Commit Graph

101805 Commits

Author SHA1 Message Date
Jordan Liggitt
93c6f8969a PodSecurity: check: addCapabilities 2021-06-28 17:45:59 -04:00
Jordan Liggitt
3733e209c9 PodSecurity: check: allowPrivilegeEscalation 2021-06-28 17:45:36 -04:00
Jordan Liggitt
a8206ef58b PodSecurity: check: runAsNonRoot 2021-06-28 17:45:36 -04:00
Jordan Liggitt
12ea930aae PodSecurity: check: selinux
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:36 -04:00
Jordan Liggitt
42dc070b47 PodSecurity: kube-apiserver integration test 2021-06-28 17:45:36 -04:00
Jordan Liggitt
f39bddd767 PodSecurity: kube-apiserver: admission wiring 2021-06-28 17:45:35 -04:00
Jordan Liggitt
65a42a483c PodSecurity: pkg/features: feature gate 2021-06-28 17:45:35 -04:00
Tim Allclair
02a6187757 PodSecurity: admission: admission library
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe PodSecurity: test: framework 2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779 PodSecurity: policy: registry
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0 PodSecurity: metrics: stub interface
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16 PodSecurity: admission/api: configuration API
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers

Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773 PodSecurity: api: runtime API
Label keys, values, and parsing helper functions

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
51e1969d9c
Merge pull request #103133 from marwanad/allow-scheduler-to-patch-conditions
switch scheduler to generate the merge patch on pod status instead of the full pod
2021-06-28 12:46:28 -07:00
Kubernetes Prow Robot
556f8500ff
Merge pull request #102859 from MikeSpreitzer/add-r-metrics
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e
Merge pull request #103153 from josephburnett/v2beta2
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Marwan Ahmed
48dfa2a554 generate scheduler merge patches on the pod status instead of the full pod 2021-06-28 09:35:55 -07:00
Kubernetes Prow Robot
c2882f3142
Merge pull request #103158 from rajaskakodkar/sctp_test
Fix "should not mistakenly treat 'protocol: SCTP' as 'protocol: TCP', even if the plugin doesn't support SCTP" test
2021-06-28 07:59:37 -07:00
Kubernetes Prow Robot
5e06f173fb
Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
6010cbe593
Merge pull request #103040 from shu-mutou/sig-ui-leads
Add shu-mutou to dashboard approvers
2021-06-28 02:19:49 -07:00
Kubernetes Prow Robot
49ac765b67
Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
883cacde77
Merge pull request #101413 from songxiao-wang87/run-test6
Structured Logging migration: modify policy part logs of kube-controller-manager.
2021-06-28 02:19:25 -07:00
Kubernetes Prow Robot
89675101d0
Merge pull request #103093 from songxiao-wang87/run-test22
CHANGELOG: fix punctuation errors in 1.22
2021-06-28 01:11:25 -07:00
Kubernetes Prow Robot
d9ef459918
Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93 Allow delete with grace period 1s even if metadata period is negative 2021-06-28 11:49:39 +08:00
Shiming Zhang
45ce2dfacc Treat negative as 1s in delete path 2021-06-28 11:49:39 +08:00
Shiming Zhang
40593fa4d3 spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative 2021-06-28 11:49:39 +08:00
Kubernetes Prow Robot
657d93c4cc
Merge pull request #103238 from seans3/cmd-headers-beta
kubectl command headers as default in beta
2021-06-27 11:17:24 -07:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Sean Sullivan
4add8ed910 kubectl command headers as default in beta 2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664
Merge pull request #103126 from jdnurme/konn-21-update
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
e974bcd471
Merge pull request #103235 from thejoycekung/debian-setcap-image-bump
Update debian, debian-iptables, setcap images to pick up CVE fixes
2021-06-26 16:21:23 -07:00
Joyce Kung
aeccadda4f Update setcap image to buster-v2.0.3 2021-06-26 15:16:12 -04:00
Kubernetes Prow Robot
df2e13376d
Merge pull request #103169 from Huang-Wei/res-scorer
Optimize scheduler res scorer on non-requested extended res
2021-06-26 04:21:23 -07:00
Kubernetes Prow Robot
7ab6c5322c
Merge pull request #103190 from robscott/remove-app-protocol-gate
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
303f2cef81
Merge pull request #103227 from hakman/fix_affinity-nodeport-timeout
nodeport tests: node addresses must match the service IP family
2021-06-26 01:45:23 -07:00
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
fc26906546
Merge pull request #103049 from gdsoumya/feat/errors
Updating github.com/pkg/errors with native go errors pkg
2021-06-25 23:43:23 -07:00
Joyce Kung
0a8a9188c9 Update debian-iptables image to buster-v1.6.5 2021-06-25 20:45:20 -04:00
Kubernetes Prow Robot
f7d2ecdc3e
Merge pull request #96087 from VilledeMontreal/feat/goComp
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
Joyce Kung
42f9333e7f Update debian-base image to buster-v1.8.0 2021-06-25 20:38:15 -04:00
Kubernetes Prow Robot
7498c287a6
Merge pull request #103220 from aojea/nit_dual
Follow up on fix auto upgraded preferDual-Stack services (in cluster upgrade) #102898
2021-06-25 15:52:47 -07:00
JD Nurme
21fd224ebd Updated to use konnectivity client v0.0.21, and implemented placeholder context 2021-06-25 22:27:51 +00:00
Antonio Ojea
2eb50ee2fd fix comment on dual-stack integration test 2021-06-25 23:24:49 +02:00
Antonio Ojea
fa7b5d86e6 remove duplicate validation on services
The rest api for services was validating that, on updates, both
the old and new service have the same type. That guarantees that
the type is going to be the same after that, thus we don't need
to validate the service type on the old and the new service.
2021-06-25 23:18:56 +02:00
Kubernetes Prow Robot
017b359770
Merge pull request #103180 from aojea/collect_ipfamily
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Kubernetes Prow Robot
015a0d9b01
Merge pull request #103130 from ahg-g/ahg-ca
Add a function that returns default scheduler configuration
2021-06-25 12:13:24 -07:00
Kubernetes Prow Robot
d47448cc85
Merge pull request #103114 from learner0810/fix/remove-errors-pkg
update to remove github.com/pkg/errors
2021-06-25 12:13:11 -07:00
Kubernetes Prow Robot
b132b69700
Merge pull request #103073 from ravisantoshgudimetla/add-e2e-minReadySeconds
StatefulSet minReadySeconds e2e
2021-06-25 12:12:59 -07:00