Advanced API Machinery Topics: Aggregated API Servers and OpenAPI v3
Talkat KubeCon + CloudNativeCon North America 2022 · on Wednesday, 2022-10-26· at 14:30· Virtual Platform Only·
summary
Kubernetes ships openapi v3 in Kubernetes 1.24 that preserves structural-schema features (oneOf, anyOf, default, nullable), exposes /openapi/v3 and per-group endpoints to avoid multi-megabyte aggregates, and adds cache-busting hashes with Cache-Control: immutable to cut discovery traffic; GA migration and client functions (OpenAPIV3) are underway. Aggregated API servers proxy via APIService with delegated auth and must authorize both sides; examples: OpenShift uses protobuf storage for speed, metrics-server is stateless, Prometheus adapter works, but aggregated API servers can cause namespace finalizers to hang and cannot share a group/version with CRDs.
AI-written summary · about
chapters (10)
- 0:00Start
- 13:40Overview
- 15:27kube-apiserver routing example 1
- 15:58ext-apiserver authentication
- 17:05Authorization?
- 17:21kube-apiserver authorization
- 20:29No storage: metrics server
- 20:59Multiple implementations: metrics
- 24:00Namespace deletion cycle
- 26:56SIG API Machinery
related talks
29mSIG API Machinery in the Era of AI: Updates
36mApiserver Builder: Extending Kubernetes via Aggregated Apiserver
38mDeep Dive: API Machinery SIG
09mEverything You Need to Know About OpenAPI 3.0
26mKubernetes-style APIs of the Future
05mKubernetes API Explained
08mKubernetes: The API of Everything
01h 00mContract First API Design with OpenAPI V3
