Commit Graph

121273 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6c04679617
Merge pull request #120902 from linxiulei/watch_stack
Add handler to run execution in separate goroutine
2024-02-16 03:21:33 -08:00
Eric Lin
7b2698a5e5 Add handler to run watch serving in separate goroutine
This handler allows running execution prior to actual serving in a separate
goroutine when serving requests. Doing so benefits cases in serving long running
requests because it allows freeing memory used by the separate goroutine
and keeps the serving routines slim.

Signed-off-by: Eric Lin <exlin@google.com>
2024-02-16 10:22:16 +00:00
Patrick Ohly
c1f2fe7bcb golangci-lint: optionally skip it during "make verify", II
The pull-kubernetes-verify job is using this to run the base
verify-golangci.sh only in the pull-kubernetes-verify-lint job.
Because the file name was not quite right, it still ran.
2024-02-16 10:07:51 +01:00
Kubernetes Prow Robot
91ee30074b
Merge pull request #123174 from danwinship/cidr-validation-cleanup
Make CIDR validation consistent
2024-02-15 18:37:20 -08:00
Kubernetes Prow Robot
66d038d84d
Merge pull request #121946 from liggitt/reload-authz
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Alexander Zielenski
6d5133f3ec add functions to policy accessors for getting match information and params 2024-02-15 17:01:57 -08:00
Kubernetes Prow Robot
1f40d5c095
Merge pull request #123285 from pohly/e2e-pod-phase
e2e pod: dump pod in unexpected phase
2024-02-15 16:34:54 -08:00
Alexander Zielenski
def05a20e2 flake: avoid flake by ensuring params appear in the initial list
sometimes they would not appear in the initial list if they were added while the informer was starting up due to ObjectTracker race
2024-02-15 13:58:29 -08:00
Kubernetes Prow Robot
ad6477e342
Merge pull request #123322 from bjhaid/bjhaid-topology-verbosity
[kube-proxy] add log verbosity to endpoint topology hint loop.
2024-02-15 12:50:54 -08:00
Ben Luddy
57fc5d2401
Add decode and roundtrip tests for CBOR marshaling.
Co-authored-by: Suriyan Subbarayan <suriyansub710@gmail.com>
2024-02-15 13:59:47 -05:00
Ben Luddy
871279978f
Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
The examples of encoded data items in Appendix A cover all major types and various alternative
representations, including different ways of encoding a data item's "argument" (Section 3), fixed
and indefinite-length containers (Section 3.2), and tags from the extended generic data
model (Section 2.1).
2024-02-15 13:59:36 -05:00
Kubernetes Prow Robot
50b4cfc414
Merge pull request #123321 from mimowo/job-reset-metrics
Reset metrics in the Job integration test before testing
2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot
8a57e3cc2b
Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
move OWNERS from validating to all new parent policy folder
2024-02-15 10:57:49 -08:00
Kubernetes Prow Robot
542fe51046
Merge pull request #122881 from benluddy/cbor-serializer-only
KEP-4222: Add CBOR Serializer implementation.
2024-02-15 10:57:39 -08:00
Ayodele Abejide
71479b5577 [kube-proxy] add log verbosity to endpoint topology hint loop.
We enabled topology hint on one of our services and this log line was
emitted ~92 million times in one day from one cluster tripping our log
quota for that cluster, as it is the log line cannot be disabled via the
`-v` flag because it does not specify verbosity.

I think more log locations need to set verbosity at which they are
logged, but this one is currently hurting the most.
2024-02-15 18:26:19 +00:00
Kubernetes Prow Robot
47f92ce231
Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests
Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests
2024-02-15 09:54:53 -08:00
Michal Wozniak
f84d643c20 Use the Defer for pod replacement policy 2024-02-15 17:37:31 +01:00
Kubernetes Prow Robot
50bf3a2060
Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
Add integration test for multiple audience in structured authn
2024-02-15 08:16:27 -08:00
Kubernetes Prow Robot
b65508b477
Merge pull request #123158 from AkihiroSuda/nodeconditiontype-godoc
core/v1: remove comment about non-existing constants
2024-02-15 08:16:20 -08:00
Ben Luddy
066421f108
Add CBOR Serializer implementation. 2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot
0265f5a8de
Merge pull request #123314 from soltysh/run_service_pdb
Always test PDB's during service upgrade test
2024-02-15 07:07:15 -08:00
Michal Wozniak
ab8cdae3b1 Reset metrics in the Job integration test before testing 2024-02-15 14:50:24 +01:00
Maciej Szulik
ec7e051bc0
Always test PDB's during service upgrade test
OpenShift has been running this tests on various platform for several
years now without any problems.
2024-02-15 14:22:46 +01:00
Michal Wozniak
115dc90633 Increase accuracy of the pods_creation_total metric and improve test exec time 2024-02-15 10:59:01 +01:00
bzsuni
b5b62d4f0e
Update kubedns and nodelocaldns to v1.23.0
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-02-15 16:08:11 +08:00
Kubernetes Prow Robot
109491f3cb
Merge pull request #123299 from liggitt/guard-accepted-names
Guard empty status.acceptedNames
2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot
58c77d7b63
Merge pull request #122887 from jpbetz/retry-generate-name-create
Implement KEP-4420: Retry Generate Name
2024-02-14 21:07:24 -08:00
Anish Ramasekar
0feb1d5173
Add integration test for multiple audience in structured authn
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
d76d7a1e7a
Merge pull request #123288 from AkihiroSuda/agnhost
e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot
72c3c7c924
Merge pull request #123282 from enj/enj/i/authn_config_algs
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
0b24b55e7f
Merge pull request #123269 from pohly/lint-skip-in-verify
golangci-lint: optionally skip it during "make verify"
2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot
68bbbd0359
Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field
Remove unused lookupIP field in NodeIPAM Controller struct
2024-02-14 17:00:13 -08:00
Kubernetes Prow Robot
ba450636a4
Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Alexander Zielenski
bd27c99262 move OWNERS from validating to all new parent policy folder
meant to do this in refactor PR
2024-02-14 16:32:08 -08:00
Kubernetes Prow Robot
e305e773bb
Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0
Bump github.com/fxamacker/cbor/v2 to v2.6.0.
2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot
8e11104f0b
Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
5b2c919583
Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements
kubelet: enable configurable rotation duration and parallel rotate
2024-02-14 15:56:38 -08:00
Jordan Liggitt
5dc92ada06
Implement authz config file reloading 2024-02-14 18:09:15 -05:00
Jordan Liggitt
3a98e60a71
Move authz construction to reloader 2024-02-14 18:03:21 -05:00
Kubernetes Prow Robot
145ccf1f13
Merge pull request #123260 from pohly/e2e-tag-docs
e2e: tag documentation + sorting
2024-02-14 14:52:33 -08:00
Kubernetes Prow Robot
684a9975fe
Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial
Refactor AdmissionPolicy for code sharing with mutating
2024-02-14 14:52:26 -08:00
Jordan Liggitt
2b00035b5f
Split construction of authorizer / ruleResolver 2024-02-14 17:06:18 -05:00
Jordan Liggitt
1fddc948ed
Split node/rbac/abac construction 2024-02-14 17:03:10 -05:00
Jordan Liggitt
49124293c3
Store constructed node/rbac/abac authorizers 2024-02-14 17:03:07 -05:00
Antonin Bas
75a3069294 Remove unused lookupIP field in NodeIPAM Controller struct
I am not sure why this was originally required, but it doesn't seem to
have been used for years.

Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>
2024-02-14 13:28:35 -08:00
Jordan Liggitt
41435d045d
Guard empty status.acceptedNames 2024-02-14 16:26:56 -05:00
Anish Ramasekar
18c563546a
support multiple audiences with jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Kubernetes Release Robot
3cc3b002ba CHANGELOG: Update directory for v1.29.2 release 2024-02-14 18:01:51 +00:00
Kubernetes Release Robot
b202d053fa CHANGELOG: Update directory for v1.26.14 release 2024-02-14 16:07:48 +00:00
Kubernetes Release Robot
cf99360c1f CHANGELOG: Update directory for v1.27.11 release 2024-02-14 15:51:51 +00:00