Commit Graph

84275 Commits

Author SHA1 Message Date
Monis Khan
9a547bca8e Hash keys used in cached token authenticator
It is possible to configure the token cache to cache failures.  We
allow 1 MB of headers per request, meaning a malicious actor could
cause the cache to use a large amount of memory by filling it with
large invalid tokens.  This change hashes the token before using it
as a key.  Measures have been taken to prevent precomputation
attacks.  SHA 256 is used as the hash to prevent collisions.

Signed-off-by: Monis Khan <mkhan@redhat.com>
2019-10-14 18:34:34 -04:00
Kubernetes Prow Robot
34db57b007 Merge pull request #83858 from mrbobbytables/update-apiserver-owners
Prune inactive reviewers from staging/src/k8s.io/apiserver/* OWNERS files.
2019-10-14 11:00:11 -07:00
Shintaro Murakami
a86634bc17 Support dynamically set log level for kube-scheduler 2019-10-15 01:32:41 +09:00
Kubernetes Prow Robot
29a2b20194 Merge pull request #83860 from mrbobbytables/update-credential-provider-owners
Prune inactive owners from pkg/credentialprovider/* OWNERS files.
2019-10-14 09:32:36 -07:00
Aleksandra Gacek
e70d0e25ea bump metrics server version o v0.3.6 2019-10-14 16:43:26 +02:00
Kubernetes Prow Robot
f7992c7a21 Merge pull request #83678 from RainbowMango/pr_remove_prometheus_reference_from_storage
Remove prometheus reference from storage
2019-10-14 07:18:36 -07:00
Mikalai Radchuk
8cadd185d6 Adds --prefix flag to the kubectl log command 2019-10-14 15:13:12 +01:00
RainbowMango
6764bf3948 Deal with auto-generated files.
- Update bazel by hack/update-bazel.sh
- Update vendor by hack/update-vendor.sh
2019-10-14 20:10:59 +08:00
Kubernetes Prow Robot
81a8b9804a Merge pull request #83757 from chendotjs/device-plugin-fix
fix inconsistent comment in device plugin api
2019-10-14 05:06:37 -07:00
RainbowMango
78d0f1827a Remove direct reference to prometheus from apiserver/pkg/storage/value. 2019-10-14 20:00:02 +08:00
wojtekt
b44f8948a4 Add information from Lease to kubectl describe node 2019-10-14 13:01:37 +02:00
Krzysztof Siedlecki
b1dfa83be6 using pod pointers in node lifecycle controller 2019-10-14 12:44:43 +02:00
Kubernetes Prow Robot
3ec5fe500d Merge pull request #83855 from mrbobbytables/update-sample-controller-owners
Prune inactive owners from staging/src/k8s.io/sample-controller/OWNERS.
2019-10-14 01:52:35 -07:00
Kubernetes Prow Robot
376b0ae20e Merge pull request #83827 from qingsenLi/k8s-191012
Add CHANGELOG-1.17.md to CHANGELOG.md
2019-10-13 19:54:34 -07:00
Kubernetes Prow Robot
a0193acb4c Merge pull request #83843 from notpad/feature/migration_volumezone
[migration phase 1] VolumeZoneChecker as filter plugin
2019-10-13 18:32:35 -07:00
Joe Betz
c92bd5e7b5 Upgrade to etcd server 3.3.17 2019-10-13 17:17:15 -07:00
notpad
4ff7251026 [migration phase 1] VolumeZoneChecker as filter plugin 2019-10-14 07:45:40 +08:00
Kubernetes Prow Robot
2e55cf01d1 Merge pull request #83854 from mrbobbytables/update-test-vsphere-owners
Prune inactive owners from test/e2e/framework/providers/vsphere/OWNERS.
2019-10-13 13:20:36 -07:00
Kubernetes Prow Robot
5a427e8704 Merge pull request #83659 from wgliang/scheduler-v2/pod-fits-host-ports
[migration phase 1] PodFitsHostPorts as filter plugin
2019-10-13 11:18:35 -07:00
Ted Yu
0779296bf3 Check error return from snapshot Restore 2019-10-13 10:08:20 -07:00
Kubernetes Prow Robot
f0e1d394f1 Merge pull request #83661 from jfbai/fix-kubeadm-join
Add warning when --certificate-key is set and --control-plane is not.
2019-10-13 08:00:35 -07:00
Jianfei Bai
6dbf154d43 Add warning when --certificate-key is set and --control-plane is not. 2019-10-13 21:39:12 +08:00
Kubernetes Prow Robot
dd5cb6426d Merge pull request #83849 from draveness/feature/node-locality-as-score-plugin
feat: implement imagelocality as a score plugin
2019-10-13 06:36:35 -07:00
Bob Killen
666c5e5040 Prune inactive owners from pkg/credentialprovider/* OWNERS files. 2019-10-13 08:51:44 -04:00
Bob Killen
2e52875917 Prune inactive owners from pkg/kubelet/* network related OWNERS files. 2019-10-13 08:51:00 -04:00
Bob Killen
30053bb00f Prune inactive owners from pkg/controller/* network related OWNERS files. 2019-10-13 08:50:18 -04:00
Bob Killen
6e68d80013 Prune inactive owners from pkg/volume/* OWNERS files. 2019-10-13 08:44:11 -04:00
Bob Killen
20285dd460 Prune inactive owners from staging/src/k8s.io/apiserver/* OWNERS files. 2019-10-13 08:41:24 -04:00
Bob Killen
53137a6bf9 Prune inactive owners from staging/src/k8s.io/sample-controller/OWNERS. 2019-10-13 08:40:18 -04:00
Bob Killen
340eefe76b Prune inactive owners from test/e2e/framework/providers/vsphere/OWNERS. 2019-10-13 08:39:38 -04:00
draveness
6f6618fc5d feat: implement imagelocality as a score plugin 2019-10-13 19:58:21 +08:00
Guoliang Wang
78be6a628d [migration phase 1] PodFitsHostPorts as filter plugin 2019-10-13 19:47:26 +08:00
Kubernetes Prow Robot
a78340410e Merge pull request #83650 from wgliang/scheduler-v2/pod-fits-resources
[migration phase 1] PodFitsResources as framework plugin
2019-10-13 03:38:36 -07:00
Kubernetes Prow Robot
ceceacaa77 Merge pull request #83573 from ahmad-diaa/remove-factory-package
Move Factory Package to Scheduler
2019-10-13 00:32:36 -07:00
Guoliang Wang
4ca3d9ca48 [migration phase 1] PodFitsResources as framework plugin 2019-10-13 12:02:24 +08:00
Kubernetes Prow Robot
743031d793 Merge pull request #83817 from oomichi/rename-framework-funcs
Rename e2e framework functions used locally
2019-10-12 17:34:37 -07:00
Ahmad Diaa
4448a1cea9 move factory package to scheduler 2019-10-12 23:03:07 +02:00
Kubernetes Prow Robot
aee99ce807 Merge pull request #83558 from hprateek43/sortable_list_package
Move Sortable List into its own package
2019-10-12 11:40:38 -07:00
Harsh Singh
589656108e Replaced sortable list with native golang slice. 2019-10-12 21:57:28 +05:30
Kubernetes Prow Robot
457fa6b40d Merge pull request #82413 from zhlhahaha/kube-proxy-error
local-up-cluster kube-proxy terminated error
2019-10-12 07:48:37 -07:00
qingsenLi
20b2df09d9 Add CHANGELOG-1.17.md to CHANGELOG.md 2019-10-12 22:23:15 +08:00
Kubernetes Prow Robot
1fcd46c250 Merge pull request #83567 from jsafrane/fix-aws-stale-describe
Fix attachment of just detached AWS volumes
2019-10-12 05:28:37 -07:00
Kubernetes Prow Robot
becc1b945b Merge pull request #83660 from wgliang/scheduler-v2/pod-match-node-selector
[migration phase 1] PodMatchNodeSelector/NodAffinity as filter plugin
2019-10-12 03:14:37 -07:00
SataQiu
4b61cf22d4 clean up for component-base/metrics 2019-10-12 15:58:13 +08:00
Guoliang Wang
0a1808a570 [migration phase 1] PodMatchNodeSelector/NodAffinity as filter plugin 2019-10-12 14:49:55 +08:00
Kubernetes Prow Robot
fbcfabe8ae Merge pull request #83808 from oomichi/rename-volume-fixtures
Rename Generate[Read|Write]FileCmd()s on e2e framework
2019-10-11 22:40:38 -07:00
chenyaqi01
f8d3c45d1a fix inconsistent comment in device plugin api 2019-10-12 12:36:28 +08:00
Kubernetes Prow Robot
5e2650883a Merge pull request #83801 from jpbetz/etcd-3_3_17_client
Upgrade to etcd client 3.3.17
2019-10-11 21:17:03 -07:00
Kubernetes Prow Robot
a7a6ca80d8 Merge pull request #83731 from notpad/feature/migration_nodiskconflict
[migration phase 1] NoDiskConflict as filter plugin
2019-10-11 21:16:52 -07:00
Kubernetes Prow Robot
08ab271105 Merge pull request #83389 from ahmad-diaa/move-PodPreemptor-to-sched
Move PodPreemptor to Scheduler
2019-10-11 21:16:39 -07:00