Commit Graph

5987 Commits (dd88e3f32ec9e4f90a455b711cdc448a60639f0e)

Author SHA1 Message Date
Dr. Stefan Schimanski 449163c335 apiextensions: 404 if request scope does not match crd scope 2019-08-01 13:12:07 +02:00
Dr. Stefan Schimanski c559f895dd apiextensions: add scope tests 2019-08-01 08:32:23 +02:00
Kubernetes Prow Robot 2cc5100933
Merge pull request #79182 from tallclair/automated-cherry-pick-of-#78313-upstream-release-1.14
Automated cherry pick of #78313: Avoid the default server mux
2019-07-02 14:33:12 -07:00
Jordan Liggitt a50985cbb0 Allow unit test to pass on machines without ipv6 2019-06-30 21:30:23 +05:30
Tim Allclair 0f9623d937 Avoid the default server mux 2019-06-19 12:32:05 -07:00
Kubernetes Prow Robot 9150633414
Merge pull request #78034 from liggitt/automated-cherry-pick-of-#78029-upstream-release-1.14
Automated cherry pick of #78029: Terminate watchers when watch cache is destroyed
2019-05-30 17:34:22 -07:00
Kubernetes Prow Robot 4ccdc8b71b
Merge pull request #78027 from yuchengwu/automated-cherry-pick-of-#77874-github-release-1.14
Automated cherry pick of #77874: fix CVE-2019-11244: `kubectl --http-cache=<world-accessible
2019-05-21 11:32:41 -07:00
Kubernetes Prow Robot 92e692de59
Merge pull request #77875 from caesarxuchao/automated-cherry-pick-of-#77619-upstream-release-1.14
Automated cherry pick of #77619: In GuaranteedUpdate, retry on any error if we are working
2019-05-21 11:32:25 -07:00
Jordan Liggitt 63bad1d80c honor overridden tokenfile, add InClusterConfig override tests 2019-05-17 08:28:13 -07:00
Jordan Liggitt 21b9a31c33 Terminate watchers when watch cache is destroyed 2019-05-17 10:36:06 -04:00
Yucheng Wu 6e4df6a7f2 fix CVE-2019-11244: `kubectl --http-cache=<world-accessible dir>` creates world-writeable cached schema files 2019-05-17 21:09:08 +08:00
Mike Danese 6919c6e1ab BoundServiceAccountTokenVolume: fix InClusterConfig 2019-05-14 20:52:53 -07:00
Chao Xu 0a7e849adf In GuaranteedUpdate, retry on any error if we are working with stale data 2019-05-14 10:37:55 -07:00
Kubernetes Prow Robot 59a9c64405
Merge pull request #76199 from mvladev/automated-cherry-pick-of-#75072-upstream-release-1.14
Automated cherry pick of #75072: Check for required name parameter in dynamic client
2019-05-10 11:09:01 -07:00
Ryan McNamara c9731088e4 Error when etcd3 watch finds delete event with nil prevKV 2019-05-03 10:14:24 -04:00
Kubernetes Prow Robot c72a5b2c10
Merge pull request #75719 from DataDog/automated-cherry-pick-of-#75295-upstream-release-1.14
Automated cherry pick of #75295 upstream release 1.14
2019-04-30 00:05:36 -07:00
Levi Blackstone 541b9807cd
Check for required name parameter in dynamic client
The Create, Delete, Get, Patch, Update and UpdateStatus
methods in the dynamic client all expect the name
parameter to be non-empty, but did not validate this
requirement, which could lead to a panic. Add explicit
checks to these methods.
2019-04-05 17:00:54 +03:00
Kubernetes Prow Robot 2cd1cfe0b3
Merge pull request #76046 from liggitt/automated-cherry-pick-of-#75887-upstream-release-1.14
Automated cherry pick of #75887: Explicitly flush headers when proxying
2019-04-04 10:33:53 -07:00
Jordan Liggitt 5c7e2fdf7d Explicitly flush headers when proxying 2019-04-02 14:54:17 -04:00
Haowei Cai c3f272f024 kube-aggregator: bump openapi aggregation log level 2019-04-01 17:32:40 -07:00
Laurent Bernaille a20735141c
Add flag to enable strict ARP 2019-03-26 10:13:17 +01:00
Haowei Cai df1ee5e778 generated 2019-03-13 15:16:50 -07:00
Kubernetes Prow Robot e7d09ceb50
Merge pull request #75289 from dims/update-http2-dep-go-1.12
Update golang.org/x/net/... dependencies to release-branch.go1.12
2019-03-13 04:33:46 -07:00
Kubernetes Prow Robot 93402fc8e8
Merge pull request #75277 from jennybuckley/fix-ints
Fix server side apply int/float bug
2019-03-12 17:36:40 -07:00
Kubernetes Prow Robot cc8afb25fc
Merge pull request #74040 from ajatprabha/issue_73648
add ResourceVersion to DeleteOptions.Preconditions
2019-03-12 15:44:38 -07:00
Kubernetes Prow Robot 0977ab69ad
Merge pull request #75157 from aaron-prindle/version-check-apply
Added version check between patch and live object in server side apply
2019-03-12 13:19:06 -07:00
Davanum Srinivas 2aa1348e6c
Update to go 1.12 version of golang.org/x/net
Change-Id: I3f2fa5d7b6811c9eca58992318d19e44ec9131fd
2019-03-12 11:30:24 -04:00
Prasad Ghangal 317ecf58cc
Update golang.org/x/net/... dependencies to release-branch.go1.11
- latest grpc-ecosystem/go-grpc-middleware

Change-Id: Ida7d01e4606f6e0313e1355db6e85be0c0ef1dd1
2019-03-12 09:48:52 -04:00
ajatprabha 4bd0c4ad56
update generated-protobuf 2019-03-12 17:00:42 +05:30
ajatprabha c2755f6685
update generated-swagger-docs 2019-03-12 17:00:42 +05:30
ajatprabha fe3b9f486f
update testDeleteWithResourceVersion 2019-03-12 17:00:41 +05:30
ajatprabha 4ddc198c39
pin ResourceVersion precondition only when specified 2019-03-12 17:00:41 +05:30
ajatprabha 3135cea2cc
add ResourceVersion check to Preconditions#Check 2019-03-12 17:00:40 +05:30
ajatprabha 64ecf9de7f
update deepcopy function 2019-03-12 17:00:40 +05:30
ajatprabha 42f0a36f44
check for ResourceVersion conflict in separate if block 2019-03-12 17:00:39 +05:30
ajatprabha 8f48d76271
add ResourceVersion to DeleteOptions.Preconditions 2019-03-12 17:00:39 +05:30
jennybuckley 10259c959e Fix int/float apply bug 2019-03-11 23:07:21 -07:00
Aaron Prindle d5bd17cda0
Added version check between patch and live object in server side apply
What is the problem being solved?
https://github.com/kubernetes/kubernetes/pull/75135
Currently version compatibility is not being checked in server side apply between the patch object and the live object.  This is causing a merge that will error to be run and the apiserver returns a 500 error.  The request should fail if the apiVersion provided in the object is different from the apiVersion in the url, but it should fail before trying to merge, and be a 4xx error. Probably a bad request error.

Why is this the best approach?
The approach of serializing the patch byte array and then checking for version equality with the already serialized live object is the simplest and most straightforward solution.
2019-03-11 22:08:30 -07:00
Chao Xu 887cb93d8d generated BUILD
generated proto
2019-03-11 10:26:56 -07:00
Chao Xu 0ace8b3da4 Let the sample apiserver show feature gates flag 2019-03-11 10:26:56 -07:00
Chao Xu 3b618af0d4 Expose storage version hash 2019-03-11 10:26:56 -07:00
Kubernetes Prow Robot 44e369b000
Merge pull request #75167 from tnozicka/fix-retry-watcher-error
Handle unstructured status in RetryWatcher
2019-03-11 05:17:27 -07:00
jennybuckley f9e57744d3 Fix version converter 2019-03-08 22:35:33 -08:00
Antoine Pelisse 92d8b19c0f Generated files 2019-03-08 16:55:53 -08:00
Antoine Pelisse eb904d8fa8 Add "fieldManager" to flag to PATCH/CREATE/UPDATE
And add a corresponding flag in kubectl (for apply), even though the
value is defaulted in kubectl with "kubectl".

The flag is required for Apply patch-type, and optional for other PATCH,
CREATE and UPDATE (in which case we fallback on the user-agent).
2019-03-08 16:03:03 -08:00
Kubernetes Prow Robot 8bde75e63f
Merge pull request #75201 from joelsmith/secdoc
Update embargo doc link in SECURITY_OWNERS and change PST to PSC
2019-03-08 15:41:36 -08:00
Kubernetes Prow Robot 81e8401127
Merge pull request #74997 from jennybuckley/apply-metrics
Track dry-run and apply in metrics
2019-03-08 15:40:58 -08:00
Kubernetes Prow Robot 8634ebed22
Merge pull request #75075 from kwiesmueller/fix-fieldmanager-sorting
fix handling of nil times in managedFields sorting
2019-03-08 14:19:21 -08:00
Kubernetes Prow Robot 349ce4c312
Merge pull request #74376 from mbohlool/gimli
Add latency metric for CR Webhook Conversion
2019-03-08 14:18:54 -08:00
Joel Smith 7fd6ea47e8 Also update SECURITY_CONTACTS from staging 2019-03-08 11:23:24 -07:00