121027 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kubernetes Prow Robot	66d038d84d	Merge pull request #121946 from liggitt/reload-authz ... KEP-3221: Implement authorization configuration file reloading	2024-02-15 18:37:13 -08:00
Kubernetes Prow Robot	1f40d5c095	Merge pull request #123285 from pohly/e2e-pod-phase ... e2e pod: dump pod in unexpected phase	2024-02-15 16:34:54 -08:00
Kubernetes Prow Robot	ad6477e342	Merge pull request #123322 from bjhaid/bjhaid-topology-verbosity ... [kube-proxy] add log verbosity to endpoint topology hint loop.	2024-02-15 12:50:54 -08:00
Kubernetes Prow Robot	50b4cfc414	Merge pull request #123321 from mimowo/job-reset-metrics ... Reset metrics in the Job integration test before testing	2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot	8a57e3cc2b	Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners ... move OWNERS from validating to all new parent policy folder	2024-02-15 10:57:49 -08:00
Kubernetes Prow Robot	542fe51046	Merge pull request #122881 from benluddy/cbor-serializer-only ... KEP-4222: Add CBOR Serializer implementation.	2024-02-15 10:57:39 -08:00
Ayodele Abejide	71479b5577	[kube-proxy] add log verbosity to endpoint topology hint loop. ... We enabled topology hint on one of our services and this log line was emitted ~92 million times in one day from one cluster tripping our log quota for that cluster, as it is the log line cannot be disabled via the `-v` flag because it does not specify verbosity. I think more log locations need to set verbosity at which they are logged, but this one is currently hurting the most.	2024-02-15 18:26:19 +00:00
Kubernetes Prow Robot	47f92ce231	Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests ... Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests	2024-02-15 09:54:53 -08:00
Michal Wozniak	f84d643c20	Use the Defer for pod replacement policy	2024-02-15 17:37:31 +01:00
Kubernetes Prow Robot	50bf3a2060	Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up ... Add integration test for multiple audience in structured authn	2024-02-15 08:16:27 -08:00
Kubernetes Prow Robot	b65508b477	Merge pull request #123158 from AkihiroSuda/nodeconditiontype-godoc ... core/v1: remove comment about non-existing constants	2024-02-15 08:16:20 -08:00
Ben Luddy	066421f108	Add CBOR Serializer implementation.	2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot	0265f5a8de	Merge pull request #123314 from soltysh/run_service_pdb ... Always test PDB's during service upgrade test	2024-02-15 07:07:15 -08:00
Michal Wozniak	ab8cdae3b1	Reset metrics in the Job integration test before testing	2024-02-15 14:50:24 +01:00
Maciej Szulik	ec7e051bc0	Always test PDB's during service upgrade test ... OpenShift has been running this tests on various platform for several years now without any problems.	2024-02-15 14:22:46 +01:00
Michal Wozniak	115dc90633	Increase accuracy of the pods_creation_total metric and improve test exec time	2024-02-15 10:59:01 +01:00
Kubernetes Prow Robot	109491f3cb	Merge pull request #123299 from liggitt/guard-accepted-names ... Guard empty status.acceptedNames	2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot	58c77d7b63	Merge pull request #122887 from jpbetz/retry-generate-name-create ... Implement KEP-4420: Retry Generate Name	2024-02-14 21:07:24 -08:00
Anish Ramasekar	0feb1d5173	Add integration test for multiple audience in structured authn ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot	d76d7a1e7a	Merge pull request #123288 from AkihiroSuda/agnhost ... e2e_node: replace `registry.k8s.io/stress:v1` with agnhost	2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot	72c3c7c924	Merge pull request #123282 from enj/enj/i/authn_config_algs ... Support all key algs with structured authn config	2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot	0b24b55e7f	Merge pull request #123269 from pohly/lint-skip-in-verify ... golangci-lint: optionally skip it during "make verify"	2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot	68bbbd0359	Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field ... Remove unused lookupIP field in NodeIPAM Controller struct	2024-02-14 17:00:13 -08:00
Kubernetes Prow Robot	ba450636a4	Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy ... Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration	2024-02-14 17:00:04 -08:00
Alexander Zielenski	bd27c99262	move OWNERS from validating to all new parent policy folder ... meant to do this in refactor PR	2024-02-14 16:32:08 -08:00
Kubernetes Prow Robot	e305e773bb	Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0 ... Bump github.com/fxamacker/cbor/v2 to v2.6.0.	2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot	8e11104f0b	Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta ... KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta	2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot	5b2c919583	Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements ... kubelet: enable configurable rotation duration and parallel rotate	2024-02-14 15:56:38 -08:00
Jordan Liggitt	5dc92ada06	Implement authz config file reloading	2024-02-14 18:09:15 -05:00
Jordan Liggitt	3a98e60a71	Move authz construction to reloader	2024-02-14 18:03:21 -05:00
Kubernetes Prow Robot	145ccf1f13	Merge pull request #123260 from pohly/e2e-tag-docs ... e2e: tag documentation + sorting	2024-02-14 14:52:33 -08:00
Kubernetes Prow Robot	684a9975fe	Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial ... Refactor AdmissionPolicy for code sharing with mutating	2024-02-14 14:52:26 -08:00
Jordan Liggitt	2b00035b5f	Split construction of authorizer / ruleResolver	2024-02-14 17:06:18 -05:00
Jordan Liggitt	1fddc948ed	Split node/rbac/abac construction	2024-02-14 17:03:10 -05:00
Jordan Liggitt	49124293c3	Store constructed node/rbac/abac authorizers	2024-02-14 17:03:07 -05:00
Antonin Bas	75a3069294	Remove unused lookupIP field in NodeIPAM Controller struct ... I am not sure why this was originally required, but it doesn't seem to have been used for years. Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>	2024-02-14 13:28:35 -08:00
Jordan Liggitt	41435d045d	Guard empty status.acceptedNames	2024-02-14 16:26:56 -05:00
Anish Ramasekar	18c563546a	support multiple audiences with jwt authenticator ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2024-02-14 10:47:07 -08:00
Kubernetes Release Robot	3cc3b002ba	CHANGELOG: Update directory for v1.29.2 release	2024-02-14 18:01:51 +00:00
Kubernetes Release Robot	b202d053fa	CHANGELOG: Update directory for v1.26.14 release	2024-02-14 16:07:48 +00:00
Kubernetes Release Robot	cf99360c1f	CHANGELOG: Update directory for v1.27.11 release	2024-02-14 15:51:51 +00:00
Kubernetes Release Robot	14045bf340	CHANGELOG: Update directory for v1.28.7 release	2024-02-14 15:49:35 +00:00
Ben Luddy	aac43dc96f	Bump github.com/fxamacker/cbor/v2 to v2.6.0.	2024-02-14 10:09:15 -05:00
Jordan Liggitt	5f4cb8b09a	Move kube-apiserver authz validation functions	2024-02-14 10:00:11 -05:00
Kubernetes Prow Robot	eeefc299e5	Merge pull request #123290 from AxeZhan/122435 ... Revert "Scheduler first fit"	2024-02-14 06:51:14 -08:00
Monis Khan	b5e0068325	Support all key algs with structured authn config ... Signed-off-by: Monis Khan <mok@microsoft.com>	2024-02-14 09:40:25 -05:00
AxeZhan	630ff96f9d	Revert "Scheduler first fit"	2024-02-14 20:43:59 +08:00
Kubernetes Prow Robot	ed84e7f6d3	Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race ... DRA: fix data race in resourceclaim.Lookup	2024-02-14 03:24:57 -08:00
Akihiro Suda	e8b08cd056	e2e_node: replace registry.k8s.io/stress:v1 with agnhost ... agnhost now contains the stress functionality (PR 123258). Fix issue 123146 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	2024-02-14 19:37:13 +09:00
Akihiro Suda	5d861b6f12	promote agnhost to v2.47 ... Since v2.45, the `stress` subcommand was added and the CI issue was fixed: - kubernetes/kubernetes PR 123258 - kubernetes/kubernetes PR 123284 - kubernetes/k8s.io PR 6422 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	2024-02-14 19:33:46 +09:00