Skip to content

Add Port configuration to ServiceReference of Admission webhooks, CRD Conversion Webhooks, AuditSink Webhooks and kube-aggregator#74855

Merged
k8s-ci-robot merged 7 commits intokubernetes:masterfrom
mbohlool:sam
Apr 8, 2019
Merged

Add Port configuration to ServiceReference of Admission webhooks, CRD Conversion Webhooks, AuditSink Webhooks and kube-aggregator#74855
k8s-ci-robot merged 7 commits intokubernetes:masterfrom
mbohlool:sam

Conversation

@mbohlool
Copy link
Copy Markdown
Contributor

@mbohlool mbohlool commented Mar 2, 2019

This is a work item for Admission Webhooks GA. To be consistent in the feature set of all webhooks and service references, the port configuration added to the rest of the features including kube-aggregator. All of these services share some level of code and it make sense to support this in all of them.

This however need to be documented for each service separately.

- Added port configuration to Admission webhook configuration service reference.
- Added port configuration to AuditSink webhook configuration service reference.
- Added port configuration to CRD Conversion webhook configuration service reference.
- Added port configuration to kube-aggregator service reference.

@liggitt @sttts @caesarxuchao

@k8s-ci-robot k8s-ci-robot added release-note Denotes a PR that will be considered when it comes time to generate release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. needs-priority Indicates a PR lacks a `priority/foo` label and requires one. labels Mar 2, 2019
@k8s-ci-robot k8s-ci-robot added area/apiserver kind/api-change Categorizes issue or PR as related to adding, removing, or otherwise changing an API sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/testing Categorizes an issue or PR as relevant to SIG Testing. and removed needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. labels Mar 2, 2019
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

443

@fejta-bot
Copy link
Copy Markdown

This PR may require API review.

If so, when the changes are ready, complete the pre-review checklist and request an API review.

Status of requested reviews is tracked in the API Review project.

@liggitt liggitt added the api-review Categorizes an issue or PR as actively needing an API review. label Mar 4, 2019
@liggitt liggitt self-assigned this Mar 4, 2019
@liggitt liggitt added this to the v1.14 milestone Mar 4, 2019
@k8s-ci-robot k8s-ci-robot added area/release-eng Issues or PRs related to the Release Engineering subproject sig/release Categorizes an issue or PR as relevant to SIG Release. labels Mar 4, 2019
Copy link
Copy Markdown
Member

@liggitt liggitt Mar 4, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

drop the default comment from the internal versions, defaults only apply to external versions

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

@mbohlool
Copy link
Copy Markdown
Contributor Author

mbohlool commented Mar 4, 2019

/retest

Copy link
Copy Markdown
Member

@liggitt liggitt Mar 4, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

a 1.14-level aggregated API server running against an n-1 kube-apiserver would panic here, right?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

v1beta1.Webhook is an admissionregistration object that should have been stored or accepted by the user. In both cases it will be defaulted before it gets here. how does it panic here?

@k8s-ci-robot k8s-ci-robot added the area/dependency Issues or PRs related to dependency changes label Apr 8, 2019
@mbohlool
Copy link
Copy Markdown
Contributor Author

mbohlool commented Apr 8, 2019

@liggitt PTAL

@mbohlool
Copy link
Copy Markdown
Contributor Author

mbohlool commented Apr 8, 2019

/hold cancel

@k8s-ci-robot k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Apr 8, 2019
@liggitt
Copy link
Copy Markdown
Member

liggitt commented Apr 8, 2019

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 8, 2019
@liggitt liggitt added the priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. label Apr 8, 2019
@k8s-ci-robot k8s-ci-robot removed the needs-priority Indicates a PR lacks a `priority/foo` label and requires one. label Apr 8, 2019
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: liggitt, mbohlool

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 8, 2019
@k8s-ci-robot k8s-ci-robot merged commit eb65eac into kubernetes:master Apr 8, 2019
@ashleyschuett
Copy link
Copy Markdown

Is this going to be cherry picked back to any 1.13 or 1.14 releases? If it's not currently planned to be, can it be?

@liggitt
Copy link
Copy Markdown
Member

liggitt commented Apr 11, 2019

no. new features/capabilities are not backported, just bug/security fixes

@liggitt
Copy link
Copy Markdown
Member

liggitt commented May 31, 2019

included in docs PR for 1.15 at kubernetes/website#14671

@roycaihw
Copy link
Copy Markdown
Member

/area admission-control
/area custom-resources

@liggitt liggitt removed the sig/auth Categorizes an issue or PR as relevant to SIG Auth. label Feb 18, 2020
rfranzke added a commit to rfranzke/gardener that referenced this pull request Feb 13, 2026
- `Port` field was introduced with Kubernetes v1.15
  (kubernetes/kubernetes#74855) which didn't
exit at the point
- This webhook registration code was introduced with gardener-attic/gardener-extensions#218
- We were using `k8s.io/api@1.13.4` at this point in time: https://github.com/gardener-attic/gardener-extensions/blob/ef83a2368cdf11d11720bd198f5cba0161b48187/Gopkg.toml#L26-L28
rfranzke added a commit to rfranzke/gardener that referenced this pull request Feb 13, 2026
- `Port` field was introduced with Kubernetes v1.15
  (kubernetes/kubernetes#74855) which didn't
exit at the point
- This webhook registration code was introduced with gardener-attic/gardener-extensions#218
- We were using `k8s.io/api@1.13.4` at this point in time: https://github.com/gardener-attic/gardener-extensions/blob/ef83a2368cdf11d11720bd198f5cba0161b48187/Gopkg.toml#L26-L28
rfranzke added a commit to rfranzke/gardener that referenced this pull request Feb 13, 2026
- `Port` field was introduced with Kubernetes v1.15
  (kubernetes/kubernetes#74855) which didn't
exit at the point
- This webhook registration code was introduced with gardener-attic/gardener-extensions#218
- We were using `k8s.io/api@1.13.4` at this point in time: https://github.com/gardener-attic/gardener-extensions/blob/ef83a2368cdf11d11720bd198f5cba0161b48187/Gopkg.toml#L26-L28
gardener-prow bot pushed a commit to gardener/gardener that referenced this pull request Feb 16, 2026
#14063)

* [extensions] Set `servicePort` in `ServiceReference` for `ModeService`

- `Port` field was introduced with Kubernetes v1.15
  (kubernetes/kubernetes#74855) which didn't
exit at the point
- This webhook registration code was introduced with gardener-attic/gardener-extensions#218
- We were using `k8s.io/api@1.13.4` at this point in time: https://github.com/gardener-attic/gardener-extensions/blob/ef83a2368cdf11d11720bd198f5cba0161b48187/Gopkg.toml#L26-L28

* Adapt `admission-local`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/admission-control area/apiserver area/custom-resources area/dependency Issues or PRs related to dependency changes area/release-eng Issues or PRs related to the Release Engineering subproject area/test cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/api-change Categorizes issue or PR as related to adding, removing, or otherwise changing an API lgtm "Looks good to me", indicates that a PR is ready to be merged. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. release-note Denotes a PR that will be considered when it comes time to generate release notes. sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. sig/release Categorizes an issue or PR as relevant to SIG Release. sig/testing Categorizes an issue or PR as relevant to SIG Testing. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants