119563 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Anish Ramasekar	26e3a03d12	Implement CEL and wire it with OIDC authenticator ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2023-10-31 20:16:09 +00:00
Anish Ramasekar	6b971153d7	add new fields in v1alpha1 StructuredAuthenticationConfiguration ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2023-10-31 16:45:01 +00:00
Kubernetes Prow Robot	74fefd877f	Merge pull request #121638 from tkashem/apf-ga ... apiserver: set APF featuregate to stable	2023-10-31 15:57:57 +01:00
Abu Kashem	c7fcef1875	apiserver: set APF featuregate to ga	2023-10-31 08:46:24 -04:00
Kubernetes Prow Robot	d84ee0ba69	Merge pull request #121632 from kerthcet/fix/runscoreplugins ... Fix panic when process RunScorePlugins for cap out of range	2023-10-31 13:14:32 +01:00
Kubernetes Prow Robot	947953f308	Merge pull request #121616 from dims/try-a-single-gcloud-command-for-scp-ing-all-files ... Single gcloud command for scp-ing all files	2023-10-31 13:14:23 +01:00
Kubernetes Prow Robot	5bac451d1f	Merge pull request #121615 from p0lyn0mial/upstream-cacher-forget-watcher ... cacher: when forgeting a watcher, call stopWatcherLocked multiple times	2023-10-31 13:14:14 +01:00
Kubernetes Prow Robot	d337523d62	Merge pull request #121588 from vlasebian/fix-issue-121209 ... Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false	2023-10-31 13:14:06 +01:00
Kubernetes Prow Robot	064e86b3d0	Merge pull request #121223 from ritazh/authz-cel ... [StructuredAuthorizationConfig] - CEL integration	2023-10-31 13:13:56 +01:00
Kubernetes Prow Robot	84fb7b5ce0	Merge pull request #121504 from pohly/golangci-lint-godoc ... golangci-lint: enable doc comment checking for cmd/kubeadm	2023-10-31 12:09:17 +01:00
Kubernetes Prow Robot	e8d45596df	Merge pull request #121049 from siyuanfoundation/refactor ... k8s.io/apiserver/storage/etcd: refactor etcd GetList.	2023-10-31 10:49:33 +01:00
kerthcet	b02aad42fa	Fix panic when process RunScorePlugins for cap out of range ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2023-10-31 16:02:16 +08:00
Rita Zhang	31c76e9abb	authz: add cel expression to webhook matchconditions ... Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>	2023-10-30 21:48:00 -07:00
Kubernetes Prow Robot	f5a5d83d7c	Merge pull request #121089 from tkashem/apf-v1 ... Promote APF API to v1	2023-10-31 02:39:30 +01:00
Kubernetes Prow Robot	ab13d0b47c	Merge pull request #120780 from munnerz/bound-token-improvements ... Including JTI & node reference in issued service account tokens (kep 4193)	2023-10-31 01:22:56 +01:00
Kubernetes Prow Robot	e823b56a0b	Merge pull request #116932 from my-git9/ut-preemption ... [ut] Increase test coverage for kubelet/pleg	2023-10-31 01:22:47 +01:00
Kubernetes Prow Robot	af18989486	Merge pull request #116931 from my-git9/CreateListener-ut ... [ut] increase covrage for kubelet/prober/results	2023-10-31 01:22:29 +01:00
Kubernetes Prow Robot	2a4d5c5fd5	Merge pull request #120300 from wojtek-t/refactor_streaming_watch_encoder ... Refactor streaming watch encoder to enable caching	2023-10-31 00:09:12 +01:00
Abu Kashem	b8cd792b36	rename the roundtrip annotation, forbid it in v1	2023-10-30 18:22:51 -04:00
Kubernetes Prow Robot	2a1140305c	Merge pull request #121614 from HirazawaUi/decode-respect-timeout-context ... Make the decode function respect the timeout context	2023-10-30 22:42:26 +01:00
Kubernetes Prow Robot	c7bb17ebd0	Merge pull request #121600 from seans3/load-openapi-explain ... Lazy-load OpenAPI V2 Specifications for kubectl explain	2023-10-30 22:42:17 +01:00
Kubernetes Prow Robot	08070433cc	Merge pull request #121373 from cici37/crdGA ... [KEP-2876] Promote CRD validation rule to GA	2023-10-30 22:42:09 +01:00
Kubernetes Prow Robot	07515c0021	Merge pull request #121311 from nilekhc/validation-doc ... chore: updates api doc	2023-10-30 22:41:59 +01:00
Kubernetes Prow Robot	4106366b6d	Merge pull request #121065 from byako/issue121063 ... DRA: notify ResourceClaim or ResourceClass of params error	2023-10-30 22:41:41 +01:00
James Munnelly	76463e21d4	KEP-4193: bound service account token improvements	2023-10-30 21:15:10 +00:00
Kubernetes Prow Robot	5cb83d1cd2	Merge pull request #121609 from neolit123/1.29-super-admin-conf ... kubeadm: poll additional CRB create calls for kubeadm:cluster-admins	2023-10-30 21:12:00 +01:00
Kubernetes Prow Robot	05765a851c	Merge pull request #121389 from aleksandra-malinowska/sts-restart-always ... Resubmit "Make StatefulSet restart pods with phase Succeeded"	2023-10-30 21:11:51 +01:00
Kubernetes Prow Robot	d4592dc70a	Merge pull request #121310 from nilekhc/polling ... [KMSv2] feat: updates encryption config file watch logic to polling	2023-10-30 21:11:42 +01:00
Kubernetes Prow Robot	e4212878dd	Merge pull request #119208 from atosatto/separate-taint-manager ... Decouple TaintManager from NodeLifeCycleController (KEP-3902)	2023-10-30 21:11:33 +01:00
Kubernetes Prow Robot	ceea5fd0cb	Merge pull request #119109 from jiahuif-forks/feature/validating-admission-policy/crd-typechecking ... ValidatingAdmissionPolicy - Type Checking for API Expensions types	2023-10-30 21:11:19 +01:00
Siyuan Zhang	a968f51fa2	k8s.io/apiserver/storage/etcd: refactor etcd GetList. ... Reorder some code. Signed-off-by: Siyuan Zhang <sizhang@google.com>	2023-10-30 12:48:32 -07:00
Siyuan Zhang	84ec5e2ecc	k8s.io/apiserver/storage/etcd: refactor etcd GetList. ... reduce redundant update of withRev after request. Signed-off-by: Siyuan Zhang <sizhang@google.com>	2023-10-30 12:38:34 -07:00
Kubernetes Prow Robot	16fc00493b	Merge pull request #121307 from cici37/celUpdate ... Add cel new validator into Kubernetes	2023-10-30 20:02:55 +01:00
Nilekh Chaudhari	d3de47ceee	chore: updates api doc ... Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>	2023-10-30 18:43:30 +00:00
Sean Sullivan	2eb06e79ef	OpenAPIResourcesGetter allows lazy-loading OpenAPI V2	2023-10-30 11:00:46 -07:00
Kubernetes Prow Robot	b84e4a1333	Merge pull request #121608 from carlory/cleanup-003 ... fix wrong controller name for ephemeralController	2023-10-30 18:49:12 +01:00
Kubernetes Prow Robot	4e45e1d625	Merge pull request #121460 from jiahuif-forks/feature/crd-validation-expressions/existing-expressions-cost-exempt ... CRD Validation Rule: skip individual cost limit check for expressions of untouched versions.	2023-10-30 18:49:03 +01:00
Kubernetes Prow Robot	ef9587c4f8	Merge pull request #116565 from seans3/lazy-load-openapi ... OpenAPIResourcesGetter allows lazy-loading OpenAPI V2	2023-10-30 18:48:49 +01:00
Alexey Fomenko	080fe8346d	Fix typos in interface comments	2023-10-30 19:12:34 +02:00
Kubernetes Prow Robot	c7a7cb8e17	Merge pull request #121531 from saschagrunert/e2e-node-imageid ... Make e2e node image ID test more flexible	2023-10-30 17:40:16 +01:00
Nilekh Chaudhari	e95b7c6d8b	feat: updates encryption config file watch logic to polling ... Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com> fix (#2) Signed-off-by: Monis Khan <mok@microsoft.com>	2023-10-30 16:20:39 +00:00
Kubernetes Prow Robot	65d27c296e	Merge pull request #121612 from liggitt/kms-feature-gate ... Mirror apiserver feature gates to kube feature gates file for consistent enablement	2023-10-30 16:28:07 +01:00
Davanum Srinivas	6d59480a70	Try a single gcloud command for scp-ing all files ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2023-10-30 11:26:30 -04:00
Lukasz Szaszkiewicz	bbca4a4b9a	cacher: when forgeting a watcher, call stopWatcherLocked multiple times ... It's possible that the watcher is already not in the structure (e.g. in case of simultaneous Stop() and terminateAllWatchers(), but it is safe to call stopLocked() on a watcher multiple times.	2023-10-30 16:22:50 +01:00
HirazawaUi	f78b367db6	Make the decode function respect the timeout context	2023-10-30 22:27:28 +08:00
Jordan Liggitt	79c5b3ca6f	Mirror apiserver feature gates to kube feature gates file for consistent enablement	2023-10-30 10:22:37 -04:00
Andrea Tosatto	ccda2d6fd4	kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)	2023-10-30 12:23:56 +00:00
Abu Kashem	233bc2449d	apiserver: fix apf enablement with runtime-config	2023-10-30 08:18:41 -04:00
Abu Kashem	acd6089659	apiserver: remove prerelease annotation for flowcontrol v1	2023-10-30 08:18:41 -04:00
Abu Kashem	25447b95ad	apiserver: add testdata for flowcontrol v1	2023-10-30 08:18:41 -04:00