121198 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ben Luddy	066421f108	Add CBOR Serializer implementation.	2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot	0265f5a8de	Merge pull request #123314 from soltysh/run_service_pdb ... Always test PDB's during service upgrade test	2024-02-15 07:07:15 -08:00
Michal Wozniak	ab8cdae3b1	Reset metrics in the Job integration test before testing	2024-02-15 14:50:24 +01:00
Maciej Szulik	ec7e051bc0	Always test PDB's during service upgrade test ... OpenShift has been running this tests on various platform for several years now without any problems.	2024-02-15 14:22:46 +01:00
Michal Wozniak	115dc90633	Increase accuracy of the pods_creation_total metric and improve test exec time	2024-02-15 10:59:01 +01:00
Kubernetes Prow Robot	109491f3cb	Merge pull request #123299 from liggitt/guard-accepted-names ... Guard empty status.acceptedNames	2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot	58c77d7b63	Merge pull request #122887 from jpbetz/retry-generate-name-create ... Implement KEP-4420: Retry Generate Name	2024-02-14 21:07:24 -08:00
Anish Ramasekar	0feb1d5173	Add integration test for multiple audience in structured authn ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot	d76d7a1e7a	Merge pull request #123288 from AkihiroSuda/agnhost ... e2e_node: replace `registry.k8s.io/stress:v1` with agnhost	2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot	72c3c7c924	Merge pull request #123282 from enj/enj/i/authn_config_algs ... Support all key algs with structured authn config	2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot	0b24b55e7f	Merge pull request #123269 from pohly/lint-skip-in-verify ... golangci-lint: optionally skip it during "make verify"	2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot	68bbbd0359	Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field ... Remove unused lookupIP field in NodeIPAM Controller struct	2024-02-14 17:00:13 -08:00
Kubernetes Prow Robot	ba450636a4	Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy ... Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration	2024-02-14 17:00:04 -08:00
Alexander Zielenski	bd27c99262	move OWNERS from validating to all new parent policy folder ... meant to do this in refactor PR	2024-02-14 16:32:08 -08:00
Kubernetes Prow Robot	e305e773bb	Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0 ... Bump github.com/fxamacker/cbor/v2 to v2.6.0.	2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot	8e11104f0b	Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta ... KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta	2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot	5b2c919583	Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements ... kubelet: enable configurable rotation duration and parallel rotate	2024-02-14 15:56:38 -08:00
Jordan Liggitt	5dc92ada06	Implement authz config file reloading	2024-02-14 18:09:15 -05:00
Jordan Liggitt	3a98e60a71	Move authz construction to reloader	2024-02-14 18:03:21 -05:00
Kubernetes Prow Robot	145ccf1f13	Merge pull request #123260 from pohly/e2e-tag-docs ... e2e: tag documentation + sorting	2024-02-14 14:52:33 -08:00
Kubernetes Prow Robot	684a9975fe	Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial ... Refactor AdmissionPolicy for code sharing with mutating	2024-02-14 14:52:26 -08:00
Jordan Liggitt	2b00035b5f	Split construction of authorizer / ruleResolver	2024-02-14 17:06:18 -05:00
Jordan Liggitt	1fddc948ed	Split node/rbac/abac construction	2024-02-14 17:03:10 -05:00
Jordan Liggitt	49124293c3	Store constructed node/rbac/abac authorizers	2024-02-14 17:03:07 -05:00
Antonin Bas	75a3069294	Remove unused lookupIP field in NodeIPAM Controller struct ... I am not sure why this was originally required, but it doesn't seem to have been used for years. Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>	2024-02-14 13:28:35 -08:00
Jordan Liggitt	41435d045d	Guard empty status.acceptedNames	2024-02-14 16:26:56 -05:00
Anish Ramasekar	18c563546a	support multiple audiences with jwt authenticator ... Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>	2024-02-14 10:47:07 -08:00
Kubernetes Release Robot	3cc3b002ba	CHANGELOG: Update directory for v1.29.2 release	2024-02-14 18:01:51 +00:00
Kubernetes Release Robot	b202d053fa	CHANGELOG: Update directory for v1.26.14 release	2024-02-14 16:07:48 +00:00
Kubernetes Release Robot	cf99360c1f	CHANGELOG: Update directory for v1.27.11 release	2024-02-14 15:51:51 +00:00
Kubernetes Release Robot	14045bf340	CHANGELOG: Update directory for v1.28.7 release	2024-02-14 15:49:35 +00:00
Ben Luddy	aac43dc96f	Bump github.com/fxamacker/cbor/v2 to v2.6.0.	2024-02-14 10:09:15 -05:00
Jordan Liggitt	5f4cb8b09a	Move kube-apiserver authz validation functions	2024-02-14 10:00:11 -05:00
Kubernetes Prow Robot	eeefc299e5	Merge pull request #123290 from AxeZhan/122435 ... Revert "Scheduler first fit"	2024-02-14 06:51:14 -08:00
Monis Khan	b5e0068325	Support all key algs with structured authn config ... Signed-off-by: Monis Khan <mok@microsoft.com>	2024-02-14 09:40:25 -05:00
AxeZhan	630ff96f9d	Revert "Scheduler first fit"	2024-02-14 20:43:59 +08:00
Kubernetes Prow Robot	ed84e7f6d3	Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race ... DRA: fix data race in resourceclaim.Lookup	2024-02-14 03:24:57 -08:00
Akihiro Suda	e8b08cd056	e2e_node: replace registry.k8s.io/stress:v1 with agnhost ... agnhost now contains the stress functionality (PR 123258). Fix issue 123146 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	2024-02-14 19:37:13 +09:00
Akihiro Suda	5d861b6f12	promote agnhost to v2.47 ... Since v2.45, the `stress` subcommand was added and the CI issue was fixed: - kubernetes/kubernetes PR 123258 - kubernetes/kubernetes PR 123284 - kubernetes/k8s.io PR 6422 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	2024-02-14 19:33:46 +09:00
Kubernetes Prow Robot	fe9414d86e	Merge pull request #123284 from AkihiroSuda/agnhost ... agnhost: v2.47	2024-02-14 01:07:11 -08:00
Patrick Ohly	aa772d77fb	e2e pod: dump pod in unexpected phase ... When stopping polling, the provided messages becomes the complete failure message. This means that the code which calls gomega.StopTrying must include the pod in the message instead of just summarizing the phase. This makes the failure more useful.	2024-02-14 09:01:32 +01:00
Kubernetes Prow Robot	0a162a9cd2	Merge pull request #123263 from pohly/lint-error-wrapping ... golangci-lint: add hints for error wrapping	2024-02-13 23:40:42 -08:00
Patrick Ohly	008b075b46	DRA: fix data race in resourceclaim.Lookup ... This gets uses concurrently as seen by a data race reported when running integration tests with race detection enabled. All writes would have written the same value, but it is a race nonetheless.	2024-02-14 08:14:47 +01:00
Akihiro Suda	9c726b015c	agnhost: v2.47 ... agnhost was updated to v2.46 in PR 123258, but the image was not published due to the failue of `post-kubernetes-push-e2e-agnhost-test-images` (issue 123266). Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>	2024-02-14 15:11:31 +09:00
Kubernetes Release Robot	2383fbe53a	CHANGELOG: Update directory for v1.30.0-alpha.2 release	2024-02-14 05:11:17 +00:00
Kubernetes Prow Robot	14f8f5519d	Merge pull request #121719 from ruiwen-zhao/metric-size ... Add image pull duration metric with bucketed image size	2024-02-13 16:23:50 -08:00
Monis Khan	b8a59346fe	test/oidc: extract key type to allow testing different algs ... Signed-off-by: Monis Khan <mok@microsoft.com>	2024-02-13 17:05:33 -05:00
Alexander Zielenski	b7e70f0e00	update-vendor after package rename	2024-02-13 13:06:39 -08:00
Alexander Zielenski	3094395fa7	bugfix: avoid NPE possibility by making composition environment global	2024-02-13 13:06:39 -08:00
Alexander Zielenski	18fbc48b01	refactor: implement VAP off of policy plugin fw	2024-02-13 13:06:39 -08:00