github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-22 09:40:07 +00:00
Code Issues Projects Releases Wiki Activity
134,908 Commits 42 Branches 9,765 Tags
d800e7e052d4e5d71fb0046fe591e4dcb0c9ebcd
Commit Graph

138 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
f2143d70db Merge pull request #135597 from alvaroaleman/plumb-context 
Service account controller: Wire through context
 2026-01-13 02:15:00 +05:30
yliao
3e34de29c4 fixed the loophole that allows user to get around resource quota set by system admin 2025-12-18 00:56:20 +00:00
Alvaro Aleman
3d6a5d471f Service account controller: Wire through context 
This change enables structured logging and cancellation in the service
account controller by replacing the usage of context.TODO with an actual
context.
 2025-12-04 19:30:55 -05:00
Richa Banker
8f2c0a9a60 kube-apiserver: Enable peer proxy and peer-aggregated discovery 
Wire up peer proxy infrastructure in kube-apiserver:
- Add UnknownVersionInteroperabilityProxy feature gate
- Configure peer proxy with identity lease selectors
- Register CRD and APIService informers with exclusion filters
- Start peer discovery sync and GV cleanup workers

Includes extractors for CRDs and APIServices to identify which
GroupVersions should be excluded from peer discovery.

Part of KEP-4020: Unknown Version Interoperability Proxy
 2025-11-06 12:48:19 -08:00
Kubernetes Prow Robot
b869afe68d Merge pull request #133389 from pravk03/node-capabilities 
Introduce node declared features framework
 2025-11-06 01:32:54 -08:00
Praveen Krishna
e7a42e8e8e feat(admission): Add NodeDeclaredFeatures admission plugin 2025-11-06 01:21:17 +00:00
yliao
870062df4f adjusts DRA extended resource quota to include devices usages from regular resource claims 2025-11-05 23:24:24 +00:00
yongruilin
2422bc0bb8 feat: Implement structured /flagz endpoint 2025-11-04 19:45:30 +00:00
Siyuan Zhang
67143028e7 Add --min-compatibility flag. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-30 13:36:38 -05:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2 
SVM: bump the API to beta, remove unused fields
 2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta 
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
 2025-10-29 19:36:11 +00:00
Richa Banker
491f7f9ba8 Add a preshutdownhook to cleanup apisever identity lease 2025-10-23 18:59:52 -07:00
Tim Allclair
36e3a8f269 Record and require all kube-feature dependencies 2025-10-15 10:29:15 -07:00
Kubernetes Prow Robot
bded66365e Merge pull request #134258 from mayank-agrwl/apiserver-lease-gc 
Make APIServerLeaseGC controller context-aware
 2025-10-01 03:34:17 -07:00
Mayank Agrawal
b0460eedba Make legacytokentracking controller context aware 2025-09-29 21:41:47 -07:00
Mayank Agrawal
2ffc06e09a Make APIServerLeaseGC controller context-aware 2025-09-24 23:11:26 -07:00
Jordan Liggitt
55419eca7a Plumb effective version into admission initializer 2025-09-17 15:23:31 -04:00
Simran Kaur
c7d6c09683 List available endpoints for kube-apiserver (#132581) 
Fix tests and formatting

Use ListedPaths for finding useful endpoints

Fix maps import

Update dependencies

Fix lint

Add option to pass listedpaths

Remove apiserver component check

Install statuz in genericapiserver

Register zpagesfeatures

Fix import order

Avoid adding non-debugging endpoints

Fix tests

Fix tests

fix tests

Sort paths

Sort in-place

Copy paths before sorting

Fix string initialization

Move sorting to later stage

Fix imports
 2025-07-23 21:44:27 -07:00
Taahir Ahmed
4624cb9bb9 Pod Certificates: Basic implementation 
* Define feature gate
* Define and serve PodCertificateRequest
* Implement Kubelet projected volume source
* kube-controller-manager GCs PodCertificateRequests
* Add agnhost subcommand that implements a toy signer for testing

Change-Id: Id7ed030d449806410a4fa28aab0f2ce4e01d3b10
 2025-07-21 21:49:57 +00:00
Kubernetes Prow Robot
201325e869 Merge pull request #132433 from michaelasp/configurablecle 
feat: make CLE timers configurable
 2025-06-30 12:08:31 -07:00
Michael Aspinwall
1a59c250ea feat: make CLE timers configurable 2025-06-25 16:38:50 +00:00
Harshal Neelkamal
0baeccd32f KEP-740: promote ExternalJWTSigner feature to beta 2025-06-10 16:16:13 +00:00
Kubernetes Prow Robot
da24cfe98b Merge pull request #131509 from liggitt/relax-external-signer-path 
Relax external signer path validation to allow relative paths
 2025-04-30 11:57:54 -07:00
Jordan Liggitt
48054afd6a Relax external signer path validation to allow relative paths 2025-04-30 13:41:22 -04:00
Abhijit Hoskeri
db960d1007 Fix openid discovery docs with external jwt signer. 
If the external jwt signer is enabled, publishing
OIDC discovery docs and keys fails because the PublicKeysGetter
is not wired correctly.

Set the public keys getter on startup so public key
discovery works in that case as well.
 2025-04-26 17:39:31 -07:00
Abhijit Hoskeri
1869f6f23a Fix typo in service account config test. 2025-04-26 14:36:33 -07:00
xigang
64b4c96e20 fix: use correct apiextensions v1 API instead of apiregistration v1 
Signed-off-by: xigang <wangxigang2014@gmail.com>
 2025-04-21 08:44:04 +08:00
James Munnelly
6ddabb6ee6 updating to reflect latest KEP design 2025-03-20 20:19:53 +00:00
James Munnelly
5e7e1e7cf1 KEP-4742: Node Topology Labels via Downward API 2025-03-20 20:19:51 +00:00
Jordan Liggitt
c10dc41681 Ensure --enable-logs-handler help appears in kube-apiserver help 2025-03-20 11:11:16 -04:00
Siyuan Zhang
0ec6566c68 chore: update emulation version help msg. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-19 13:07:19 -07:00
Kubernetes Prow Robot
a6227695ab Merge pull request #128402 from richabanker/mvp-agg-discovery 
KEP 4020: Replace StorageVersionAPI with aggregated discovery to fetch served resources by a peer apiserver
 2025-03-18 21:43:49 -07:00
Richa Banker
8b2cee83c1 Replace StorageVersion API with aggregated discovery to fetch served resources by a peer for MVP 
Co-authored-by: Joe Betz <jpbetz@google.com>

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
 2025-03-18 13:27:27 -07:00
Kubernetes Prow Robot
8b08487283 Merge pull request #130354 from siyuanfoundation/forward-api 
KEP-4330: add forward compatibility for compatibility mode
 2025-03-13 18:55:57 -07:00
Jefftree
5ba4a90fda Add LeaseCandidate v1beta1 2025-03-12 17:52:10 +00:00
Stanislav Láznička
e0f536bf1f use the ClusterTrustBundles beta API 2025-03-11 18:07:24 +01:00
Paco Xu
8195f82fe8 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 2025-03-11 10:51:43 +08:00
Siyuan Zhang
3d2d8db835 Add option to explicitly enable future gv or gvr in runtime-config. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-10 12:13:45 -07:00
Siyuan Zhang
819cb8fe22 Add emulation forward compatibility into api enablement and RemoveDeletedKinds. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-03-10 11:56:40 -07:00
Jefftree
05a90bf642 Revert "Add LeaseCandidate v1beta1" 
This reverts commit fad4594fd9.
 2025-03-01 14:14:25 +00:00
Jefftree
1a1b566d61 Revert "LeaseCandidate alpha -> beta," 
This reverts commit ac7a95efb0.
 2025-03-01 14:14:19 +00:00
Jefftree
ac7a95efb0 LeaseCandidate alpha -> beta, 2025-02-27 17:50:36 +00:00
Jefftree
fad4594fd9 Add LeaseCandidate v1beta1 2025-02-27 15:41:26 +00:00
Kubernetes Prow Robot
1e38c86893 Merge pull request #129996 from yongruilin/fix-flag-apiserver 
fix: apiserver flagz to response actual parsed flags
 2025-02-16 13:56:23 -08:00
Mark Rossetti
5e6611af55 fixing various unit tests on Windows that create abstract sockets 
by now having them create file-based sockets on windows/darwin

Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2025-02-13 15:41:33 -08:00
yongruilin
b1d72a5b7c test: Add emulated-version flag verification in flagz test 2025-02-07 22:18:36 -08:00
Siyuan Zhang
8fc3a33454 Refactor compatibility version code 
Replace DefaultComponentGlobalsRegistry with new instance of componentGlobalsRegistry in test api server.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move kube effective version validation out of component base.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move DefaultComponentGlobalsRegistry out of component base.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

move ComponentGlobalsRegistry out of featuregate pkg.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

remove usage of DefaultComponentGlobalsRegistry in test files.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

change non-test DefaultKubeEffectiveVersion to use DefaultBuildEffectiveVersion.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Restore useDefaultBuildBinaryVersion in effective version.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

rename DefaultKubeEffectiveVersion to DefaultKubeEffectiveVersionForTest.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

pass options.ComponentGlobalsRegistry into config for controller manager and scheduler.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Pass apiserver effective version to DefaultResourceEncodingConfig.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

change statusz registry to take effective version from the components.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Address review comments

Signed-off-by: Siyuan Zhang <sizhang@google.com>

update vendor

Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-02-05 16:10:53 -08:00
Samuel Davidson
7936d64e03 Replace IsExternalSigner boolean with ExtendedSigningDuration throughout apiserver to ensure consistent token signing length between local and external token signing. 2025-01-29 17:49:22 +00:00
Antoni Zawodny
4a2b7ee569 Configure watch cache history window based on request timeout 2024-12-17 15:06:00 +01:00
Jordan Liggitt
1fd76884b9 Isolate mock signer for externaljwt tests 2024-12-02 18:44:40 -05:00