apiserver

apiserver copied to clipboard

Update go-restful module to version >= 3.8.0 due to security issues

1

Hi all! I saw [this commit](https://github.com/kubernetes/apiserver/commit/30571358f578eabf5ca12499543c50c4b1263653) updating go-restful to version 3.7.5 for the next release. Would it be possible to update it to something >= 3.8.0? I'm asking because of...

rsvalerio

**Kubernetes Version:** ```shell $ kubectl version -o yaml clientVersion: buildDate: "2022-06-15T14:22:29Z" compiler: gc gitCommit: f66044f4361b9f1f96f0053dd46cb7dce5e990a8 gitTreeState: clean gitVersion: v1.24.2 goVersion: go1.18.3 major: "1" minor: "24" platform: linux/amd64 kustomizeVersion: v4.5.4 serverVersion:...

boylee1111

Why exclude resources with errors in the calculation? These errors do not necessarily affect all evaluators

1

[source of the issue](https://github.com/kubernetes/apiserver/blob/master/pkg/quota/v1/resources.go) ``` newUsage := corev1.ResourceList{} for _, evaluator := range evaluators { // only trigger the evaluator if it matches a resource in the quota, otherwise, skip...

fengpengyun

The traversal code in the managedfields.encodeManagedFields method is simplified

2

[The location of the issues](https://github.com/kubernetes/apiserver/blob/master/pkg/endpoints/handlers/fieldmanager/internal/managedfields.go) ``` func encodeManagedFields(managed ManagedInterface) (encodedManagedFields []metav1.ManagedFieldsEntry, err error) { if len(managed.Fields()) == 0 { return nil, nil } encodedManagedFields = []metav1.ManagedFieldsEntry{} // Directly use key-value...

fengpengyun

Hi , I have enabled OIDC in api-server, it is working fine and user can get authenticated fine through OIDC but getting below errors in the logs, am not sure...

sohnaeo

log error about cert expired - does not show important info

6

our kube-apiserver just started failing to start.. The log from containerd only says: 2023-12-16T07:35:01.426019865+01:00 stderr F }. Err: connection error: desc = "transport: authentication handshake failed: x509: certificate has expired...

KlavsKlavsen

apiserver fails json patches with 422 when patch body does not match default json.Marshal encoding

2

**Issue description** We are using a modified version of the python's official client for kubernetes. I was investigating a bug where JSON patches to custom resource with "test" operation would...

shadjiiski

Tag v0.28.1 - Issue

4

I was trying to understand the reason of this... and during my investigation I got this (see the pic) This commit does not belong.... is it normal !!!! force commit...

migounette

Dependency upgrade request - Incompatibility with go.opentelemetry.io/otel version v.1.15.0 and above

2

Hello, `https://pkg.go.dev/go.opentelemetry.io/otel` package has introduced some breaking changes in recent releases, for example: 1. [v1.13.0](https://github.com/open-telemetry/opentelemetry-go/blob/v1.17.0/CHANGELOG.md#11300360-2023-02-07) removed `go.opentelemetry.io/otel/metric/instrument/syncfloat64` and `go.opentelemetry.io/otel/metric/instrument/syncint64` 2. [v1.16.0](https://github.com/open-telemetry/opentelemetry-go/blob/v1.17.0/CHANGELOG.md#1160-rc10390-rc1-2023-05-03) removed `go.opentelemetry.io/otel/metric/global` As a result, if `go.opentelemetry.io/otel` is upgraded...

leuyentran

Query on ContinueToken

6

Hello, I have a query on comment of `continueToken` struct. > // continueToken is a simple structured object for encoding the state of a continue token. // TODO: if we...

mehvaibh