c68fa8243
Merge pull request #79239 from apelisse/400-instead-of-500 
Return 400 on invalid patch requests
 2019-07-10 21:39:20 -07:00
Antoine Pelisse
7e96438748 Return 400 on invalid patch requests 2019-07-10 15:22:10 -07:00
Jordan Liggitt
e24377f190 Install/register v1 admission registration types 2019-07-08 09:49:29 -04:00
Clayton Coleman
21f5e643d9
Add a metadata client to client-go that can read PartialObjectMetadata 
This client exposes operations on generic metadata (get, list, watch, delete)
and allows patch operations. The client always uses protobuf and requests
the server transform the response into the appropriate object. Using this
client simplifies the work of generic controllers by allowing them to treat
all objects the same, and also improves performance both in the amount of
data sent as well as allowing protobuf on CRD resources.
 2019-07-02 16:42:41 -04:00
Kevin Wiesmüller
49abd3b3ab add more tests on clearing managedFields 2019-06-11 20:30:53 +02:00
Joe Betz
e51320f69d Flake fix: poll for webhook registration to complete in reinvocation integration tests 2019-06-04 15:52:55 -07:00
Kubernetes Prow Robot
bada1c6b1e
Merge pull request #78505 from caesarxuchao/dynamic-object-selector 
Adding ObjectSelector to admission webhooks
 2019-06-01 04:45:09 -07:00
Kubernetes Prow Robot
227f34b33a
Merge pull request #77817 from smarterclayton/apicrd 
CRDs should support watch of protobuf PartialObjectMetadata
 2019-05-31 20:44:35 -07:00
Chao Xu
6cf499db6c object matcher 2019-05-30 17:23:35 -07:00
Clayton Coleman
26a6cdda86
Set integration tests to use distinct namespaces 
TestWatchBasedManager was racing with the default namespace creation.
To fix that flake and to ensure integration tests using a shared etcd
don't accidentally overlap in the future, move the three main tests
using the default namespace to separate namespaces, and have
TestWatchBasedManager create that namespace before it runs.

Make StartTestServer wait for default namespace creation, which will
reduce other flakes until future changes completely remove use of default
namespace.

From a failed integration run:

	watch_manager_test.go:66: namespaces "default" not found
	watch_manager_test.go:66: namespaces "default" not found
	watch_manager_test.go:66: namespaces "default" not found
 2019-05-30 19:11:50 -04:00
Joe Betz
95fa928ecb Add mutating admission webhook reinvocation 2019-05-30 14:31:09 -07:00
Joe Betz
55ecc45455 split admissionregistration.v1beta1/Webhook into MutatingWebhook and ValidatingWebhook 2019-05-30 14:31:09 -07:00