~/talk

Advanced API Machinery Topics: Aggregated API Servers and OpenAPI v3

links:none on file
links:none on file
links:none on file
slides:none on file

Kubernetes ships openapi v3 in Kubernetes 1.24 that preserves structural-schema features (oneOf, anyOf, default, nullable), exposes /openapi/v3 and per-group endpoints to avoid multi-megabyte aggregates, and adds cache-busting hashes with Cache-Control: immutable to cut discovery traffic; GA migration and client functions (OpenAPIV3) are underway. Aggregated API servers proxy via APIService with delegated auth and must authorize both sides; examples: OpenShift uses protobuf storage for speed, metrics-server is stateless, Prometheus adapter works, but aggregated API servers can cause namespace finalizers to hang and cannot share a group/version with CRDs.

AI-written summary · about

  1. 0:00Start
  2. 13:40Overview
  3. 15:27kube-apiserver routing example 1
  4. 15:58ext-apiserver authentication
  5. 17:05Authorization?
  6. 17:21kube-apiserver authorization
  7. 20:29No storage: metrics server
  8. 20:59Multiple implementations: metrics
  9. 24:00Namespace deletion cycle
  10. 26:56SIG API Machinery
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.