Joe Betz

etcd cluster startup flakiness with TLS enabled

8

Reported by @matte21 on https://github.com/kubernetes/kubernetes/issues/81508#issuecomment-590646553: > I used to deploy a 3-member etcd v3.3.11 cluster on a Kubernetes 1.16 IKS cluster. The etcd cluster was used to store CRs defined...

client-go fake client difficult to use with apply

17

#### What happened: In PR https://github.com/kubernetes/kubernetes/pull/99462 we migrated the cluster-role-aggregator controller to apply. The controller's unit tests use the client-go fake, which works great for update, but for apply, required...

Support non-overlapping overload dispatch using function

1

cel-go allows for dispatch either by function name or overload ID. For example, given ``` cel.Declarations( decls.NewFunction("isSorted", decls.NewParameterizedInstanceOverload("list_a_is_sorted_bool", []*exprpb.Type{decls.NewListType(paramA)}, decls.Bool, typeParamAList), ), ``` What works: CEL will dispatch to `functions.Overload{Operator:...

Cost system follow ups

1

Clean up tasks: - Unify runtime and estimated cost support for computing costs of functions/operations - Share common code internally - Expose a shared API? - Minor code clean up:...

Type check and pre-compile fixed regex strings

1

**Change** Currently regex patterns are compiled at runtime each time a matches() invocation is evaluated by the interpreter. Instead, if the regex patterns is a string constant (e.g. `x.matches('[0-9]+')`) -...

CRD Validation Expression Language

38

### Enhancement Description - One-line enhancement description (can be used as a release note): Expression language can be used to validate custom resources - Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/pull/2877 - Discussion...

Donate auger to sig-instrumentation

5

SIG Instrumentation has expressed interest in owning auger. I fully support this. xref: https://github.com/kubernetes/org/issues/2839 There is some administrivia that needs to be sorted out before the project can be donated:...

Introduce auger 'releases' for each kubernetes version

2

As @caesarxuchao pointed out to me, auger builds are paired specific kubernetes versions. Each auger build uses the types of exactly one kubernetes version, and the types supported change with...

CEL for Admission Control

95

### Enhancement Description - One-line enhancement description (can be used as a release note): CEL for Admission Control - Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/3488-cel-admission-control - Discussion Link: https://groups.google.com/g/kubernetes-sig-api-machinery/c/WBVf_oWm4kU - Primary contact...

KEP-3488: CEL admission: Add graceful rollout, warning and audit support

2

- One-line PR description: Update the CEL admission KEP to support graceful policy rollout by adding ability to report validation failures only as warnings or audit annotations and for enhancing...