mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-03-10 18:40:55 -04:00
aca386059d
Automatic merge from submit-queue (batch tested with PRs 55938, 56055, 53385, 55796, 55922). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. admission: make admission metrics compositional Metrics emission of admission plugins and the admission chain can be implemented compositionally, i.e. completely independently from the chain logic. This PR does that, moves the whole metrics code into a sub-package to contain complexity. The plumbing logic for the emitted metrics finally is cleanly done in the apiserver bootstrapping code, instead of being totally interleaved with the core admission logic. Ratio: - considerably less complexity - admission plugins are compositional, including the chain. We cannot assume that there is only one chain at the outside of the admission plugin structure. Downstream projects might have more complex admission chains, i.e. multiple chain object nested. - addition of metrics is plumbing and should be in the apiserver plumbing code. This makes it much easier to reason about the security critical admission chain. Follow-up of #55183 and based on #55919. |
||
|---|---|---|
| .. | ||
| admit | ||
| alwayspullimages | ||
| antiaffinity | ||
| defaulttolerationseconds | ||
| deny | ||
| eventratelimit | ||
| exec | ||
| extendedresourcetoleration | ||
| gc | ||
| imagepolicy | ||
| initialresources | ||
| limitranger | ||
| namespace | ||
| noderestriction | ||
| persistentvolume | ||
| podnodeselector | ||
| podpreset | ||
| podtolerationrestriction | ||
| priority | ||
| resourcequota | ||
| security | ||
| securitycontext/scdeny | ||
| serviceaccount | ||
| storageclass/setdefault | ||
| OWNERS | ||