Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
bumping knative.dev/eventing ff37e4e...902f9d3: > 902f9d3 Migrate to kube_codegen.sh (# 8183) > 34f9cd3 Disable controller default health probes in the IMC dispatcher (# 8125) > ecae895 AuthZ: Provide function to update AppliedEventPoliciesStatus based on a given list of applying policies (# 8173) > 833f4aa Split AuthZ e2e tests (# 8181) > 36e0721 Broker class based defaults (# 7631) > e4b6d68 [main] Upgrade to latest dependencies (# 8172) > 24a43e8 chore: refactor cross namespace test to make it reusable (# 8157) > da10b71 Support dispatcher format for triggers (# 8151) > 477588c JobSink: Reject unauthorized requests (# 8169) > 5fc4c0f Fix JobSink to have ObservedGeneration in status (# 8168) > ed71838 Fix: Use correct readyness check in AuthZ conformance tests (# 8167) > bf945f9 Support authorization in Channel ingress (# 8162) > b57ac3a Fix: propagate EventPolicy filter to underlying Channels EventPolicy (# 8163) > 2b92299 Add filters to event policy (# 8122) > 90a88fc [main] Upgrade to latest dependencies (# 8159) > 1123cfa feat: reduced unnecessary creation of filters (# 8118) > 71d5d5f Add AuthZ conformance e2e test suite (# 8150) > e41da98 [main] Upgrade to latest dependencies (# 8153) > 7a90257 [main] Upgrade to latest dependencies (# 8126) > f0ccedc mt-broker-filter: Allow only requests from Triggers Subscriptions OIDC ID (# 8147) > 941a9e1 fix: tracker can track resources in different ns (# 8110) > a4e5a0e added event format to dispatcher (# 8096) > c521efb Add EventPolicy reconciliation for Parallel (# 8112) > d69b8b4 Improve scheduler memory usage (# 8144) > 5c81d76 Add EventPolicy reconciliation for Sequence (# 8106) > ecb6c01 Set UID in Brokers backing channels EventPolicies OwnerReference (# 8143) > b58b30d Add e2e test for Broker authorization (# 8132) > 20a64a1 [main] Update community files (# 8134) > 7237233 Default EventPolicy `.spec.from[].namespace` to EventPolicies namespace (# 8133) > 32f8491 update trust-manager to version 0.12.0 (# 8130) bumping k8s.io/apiserver 4c39f36...07c8580: > 07c8580 Update dependencies to v0.30.3 tag > 7a3db50 Merge pull request # 124676 from cici37/automated-cherry-pick-of-# 124675-upstream-release-1.30 > a30c80f Merge pull request # 124802 from seantywork/automated-cherry-pick-of-# 124662-upstream-release-1.30 > e025ab4 Adding the feature gates to fix cost for VAP and webhook matchConditions. > 1ce5268 Updated & added visibility to apiserver x509 test certificates expiring this year > 15c77ce Merge remote-tracking branch 'origin/master' into release-1.30 > 61d3001 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric > d97582e Merge remote-tracking branch 'origin/master' into release-1.30 > 2071c4d Update x/net for CVE-2023-45288 > 341f6df Merge pull request # 123994 from serathius/undo-double-run-test-watch-semantics > e166c44 Merge pull request # 123785 from seans3/streamtunnel-unit-tests > 7a3a726 Undo double run of the TestWatchSemantics test to avoid hitting timeout > ec72042 Merge pull request # 123935 from serathius/consistent-watch-from-etcd > 5e1f756 adds portforward streamtunnel unit tests > 13a815b Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. > 7661bd2 sync: update go.mod > 05c844e Merge pull request # 123676 from serathius/rv0 > d5a8607 Merge pull request # 123926 from p0lyn0mial/upstream-deflake-test-get-list-non-recursive-with-consistent-list > 67b6245 Fix enabling consistent list from watch cache also works for resourceVersion=0 > f6a2b2b Merge pull request # 123925 from p0lyn0mial/upstream-cacher-decrease-watch-not-hanging-on-startup-failure > b8c7d78 apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache > a2c5722 apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure > 7dbc368 Merge pull request # 123891 from p0lyn0mial/upstream-cacher-decrease-running-time-of-test-wait-unti-fresh > fb5c182 Merge pull request # 123887 from p0lyn0mial/upstream-cacher-decrease-running-time-of-tests > c146713 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents > 6a24b53 Merge pull request # 123897 from p0lyn0mial/upstream-cacher-decrease-running-time-of-empty-watch-event-cache > 361687d apiserver/storage/cacher: decrease the running time of tests in the cacher package. > 342a6b8 Merge pull request # 123674 from serathius/non-recursive > 80f9ab2 apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache > 483da20 Fix non-recursive list when consistent list from cache is enabled > 07ca000 Merge pull request # 123732 from serathius/parallel-featureflags > 469611c Merge pull request # 123719 from enj/enj/f/authn_config_beta > 3a83dc1 Fix SetFeatureGateDuringTest handling of Parallel tests > a4d271c Merge pull request # 123793 from aramase/aramase/f/authn_config_reload_metrics > aa18faf Mark StructuredAuthenticationConfiguration feature gate as beta > ee48114 Add metrics for authentication config reload > 81df735 Merge pull request # 123525 from enj/enj/f/authn_config_reload > 2c1ad21 Add dynamic reload support for authentication configuration > 86ddcb4 Merge pull request # 123737 from enj/enj/i/cel_email_verified > 5b4b237 Require email_verified to be used when email is set as username via CEL > 8763b7f Merge pull request # 123431 from aramase/aramase/f/kep_3331_multiple_jwt_authenticator > 5855c33 Merge pull request # 123696 from aramase/aramase/f/kep_3331_v1beta1_api > bc65af8 Support multiple JWT authenticators with structured authn config > 4beab40 Merge pull request # 123435 from tallclair/apparmor-ga > f09dddf Duplicate v1alpha1 AuthenticationConfiguration to v1beta1 > 1766391 Merge pull request # 123758 from liggitt/protobump > 337f031 Stop appending AppArmor status to node ready condition > 0a86214 Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0 > 04449c9 Merge pull request # 123405 from cici37/vapGA > be9c733 Promote ValidatingAdmissionPolicy to GA. > ccdc9f3 Merge pull request # 123543 from jiahuif-forks/feature/validating-admission-policy/excluded-resources > 69478b1 Merge pull request # 123721 from enj/enj/i/authn_config_doc_nesting > 8f8266e update to inject only the list of excluded resources. > 3780963 Fix AuthenticationConfiguration docs around nested claims via CEL > a86b013 make ValidatingAdmissionPolicy ignore excluded resources. > e44513e Merge pull request # 123702 from p0lyn0mial/upstream-clean-up-after-123190 > b1e2103 add resource filter to admission initializer. > 3779567 Merge pull request # 123568 from enj/enj/i/jwt_username_required > b3f5f43 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed > 8b057c4 Merge pull request # 123561 from enj/enj/i/validate_jwt_sa_iss > 4eaefb0 jwt: fail on empty username via CEL expression > 0a68878 Merge pull request # 123641 from liggitt/authz-config-beta-gate > 9432b4d Prevent conflicts between service account and jwt issuers > 6a1a5d2 Merge pull request # 123532 from serathius/separate-rpc > 4d70dec Promote StructuredAuthorizationConfiguration feature gate to beta > 70e2d91 Merge pull request # 123413 from seans3/tunneling-spdy-websockets > 743b534 Test that separation of streams work by using progress notifies > 311716f Merge pull request # 123639 from liggitt/authz-metrics > 0376e5d adds comments to tunnelingResponseWriter > e810084 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior > 250f19d Merge pull request # 123190 from padlar/add-apiserver-wait-cache-metric > 9adb3ee Add authorization webhook duration/count/failopen metrics > 9610424 Fix headerInterceptingConn handling > 7092a3d Merge pull request # 123660 from xigang/cacher/watch > 9ffd1e2 Add apiserver_watch_cache_read_wait metric to cache refresh time > f4bc370 portforward: tunnel spdy through websockets > 047ed89 Merge pull request # 123527 from aramase/aramase/f/kep_3331_discovery_url > 2eff540 cleanup: if triggerValue has a value, fast break > d456bc0 wire up discovery url in authenticator > f2c6133 Add `DiscoveryURL` to AuthenticationConfiguration > e92429c Merge pull request # 123225 from aramase/aramase/f/kep_3331_latency_metrics > 6f43b57 Merge pull request # 123640 from liggitt/authz-beta-config > 09c9be2 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric > 4153027 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1 > bf894b0 Merge pull request # 123634 from liggitt/handler-race > cc00aa3 Merge pull request # 123611 from ritazh/authz-mcmetrics > 59cba35 Fix discovery v2 conversion registration data race > 00ac59e Merge pull request # 122975 from aramase/aramase/c/cleanup_authn_validation > b7a30e3 add authz webhook matchcondition metrics > 0d2b79b Merge pull request # 122882 from Jefftree/agg-discovery-v2-usage > 7b0c197 cleanup structured authn/authz error logic > d8d3b8c Use v2 types with agg discovery > 7c8cdeb Promote AggregatedDiscovery to GA > fc2ef69 Remove test for disabling aggregated discovery > 4fa5c0c Merge pull request # 123529 from thockin/go-workspaces > 57928aa Merge pull request # 123560 from ivelichkovich/master > 0f77d82 Fix up go.mod files after reviews > e392224 Merge pull request # 123458 from aramase/aramase/i/min_jwt_payload > fc7cf5f kep-3716 GA, remove feature gate > 27e765e Remove old gengo detritus > 3d757e5 Merge pull request # 122676 from p0lyn0mial/upstream-watch-cache-init-events-ordering > b3e4dc2 add min valid jwt payload to API docs for structured authn config > 5624a05 Remove defunct references to "vendor" > 9ccc257 Merge pull request # 122717 from jpbetz/crd-object-filters > 816c9a3 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test > 541bc37 Fix go-to-protobuf wrt gengo/v2 > 0a2e73e Merge pull request # 123562 from jpbetz/bump-cel-go-0_17_8 > 414d2e2 Add selectableFields to CRDs > 510f374 Re-vendor latest kube-openapi and gengo/v2 > 5957e27 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix > 1d606b4 Generate go.work files > 4b96323 Merge pull request # 120897 from wojtek-t/fix_order_of_init_events > 45b7f21 Ensure that initial events are sorted for WatchList > 04dda9a Merge pull request # 122830 from p0lyn0mial/upstream-watch-cache-wati-for-bk-after-rv > 3e22226 Merge pull request # 123281 from seans3/remote-command-websocket-beta > e53bac2 storage/watch_cache: rework getAllEventsSinceLocked > f663919 Merge pull request # 123538 from jiahuif-forks/fix/cel/mutation-library-map-support > b5f79f8 streamtranslator counter metric by status code > 19bd563 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc > e79edc2 Merge pull request # 123540 from enj/enj/i/jwt_iss > 8485f72 add support for map > 76172aa storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested > 1154db2 jwt: strictly support compact serialization only > f08c74c Merge pull request # 123427 from alexzielenski/apiserver/policy/matching-refactor > c8d2257 [KEP-3962]Add feature gate for MAP (# 123425) > dd139db refactor: use shared CollectParams from VAP > fe14897 Merge pull request # 123348 from hoskeri/update-go-x-crypto-19 > 9a4b2b3 refactor: use match from generic pkg in vap > 290f0e4 Merge pull request # 123392 from thockin/depreciate > 759c214 Update x/crypto to 0.19. > ed64edd add generic policy dispatcher > d23525a Merge pull request # 123342 from logicalhan/storage-metric > d38e818 Cleanup: s/depreciated/deprecated/g > 48e4f36 test: infer gvk of objects > 4bf12f9 Merge pull request # 123330 from alexzielenski/flake-workaround > f615696 bump the stability level of apiserver_storage_size_bytes to STABLE > eed515a refactor: handle paramKind directly > c3868a0 Merge pull request # 123333 from liggitt/authz-metrics > 8e917a7 flake: avoid flake by ensuring params appear in the initial list > 223ffcc add functions to policy accessors for getting match information and params > f68fe09 Merge pull request # 120902 from linxiulei/watch_stack > fe847b3 Add allowed/denied metrics for authorizers > 7eb4cd7 Merge pull request # 121946 from liggitt/reload-authz > 000601b Add handler to run watch serving in separate goroutine > 2c41261 Merge pull request # 123306 from alexzielenski/apiserver/policy/move-owners > c2310e1 Implement authz config file reloading > 53b2660 Merge pull request # 123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up > 7e9e7fe move OWNERS from validating to all new parent policy folder > 8242123 Merge pull request # 122887 from jpbetz/retry-generate-name-create > 1bc9912 Add integration test for multiple audience in structured authn > aa40040 Merge pull request # 123282 from enj/enj/i/authn_config_algs > 6f648c1 Add retry around create > 6d4e589 Merge pull request # 123165 from aramase/aramase/f/kep_3331_audience_match_policy > d887d80 Support all key algs with structured authn config > f980dbe Merge pull request # 123250 from benluddy/dep-bump-cbor-v2.6.0 > fb760be support multiple audiences with jwt authenticator > ffe03d2 Merge pull request # 122919 from alexzielenski/apiserver/policy/mutating-initial > 137045a Bump github.com/fxamacker/cbor/v2 to v2.6.0. > 26996e3 Add AudienceMatchPolicy to AuthenticationConfiguration > 503dabd Merge pull request # 123179 from aramase/aramase/f/encryption_config_reload_metric > 1672796 bugfix: avoid NPE possibility by making composition environment global > f6b16dd Add `apiserver_encryption_config_controller_automatic_reloads_total` > 9fd47ab refactor: implement VAP off of policy plugin fw > 9d6ad00 Merge pull request # 121486 from benluddy/cbor-stub > f8d65cf refactor: create generic policy plugin type similar to webhook > 76d76de Merge pull request # 123083 from jiahuif-forks/feature/validating-admission-policy/typechecking-variables > f9391f6 Update vendoring to take new CBOR library dependency. > 06be9d0 refactor: move matching logic into parent policy folder > f099bff chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (# 120642) > 6f620d4 add test case for error inside variables. > 57e06e4 refactor: move vap into parent `policy` folder > 970932b Merge pull request # 123001 from tkashem/apf-allow-zero-concurrency > ab64beb add support of variables for Type Checking. > 3769e5c refactor: move celmetrics close to its usage in vap > 5bcf390 Merge pull request # 122925 from tkashem/timeout-refactor-handle-error > 554c2d2 apiserver: allow zero value for the 'nominalConcurrencyShares' field > 1501159 refactor type checking to use CompositedCompiler. > 8340bec Merge pull request # 123098 from munnerz/4193-jti-audit-changes > e6f368f apiserver: refactor handleError in endpoints/filters > 7b91578 Merge pull request # 122557 from liangyuanpeng/anp_0.29 > c60b23f use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint > 586f61d Fix the syntax error in the comment of the checkQuotas method. (# 121428) > d24017c Update konnectivity to 0.29.0 > 9dc08c7 Merge pull request # 115282 from tkashem/panic-warning > da62838 Merge pull request # 121512 from HirazawaUi/add-decod-time-trace > eff38ef apiserver: warning should not panic when request times out > c1f8986 Merge pull request # 118511 from lowang-bh/fix_spell_error > bc8676d Add decoding time to the audit log > 2e2157f Merge pull request # 123003 from alexzielenski/apiserver/policy/crd-startup > 43f24ff fix comment of rbac decision for NoOpinion > 69adaec bugfix: dont skip reconcile for unchanged policy if last sync failed > 0dd0e74 Merge pull request # 122886 from jiahuif-forks/feature/cel/mutating-library > 9d32b8c Merge pull request # 120631 from liyuerich/ptrderef > 95a5337 convert the expectedValues to be cel.Val. > f709e95 drop deprecated pointer package > f0c4755 extra case for affirmative has(map) test. > 888034e Merge pull request # 122518 from cici37/celEnv29 > eb407cc fix convertField and its comments. > 338910d Merge pull request # 122873 from p0lyn0mial/upstream-reflector-usewatchlist-pointer > 8b49df5 Update env version, Add cost for previous func, add tests, etc. > 3a5a437 add support for equality check. > ca8d0aa client-go/reflector: make UseWatchList a pointer > 8b89a41 mutation library for CEL. > 9f9c32c Merge pull request # 122842 from pohly/klog-update > da46024 Merge pull request # 122839 from pohly/ginkgo-gomega-update > 3a9c95f dependencies: klog v2.120.1 > ff6a2dc Negative index regression test for json-patch (# 122625) > 78fd4a4 dependencies: ginkgo v2.15.0, gomega v1.31.0 > 496d7e7 Merge pull request # 122701 from carlory/fix-quota > 8ad2e28 Merge pull request # 122706 from pacoxu/klog-upgrade > aa35808 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on > 3574aab bump klog to v2.120.0 > 303f36b Merge pull request # 122689 from enj/enj/r/ec_hash_cleanup > 285e6ec Clean up encryption config reading and hashing logic > 2792cf2 Merge pull request # 122558 from linxiulei/webhook-http2 > a962862 Merge pull request # 121917 from SataQiu/clean-import-hack > fa628fd Use http/2 for localhost webhook > 547675e Merge pull request # 122468 from carlory/remove-fg-RemoveSelfLink > 7751f0a remove import hack about k8s.io/utils/clock/testing > 9ec63da Merge pull request # 122347 from aramase/aramase/c/move_kms_apis > 4e1e99b remove GA featuregate RemoveSelfLink > b25363c Merge pull request # 122560 from aramase/aramase/c/add_unique_comment > e7eedd1 move encryption config types to standard API server config location > 6bad17c [StructuredAuthnConfig] add comment for extra keys unique requirement > 85936b5 Merge pull request # 121602 from bzsuni/cleanup/goleak > 86207ad Update goleak from v1.2.1 to v1.3.0 > a6c31ce Merge pull request # 122412 from MadhavJivrajani/bump-go-tools > 4aaa1a6 .*: bump golang.org/x/tools to v0.16.1 > f53b05f Merge pull request # 122395 from pohly/ginkgo-gomega-update > 7b55e62 dependencies: gomega v1.30.0 + ginkgo v2.13.2 > 8635466 Merge pull request # 122310 from weilaaa/use_buildin_max_min_instead > 78157c7 Merge pull request # 122036 from linxiulei/cleanup > febd537 use build-in max and min func to instead of k8s.io/utils/integer funcs > 0492dac Merge pull request # 121684 from jmhbnz/fix-etcd-repo > a2e6b85 handlers/watch: refactor watch serving to prepare offloading > 748f6de Merge pull request # 121912 from JoelSpeed/cel-ip-addr > b6487a8 Fix etcd repository path to prevent redirects. > ccc28d3 Add tests for CIDR type > f16e0c2 Add tests for IP type > e5f6058 Add costing estimations for IP and CIDR > e4fb1f7 Add IP and CIDR libraries to CEL environment for 1.30 > f4ae0b7 Add CIDR network CEL extension > 3fe1439 Add special IP validations to IP CEL type > ccfdc9a Add IP address CEL extension > 3fcf329 Merge pull request # 121773 from pohly/zapr-update > fe55daf Merge pull request # 122027 from wojtek-t/sort_outside_critical_loop > c86c46c dependencies: zapr v1.3.0, zap v1.26.0 > 50a340e Merge pull request # 122168 from rlsvarinskis/event_metrics_fix > 2b59a3f Don't sort under lock > e60c364 Merge pull request # 122115 from wojtek-t/cleanup_watch_handler > fdd2648 Fix etcd storage_events_received_total metric not being registered > 92aa5ac Merge pull request # 122193 from cici37/fixPresentCost > 697d456 Minor cleanup in watch handlers > 7b4812e Merge pull request # 121914 from siyuanfoundation/health-rf > 88c6f03 Address comment > 442cc39 Unify watch handler across http and websockets > 6e1838f Merge pull request # 121906 from ahutsunshine/namespace-indexer > 06103a0 k8s.io/apiserver: refactor GenericAPIServer healthz code. > fb788cc Keep presence cost to 0 to ensure backward compatibility. > 627bf4c Merge pull request # 121815 from HirazawaUi/decode-respect-timeout-context > 16536b9 support pod namespace indexer > 36a3042 Merge pull request # 121759 from thockin/fix_api_violations > 88cd525 make the decode function respect the timeout context > ce43261 Merge pull request # 121625 from siyuanfoundation/refactor2 > 7674c1a Fix list_type_missing in k8s.io/apiserver > 00f757b Merge pull request # 121624 from jiahuif-forks/fix/cel/lazy-map-context-eval > cef6db2 k8s.io/apiserver/storage/etcd: refactor etcd GetList. > 9863f52 Re-vendor k8s.io/kube-openapi > d6876a0 Merge pull request # 121822 from ritazh/webhookauthz-benchmark > 59297e7 use context for lazy evaluation. bumping golang.org/x/sync 14be23e...411f99e: > 411f99e LICENSE: update per Google Legal Signed-off-by: Knative Automation <automation@knative.team>
- Loading branch information
1 parent
cd1f3b5
commit fbb5bb9