Commit Graph

1755 Commits

Author SHA1 Message Date
Antoine Pelisse
952522c15a Refactor FieldManager code into single class 2018-12-14 18:33:35 -08:00
Kevin Wiesmüller
1b5c60bb3c glue smd and k8s together
based on glue code from @apelisse

update godeps

fix glue code

remove TypeParser and gvkParser from handlers

add managed fields conversion in apply.go

refactor ManagedFields access into helpers

fix variable names

cleanup and remove unrequired code

remove outdated comment

add force flag to apply

fix wrong variable access

revert changes to patchMechanism and add YAMLToTyped conversion

remove unused code

fix pr review

use new VersionPatcher in patch.go

remove outdated comment

respond to nits

add YAMLToTyped test

check for nil models when creating TypeConverter

skip on missing models

remove misplaced error

fix bazel

refactor

add feature flag

experimental fixes for failing tests

More fixes

Signed-off-by: Kevin Wiesmüller <kwiesmueller@seibert-media.net>

fix bazel
2018-12-12 20:31:36 +01:00
Antoine Pelisse
0cc653be11 Comment broken RBAC test 2018-12-03 15:05:42 -08:00
Antoine Pelisse
7812b3eb6f Merge feature-serverside-apply into master 2018-12-03 11:25:07 -08:00
Antoine Pelisse
1762c69990 Update DynamicClient Patch to use PatchOptions 2018-11-30 09:41:40 -08:00
Antoine Pelisse
bd8dcbd978 Create PatchOptions with Force option
Create a new PatchOptions that embeds the UpdateOptions, and adds a
patch specific option Force. The force option only makes sense for the
apply content-type and thus will reject any non-apply request that
includes it.
2018-11-30 09:41:40 -08:00
k8s-ci-robot
8b6d20ab60 Merge pull request #71339 from cofyc/fix71301
Add prebound pvs test cases in integration stress tests
2018-11-30 00:04:08 -08:00
k8s-ci-robot
79e5cb2cb7 Merge pull request #71302 from liggitt/verify-unit-test-feature-gates
Split mutable and read-only access to feature gates, limit tests to readonly access
2018-11-29 21:45:12 -08:00
Wei Huang
ad6e3617d3 update logic of adding default DS pod tolerations
- update DS pod default tolerations: add PIDPressure, remove OutOfDisk
- remove useless tolerations testcases
2018-11-29 01:18:32 -08:00
Yecheng Fu
37b20f0116 refactor volume binding stress tests to test scheduling one pod repeatedly
this helps to detect races between Find/Assume and Bind volumes
2018-11-22 18:02:57 +08:00
Jordan Liggitt
4dca07ef7e Fixup incorrect use of DefaultFeatureGate.Set in tests 2018-11-21 11:51:33 -05:00
Sergei Orlov
21c1bb8830 kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-19 16:34:09 +01:00
k8s-ci-robot
46ebebcc4f Merge pull request #65763 from x13n/audit-logging
Add option to k8s apiserver to reject incoming requests upon audit failure
2018-11-17 04:39:56 -08:00
k8s-ci-robot
f38cc95505 Merge pull request #62692 from mikedanese/trev2
authn: extend authenticator.Token to support audience validation
2018-11-16 20:27:25 -08:00
k8s-ci-robot
39c8219999 Merge pull request #71158 from liggitt/revert-openapi-publish
Revert openapi publish
2018-11-16 18:22:43 -08:00
k8s-ci-robot
1e22f080ec Merge pull request #67383 from stlaz/enc_config_promotion
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
2018-11-16 16:31:30 -08:00
Mike Danese
effad15ecc patch webhook authenticator to support token review with arbitrary audiences 2018-11-16 19:30:42 -05:00
Jordan Liggitt
8799eb4e2e Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec"
This reverts commit 54ee58b2d6, reversing
changes made to 9e2820e4c9.
2018-11-16 16:36:24 -05:00
David Eads
9b31985b08 fix client-side specification of timeout now that it is honored 2018-11-16 11:43:37 -05:00
k8s-ci-robot
54ee58b2d6 Merge pull request #67205 from roycaihw/crd-openapi-spec
Serve OpenAPI spec for registered CRDs
2018-11-16 05:12:41 -08:00
k8s-ci-robot
1a54fd4319 Merge pull request #71021 from liggitt/node-self-deletion
Remove self-deletion permissions from kubelets
2018-11-16 01:53:31 -08:00
Daniel Kłobuszewski
7a10f4eda7 Add option to k8s apiserver to reject incoming requests upon audit failure 2018-11-16 10:32:49 +01:00
Haowei Cai
4625bf7dad add basic e2e test and integration for CRD openapi 2018-11-15 16:39:49 -08:00
saad-ali
9d4810f25a Bump grpc from 1.7.5 to 1.13.0 2018-11-15 16:39:42 -08:00
Antoine Pelisse
a24ce24d6d Merge master into feature-serverside-apply 2018-11-15 13:52:33 -08:00
k8s-ci-robot
b1a52a38e9 Merge pull request #67257 from pbarker/audit
dynamic audit configuration
2018-11-15 02:42:59 -08:00
k8s-ci-robot
726c07eb26 Merge pull request #69929 from jsafrane/csi-ga
Promote CSIPersistentVolume feature to GA
2018-11-14 20:34:58 -08:00
Patrick Barker
eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
k8s-ci-robot
9c304cf0cb Merge pull request #70157 from mikedanese/trev1
retrofit svcacct token authenticator to support audience validation
2018-11-14 13:16:44 -08:00
Jan Safranek
e95b188656 Generated files 2018-11-14 14:01:16 +01:00
k8s-ci-robot
3e6d414b55 Merge pull request #70967 from mikedanese/fixtropts
Fix broken defaulting and validation in TokenRequest enablement
2018-11-13 22:03:42 -08:00
Jordan Liggitt
8d7cc39031 Remove self-deletion permissions from kubelets 2018-11-14 00:42:06 -05:00
Mike Danese
67bbf753cb retrofit svcacct token authenticator to support audience validation 2018-11-13 20:38:41 -08:00
Mike Danese
06935e1c90 split TokenRequest initialization out of run and into complete and validate 2018-11-13 17:27:13 -08:00
Bobby (Babak) Salamat
1b8e1d9ed8 Disable equivalence cache by default in the scheduler integration tests 2018-11-13 11:23:19 -08:00
Stanislav Laznicka
628d1fef37 autogen files 2018-11-13 18:06:12 +01:00
Slava Semushin
c21cb548e6 Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
Davanum Srinivas
954996e231 Move from glog to klog
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
k8s-ci-robot
e133ab274d Merge pull request #70515 from davidz627/feature/csiNodeInfo
Add explicit "Installed" field to CSINodeInfo and change update semantics
2018-11-09 06:42:09 -08:00
David Zhu
4621887037 Updated test files with new fields 2018-11-08 19:45:01 -08:00
k8s-ci-robot
be800e623a Merge pull request #69663 from sttts/sttts-scheduler-secure-serving
scheduler: enable secure port and authn/z
2018-11-08 17:36:14 -08:00
Dr. Stefan Schimanski
1588af4031 kube-scheduler: add secure serving and authn/z integration tests 2018-11-08 16:43:59 +01:00
Dr. Stefan Schimanski
98d8e87120 integration: rename test/integration/{controllermanager -> serving} 2018-11-08 16:43:59 +01:00
Dr. Stefan Schimanski
d91feb6d18 kube-scheduler: move stopCh creation out of scheduler factory code
Enforces clean ownership of the channel.
2018-11-08 16:43:59 +01:00
Davanum Srinivas
43f523d405 Switch to sigs.k8s.io/yaml from ghodss/yaml
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
2018-11-07 13:17:32 -05:00
k8s-ci-robot
7fe59165b6 Merge pull request #70193 from saad-ali/csiCRDAddon
Register CSI CRDs as addon
2018-11-06 23:55:56 -08:00
Antoine Pelisse
e2c1e1bafc Merge 'master' into feature-serverside-apply 2018-11-06 14:37:54 -08:00
saad-ali
a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
k8s-ci-robot
c8604653f0 Merge pull request #70449 from mikedanese/simplcache
remove webhook cache implementation and replace with token cache
2018-11-05 16:32:34 -08:00
Mike Danese
0ec4d6d396 remove webhook cache implementation and replace with the token cache
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
2018-11-05 13:08:45 -08:00