{"push_id":2144304468,"size":16,"distinct_size":16,"ref":"refs/heads/on_demand_metrics","head":"d684fe37750b7c0c58302a96ffd0e8aaaa75959f","before":"858d19e2c99ba6601e416aa4bd86c0512a8ab24c","commits":[{"sha":"58513b8c0b3295840e3fea392cf59a942ce1ce27","author":{"name":"osoriano","email":"82f4e1229a97af786cac1bd0b7b738d5eb3255b6@gmail.com"},"message":"Ensure GCE AlphaFeatureGate initialized\n\nIf no config file is specified for the controller-manager,\nthe GCE CloudConfig.AlphaFeatureGate property is not initialized.\n\nThis can cause a panic when checking for alpha features in the GCE\nprovider.\n\nCloses #55544","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/58513b8c0b3295840e3fea392cf59a942ce1ce27"},{"sha":"f5995e77f4d3f08c3277accc1231e6140add702a","author":{"name":"Cao Shufeng","email":"f07975ad5cec4d1bed6cbb67407ec08c08437353@cn.fujitsu.com"},"message":"fix storageclass unit tests\n\nBefore this change, a unit test fails:\n\n```\nmake test WHAT=k8s.io/kubernetes/pkg/registry/storage/storageclass/storage\n```","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/f5995e77f4d3f08c3277accc1231e6140add702a"},{"sha":"fd8758b047855699e4672c3417e21cb837f5f414","author":{"name":"dhilipkumars","email":"2d710c76327bfd676768b74c783203d69e7b1df5@huawei.com"},"message":"Extend apiserver testserver such that in can be used in integration tests\nabstract out etcd server creation\ntest/integration/framework: cleanup master_utils.go\nkube-apiserver: move StartTestServer tests into test/integration/master\nFix the failing scale test\nkube-apiserver's TestServer now returns a struct instead of individual values","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/fd8758b047855699e4672c3417e21cb837f5f414"},{"sha":"b4b275d255b6484b7bd081e69e24f4fd0b8e981b","author":{"name":"Matt Moyer","email":"1116be999f27fe585a25223fdf26fb7f477fcc46@heptio.com"},"message":"kubeadm: add `--print-join-command` flag for token create.\n\nThis change adds a new flag `kubeadm token create --print-join-command`. When this flag is passed, kubeadm prints the full `kubeadm join [...]` command, including the CA certificate hash which is otherwise annoying to calculate.\n\nExample:\n```\n$ kubeadm token create --print-join-command\nkubeadm join --token 447067.20b55955bd6abe6c 192.168.99.100:8443 --discovery-token-ca-cert-hash sha256:17023a5c90b996e50c514e63e161e46f78be216fd48c0c3df3be67e008b28889\n```","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/b4b275d255b6484b7bd081e69e24f4fd0b8e981b"},{"sha":"967323558387e88bf3df532610511ed06d9dbfa7","author":{"name":"Tim Allclair","email":"c715ca2d76bf399bd482de34d3671679cbf5e65e@google.com"},"message":"Optimize PSP authorization","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/967323558387e88bf3df532610511ed06d9dbfa7"},{"sha":"1b76b0b2ff06d92e0b4b0d3d709effbaf18f9440","author":{"name":"Hemant Kumar","email":"d37ca1f57b0cd9ec1cdf94bef11b4b475ecc8013@redhat.com"},"message":"Allow node to update PVC's status\n\nImplement node policy feature gates\nAdd tests for node policy update","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/1b76b0b2ff06d92e0b4b0d3d709effbaf18f9440"},{"sha":"2f2a6436843151d8c7a251062f09084d2dd7d953","author":{"name":"Hemant Kumar","email":"d37ca1f57b0cd9ec1cdf94bef11b4b475ecc8013@redhat.com"},"message":"Implement file system resizing support on kubelet start\n\nUpdate bazel files\nFix operation executor tests","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/2f2a6436843151d8c7a251062f09084d2dd7d953"},{"sha":"7be94c4b0646ab5a76f0dd0686f37e3da1f65e59","author":{"name":"Hemant Kumar","email":"d37ca1f57b0cd9ec1cdf94bef11b4b475ecc8013@redhat.com"},"message":"Implement resizing support for GCE\n\nFix GCE attacher test\nUpdate bazel files","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/7be94c4b0646ab5a76f0dd0686f37e3da1f65e59"},{"sha":"5ee4d2bbf5b61d5d8fc71b57f68955effc96e2d7","author":{"name":"Hemant Kumar","email":"d37ca1f57b0cd9ec1cdf94bef11b4b475ecc8013@redhat.com"},"message":"Enable PersistentVolumeClaimResize admission plugin in default cluster settings\n\nThe plugin itself will not do anything if resizing is not enabled.\n\nMove Resize plugin to start","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/5ee4d2bbf5b61d5d8fc71b57f68955effc96e2d7"},{"sha":"215844219bbbdcd8c9fe519637a04c76b55fe18f","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #55643 from tallclair/psp-scale\n\nAutomatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\n[PodSecurityPolicy] Optimize authorization check\n\n**What this PR does / why we need it**:\r\n\r\nAuthorizing PodSecurityPolicy use may involve a remote call, and can be slow. Rather than authorizing the user / SA for every policy in the cluster, only test authz for the policies under which the pod is valid.\r\n\r\nThis is a big improvement in the case where there are a lot of policies for which the pod is not valid (benchmark below), but should also help when the pod is valid under other policies, as it allows the authorization to short-circuit on the first accepted policy.\r\n\r\n**Benchmark:**\r\nHighlight from scale testing (see https://docs.google.com/document/d/1IIcHHE_No1KMAybW5krIphdN325eGa2sxF2eqg2YAPI/edit for the full results). These were run with 1000 policies under which the pods were not valid, and had no role bindings.\r\n\r\n| | method | resource | 50th percentile | 90th percentile | 99th percentile\r\n| -- | -- | -- | -- | -- | --\r\n| 1.8 HEAD | POST | pods | 8.696784s | 20.497659s | 22.472421s\r\n| 1.8 With fix | POST | pods | 25.454ms | 29.068ms | 85.817ms\r\n\r\n(I didn't benchmark master, but expect the difference to be more drastic, since the authorization is run twice - for both Admit and Validate)\r\n\r\n**Which issue(s) this PR fixes**:\r\nFixes #55521\r\n\r\n**Special notes for your reviewer**:\r\nThe validation errors are no longer totally accurate, as they may include errors from PSPs that the user/pod isn't authorized to use. However, I think this is a worthwhile tradeoff. If this is a big concern, we could authorize all policies in the case where none admitted /validated the pod.\r\n\r\n**Release note**:\r\n```release-note\r\nImproved PodSecurityPolicy admission latency, but validation errors are no longer limited to only errors from authorized policies.\r\n```","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/215844219bbbdcd8c9fe519637a04c76b55fe18f"},{"sha":"11cf60437704df4b60cca3a9ab011154a44a31d6","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #55545 from osoriano/private/osoriano/gcp-initialize-alphafeaturegate\n\nAutomatic merge from submit-queue (batch tested with PRs 55545, 55548, 55815, 56136, 56185). If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\nEnsure GCE AlphaFeatureGate initialized\n\nIf no config file is specified for the controller-manager,\r\nthe GCE CloudConfig.AlphaFeatureGate property is not initialized.\r\n\r\nThis can cause a panic when checking for alpha features in the GCE\r\nprovider.\r\n\r\n```release-note\r\nNONE \r\n```\r\n\r\nCloses #55544","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/11cf60437704df4b60cca3a9ab011154a44a31d6"},{"sha":"704a0b52b036fbdd82a8fbc64ce5125087a06eb2","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #55548 from dhilipkumars/Extend-testapiserver\n\nAutomatic merge from submit-queue (batch tested with PRs 55545, 55548, 55815, 56136, 56185). If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\nExtend apiserver testserver\n\n**What this PR does / why we need it**:\r\nExtend the test pkg of api-server a little bit so that it can be used by others\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n\r\n**Special notes for your reviewer**:\r\nWe wanted to use this test pkg while creating a new integration test fixture, the idea of starting the api-server without actually starting a proper etcd (integration etcd ) is very useful, if would be great to extend this for other usecases such as `insecure` mode too.\r\n\r\nIt will also be useful to get the working `tmpdir` returned so that we could store additional certs (such as service account public and private keys and kubeconf for this apiserver) if needed, which will be cleaned up automatically by the `teardownFn` when the api server is terminating.\r\n\r\n**Release note**:\r\n\r\n```release-note\r\nNONE\r\n```\r\nref: https://github.com/kubernetes/kubernetes/pull/50144","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/704a0b52b036fbdd82a8fbc64ce5125087a06eb2"},{"sha":"7dd41577e3b6a7049f7c133760200d3e71ba7229","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #55815 from gnufied/implement-node-fs-resize\n\nAutomatic merge from submit-queue (batch tested with PRs 55545, 55548, 55815, 56136, 56185). If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\nImplement node fs resize\n\nImplement kubelet side resizing of file system.\r\n\r\nxref - https://github.com/kubernetes/features/issues/284 \r\n\r\n```release-note\r\nImplement kubelet side file system resizing. Also implement GCE PD resizing\r\n```","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/7dd41577e3b6a7049f7c133760200d3e71ba7229"},{"sha":"5fcaff419f712c50e16e20f8e274dd41026558c2","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #56136 from CaoShuFeng/storageclass\n\nAutomatic merge from submit-queue (batch tested with PRs 55545, 55548, 55815, 56136, 56185). If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\nfix storageclass unit tests\n\nBefore this change, a unit test fails:\r\n```\r\nmake test WHAT=k8s.io/kubernetes/pkg/registry/storage/storageclass/storage\r\n```\r\n\r\n**Release note**:\r\n```release-note\r\nNONE\r\n```\r\n\r\n/assign @saad-ali \r\n/assign @thockin","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/5fcaff419f712c50e16e20f8e274dd41026558c2"},{"sha":"55d8781b0944a881fcf76582a65c37b91eb0c316","author":{"name":"Kubernetes Submit Queue","email":"260061d766fe633e5411cb223defd984f1ece7b6@users.noreply.github.com"},"message":"Merge pull request #56185 from mattmoyer/kubeadm-print-join-command\n\nAutomatic merge from submit-queue (batch tested with PRs 55545, 55548, 55815, 56136, 56185). If you want to cherry-pick this change to another branch, please follow the instructions <a href=\"https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md\">here</a>.\n\nkubeadm: add `--print-join-command` flag for token create.\n\n**What this PR does / why we need it**: This change adds a new flag `kubeadm token create --print-join-command`. When this flag is passed, kubeadm prints the full `kubeadm join [...]` command, including the CA certificate hash which is otherwise annoying to calculate.\r\n\r\n**Which issue(s) this PR fixes** fixes https://github.com/kubernetes/kubeadm/issues/519\r\n\r\n**Special notes for your reviewer**:\r\n\r\n### Example Output\r\n```\r\n$ kubeadm token create --print-join-command\r\nkubeadm join --token 447067.20b55955bd6abe6c 192.168.99.100:8443 --discovery-token-ca-cert-hash sha256:17023a5c90b996e50c514e63e161e46f78be216fd48c0c3df3be67e008b28889\r\n$ kubeadm token create -h\r\n[...]\r\n      --print-join-command   Instead of printing only the token, print the full 'kubeadm join' flag needed to join the cluster using the token.\r\n[...]\r\n```\r\n\r\nI ended up not using the approach suggested by @xiangpengzhao in https://github.com/kubernetes/kubernetes/pull/56025 (and also by @fabriziopandini) of reusing the `bootstrap-token` phase code, since that code assumes it can load the CA certificates from `/etc/kubernetes`, but that is only true if kubeadm is run on an already-joined node.\r\n\r\nInstead, I wrote code to pull the CA certificates and server endpoint from the kubeconfig that `kubeadm token create` is called with, since that also contains the data and is available even if, e.g., kubeadm is being run from outside the cluster.\r\n\r\n**Release note**:\r\n```release-note\r\nkubeadm: added `--print-join-command` flag for `kubeadm token create`.\r\n```\r\n\r\n/sig cluster-lifecycle\r\n\r\n/cc @fabriziopandini @xiangpengzhao @luxas","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/55d8781b0944a881fcf76582a65c37b91eb0c316"},{"sha":"d684fe37750b7c0c58302a96ffd0e8aaaa75959f","author":{"name":"David Ashpole","email":"aecd33de3147be62e8193f6316679ba2511e0e88@google.com"},"message":"enable on demand metrics","distinct":true,"url":"https://api.github.com/repos/dashpole/kubernetes/commits/d684fe37750b7c0c58302a96ffd0e8aaaa75959f"}]}
{"actor":{"display_login":"dashpole"}}