Kubernetes Prow Robot
91ee30074b
Merge pull request #123174 from danwinship/cidr-validation-cleanup
...
Make CIDR validation consistent
2024-02-15 18:37:20 -08:00
Kubernetes Prow Robot
66d038d84d
Merge pull request #121946 from liggitt/reload-authz
...
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Kubernetes Prow Robot
1f40d5c095
Merge pull request #123285 from pohly/e2e-pod-phase
...
e2e pod: dump pod in unexpected phase
2024-02-15 16:34:54 -08:00
Alexander Zielenski
def05a20e2
flake: avoid flake by ensuring params appear in the initial list
...
sometimes they would not appear in the initial list if they were added while the informer was starting up due to ObjectTracker race
2024-02-15 13:58:29 -08:00
Kubernetes Prow Robot
ad6477e342
Merge pull request #123322 from bjhaid/bjhaid-topology-verbosity
...
[kube-proxy] add log verbosity to endpoint topology hint loop.
2024-02-15 12:50:54 -08:00
Kubernetes Prow Robot
50b4cfc414
Merge pull request #123321 from mimowo/job-reset-metrics
...
Reset metrics in the Job integration test before testing
2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot
8a57e3cc2b
Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
...
move OWNERS from validating to all new parent policy folder
2024-02-15 10:57:49 -08:00
Kubernetes Prow Robot
542fe51046
Merge pull request #122881 from benluddy/cbor-serializer-only
...
KEP-4222: Add CBOR Serializer implementation.
2024-02-15 10:57:39 -08:00
Ayodele Abejide
71479b5577
[kube-proxy] add log verbosity to endpoint topology hint loop.
...
We enabled topology hint on one of our services and this log line was
emitted ~92 million times in one day from one cluster tripping our log
quota for that cluster, as it is the log line cannot be disabled via the
`-v` flag because it does not specify verbosity.
I think more log locations need to set verbosity at which they are
logged, but this one is currently hurting the most.
2024-02-15 18:26:19 +00:00
Kubernetes Prow Robot
47f92ce231
Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests
...
Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests
2024-02-15 09:54:53 -08:00
Michal Wozniak
f84d643c20
Use the Defer for pod replacement policy
2024-02-15 17:37:31 +01:00
Kubernetes Prow Robot
50bf3a2060
Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
...
Add integration test for multiple audience in structured authn
2024-02-15 08:16:27 -08:00
Kubernetes Prow Robot
b65508b477
Merge pull request #123158 from AkihiroSuda/nodeconditiontype-godoc
...
core/v1: remove comment about non-existing constants
2024-02-15 08:16:20 -08:00
Ben Luddy
066421f108
Add CBOR Serializer implementation.
2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot
0265f5a8de
Merge pull request #123314 from soltysh/run_service_pdb
...
Always test PDB's during service upgrade test
2024-02-15 07:07:15 -08:00
Michal Wozniak
ab8cdae3b1
Reset metrics in the Job integration test before testing
2024-02-15 14:50:24 +01:00
Maciej Szulik
ec7e051bc0
Always test PDB's during service upgrade test
...
OpenShift has been running this tests on various platform for several
years now without any problems.
2024-02-15 14:22:46 +01:00
Michal Wozniak
115dc90633
Increase accuracy of the pods_creation_total metric and improve test exec time
2024-02-15 10:59:01 +01:00
Kubernetes Prow Robot
109491f3cb
Merge pull request #123299 from liggitt/guard-accepted-names
...
Guard empty status.acceptedNames
2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot
58c77d7b63
Merge pull request #122887 from jpbetz/retry-generate-name-create
...
Implement KEP-4420: Retry Generate Name
2024-02-14 21:07:24 -08:00
Anish Ramasekar
0feb1d5173
Add integration test for multiple audience in structured authn
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
d76d7a1e7a
Merge pull request #123288 from AkihiroSuda/agnhost
...
e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot
72c3c7c924
Merge pull request #123282 from enj/enj/i/authn_config_algs
...
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
0b24b55e7f
Merge pull request #123269 from pohly/lint-skip-in-verify
...
golangci-lint: optionally skip it during "make verify"
2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot
68bbbd0359
Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field
...
Remove unused lookupIP field in NodeIPAM Controller struct
2024-02-14 17:00:13 -08:00
Kubernetes Prow Robot
ba450636a4
Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
...
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Alexander Zielenski
bd27c99262
move OWNERS from validating to all new parent policy folder
...
meant to do this in refactor PR
2024-02-14 16:32:08 -08:00
Kubernetes Prow Robot
e305e773bb
Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0
...
Bump github.com/fxamacker/cbor/v2 to v2.6.0.
2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot
8e11104f0b
Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta
...
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
5b2c919583
Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements
...
kubelet: enable configurable rotation duration and parallel rotate
2024-02-14 15:56:38 -08:00
Jordan Liggitt
5dc92ada06
Implement authz config file reloading
2024-02-14 18:09:15 -05:00
Jordan Liggitt
3a98e60a71
Move authz construction to reloader
2024-02-14 18:03:21 -05:00
Kubernetes Prow Robot
145ccf1f13
Merge pull request #123260 from pohly/e2e-tag-docs
...
e2e: tag documentation + sorting
2024-02-14 14:52:33 -08:00
Kubernetes Prow Robot
684a9975fe
Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial
...
Refactor AdmissionPolicy for code sharing with mutating
2024-02-14 14:52:26 -08:00
Jordan Liggitt
2b00035b5f
Split construction of authorizer / ruleResolver
2024-02-14 17:06:18 -05:00
Jordan Liggitt
1fddc948ed
Split node/rbac/abac construction
2024-02-14 17:03:10 -05:00
Jordan Liggitt
49124293c3
Store constructed node/rbac/abac authorizers
2024-02-14 17:03:07 -05:00
Antonin Bas
75a3069294
Remove unused lookupIP field in NodeIPAM Controller struct
...
I am not sure why this was originally required, but it doesn't seem to
have been used for years.
Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>
2024-02-14 13:28:35 -08:00
Jordan Liggitt
41435d045d
Guard empty status.acceptedNames
2024-02-14 16:26:56 -05:00
Anish Ramasekar
18c563546a
support multiple audiences with jwt authenticator
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Kubernetes Release Robot
3cc3b002ba
CHANGELOG: Update directory for v1.29.2 release
2024-02-14 18:01:51 +00:00
Kubernetes Release Robot
b202d053fa
CHANGELOG: Update directory for v1.26.14 release
2024-02-14 16:07:48 +00:00
Kubernetes Release Robot
cf99360c1f
CHANGELOG: Update directory for v1.27.11 release
2024-02-14 15:51:51 +00:00
Kubernetes Release Robot
14045bf340
CHANGELOG: Update directory for v1.28.7 release
2024-02-14 15:49:35 +00:00
Ben Luddy
aac43dc96f
Bump github.com/fxamacker/cbor/v2 to v2.6.0.
2024-02-14 10:09:15 -05:00
Jordan Liggitt
5f4cb8b09a
Move kube-apiserver authz validation functions
2024-02-14 10:00:11 -05:00
Kubernetes Prow Robot
eeefc299e5
Merge pull request #123290 from AxeZhan/122435
...
Revert "Scheduler first fit"
2024-02-14 06:51:14 -08:00
Monis Khan
b5e0068325
Support all key algs with structured authn config
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
AxeZhan
630ff96f9d
Revert "Scheduler first fit"
2024-02-14 20:43:59 +08:00
Kubernetes Prow Robot
ed84e7f6d3
Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race
...
DRA: fix data race in resourceclaim.Lookup
2024-02-14 03:24:57 -08:00
