github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-21 08:47:16 +00:00
Code Issues Projects Releases Wiki Activity
133,827 Commits 42 Branches 9,765 Tags
07faa17f8fa8daa803408ea9409410d198516708
Commit Graph

131 Commits

Author SHA1 Message Date
yongruilin
2422bc0bb8 feat: Implement structured /flagz endpoint 2025-11-04 19:45:30 +00:00
Siyuan Zhang
67143028e7 Add --min-compatibility flag. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-30 13:36:38 -05:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2 
SVM: bump the API to beta, remove unused fields
 2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta 
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
 2025-10-29 19:36:11 +00:00
Richa Banker
491f7f9ba8 Add a preshutdownhook to cleanup apisever identity lease 2025-10-23 18:59:52 -07:00
Tim Allclair
36e3a8f269 Record and require all kube-feature dependencies 2025-10-15 10:29:15 -07:00
Kubernetes Prow Robot
bded66365e Merge pull request #134258 from mayank-agrwl/apiserver-lease-gc 
Make APIServerLeaseGC controller context-aware
 2025-10-01 03:34:17 -07:00
Mayank Agrawal
b0460eedba Make legacytokentracking controller context aware 2025-09-29 21:41:47 -07:00
Mayank Agrawal
2ffc06e09a Make APIServerLeaseGC controller context-aware 2025-09-24 23:11:26 -07:00
Jordan Liggitt
55419eca7a Plumb effective version into admission initializer 2025-09-17 15:23:31 -04:00
Simran Kaur
c7d6c09683 List available endpoints for kube-apiserver (#132581) 
Fix tests and formatting

Use ListedPaths for finding useful endpoints

Fix maps import

Update dependencies

Fix lint

Add option to pass listedpaths

Remove apiserver component check

Install statuz in genericapiserver

Register zpagesfeatures

Fix import order

Avoid adding non-debugging endpoints

Fix tests

Fix tests

fix tests

Sort paths

Sort in-place

Copy paths before sorting

Fix string initialization

Move sorting to later stage

Fix imports
 2025-07-23 21:44:27 -07:00
Taahir Ahmed
4624cb9bb9 Pod Certificates: Basic implementation 
* Define feature gate
* Define and serve PodCertificateRequest
* Implement Kubelet projected volume source
* kube-controller-manager GCs PodCertificateRequests
* Add agnhost subcommand that implements a toy signer for testing

Change-Id: Id7ed030d449806410a4fa28aab0f2ce4e01d3b10
 2025-07-21 21:49:57 +00:00
Kubernetes Prow Robot
201325e869 Merge pull request #132433 from michaelasp/configurablecle 
feat: make CLE timers configurable
 2025-06-30 12:08:31 -07:00
Michael Aspinwall
1a59c250ea feat: make CLE timers configurable 2025-06-25 16:38:50 +00:00
Harshal Neelkamal
0baeccd32f KEP-740: promote ExternalJWTSigner feature to beta 2025-06-10 16:16:13 +00:00
Kubernetes Prow Robot
da24cfe98b Merge pull request #131509 from liggitt/relax-external-signer-path 
Relax external signer path validation to allow relative paths
 2025-04-30 11:57:54 -07:00
Jordan Liggitt
48054afd6a Relax external signer path validation to allow relative paths 2025-04-30 13:41:22 -04:00
Abhijit Hoskeri
db960d1007 Fix openid discovery docs with external jwt signer. 
If the external jwt signer is enabled, publishing
OIDC discovery docs and keys fails because the PublicKeysGetter
is not wired correctly.

Set the public keys getter on startup so public key
discovery works in that case as well.
 2025-04-26 17:39:31 -07:00
Abhijit Hoskeri
1869f6f23a Fix typo in service account config test. 2025-04-26 14:36:33 -07:00
xigang
64b4c96e20 fix: use correct apiextensions v1 API instead of apiregistration v1 
Signed-off-by: xigang <wangxigang2014@gmail.com>
 2025-04-21 08:44:04 +08:00
James Munnelly
6ddabb6ee6 updating to reflect latest KEP design 2025-03-20 20:19:53 +00:00
James Munnelly
5e7e1e7cf1 KEP-4742: Node Topology Labels via Downward API 2025-03-20 20:19:51 +00:00
Jordan Liggitt
c10dc41681 Ensure --enable-logs-handler help appears in kube-apiserver help 2025-03-20 11:11:16 -04:00
Siyuan Zhang
0ec6566c68 chore: update emulation version help msg. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-19 13:07:19 -07:00
Kubernetes Prow Robot
a6227695ab Merge pull request #128402 from richabanker/mvp-agg-discovery 
KEP 4020: Replace StorageVersionAPI with aggregated discovery to fetch served resources by a peer apiserver
 2025-03-18 21:43:49 -07:00
Richa Banker
8b2cee83c1 Replace StorageVersion API with aggregated discovery to fetch served resources by a peer for MVP 
Co-authored-by: Joe Betz <jpbetz@google.com>

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
 2025-03-18 13:27:27 -07:00
Kubernetes Prow Robot
8b08487283 Merge pull request #130354 from siyuanfoundation/forward-api 
KEP-4330: add forward compatibility for compatibility mode
 2025-03-13 18:55:57 -07:00
Jefftree
5ba4a90fda Add LeaseCandidate v1beta1 2025-03-12 17:52:10 +00:00
Stanislav Láznička
e0f536bf1f use the ClusterTrustBundles beta API 2025-03-11 18:07:24 +01:00
Paco Xu
8195f82fe8 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 2025-03-11 10:51:43 +08:00
Siyuan Zhang
3d2d8db835 Add option to explicitly enable future gv or gvr in runtime-config. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-10 12:13:45 -07:00
Siyuan Zhang
819cb8fe22 Add emulation forward compatibility into api enablement and RemoveDeletedKinds. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-10 11:56:40 -07:00
Jefftree
05a90bf642 Revert "Add LeaseCandidate v1beta1" 
This reverts commit fad4594fd9.
 2025-03-01 14:14:25 +00:00
Jefftree
1a1b566d61 Revert "LeaseCandidate alpha -> beta," 
This reverts commit ac7a95efb0.
 2025-03-01 14:14:19 +00:00
Jefftree
ac7a95efb0 LeaseCandidate alpha -> beta, 2025-02-27 17:50:36 +00:00
Jefftree
fad4594fd9 Add LeaseCandidate v1beta1 2025-02-27 15:41:26 +00:00
Kubernetes Prow Robot
1e38c86893 Merge pull request #129996 from yongruilin/fix-flag-apiserver 
fix: apiserver flagz to response actual parsed flags
 2025-02-16 13:56:23 -08:00
Mark Rossetti
5e6611af55 fixing various unit tests on Windows that create abstract sockets 
by now having them create file-based sockets on windows/darwin

Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2025-02-13 15:41:33 -08:00
yongruilin
b1d72a5b7c test: Add emulated-version flag verification in flagz test 2025-02-07 22:18:36 -08:00
Siyuan Zhang
8fc3a33454 Refactor compatibility version code 
Replace DefaultComponentGlobalsRegistry with new instance of componentGlobalsRegistry in test api server.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move kube effective version validation out of component base.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move DefaultComponentGlobalsRegistry out of component base.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move ComponentGlobalsRegistry out of featuregate pkg.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

remove usage of DefaultComponentGlobalsRegistry in test files.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

change non-test DefaultKubeEffectiveVersion to use DefaultBuildEffectiveVersion.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Restore useDefaultBuildBinaryVersion in effective version.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

rename DefaultKubeEffectiveVersion to DefaultKubeEffectiveVersionForTest.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

pass options.ComponentGlobalsRegistry into config for controller manager and scheduler.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Pass apiserver effective version to DefaultResourceEncodingConfig.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

change statusz registry to take effective version from the components.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Address review comments

Signed-off-by: Siyuan Zhang <sizhang@google.com>

update vendor

Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-02-05 16:10:53 -08:00
Samuel Davidson
7936d64e03 Replace IsExternalSigner boolean with ExtendedSigningDuration throughout apiserver to ensure consistent token signing length between local and external token signing. 2025-01-29 17:49:22 +00:00
Antoni Zawodny
4a2b7ee569 Configure watch cache history window based on request timeout 2024-12-17 15:06:00 +01:00
Jordan Liggitt
1fd76884b9 Isolate mock signer for externaljwt tests 2024-12-02 18:44:40 -05:00
Kubernetes Prow Robot
45260fd76a Merge pull request #127857 from Jefftree/cle-v1alpha2 
Coordinated Leader Election add v1alpha2
 2024-11-08 07:10:43 +00:00
Jefftree
0ce7b688a6 v1alpha2 LeaseCandidate API 2024-11-08 02:27:19 +00:00
Richa Banker
da8dc433e9 Add flagz implementation and enablement in apiserver 2024-11-07 17:11:49 -08:00
Richa Banker
8bf6eecedf add statusz implementation and enablement in apiserver 2024-11-07 12:37:38 -08:00
Harshal Neelkamal
6fdacf0411 Add plugin and key-cache for ExternalJWTSigner integration 2024-11-07 03:16:23 +00:00
Patrick Ohly
d6bad27b7d DRA apiserver: allow DRAAdminAccess feature without DynamicResourceAllocation 
This makes a configuration with --feature-gates=AllAlpha=true valid
again. Without this change, that flag enabled DRAAdminAccess without
DynamicResourceAllocation being enabled (default off!) and the kube-apiserver
refused to start.

While DRAAdminAccess isn't usable without DynamicResourceAllocation, it's also
not really wrong to allow it - it simply won't matter.
 2024-11-06 13:03:20 +01:00
Joe Betz
c0f9c81338 Add MutatingAdmissionPolicy to samples 2024-11-04 21:40:54 -05:00