Remove kube-aggregation

cmd/kube-apiserver/app/options/options.go

@@ -65,8 +65,6 @@ type ServerRunOptions struct {
 	ProxyClientCertFile string
 	ProxyClientKeyFile  string
 
-	EnableAggregatorRouting bool
-
 	MasterCount            int
 	EndpointReconcilerType string
 
@@ -229,9 +227,6 @@ func (s *ServerRunOptions) Flags() (fss apiserverflag.NamedFlagSets) {
 		"when it must call out during a request. This includes proxying requests to a user "+
 		"api-server and calling out to webhook admission plugins.")
 
-	fs.BoolVar(&s.EnableAggregatorRouting, "enable-aggregator-routing", s.EnableAggregatorRouting,
-		"Turns on aggregator routing requests to endpoints IP rather than cluster IP.")
-
 	fs.StringVar(&s.ServiceAccountSigningKeyFile, "service-account-signing-key-file", s.ServiceAccountSigningKeyFile, ""+
 		"Path to the file that contains the current private key of the service account token issuer. The issuer will sign issued ID tokens with this private key. (Requires the 'TokenRequest' feature gate.)")
 

cmd/kube-apiserver/app/options/validation.go

@@ -20,7 +20,6 @@ import (
 	"fmt"
 
 	apiextensionsapiserver "k8s.io/apiextensions-apiserver/pkg/apiserver"
-	aggregatorscheme "k8s.io/kube-aggregator/pkg/apiserver/scheme"
 	"k8s.io/kubernetes/pkg/api/legacyscheme"
 )
 
@@ -82,7 +81,7 @@ func (s *ServerRunOptions) Validate() []error {
 	if s.MasterCount <= 0 {
 		errors = append(errors, fmt.Errorf("--apiserver-count should be a positive number, but value '%d' provided", s.MasterCount))
 	}
-	if errs := s.APIEnablement.Validate(legacyscheme.Scheme, apiextensionsapiserver.Scheme, aggregatorscheme.Scheme); len(errs) > 0 {
+	if errs := s.APIEnablement.Validate(legacyscheme.Scheme, apiextensionsapiserver.Scheme); len(errs) > 0 {
 		errors = append(errors, errs...)
 	}
 

cmd/kube-apiserver/app/server.go

@@ -40,7 +40,6 @@ import (
 	"k8s.io/apimachinery/pkg/util/sets"
 	utilwait "k8s.io/apimachinery/pkg/util/wait"
 	"k8s.io/apiserver/pkg/admission"
-	webhookinit "k8s.io/apiserver/pkg/admission/plugin/webhook/initializer"
 	"k8s.io/apiserver/pkg/authentication/authenticator"
 	"k8s.io/apiserver/pkg/authorization/authorizer"
 	genericapiserver "k8s.io/apiserver/pkg/server"
@@ -57,7 +56,6 @@ import (
 	"k8s.io/client-go/rest"
 	"k8s.io/client-go/restmapper"
 	certutil "k8s.io/client-go/util/cert"
-	aggregatorapiserver "k8s.io/kube-aggregator/pkg/apiserver"
 	"k8s.io/kubernetes/cmd/kube-apiserver/app/options"
 	"k8s.io/kubernetes/pkg/api/legacyscheme"
 	"k8s.io/kubernetes/pkg/capabilities"
@@ -70,7 +68,6 @@ import (
 	kubeauthenticator "k8s.io/kubernetes/pkg/kubeapiserver/authenticator"
 	"k8s.io/kubernetes/pkg/kubeapiserver/authorizer/modes"
 	kubeoptions "k8s.io/kubernetes/pkg/kubeapiserver/options"
-	kubeserver "k8s.io/kubernetes/pkg/kubeapiserver/server"
 	"k8s.io/kubernetes/pkg/master"
 	"k8s.io/kubernetes/pkg/master/reconcilers"
 	"k8s.io/kubernetes/pkg/master/tunneler"
@@ -159,7 +156,7 @@ func CreateServerChain(completedOptions completedServerRunOptions, stopCh <-chan
 		return nil, err
 	}
 
-	kubeAPIServerConfig, insecureServingInfo, serviceResolver, pluginInitializer, admissionPostStartHook, err := CreateKubeAPIServerConfig(completedOptions, nodeTunneler, proxyTransport)
+	kubeAPIServerConfig, _, pluginInitializer, admissionPostStartHook, err := CreateKubeAPIServerConfig(completedOptions, nodeTunneler, proxyTransport)
 	if err != nil {
 		return nil, err
 	}
@@ -179,32 +176,10 @@ func CreateServerChain(completedOptions completedServerRunOptions, stopCh <-chan
 		return nil, err
 	}
 
-	// otherwise go down the normal path of standing the aggregator up in front of the API server
-	// this wires up openapi
-	kubeAPIServer.GenericAPIServer.PrepareRun()
-
 	// This will wire up openapi for extension api server
 	apiExtensionsServer.GenericAPIServer.PrepareRun()
 
-	// aggregator comes last in the chain
-	aggregatorConfig, err := createAggregatorConfig(*kubeAPIServerConfig.GenericConfig, completedOptions.ServerRunOptions, kubeAPIServerConfig.ExtraConfig.VersionedInformers, serviceResolver, proxyTransport, pluginInitializer)
-	if err != nil {
-		return nil, err
-	}
-	aggregatorServer, err := createAggregatorServer(aggregatorConfig, kubeAPIServer.GenericAPIServer, apiExtensionsServer.Informers)
-	if err != nil {
-		// we don't need special handling for innerStopCh because the aggregator server doesn't create any go routines
-		return nil, err
-	}
-
-	if insecureServingInfo != nil {
-		insecureHandlerChain := kubeserver.BuildInsecureHandlerChain(aggregatorServer.GenericAPIServer.UnprotectedHandler(), kubeAPIServerConfig.GenericConfig)
-		if err := insecureServingInfo.Serve(insecureHandlerChain, kubeAPIServerConfig.GenericConfig.RequestTimeout, stopCh); err != nil {
-			return nil, err
-		}
-	}
-
-	return aggregatorServer.GenericAPIServer, nil
+	return kubeAPIServer.GenericAPIServer, nil
 }
 
 // CreateKubeAPIServer creates and wires a workable kube-apiserver
@@ -263,7 +238,6 @@ func CreateKubeAPIServerConfig(
 ) (
 	config *master.Config,
 	insecureServingInfo *genericapiserver.DeprecatedInsecureServingInfo,
-	serviceResolver aggregatorapiserver.ServiceResolver,
 	pluginInitializers []admission.PluginInitializer,
 	admissionPostStartHook genericapiserver.PostStartHookFunc,
 	lastErr error,
@@ -272,7 +246,7 @@ func CreateKubeAPIServerConfig(
 	var storageFactory *serverstorage.DefaultStorageFactory
 	var sharedInformers informers.SharedInformerFactory
 	var versionedInformers clientgoinformers.SharedInformerFactory
-	genericConfig, sharedInformers, versionedInformers, insecureServingInfo, serviceResolver, pluginInitializers, admissionPostStartHook, storageFactory, lastErr = buildGenericConfig(s.ServerRunOptions, proxyTransport)
+	genericConfig, sharedInformers, versionedInformers, insecureServingInfo, pluginInitializers, admissionPostStartHook, storageFactory, lastErr = buildGenericConfig(s.ServerRunOptions, proxyTransport)
 	if lastErr != nil {
 		return
 	}
@@ -410,7 +384,6 @@ func buildGenericConfig(
 	sharedInformers informers.SharedInformerFactory,
 	versionedInformers clientgoinformers.SharedInformerFactory,
 	insecureServingInfo *genericapiserver.DeprecatedInsecureServingInfo,
-	serviceResolver aggregatorapiserver.ServiceResolver,
 	pluginInitializers []admission.PluginInitializer,
 	admissionPostStartHook genericapiserver.PostStartHookFunc,
 	storageFactory *serverstorage.DefaultStorageFactory,
@@ -486,24 +459,6 @@ func buildGenericConfig(
 	}
 	versionedInformers = clientgoinformers.NewSharedInformerFactory(clientgoExternalClient, 10*time.Minute)
 
-	if s.EnableAggregatorRouting {
-		serviceResolver = aggregatorapiserver.NewEndpointServiceResolver(
-			versionedInformers.Core().V1().Services().Lister(),
-			versionedInformers.Core().V1().Endpoints().Lister(),
-		)
-	} else {
-		serviceResolver = aggregatorapiserver.NewClusterIPServiceResolver(
-			versionedInformers.Core().V1().Services().Lister(),
-		)
-	}
-	// resolve kubernetes.default.svc locally
-	localHost, err := url.Parse(genericConfig.LoopbackClientConfig.Host)
-	if err != nil {
-		lastErr = err
-		return
-	}
-	serviceResolver = aggregatorapiserver.NewLoopbackServiceResolver(serviceResolver, localHost)
-
 	genericConfig.Authentication.Authenticator, err = BuildAuthenticator(s, clientgoExternalClient, sharedInformers)
 	if err != nil {
 		lastErr = fmt.Errorf("invalid authentication config: %v", err)
@@ -546,7 +501,6 @@ func buildGenericConfig(
 		s,
 		client,
 		sharedInformers,
-		serviceResolver,
 		webhookAuthResolverWrapper,
 	)
 	if err != nil {
@@ -572,7 +526,6 @@ func BuildAdmissionPluginInitializers(
 	s *options.ServerRunOptions,
 	client internalclientset.Interface,
 	sharedInformers informers.SharedInformerFactory,
-	serviceResolver aggregatorapiserver.ServiceResolver,
 	webhookAuthWrapper webhook.AuthenticationInfoResolverWrapper,
 ) ([]admission.PluginInitializer, genericapiserver.PostStartHookFunc, error) {
 	var cloudConfig []byte
@@ -599,9 +552,8 @@ func BuildAdmissionPluginInitializers(
 	quotaConfiguration := quotainstall.NewQuotaConfigurationForAdmission()
 
 	kubePluginInitializer := kubeapiserveradmission.NewPluginInitializer(client, sharedInformers, cloudConfig, discoveryRESTMapper, quotaConfiguration)
-	webhookPluginInitializer := webhookinit.NewPluginInitializer(webhookAuthWrapper, serviceResolver)
 
-	return []admission.PluginInitializer{webhookPluginInitializer, kubePluginInitializer}, admissionPostStartHook, nil
+	return []admission.PluginInitializer{kubePluginInitializer}, admissionPostStartHook, nil
 }
 
 // BuildAuthenticator constructs the authenticator

pkg/master/controller/crdregistration/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-    "go_test",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = ["crdregistration_controller.go"],
-    importpath = "k8s.io/kubernetes/pkg/master/controller/crdregistration",
-    deps = [
-        "//pkg/controller:go_default_library",
-        "//staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions:go_default_library",
-        "//staging/src/k8s.io/apiextensions-apiserver/pkg/client/informers/internalversion/apiextensions/internalversion:go_default_library",
-        "//staging/src/k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/internalversion:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/labels:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/wait:go_default_library",
-        "//staging/src/k8s.io/client-go/tools/cache:go_default_library",
-        "//staging/src/k8s.io/client-go/util/workqueue:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//vendor/github.com/golang/glog:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)
-
-go_test(
-    name = "go_default_test",
-    srcs = ["crdregistration_controller_test.go"],
-    embed = [":go_default_library"],
-    deps = [
-        "//staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions:go_default_library",
-        "//staging/src/k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/internalversion:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/client-go/tools/cache:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-    ],
-)

pkg/master/controller/crdregistration/crdregistration_controller.go

-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package crdregistration
-
-import (
-	"fmt"
-	"time"
-
-	"github.com/golang/glog"
-
-	"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions"
-	crdinformers "k8s.io/apiextensions-apiserver/pkg/client/informers/internalversion/apiextensions/internalversion"
-	crdlisters "k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/internalversion"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/labels"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
-	"k8s.io/apimachinery/pkg/util/wait"
-	"k8s.io/client-go/tools/cache"
-	"k8s.io/client-go/util/workqueue"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-	"k8s.io/kubernetes/pkg/controller"
-)
-
-// AutoAPIServiceRegistration is an interface which callers can re-declare locally and properly cast to for
-// adding and removing APIServices
-type AutoAPIServiceRegistration interface {
-	// AddAPIServiceToSync adds an API service to auto-register.
-	AddAPIServiceToSync(in *apiregistration.APIService)
-	// RemoveAPIServiceToSync removes an API service to auto-register.
-	RemoveAPIServiceToSync(name string)
-}
-
-type crdRegistrationController struct {
-	crdLister crdlisters.CustomResourceDefinitionLister
-	crdSynced cache.InformerSynced
-
-	apiServiceRegistration AutoAPIServiceRegistration
-
-	syncHandler func(groupVersion schema.GroupVersion) error
-
-	syncedInitialSet chan struct{}
-
-	// queue is where incoming work is placed to de-dup and to allow "easy" rate limited requeues on errors
-	// this is actually keyed by a groupVersion
-	queue workqueue.RateLimitingInterface
-}
-
-// NewAutoRegistrationController returns a controller which will register CRD GroupVersions with the auto APIService registration
-// controller so they automatically stay in sync.
-func NewAutoRegistrationController(crdinformer crdinformers.CustomResourceDefinitionInformer, apiServiceRegistration AutoAPIServiceRegistration) *crdRegistrationController {
-	c := &crdRegistrationController{
-		crdLister:              crdinformer.Lister(),
-		crdSynced:              crdinformer.Informer().HasSynced,
-		apiServiceRegistration: apiServiceRegistration,
-		syncedInitialSet:       make(chan struct{}),
-		queue:                  workqueue.NewNamedRateLimitingQueue(workqueue.DefaultControllerRateLimiter(), "crd-autoregister"),
-	}
-	c.syncHandler = c.handleVersionUpdate
-
-	crdinformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
-		AddFunc: func(obj interface{}) {
-			cast := obj.(*apiextensions.CustomResourceDefinition)
-			c.enqueueCRD(cast)
-		},
-		UpdateFunc: func(oldObj, newObj interface{}) {
-			// Enqueue both old and new object to make sure we remove and add appropriate API services.
-			// The working queue will resolve any duplicates and only changes will stay in the queue.
-			c.enqueueCRD(oldObj.(*apiextensions.CustomResourceDefinition))
-			c.enqueueCRD(newObj.(*apiextensions.CustomResourceDefinition))
-		},
-		DeleteFunc: func(obj interface{}) {
-			cast, ok := obj.(*apiextensions.CustomResourceDefinition)
-			if !ok {
-				tombstone, ok := obj.(cache.DeletedFinalStateUnknown)
-				if !ok {
-					glog.V(2).Infof("Couldn't get object from tombstone %#v", obj)
-					return
-				}
-				cast, ok = tombstone.Obj.(*apiextensions.CustomResourceDefinition)
-				if !ok {
-					glog.V(2).Infof("Tombstone contained unexpected object: %#v", obj)
-					return
-				}
-			}
-			c.enqueueCRD(cast)
-		},
-	})
-
-	return c
-}
-
-func (c *crdRegistrationController) Run(threadiness int, stopCh <-chan struct{}) {
-	defer utilruntime.HandleCrash()
-	// make sure the work queue is shutdown which will trigger workers to end
-	defer c.queue.ShutDown()
-
-	glog.Infof("Starting crd-autoregister controller")
-	defer glog.Infof("Shutting down crd-autoregister controller")
-
-	// wait for your secondary caches to fill before starting your work
-	if !controller.WaitForCacheSync("crd-autoregister", stopCh, c.crdSynced) {
-		return
-	}
-
-	// process each item in the list once
-	if crds, err := c.crdLister.List(labels.Everything()); err != nil {
-		utilruntime.HandleError(err)
-	} else {
-		for _, crd := range crds {
-			for _, version := range crd.Spec.Versions {
-				if err := c.syncHandler(schema.GroupVersion{Group: crd.Spec.Group, Version: version.Name}); err != nil {
-					utilruntime.HandleError(err)
-				}
-			}
-		}
-	}
-	close(c.syncedInitialSet)
-
-	// start up your worker threads based on threadiness.  Some controllers have multiple kinds of workers
-	for i := 0; i < threadiness; i++ {
-		// runWorker will loop until "something bad" happens.  The .Until will then rekick the worker
-		// after one second
-		go wait.Until(c.runWorker, time.Second, stopCh)
-	}
-
-	// wait until we're told to stop
-	<-stopCh
-}
-
-// WaitForInitialSync blocks until the initial set of CRD resources has been processed
-func (c *crdRegistrationController) WaitForInitialSync() {
-	<-c.syncedInitialSet
-}
-
-func (c *crdRegistrationController) runWorker() {
-	// hot loop until we're told to stop.  processNextWorkItem will automatically wait until there's work
-	// available, so we don't worry about secondary waits
-	for c.processNextWorkItem() {
-	}
-}
-
-// processNextWorkItem deals with one key off the queue.  It returns false when it's time to quit.
-func (c *crdRegistrationController) processNextWorkItem() bool {
-	// pull the next work item from queue.  It should be a key we use to lookup something in a cache
-	key, quit := c.queue.Get()
-	if quit {
-		return false
-	}
-	// you always have to indicate to the queue that you've completed a piece of work
-	defer c.queue.Done(key)
-
-	// do your work on the key.  This method will contains your "do stuff" logic
-	err := c.syncHandler(key.(schema.GroupVersion))
-	if err == nil {
-		// if you had no error, tell the queue to stop tracking history for your key.  This will
-		// reset things like failure counts for per-item rate limiting
-		c.queue.Forget(key)
-		return true
-	}
-
-	// there was a failure so be sure to report it.  This method allows for pluggable error handling
-	// which can be used for things like cluster-monitoring
-	utilruntime.HandleError(fmt.Errorf("%v failed with : %v", key, err))
-	// since we failed, we should requeue the item to work on later.  This method will add a backoff
-	// to avoid hotlooping on particular items (they're probably still not going to work right away)
-	// and overall controller protection (everything I've done is broken, this controller needs to
-	// calm down or it can starve other useful work) cases.
-	c.queue.AddRateLimited(key)
-
-	return true
-}
-
-func (c *crdRegistrationController) enqueueCRD(crd *apiextensions.CustomResourceDefinition) {
-	for _, version := range crd.Spec.Versions {
-		c.queue.Add(schema.GroupVersion{Group: crd.Spec.Group, Version: version.Name})
-	}
-}
-
-func (c *crdRegistrationController) handleVersionUpdate(groupVersion schema.GroupVersion) error {
-	apiServiceName := groupVersion.Version + "." + groupVersion.Group
-
-	// check all CRDs.  There shouldn't that many, but if we have problems later we can index them
-	crds, err := c.crdLister.List(labels.Everything())
-	if err != nil {
-		return err
-	}
-	for _, crd := range crds {
-		if crd.Spec.Group != groupVersion.Group {
-			continue
-		}
-		for _, version := range crd.Spec.Versions {
-			if version.Name != groupVersion.Version || !version.Served {
-				continue
-			}
-
-			c.apiServiceRegistration.AddAPIServiceToSync(&apiregistration.APIService{
-				ObjectMeta: metav1.ObjectMeta{Name: apiServiceName},
-				Spec: apiregistration.APIServiceSpec{
-					Group:                groupVersion.Group,
-					Version:              groupVersion.Version,
-					GroupPriorityMinimum: 1000, // CRDs should have relatively low priority
-					VersionPriority:      100,  // CRDs will be sorted by kube-like versions like any other APIService with the same VersionPriority
-				},
-			})
-			return nil
-		}
-	}
-
-	c.apiServiceRegistration.RemoveAPIServiceToSync(apiServiceName)
-	return nil
-}

pkg/master/controller/crdregistration/crdregistration_controller_test.go

-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package crdregistration
-
-import (
-	"reflect"
-	"testing"
-
-	"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions"
-	crdlisters "k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/internalversion"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-	"k8s.io/client-go/tools/cache"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-)
-
-func TestHandleVersionUpdate(t *testing.T) {
-	tests := []struct {
-		name         string
-		startingCRDs []*apiextensions.CustomResourceDefinition
-		version      schema.GroupVersion
-
-		expectedAdded   []*apiregistration.APIService
-		expectedRemoved []string
-	}{
-		{
-			name: "simple add crd",
-			startingCRDs: []*apiextensions.CustomResourceDefinition{
-				{
-					Spec: apiextensions.CustomResourceDefinitionSpec{
-						Group: "group.com",
-						// Version field is deprecated and crd registration won't rely on it at all.
-						// defaulting route will fill up Versions field if user only provided version field.
-						Versions: []apiextensions.CustomResourceDefinitionVersion{
-							{
-								Name:    "v1",
-								Served:  true,
-								Storage: true,
-							},
-						},
-					},
-				},
-			},
-			version: schema.GroupVersion{Group: "group.com", Version: "v1"},
-
-			expectedAdded: []*apiregistration.APIService{
-				{
-					ObjectMeta: metav1.ObjectMeta{Name: "v1.group.com"},
-					Spec: apiregistration.APIServiceSpec{
-						Group:                "group.com",
-						Version:              "v1",
-						GroupPriorityMinimum: 1000,
-						VersionPriority:      100,
-					},
-				},
-			},
-		},
-		{
-			name: "simple remove crd",
-			startingCRDs: []*apiextensions.CustomResourceDefinition{
-				{
-					Spec: apiextensions.CustomResourceDefinitionSpec{
-						Group: "group.com",
-						Versions: []apiextensions.CustomResourceDefinitionVersion{
-							{
-								Name:    "v1",
-								Served:  true,
-								Storage: true,
-							},
-						},
-					},
-				},
-			},
-			version: schema.GroupVersion{Group: "group.com", Version: "v2"},
-
-			expectedRemoved: []string{"v2.group.com"},
-		},
-	}
-
-	for _, test := range tests {
-		t.Run(test.name, func(t *testing.T) {
-			registration := &fakeAPIServiceRegistration{}
-			crdCache := cache.NewIndexer(cache.DeletionHandlingMetaNamespaceKeyFunc, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc})
-			crdLister := crdlisters.NewCustomResourceDefinitionLister(crdCache)
-			c := crdRegistrationController{
-				crdLister:              crdLister,
-				apiServiceRegistration: registration,
-			}
-			for i := range test.startingCRDs {
-				crdCache.Add(test.startingCRDs[i])
-			}
-
-			c.handleVersionUpdate(test.version)
-
-			if !reflect.DeepEqual(test.expectedAdded, registration.added) {
-				t.Errorf("%s expected %v, got %v", test.name, test.expectedAdded, registration.added)
-			}
-			if !reflect.DeepEqual(test.expectedRemoved, registration.removed) {
-				t.Errorf("%s expected %v, got %v", test.name, test.expectedRemoved, registration.removed)
-			}
-		})
-	}
-}
-
-type fakeAPIServiceRegistration struct {
-	added   []*apiregistration.APIService
-	removed []string
-}
-
-func (a *fakeAPIServiceRegistration) AddAPIServiceToSync(in *apiregistration.APIService) {
-	a.added = append(a.added, in)
-}
-func (a *fakeAPIServiceRegistration) RemoveAPIServiceToSync(name string) {
-	a.removed = append(a.removed, name)
-}

staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/initializer/BUILD

-load("@io_bazel_rules_go//go:def.bzl", "go_library", "go_test")
-
-go_library(
-    name = "go_default_library",
-    srcs = ["initializer.go"],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/apiserver/pkg/admission/plugin/webhook/initializer",
-    importpath = "k8s.io/apiserver/pkg/admission/plugin/webhook/initializer",
-    visibility = ["//visibility:public"],
-    deps = [
-        "//staging/src/k8s.io/apiserver/pkg/admission:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/util/webhook:go_default_library",
-    ],
-)
-
-go_test(
-    name = "go_default_test",
-    srcs = ["initializer_test.go"],
-    embed = [":go_default_library"],
-    deps = [
-        "//staging/src/k8s.io/apiserver/pkg/admission:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/util/webhook:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-    visibility = ["//visibility:public"],
-)

staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/initializer/initializer.go

-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package initializer
-
-import (
-	"net/url"
-
-	"k8s.io/apiserver/pkg/admission"
-	"k8s.io/apiserver/pkg/util/webhook"
-)
-
-// WantsServiceResolver defines a function that accepts a ServiceResolver for
-// admission plugins that need to make calls to services.
-type WantsServiceResolver interface {
-	SetServiceResolver(webhook.ServiceResolver)
-}
-
-// ServiceResolver knows how to convert a service reference into an actual
-// location.
-type ServiceResolver interface {
-	ResolveEndpoint(namespace, name string) (*url.URL, error)
-}
-
-// WantsAuthenticationInfoResolverWrapper defines a function that wraps the standard AuthenticationInfoResolver
-// to allow the apiserver to control what is returned as auth info
-type WantsAuthenticationInfoResolverWrapper interface {
-	SetAuthenticationInfoResolverWrapper(wrapper webhook.AuthenticationInfoResolverWrapper)
-	admission.InitializationValidator
-}
-
-// PluginInitializer is used for initialization of the webhook admission plugin.
-type PluginInitializer struct {
-	serviceResolver                   webhook.ServiceResolver
-	authenticationInfoResolverWrapper webhook.AuthenticationInfoResolverWrapper
-}
-
-var _ admission.PluginInitializer = &PluginInitializer{}
-
-// NewPluginInitializer constructs new instance of PluginInitializer
-func NewPluginInitializer(
-	authenticationInfoResolverWrapper webhook.AuthenticationInfoResolverWrapper,
-	serviceResolver webhook.ServiceResolver,
-) *PluginInitializer {
-	return &PluginInitializer{
-		authenticationInfoResolverWrapper: authenticationInfoResolverWrapper,
-		serviceResolver:                   serviceResolver,
-	}
-}
-
-// Initialize checks the initialization interfaces implemented by each plugin
-// and provide the appropriate initialization data
-func (i *PluginInitializer) Initialize(plugin admission.Interface) {
-	if wants, ok := plugin.(WantsServiceResolver); ok {
-		wants.SetServiceResolver(i.serviceResolver)
-	}
-
-	if wants, ok := plugin.(WantsAuthenticationInfoResolverWrapper); ok {
-		if i.authenticationInfoResolverWrapper != nil {
-			wants.SetAuthenticationInfoResolverWrapper(i.authenticationInfoResolverWrapper)
-		}
-	}
-}

staging/src/k8s.io/apiserver/pkg/admission/plugin/webhook/initializer/initializer_test.go

-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package initializer
-
-import (
-	"net/url"
-	"testing"
-
-	"k8s.io/apiserver/pkg/admission"
-	"k8s.io/apiserver/pkg/util/webhook"
-)
-
-type doNothingAdmission struct{}
-
-func (doNothingAdmission) Handles(o admission.Operation) bool { return false }
-
-type fakeServiceResolver struct{}
-
-func (f *fakeServiceResolver) ResolveEndpoint(namespace, name string) (*url.URL, error) {
-	return nil, nil
-}
-
-type serviceWanter struct {
-	doNothingAdmission
-	got ServiceResolver
-}
-
-func (s *serviceWanter) SetServiceResolver(sr webhook.ServiceResolver) { s.got = sr }
-
-func TestWantsServiceResolver(t *testing.T) {
-	sw := &serviceWanter{}
-	fsr := &fakeServiceResolver{}
-	i := NewPluginInitializer(nil, fsr)
-	i.Initialize(sw)
-	if got, ok := sw.got.(*fakeServiceResolver); !ok || got != fsr {
-		t.Errorf("plumbing fail - %v %v#", ok, got)
-	}
-}

staging/src/k8s.io/kube-aggregator/.github/PULL_REQUEST_TEMPLATE.md

-Sorry, we do not accept changes directly against this repository. Please see 
-CONTRIBUTING.md for information on where and how to contribute instead.

staging/src/k8s.io/kube-aggregator/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_binary",
-    "go_library",
-)
-load("//vendor/k8s.io/client-go/pkg/version:def.bzl", "version_x_defs")
-
-go_binary(
-    name = "kube-aggregator",
-    embed = [":go_default_library"],
-    pure = "on",
-    x_defs = version_x_defs(),
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = ["main.go"],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator",
-    importpath = "k8s.io/kube-aggregator",
-    deps = [
-        "//staging/src/k8s.io/apiserver/pkg/server:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/util/logs:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/validation:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/internalclientset:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/v1beta1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/cmd/server:go_default_library",
-        "//vendor/github.com/golang/glog:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [
-        ":package-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apiserver:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/internalclientset:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/informers/externalversions:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/v1:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/v1beta1:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/cmd/server:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/controllers:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/registry/apiservice:all-srcs",
-    ],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/CONTRIBUTING.md

-# Contributing guidelines
-
-Do not open pull requests directly against this repository, they will be ignored. Instead, please open pull requests against [kubernetes/kubernetes](https://git.k8s.io/kubernetes/).  Please follow the same [contributing guide](https://git.k8s.io/kubernetes/CONTRIBUTING.md) you would follow for any other pull request made to kubernetes/kubernetes.
-
-This repository is published from [kubernetes/kubernetes/staging/src/k8s.io/kube-aggregator](https://git.k8s.io/kubernetes/staging/src/k8s.io/kube-aggregator) by the [kubernetes publishing-bot](https://git.k8s.io/publishing-bot). 
-
-Please see [Staging Directory and Publishing](https://git.k8s.io/community/contributors/devel/staging.md) for more information

staging/src/k8s.io/kube-aggregator/Godeps/OWNERS

-approvers:
-- dep-approvers

staging/src/k8s.io/kube-aggregator/Godeps/Readme

-This directory tree is generated automatically by godep.
-
-Please do not edit.
-
-See https://github.com/tools/godep for more information.

staging/src/k8s.io/kube-aggregator/OWNERS

-approvers:
-- deads2k
-- lavalamp
-- smarterclayton
-reviewers:
-- caesarxuchao
-- deads2k
-- lavalamp
-- smarterclayton
-- liggitt
-- sttts
-- cheftako
-labels:
-- sig/api-machinery

staging/src/k8s.io/kube-aggregator/README.md

-# kube-aggregator
-## Coming Soon!
-
-Implements https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/aggregated-api-servers.md.
-
-It provides
-* Provide an API for registering API servers.
-* Summarize discovery information from all the servers.
-* Proxy client requests to individual servers.
-
-
-## Purpose
-
-We want to divide the single monolithic API server into multiple aggregated
-servers. Anyone should be able to write their own aggregated API server to expose APIs they want.
-Cluster admins should be able to expose new APIs at runtime by bringing up new
-aggregated servers.
-
-
-## Compatibility
-
-HEAD of this repo will match HEAD of k8s.io/apiserver, k8s.io/apimachinery, and k8s.io/client-go.
-
-## Where does it come from?
-
-`kube-aggregator` is synced from https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/kube-aggregator.
-Code changes are made in that location, merged into `k8s.io/kubernetes` and later synced here.

staging/src/k8s.io/kube-aggregator/artifacts/hostpath-pods/insecure-etcd-pod.yaml

-apiVersion: v1
-kind: Pod
-metadata:
-  name: kube-aggregator
-  namespace: kube-public
-spec:
-  hostNetwork: true
-  containers:
-  - name: kube-aggregator
-    image: kube-aggregator
-    imagePullPolicy: IfNotPresent
-    args:
-    - "/usr/local/bin/kube-aggregator"
-    - "--secure-port=9443"
-    - "--kubeconfig=/var/run/auth-client/kube-aggregator.kubeconfig"
-    - "--authentication-kubeconfig=/var/run/auth-client/kube-aggregator.kubeconfig"
-    - "--authorization-kubeconfig=/var/run/auth-client/kube-aggregator.kubeconfig"
-    - "--proxy-client-cert-file=/var/run/auth-proxy-client/client-auth-proxy.crt"
-    - "--proxy-client-key-file=/var/run/auth-proxy-client/client-auth-proxy.key"
-    - "--tls-cert-file=/var/run/serving-cert/serving-kube-aggregator.crt"
-    - "--tls-private-key-file=/var/run/serving-cert/serving-kube-aggregator.key"
-    - "--client-ca-file=/var/run/client-ca/client-ca.crt"
-    - "--requestheader-username-headers=X-Remote-User"
-    - "--requestheader-group-headers=X-Remote-Group"
-    - "--requestheader-extra-headers-prefix=X-Remote-Extra-"
-    - "--requestheader-client-ca-file=/var/run/request-header-ca/request-header-ca.crt"
-    - "--etcd-servers=http://127.0.0.1:2379"
-    ports:
-    - containerPort: 9443
-      hostPort: 9443
-    volumeMounts:
-    - mountPath: /var/run/request-header-ca
-      name: volume-request-header-ca
-      readOnly: true
-    - mountPath: /var/run/client-ca
-      name: volume-client-ca
-      readOnly: true
-    - mountPath: /var/run/auth-proxy-client
-      name: volume-auth-proxy-client
-      readOnly: true
-    - mountPath: /var/run/etcd-client-cert
-      name: volume-etcd-client-cert
-      readOnly: true
-    - mountPath: /var/run/serving-ca
-      name: volume-serving-ca
-      readOnly: true
-    - mountPath: /var/run/serving-cert
-      name: volume-serving-cert
-      readOnly: true
-    - mountPath: /var/run/etcd-ca
-      name: volume-etcd-ca
-      readOnly: true
-    - mountPath: /var/run/auth-client
-      name: volume-auth-client
-      readOnly: true
-  volumes:
-  - name: volume-request-header-ca
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-client-ca
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-auth-proxy-client
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-etcd-client-cert
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-serving-cert
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-serving-ca
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-etcd-ca
-    hostPath:
-      path: /var/run/kubernetes/
-  - name: volume-auth-client
-    hostPath:
-      path: /var/run/kubernetes/

staging/src/k8s.io/kube-aggregator/artifacts/self-contained/etcd-pod.yaml

-kind: ReplicationController
-apiVersion: v1
-metadata:
-  name: etcd
-  labels:
-    etcd: "true"
-spec:
-  replicas: 1
-  selector:
-    etcd: "true"
-  template:
-    metadata:
-      labels:
-        etcd: "true"
-    spec:
-      containers:
-      - name: etcd
-        image: quay.io/coreos/etcd:v3.0.15
-        command:
-        - "etcd"
-        - "--listen-client-urls=https://0.0.0.0:4001"
-        - "--advertise-client-urls=https://etcd.kube-public.svc:4001"
-        - "--trusted-ca-file=/var/run/serving-ca/ca.crt"
-        - "--cert-file=/var/run/serving-cert/tls.crt"
-        - "--key-file=/var/run/serving-cert/tls.key"
-        - "--client-cert-auth=true"
-        - "--listen-peer-urls=https://0.0.0.0:7001"
-        - "--initial-advertise-peer-urls=https://etcd.kube-public.svc:7001"
-        - "--peer-trusted-ca-file=/var/run/serving-ca/ca.crt"
-        - "--peer-cert-file=/var/run/serving-cert/tls.crt"
-        - "--peer-key-file=/var/run/serving-cert/tls.key"
-        - "--peer-client-cert-auth=true"
-        - "--initial-cluster=default=https://etcd.kube-public.svc:7001"
-        ports:
-        - containerPort: 4001
-        volumeMounts:
-        - mountPath: /var/run/serving-cert
-          name: volume-serving-cert
-        - mountPath: /var/run/serving-ca
-          name: volume-etcd-ca
-      volumes:
-      - secret:
-          defaultMode: 420
-          secretName: serving-etcd
-        name: volume-serving-cert
-      - configMap:
-          defaultMode: 420
-          name: etcd-ca
-        name: volume-etcd-ca
-

staging/src/k8s.io/kube-aggregator/artifacts/self-contained/etcd-svc.yaml

-apiVersion: v1
-kind: Service
-metadata:
-  name: etcd
-spec:
-  ports:
-  - port: 4001
-    protocol: TCP
-    targetPort: 4001
-  selector:
-    etcd: "true"

staging/src/k8s.io/kube-aggregator/artifacts/self-contained/kubernetes-discover-pod.yaml

-kind: ReplicationController
-apiVersion: v1
-metadata:
-  name: kube-aggregator
-  labels:
-    kube-aggregator: "true"
-spec:
-  replicas: 1
-  selector:
-    kube-aggregator: "true"
-  template:
-    metadata:
-      labels:
-        kube-aggregator: "true"
-    spec:
-      containers:
-      - name: kube-aggregator
-        image: kube-aggregator:latest
-        imagePullPolicy: Never
-        livenessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /version
-            port: 443
-            scheme: HTTPS
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 1
-        readinessProbe:
-          failureThreshold: 3
-          httpGet:
-            path: /version
-            port: 443
-            scheme: HTTPS
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 1
-        args:
-        - "--proxy-client-cert-file=/var/run/auth-proxy-client/tls.crt"
-        - "--proxy-client-key-file=/var/run/auth-proxy-client/tls.key"
-        - "--tls-cert-file=/var/run/serving-cert/tls.crt"
-        - "--tls-private-key-file=/var/run/serving-cert/tls.key"
-        - "--etcd-servers=https://etcd.kube-public.svc:4001"
-        - "--etcd-certfile=/var/run/etcd-client-cert/tls.crt"
-        - "--etcd-keyfile=/var/run/etcd-client-cert/tls.key"
-        - "--etcd-cafile=/var/run/etcd-ca/ca.crt"
-        ports:
-        - containerPort: 443
-        volumeMounts:
-        - mountPath: /var/run/request-header-ca
-          name: volume-request-header-ca
-        - mountPath: /var/run/client-ca
-          name: volume-client-ca
-        - mountPath: /var/run/auth-proxy-client
-          name: volume-auth-proxy-client
-        - mountPath: /var/run/etcd-client-cert
-          name: volume-etcd-client-cert
-        - mountPath: /var/run/serving-ca
-          name: volume-serving-ca
-        - mountPath: /var/run/serving-cert
-          name: volume-serving-cert
-        - mountPath: /var/run/etcd-ca
-          name: volume-etcd-ca
-      serviceAccountName: kube-aggregator
-      volumes:
-      - configMap:
-          defaultMode: 420
-          name: request-header-ca
-        name: volume-request-header-ca
-      - configMap:
-          defaultMode: 420
-          name: client-ca
-        name: volume-client-ca
-      - name: volume-auth-proxy-client
-        secret:
-          defaultMode: 420
-          secretName: auth-proxy-client
-      - name: volume-etcd-client-cert
-        secret:
-          defaultMode: 420
-          secretName: kube-aggregator-etcd
-      - name: volume-serving-cert
-        secret:
-          defaultMode: 420
-          secretName: serving-kube-aggregator
-      - configMap:
-          defaultMode: 420
-          name: kube-aggregator-ca
-        name: volume-serving-ca
-      - configMap:
-          defaultMode: 420
-          name: etcd-ca
-        name: volume-etcd-ca

staging/src/k8s.io/kube-aggregator/artifacts/self-contained/kubernetes-discovery-sa.yaml

-kind: ServiceAccount
-apiVersion: v1
-metadata:
-  name: kube-aggregator
\ No newline at end of file

staging/src/k8s.io/kube-aggregator/artifacts/self-contained/kubernetes-discovery-svc.yaml

-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    kube-aggregator: "true"
-  name: kube-aggregator
-spec:
-  ports:
-  - port: 443
-    protocol: TCP
-    nodePort: 31090
-    targetPort: 443
-  selector:
-    kube-aggregator: "true"
-  type: NodePort

staging/src/k8s.io/kube-aggregator/artifacts/simple-image/Dockerfile

-# Copyright 2016 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-FROM fedora
-ADD kube-aggregator /
-ENTRYPOINT ["/kube-aggregator"]

staging/src/k8s.io/kube-aggregator/code-of-conduct.md

-# Kubernetes Community Code of Conduct
-
-Please refer to our [Kubernetes Community Code of Conduct](https://git.k8s.io/community/code-of-conduct.md)

staging/src/k8s.io/kube-aggregator/hack/apiservice-template.yaml

-apiVersion: apiregistration.k8s.io/v1beta1
-kind: APIService
-metadata:
-  name: RESOURCE_NAME
-spec:
-  group: API_GROUP
-  version: API_VERSION
-  service:
-    namespace: SERVICE_NAMESPACE
-    name: SERVICE_NAME
-  caBundle: CA_BUNDLE
-  priority: 100

staging/src/k8s.io/kube-aggregator/hack/boilerplate.go.txt

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-

staging/src/k8s.io/kube-aggregator/hack/build-image.sh

-#!/usr/bin/env bash
-
-# Copyright 2014 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-KUBE_ROOT=$(dirname "${BASH_SOURCE}")/../../../../..
-source "${KUBE_ROOT}/hack/lib/util.sh"
-
-# Register function to be called on EXIT to remove generated binary.
-function cleanup {
-  rm "${KUBE_ROOT}/vendor/k8s.io/kube-aggregator/artifacts/simple-image/kube-aggregator"
-}
-trap cleanup EXIT
-
-pushd "${KUBE_ROOT}/vendor/k8s.io/kube-aggregator"
-cp -v ../../../../_output/local/bin/linux/amd64/kube-aggregator ./artifacts/simple-image/kube-aggregator
-docker build -t kube-aggregator:latest ./artifacts/simple-image
-popd
\ No newline at end of file

staging/src/k8s.io/kube-aggregator/hack/local-up-kube-aggregator.sh

-#!/usr/bin/env bash
-
-# Copyright 2016 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# starts kube-aggregator as a pod after you've run `local-up-cluster.sh`
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-AGG_ROOT=$(dirname "${BASH_SOURCE}")/..
-KUBE_ROOT=${AGG_ROOT}/../../../..
-source "${KUBE_ROOT}/hack/lib/init.sh"
-
-AGGREGATOR_SECURE_PORT=${AGGREGATOR_SECURE_PORT:-31090}
-API_HOST=${API_HOST:-localhost}
-API_HOST_IP=${API_HOST_IP:-"127.0.0.1"}
-AGGREGATOR_CERT_DIR=${AGGREGATOR_CERT_DIR:-"/var/run/kubernetes/aggregator"}
-
-KUBE_CERT_DIR=${KUBE_CERT_DIR:-"/var/run/kubernetes"}
-SERVING_CERT_CA_CERT=${SERVING_CERT_CA_CERT:-"${KUBE_CERT_DIR}/server-ca.crt"}
-CLIENT_CERT_CA_CERT=${CLIENT_CERT_CA_CERT:-"${KUBE_CERT_DIR}/client-ca.crt"}
-FRONT_PROXY_CLIENT_CERT_CA_CERT=${FRONT_PROXY_CLIENT_CERT_CA_CERT:-"${KUBE_CERT_DIR}/request-header-ca.crt"}
-SERVING_CERT=${SERVING_CERT:-"${KUBE_CERT_DIR}/serving-kube-aggregator.crt"}
-SERVING_KEY=${SERVING_KEY:-"${KUBE_CERT_DIR}/serving-kube-aggregator.key"}
-FRONT_PROXY_CLIENT_CERT=${FRONT_PROXY_CLIENT_CERT:-"${KUBE_CERT_DIR}/client-auth-proxy.crt"}
-FRONT_PROXY_CLIENT_KEY=${FRONT_PROXY_CLIENT_KEY:-"${KUBE_CERT_DIR}/client-auth-proxy.key"}
-
-
-# Ensure AGGREGATOR_CERT_DIR is created for auto-generated crt/key and kubeconfig
-mkdir -p "${AGGREGATOR_CERT_DIR}" &>/dev/null || sudo mkdir -p "${AGGREGATOR_CERT_DIR}"
-sudo=$(test -w "${AGGREGATOR_CERT_DIR}" || echo "sudo -E")
-
-# start_kube-aggregator relies on certificates created by start_apiserver
-function start_kube-aggregator {
-	 # Create serving and client CA.  etcd only takes one arg
-	kube::util::create_signing_certkey "${sudo}" "${AGGREGATOR_CERT_DIR}" "etcd" '"client auth","server auth"'
-	kube::util::create_serving_certkey "${sudo}" "${AGGREGATOR_CERT_DIR}" "etcd-ca" etcd etcd.kube-public.svc
-	# etcd doesn't seem to have separate signers for serving and client trust
-	kube::util::create_client_certkey "${sudo}" "${AGGREGATOR_CERT_DIR}" "etcd-ca" kube-aggregator-etcd kube-aggregator-etcd
-
-	# don't fail if the namespace already exists or something
-	# If this fails for some reason, the script will fail during creation of other resources
-	kubectl create namespace kube-public || true
-
-	# grant permission to run delegated authentication and authorization checks
-	kubectl delete clusterrolebinding kube-aggregator:system:auth-delegator > /dev/null 2>&1 || true
-	kubectl delete clusterrolebinding kube-aggregator:system:kube-aggregator > /dev/null 2>&1 || true
-	kubectl create clusterrolebinding kube-aggregator:system:auth-delegator --clusterrole=system:auth-delegator --serviceaccount=kube-public:kube-aggregator
-	kubectl create clusterrolebinding kube-aggregator:system:kube-aggregator --clusterrole=system:kube-aggregator --serviceaccount=kube-public:kube-aggregator
-	kubectl delete rolebinding -n kube-system kube-aggregator:authentication-reader > /dev/null 2>&1 || true
-	kubectl create rolebinding -n kube-system kube-aggregator:authentication-reader --role=extension-apiserver-authentication-reader --serviceaccount=kube-public:kube-aggregator
-
-	# make sure the resources we're about to create don't exist
-	kubectl -n kube-public delete secret auth-proxy-client serving-etcd serving-kube-aggregator kube-aggregator-etcd > /dev/null 2>&1 || true
-	kubectl -n kube-public delete configmap etcd-ca kube-aggregator-ca client-ca request-header-ca > /dev/null 2>&1 || true
-	kubectl -n kube-public delete -f "${AGG_ROOT}/artifacts/self-contained" > /dev/null 2>&1 || true
-
-	${sudo} $(which kubectl) -n kube-public create secret tls auth-proxy-client --cert="${FRONT_PROXY_CLIENT_CERT}" --key="${FRONT_PROXY_CLIENT_KEY}"
-	${sudo} $(which kubectl)  -n kube-public create secret tls serving-etcd --cert="${AGGREGATOR_CERT_DIR}/serving-etcd.crt" --key="${AGGREGATOR_CERT_DIR}/serving-etcd.key"
-	${sudo} $(which kubectl)  -n kube-public create secret tls serving-kube-aggregator --cert="${SERVING_CERT}" --key="${SERVING_KEY}"
-	${sudo} $(which kubectl)  -n kube-public create secret tls kube-aggregator-etcd --cert="${AGGREGATOR_CERT_DIR}/client-kube-aggregator-etcd.crt" --key="${AGGREGATOR_CERT_DIR}/client-kube-aggregator-etcd.key"
-	kubectl -n kube-public create configmap etcd-ca --from-file="ca.crt=${AGGREGATOR_CERT_DIR}/etcd-ca.crt" || true
-	kubectl -n kube-public create configmap kube-aggregator-ca --from-file="ca.crt=${SERVING_CERT_CA_CERT}" || true
-	kubectl -n kube-public create configmap client-ca --from-file="ca.crt=${CLIENT_CERT_CA_CERT}" || true
-	kubectl -n kube-public create configmap request-header-ca --from-file="ca.crt=${FRONT_PROXY_CLIENT_CERT_CA_CERT}" || true
-
-	kubectl -n kube-public create -f "${AGG_ROOT}/artifacts/self-contained"
-
-	# Wait for kube-aggregator to come up before launching the rest of the components.
-	# This should work since we're creating a node port service.
-	echo "Waiting for kube-aggregator to come up: https://${API_HOST_IP}:${AGGREGATOR_SECURE_PORT}/version"
-	kube::util::wait_for_url "https://${API_HOST_IP}:${AGGREGATOR_SECURE_PORT}/version" "kube-aggregator: " 1 60 || exit 1
-}
-
-kube::util::test_openssl_installed
-kube::util::ensure-cfssl
-
-start_kube-aggregator
-
-echo "kube-aggregator available at https://${API_HOST_IP}:${AGGREGATOR_SECURE_PORT} from 'api.kube-public.svc'"

staging/src/k8s.io/kube-aggregator/hack/register-all-apis-from.sh

-#!/usr/bin/env bash
-
-# Copyright 2017 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-
-if LANG=C sed --help 2>&1 | grep -q GNU; then
-  SED="sed"
-elif which gsed &>/dev/null; then
-  SED="gsed"
-else
-  echo "Failed to find GNU sed as sed or gsed. If you are on Mac: brew install gnu-sed." >&2
-  exit 1
-fi
-
-dir=$(mktemp -d "${TMPDIR:-/tmp/}$(basename 0).XXXXXXXXXXXX")
-# Register function to be called on EXIT to remove generated binary.
-function cleanup {
-  rm -rf "${dir}"
-}
-trap cleanup EXIT
-
-
-scriptDir=$(dirname "${BASH_SOURCE}")
-
-# this uses discovery from a kube-like API server to register ALL the API versions that server provides
-# first argument is reference to kube-config file that points the API server you're adding from
-# second argument is the service namespace
-# third argument is the service name
-# fourth argument is reference to kube-config file that points to the aggregator you're using
-
-FROM_KUBECONFIG=${1}
-SERVICE_NAMESPACE=${2}
-SERVICE_NAME=${3}
-AGG_KUBECONFIG=${4}
-
-
-caBundle=$(base64 /var/run/kubernetes/server-ca.crt | awk 'BEGIN{ORS="";} {print}')
-
-# if we have a /api endpoint, then we need to register that
-if kubectl --kubeconfig=${FROM_KUBECONFIG} get --raw / | grep -q /api/v1; then
-	group=""
-	version="v1"
-	resourceName=${version}.${group}
-	resourceFileName=${dir}/${resourceName}.yaml
-	cp ${scriptDir}/apiservice-template.yaml ${resourceFileName}
-	${SED} -i "s/RESOURCE_NAME/${resourceName}/" ${resourceFileName}
-	${SED} -i "s/API_GROUP/${group}/" ${resourceFileName}
-	${SED} -i "s/API_VERSION/${version}/" ${resourceFileName}
-	${SED} -i "s/SERVICE_NAMESPACE/${SERVICE_NAMESPACE}/" ${resourceFileName}
-	${SED} -i "s/SERVICE_NAME/${SERVICE_NAME}/" ${resourceFileName}
-	${SED} -i "s/CA_BUNDLE/${caBundle}/" ${resourceFileName}
-	echo "registering ${resourceName} using ${resourceFileName}"
-
-	kubectl --kubeconfig=${AGG_KUBECONFIG} create -f ${resourceFileName}
-fi
-
-groupVersions=( $(kubectl --kubeconfig=${FROM_KUBECONFIG} get --raw / | grep /apis/ | sed 's/",.*//' | sed 's|.*"/apis/||' | grep '/') )
-
-for groupVersion in "${groupVersions[@]}"; do
-	group=$(echo $groupVersion | awk -F/ '{print $1}')
-	version=$(echo $groupVersion | awk -F/ '{print $2}')
-	resourceName=${version}.${group}
-	resourceFileName=${dir}/${resourceName}.yaml
-	cp ${scriptDir}/apiservice-template.yaml ${resourceFileName}
-	${SED} -i "s/RESOURCE_NAME/${resourceName}/" ${resourceFileName}
-	${SED} -i "s/API_GROUP/${group}/" ${resourceFileName}
-	${SED} -i "s/API_VERSION/${version}/" ${resourceFileName}
-	${SED} -i "s/SERVICE_NAMESPACE/${SERVICE_NAMESPACE}/" ${resourceFileName}
-	${SED} -i "s/SERVICE_NAME/${SERVICE_NAME}/" ${resourceFileName}
-	${SED} -i "s/CA_BUNDLE/${caBundle}/" ${resourceFileName}
-	echo "registering ${resourceName} using ${resourceFileName}"
-
-	kubectl --kubeconfig=${AGG_KUBECONFIG} create -f ${resourceFileName}
-done

staging/src/k8s.io/kube-aggregator/hack/update-codegen.sh

-#!/usr/bin/env bash
-
-# Copyright 2016 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")/..
-SCRIPT_BASE=${SCRIPT_ROOT}/../..
-CODEGEN_PKG=${CODEGEN_PKG:-$(cd ${SCRIPT_ROOT}; ls -d -1 ./vendor/k8s.io/code-generator 2>/dev/null || echo k8s.io/code-generator)}
-
-if LANG=C sed --help 2>&1 | grep -q GNU; then
-  SED="sed"
-elif which gsed &>/dev/null; then
-  SED="gsed"
-else
-  echo "Failed to find GNU sed as sed or gsed. If you are on Mac: brew install gnu-sed." >&2
-  exit 1
-fi
-
-# Register function to be called on EXIT to remove generated binary.
-function cleanup {
-  rm -f "${CLIENTGEN:-}"
-  rm -f "${listergen:-}"
-  rm -f "${informergen:-}"
-}
-trap cleanup EXIT
-
-echo "Building client-gen"
-CLIENTGEN="${PWD}/client-gen"
-
-go build -o "${CLIENTGEN}" ${CODEGEN_PKG}/cmd/client-gen
-
-PREFIX=k8s.io/kube-aggregator/pkg/apis
-INPUT_BASE="--input-base ${PREFIX}"
-INPUT_APIS=(
-apiregistration/
-apiregistration/v1beta1
-apiregistration/v1
-)
-INPUT="--input ${INPUT_APIS[@]}"
-CLIENTSET_PATH="--output-package k8s.io/kube-aggregator/pkg/client/clientset_generated"
-
-${CLIENTGEN} ${INPUT_BASE} ${INPUT} ${CLIENTSET_PATH} --output-base ${SCRIPT_BASE}
-${CLIENTGEN} --clientset-name="clientset" ${INPUT_BASE} --input apiregistration/v1beta1,apiregistration/v1 ${CLIENTSET_PATH}  --output-base ${SCRIPT_BASE} --go-header-file ${SCRIPT_ROOT}/hack/boilerplate.go.txt
-
-
-echo "Building lister-gen"
-listergen="${PWD}/lister-gen"
-go build -o "${listergen}" ${CODEGEN_PKG}/cmd/lister-gen
-
-LISTER_INPUT="--input-dirs k8s.io/kube-aggregator/pkg/apis/apiregistration --input-dirs k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1,k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"
-LISTER_PATH="--output-package k8s.io/kube-aggregator/pkg/client/listers"
-${listergen} ${LISTER_INPUT} ${LISTER_PATH} --output-base ${SCRIPT_BASE} --go-header-file ${SCRIPT_ROOT}/hack/boilerplate.go.txt
-
-
-echo "Building informer-gen"
-informergen="${PWD}/informer-gen"
-go build -o "${informergen}" ${CODEGEN_PKG}/cmd/informer-gen
-
-${informergen} \
-  --output-base ${SCRIPT_BASE} \
-  --input-dirs k8s.io/kube-aggregator/pkg/apis/apiregistration --input-dirs k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1,k8s.io/kube-aggregator/pkg/apis/apiregistration/v1 \
-  --versioned-clientset-package k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset \
-  --internal-clientset-package k8s.io/kube-aggregator/pkg/client/clientset_generated/internalclientset \
-  --listers-package k8s.io/kube-aggregator/pkg/client/listers \
-  --output-package k8s.io/kube-aggregator/pkg/client/informers \
-  --go-header-file ${SCRIPT_ROOT}/hack/boilerplate.go.txt
-  "$@"

staging/src/k8s.io/kube-aggregator/hack/verify-codegen.sh

-#!/usr/bin/env bash
-
-# Copyright 2016 The Kubernetes Authors.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-set -o errexit
-set -o nounset
-set -o pipefail
-
-SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")/..
-SCRIPT_BASE=${SCRIPT_ROOT}/../..
-
-DIFFROOT="${SCRIPT_ROOT}/pkg"
-TMP_DIFFROOT="${SCRIPT_ROOT}/_tmp/pkg"
-_tmp="${SCRIPT_ROOT}/_tmp"
-
-cleanup() {
-  rm -rf "${_tmp}"
-}
-trap "cleanup" EXIT SIGINT
-
-cleanup
-
-mkdir -p "${TMP_DIFFROOT}"
-cp -a "${DIFFROOT}"/* "${TMP_DIFFROOT}"
-
-"${SCRIPT_ROOT}/hack/update-codegen.sh"
-echo "diffing ${DIFFROOT} against freshly generated codegen"
-ret=0
-diff -Naupr "${DIFFROOT}" "${TMP_DIFFROOT}" || ret=$?
-cp -a "${TMP_DIFFROOT}"/* "${DIFFROOT}"
-if [[ $ret -eq 0 ]]
-then
-  echo "${DIFFROOT} up to date."
-else
-  echo "${DIFFROOT} is out of date. Please run hack/update-codegen.sh"
-  exit 1
-fi

staging/src/k8s.io/kube-aggregator/main.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package main
-
-import (
-	"flag"
-	"os"
-
-	"github.com/golang/glog"
-
-	genericapiserver "k8s.io/apiserver/pkg/server"
-	"k8s.io/apiserver/pkg/util/logs"
-	"k8s.io/kube-aggregator/pkg/cmd/server"
-
-	// force compilation of packages we'll later rely upon
-	_ "k8s.io/kube-aggregator/pkg/apis/apiregistration/install"
-	_ "k8s.io/kube-aggregator/pkg/apis/apiregistration/validation"
-	_ "k8s.io/kube-aggregator/pkg/client/clientset_generated/internalclientset"
-	_ "k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion"
-	_ "k8s.io/kube-aggregator/pkg/client/listers/apiregistration/v1beta1"
-)
-
-func main() {
-	logs.InitLogs()
-	defer logs.FlushLogs()
-
-	stopCh := genericapiserver.SetupSignalHandler()
-	options := server.NewDefaultOptions(os.Stdout, os.Stderr)
-	cmd := server.NewCommandStartAggregator(options, stopCh)
-	cmd.Flags().AddGoFlagSet(flag.CommandLine)
-	if err := cmd.Execute(); err != nil {
-		glog.Fatal(err)
-	}
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-    "go_test",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "doc.go",
-        "helpers.go",
-        "register.go",
-        "types.go",
-        "zz_generated.deepcopy.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration",
-    importpath = "k8s.io/kube-aggregator/pkg/apis/apiregistration",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/version:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [
-        ":package-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/validation:all-srcs",
-    ],
-    tags = ["automanaged"],
-)
-
-go_test(
-    name = "go_default_test",
-    srcs = ["helpers_test.go"],
-    embed = [":go_default_library"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/doc.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// +k8s:deepcopy-gen=package
-
-// Package api is the internal version of the API.
-// +groupName=apiregistration.k8s.io
-package apiregistration // import "k8s.io/kube-aggregator/pkg/apis/apiregistration"

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/helpers.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiregistration
-
-import (
-	"sort"
-	"strings"
-
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-	"k8s.io/apimachinery/pkg/version"
-)
-
-func SortedByGroupAndVersion(servers []*APIService) [][]*APIService {
-	serversByGroupPriorityMinimum := ByGroupPriorityMinimum(servers)
-	sort.Sort(serversByGroupPriorityMinimum)
-
-	ret := [][]*APIService{}
-	for _, curr := range serversByGroupPriorityMinimum {
-		// check to see if we already have an entry for this group
-		existingIndex := -1
-		for j, groupInReturn := range ret {
-			if groupInReturn[0].Spec.Group == curr.Spec.Group {
-				existingIndex = j
-				break
-			}
-		}
-
-		if existingIndex >= 0 {
-			ret[existingIndex] = append(ret[existingIndex], curr)
-			sort.Sort(ByVersionPriority(ret[existingIndex]))
-			continue
-		}
-
-		ret = append(ret, []*APIService{curr})
-	}
-
-	return ret
-}
-
-// ByGroupPriorityMinimum sorts with the highest group number first, then by name.
-// This is not a simple reverse, because we want the name sorting to be alpha, not
-// reverse alpha.
-type ByGroupPriorityMinimum []*APIService
-
-func (s ByGroupPriorityMinimum) Len() int      { return len(s) }
-func (s ByGroupPriorityMinimum) Swap(i, j int) { s[i], s[j] = s[j], s[i] }
-func (s ByGroupPriorityMinimum) Less(i, j int) bool {
-	if s[i].Spec.GroupPriorityMinimum != s[j].Spec.GroupPriorityMinimum {
-		return s[i].Spec.GroupPriorityMinimum > s[j].Spec.GroupPriorityMinimum
-	}
-	return s[i].Name < s[j].Name
-}
-
-// ByVersionPriority sorts with the highest version number first, then by name.
-// This is not a simple reverse, because we want the name sorting to be alpha, not
-// reverse alpha.
-type ByVersionPriority []*APIService
-
-func (s ByVersionPriority) Len() int      { return len(s) }
-func (s ByVersionPriority) Swap(i, j int) { s[i], s[j] = s[j], s[i] }
-func (s ByVersionPriority) Less(i, j int) bool {
-	if s[i].Spec.VersionPriority != s[j].Spec.VersionPriority {
-		return s[i].Spec.VersionPriority > s[j].Spec.VersionPriority
-	}
-	return version.CompareKubeAwareVersionStrings(s[i].Spec.Version, s[j].Spec.Version) > 0
-}
-
-// APIServiceNameToGroupVersion returns the GroupVersion for a given apiServiceName.  The name
-// must be valid, but any object you get back from an informer will be valid.
-func APIServiceNameToGroupVersion(apiServiceName string) schema.GroupVersion {
-	tokens := strings.SplitN(apiServiceName, ".", 2)
-	return schema.GroupVersion{Group: tokens[1], Version: tokens[0]}
-}
-
-// NewLocalAvailableAPIServiceCondition returns a condition for an available local APIService.
-func NewLocalAvailableAPIServiceCondition() APIServiceCondition {
-	return APIServiceCondition{
-		Type:               Available,
-		Status:             ConditionTrue,
-		LastTransitionTime: metav1.Now(),
-		Reason:             "Local",
-		Message:            "Local APIServices are always available",
-	}
-}
-
-// SetAPIServiceCondition sets the status condition.  It either overwrites the existing one or
-// creates a new one
-func SetAPIServiceCondition(apiService *APIService, newCondition APIServiceCondition) {
-	var existingCondition *APIServiceCondition
-	for i := range apiService.Status.Conditions {
-		if apiService.Status.Conditions[i].Type == newCondition.Type {
-			existingCondition = &apiService.Status.Conditions[i]
-			break
-		}
-	}
-	if existingCondition == nil {
-		apiService.Status.Conditions = append(apiService.Status.Conditions, newCondition)
-		return
-	}
-
-	if existingCondition.Status != newCondition.Status {
-		existingCondition.Status = newCondition.Status
-		existingCondition.LastTransitionTime = newCondition.LastTransitionTime
-	}
-
-	existingCondition.Reason = newCondition.Reason
-	existingCondition.Message = newCondition.Message
-}
-
-// IsAPIServiceConditionTrue indicates if the condition is present and strictly true
-func IsAPIServiceConditionTrue(apiService *APIService, conditionType APIServiceConditionType) bool {
-	for _, condition := range apiService.Status.Conditions {
-		if condition.Type == conditionType && condition.Status == ConditionTrue {
-			return true
-		}
-	}
-	return false
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = ["install.go"],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/install",
-    importpath = "k8s.io/kube-aggregator/pkg/apis/apiregistration/install",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install/install.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package install
-
-import (
-	"k8s.io/apimachinery/pkg/runtime"
-	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1"
-)
-
-// Install registers the API group and adds types to a scheme
-func Install(scheme *runtime.Scheme) {
-	utilruntime.Must(apiregistration.AddToScheme(scheme))
-	utilruntime.Must(v1.AddToScheme(scheme))
-	utilruntime.Must(v1beta1.AddToScheme(scheme))
-	utilruntime.Must(scheme.SetVersionPriority(v1.SchemeGroupVersion, v1beta1.SchemeGroupVersion))
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/register.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiregistration
-
-import (
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-)
-
-const GroupName = "apiregistration.k8s.io"
-
-// SchemeGroupVersion is group version used to register these objects
-var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: runtime.APIVersionInternal}
-
-// Kind takes an unqualified kind and returns back a Group qualified GroupKind
-func Kind(kind string) schema.GroupKind {
-	return SchemeGroupVersion.WithKind(kind).GroupKind()
-}
-
-// Resource takes an unqualified resource and returns back a Group qualified GroupResource
-func Resource(resource string) schema.GroupResource {
-	return SchemeGroupVersion.WithResource(resource).GroupResource()
-}
-
-var (
-	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
-	AddToScheme   = SchemeBuilder.AddToScheme
-)
-
-// Adds the list of known types to the given scheme.
-func addKnownTypes(scheme *runtime.Scheme) error {
-	scheme.AddKnownTypes(SchemeGroupVersion,
-		&APIService{},
-		&APIServiceList{},
-	)
-	return nil
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/types.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiregistration
-
-import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIServiceList is a list of APIService objects.
-type APIServiceList struct {
-	metav1.TypeMeta
-	metav1.ListMeta
-
-	Items []APIService
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-type ServiceReference struct {
-	// Namespace is the namespace of the service
-	Namespace string
-	// Name is the name of the service
-	Name string
-}
-
-// APIServiceSpec contains information for locating and communicating with a server.
-// Only https is supported, though you are able to disable certificate verification.
-type APIServiceSpec struct {
-	// Service is a reference to the service for this API server.  It must communicate
-	// on port 443
-	// If the Service is nil, that means the handling for the API groupversion is handled locally on this server.
-	// The call will simply delegate to the normal handler chain to be fulfilled.
-	Service *ServiceReference
-	// Group is the API group name this server hosts
-	Group string
-	// Version is the API version this server hosts.  For example, "v1"
-	Version string
-
-	// InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server.
-	// This is strongly discouraged.  You should use the CABundle instead.
-	InsecureSkipTLSVerify bool
-	// CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate.
-	// +optional
-	CABundle []byte
-
-	// GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones.
-	// Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority.
-	// The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10).
-	// The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo)
-	// We'd recommend something like: *.k8s.io (except extensions) at 18000 and
-	// PaaSes (OpenShift, Deis) are recommended to be in the 2000s
-	GroupPriorityMinimum int32
-
-	// VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero.
-	// The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10).
-	// Since it's inside of a group, the number can be small, probably in the 10s.
-	// In case of equal version priorities, the version string will be used to compute the order inside a group.
-	// If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-	// lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-	// then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-	// by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major
-	// version, then minor version. An example sorted list of versions:
-	// v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-	VersionPriority int32
-}
-
-type ConditionStatus string
-
-// These are valid condition statuses. "ConditionTrue" means a resource is in the condition;
-// "ConditionFalse" means a resource is not in the condition; "ConditionUnknown" means kubernetes
-// can't decide if a resource is in the condition or not. In the future, we could add other
-// intermediate conditions, e.g. ConditionDegraded.
-const (
-	ConditionTrue    ConditionStatus = "True"
-	ConditionFalse   ConditionStatus = "False"
-	ConditionUnknown ConditionStatus = "Unknown"
-)
-
-// APIConditionConditionType is a valid value for APIServiceCondition.Type
-type APIServiceConditionType string
-
-const (
-	// Available indicates that the service exists and is reachable
-	Available APIServiceConditionType = "Available"
-)
-
-// APIServiceCondition describes conditions for an APIService
-type APIServiceCondition struct {
-	// Type is the type of the condition.
-	Type APIServiceConditionType
-	// Status is the status of the condition.
-	// Can be True, False, Unknown.
-	Status ConditionStatus
-	// Last time the condition transitioned from one status to another.
-	LastTransitionTime metav1.Time
-	// Unique, one-word, CamelCase reason for the condition's last transition.
-	Reason string
-	// Human-readable message indicating details about last transition.
-	Message string
-}
-
-// APIServiceStatus contains derived information about an API server
-type APIServiceStatus struct {
-	// Current service state of apiService.
-	Conditions []APIServiceCondition
-}
-
-// +genclient
-// +genclient:nonNamespaced
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIService represents a server for a particular GroupVersion.
-// Name must be "version.group".
-type APIService struct {
-	metav1.TypeMeta
-	metav1.ObjectMeta
-
-	// Spec contains information for locating and communicating with a server
-	Spec APIServiceSpec
-	// Status contains derived information about an API server
-	Status APIServiceStatus
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "doc.go",
-        "generated.pb.go",
-        "register.go",
-        "types.go",
-        "zz_generated.conversion.go",
-        "zz_generated.deepcopy.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1",
-    importpath = "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/conversion:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//vendor/github.com/gogo/protobuf/proto:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/doc.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// +k8s:deepcopy-gen=package
-// +k8s:conversion-gen=k8s.io/kube-aggregator/pkg/apis/apiregistration
-// +k8s:openapi-gen=true
-
-// Package v1beta1 contains the API Registration API, which is responsible for
-// registering an API `Group`/`Version` with another kubernetes like API server.
-// The `APIService` holds information about the other API server in
-// `APIServiceSpec` type as well as general `TypeMeta` and `ObjectMeta`. The
-// `APIServiceSpec` type have the main configuration needed to do the
-// aggregation. Any request coming for specified `Group`/`Version` will be
-// directed to the service defined by `ServiceReference` (on port 443) after
-// validating the target using provided `CABundle` or skipping validation
-// if development flag `InsecureSkipTLSVerify` is set. `Priority` is controlling
-// the order of this API group in the overall discovery document.
-// The return status is a set of conditions for this aggregation. Currently
-// there is only one condition named "Available", if true, it means the
-// api/server requests will be redirected to specified API server.
-//
-// +groupName=apiregistration.k8s.io
-package v1 // import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/generated.proto

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-
-// This file was autogenerated by go-to-protobuf. Do not edit it manually!
-
-syntax = 'proto2';
-
-package k8s.io.kube_aggregator.pkg.apis.apiregistration.v1;
-
-import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
-import "k8s.io/apimachinery/pkg/runtime/generated.proto";
-import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
-
-// Package-wide variables from generator "generated".
-option go_package = "v1";
-
-// APIService represents a server for a particular GroupVersion.
-// Name must be "version.group".
-message APIService {
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
-
-  // Spec contains information for locating and communicating with a server
-  optional APIServiceSpec spec = 2;
-
-  // Status contains derived information about an API server
-  optional APIServiceStatus status = 3;
-}
-
-message APIServiceCondition {
-  // Type is the type of the condition.
-  optional string type = 1;
-
-  // Status is the status of the condition.
-  // Can be True, False, Unknown.
-  optional string status = 2;
-
-  // Last time the condition transitioned from one status to another.
-  // +optional
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
-
-  // Unique, one-word, CamelCase reason for the condition's last transition.
-  // +optional
-  optional string reason = 4;
-
-  // Human-readable message indicating details about last transition.
-  // +optional
-  optional string message = 5;
-}
-
-// APIServiceList is a list of APIService objects.
-message APIServiceList {
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
-
-  repeated APIService items = 2;
-}
-
-// APIServiceSpec contains information for locating and communicating with a server.
-// Only https is supported, though you are able to disable certificate verification.
-message APIServiceSpec {
-  // Service is a reference to the service for this API server.  It must communicate
-  // on port 443
-  // If the Service is nil, that means the handling for the API groupversion is handled locally on this server.
-  // The call will simply delegate to the normal handler chain to be fulfilled.
-  optional ServiceReference service = 1;
-
-  // Group is the API group name this server hosts
-  optional string group = 2;
-
-  // Version is the API version this server hosts.  For example, "v1"
-  optional string version = 3;
-
-  // InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server.
-  // This is strongly discouraged.  You should use the CABundle instead.
-  optional bool insecureSkipTLSVerify = 4;
-
-  // CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate.
-  // +optional
-  optional bytes caBundle = 5;
-
-  // GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones.
-  // Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority.
-  // The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10).
-  // The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo)
-  // We'd recommend something like: *.k8s.io (except extensions) at 18000 and
-  // PaaSes (OpenShift, Deis) are recommended to be in the 2000s
-  optional int32 groupPriorityMinimum = 7;
-
-  // VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero.
-  // The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10).
-  // Since it's inside of a group, the number can be small, probably in the 10s.
-  // In case of equal version priorities, the version string will be used to compute the order inside a group.
-  // If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-  // lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-  // then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-  // by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major
-  // version, then minor version. An example sorted list of versions:
-  // v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-  optional int32 versionPriority = 8;
-}
-
-// APIServiceStatus contains derived information about an API server
-message APIServiceStatus {
-  // Current service state of apiService.
-  // +optional
-  // +patchMergeKey=type
-  // +patchStrategy=merge
-  repeated APIServiceCondition conditions = 1;
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-message ServiceReference {
-  // Namespace is the namespace of the service
-  optional string namespace = 1;
-
-  // Name is the name of the service
-  optional string name = 2;
-}
-

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/register.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-)
-
-const GroupName = "apiregistration.k8s.io"
-
-// SchemeGroupVersion is group version used to register these objects
-var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
-
-// Resource takes an unqualified resource and returns back a Group qualified GroupResource
-func Resource(resource string) schema.GroupResource {
-	return SchemeGroupVersion.WithResource(resource).GroupResource()
-}
-
-var (
-	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
-	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
-	SchemeBuilder      runtime.SchemeBuilder
-	localSchemeBuilder = &SchemeBuilder
-	AddToScheme        = localSchemeBuilder.AddToScheme
-)
-
-func init() {
-	// We only register manually written functions here. The registration of the
-	// generated functions takes place in the generated files. The separation
-	// makes the code compile even when the generated files are missing.
-	localSchemeBuilder.Register(addKnownTypes)
-}
-
-// Adds the list of known types to the given scheme.
-func addKnownTypes(scheme *runtime.Scheme) error {
-	scheme.AddKnownTypes(SchemeGroupVersion,
-		&APIService{},
-		&APIServiceList{},
-	)
-	metav1.AddToGroupVersion(scheme, SchemeGroupVersion)
-	return nil
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/types.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1
-
-import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIServiceList is a list of APIService objects.
-type APIServiceList struct {
-	metav1.TypeMeta `json:",inline"`
-	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
-
-	Items []APIService `json:"items" protobuf:"bytes,2,rep,name=items"`
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-type ServiceReference struct {
-	// Namespace is the namespace of the service
-	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
-	// Name is the name of the service
-	Name string `json:"name,omitempty" protobuf:"bytes,2,opt,name=name"`
-}
-
-// APIServiceSpec contains information for locating and communicating with a server.
-// Only https is supported, though you are able to disable certificate verification.
-type APIServiceSpec struct {
-	// Service is a reference to the service for this API server.  It must communicate
-	// on port 443
-	// If the Service is nil, that means the handling for the API groupversion is handled locally on this server.
-	// The call will simply delegate to the normal handler chain to be fulfilled.
-	Service *ServiceReference `json:"service" protobuf:"bytes,1,opt,name=service"`
-	// Group is the API group name this server hosts
-	Group string `json:"group,omitempty" protobuf:"bytes,2,opt,name=group"`
-	// Version is the API version this server hosts.  For example, "v1"
-	Version string `json:"version,omitempty" protobuf:"bytes,3,opt,name=version"`
-
-	// InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server.
-	// This is strongly discouraged.  You should use the CABundle instead.
-	InsecureSkipTLSVerify bool `json:"insecureSkipTLSVerify,omitempty" protobuf:"varint,4,opt,name=insecureSkipTLSVerify"`
-	// CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate.
-	// +optional
-	CABundle []byte `json:"caBundle,omitempty" protobuf:"bytes,5,opt,name=caBundle"`
-
-	// GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones.
-	// Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority.
-	// The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10).
-	// The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo)
-	// We'd recommend something like: *.k8s.io (except extensions) at 18000 and
-	// PaaSes (OpenShift, Deis) are recommended to be in the 2000s
-	GroupPriorityMinimum int32 `json:"groupPriorityMinimum" protobuf:"varint,7,opt,name=groupPriorityMinimum"`
-
-	// VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero.
-	// The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10).
-	// Since it's inside of a group, the number can be small, probably in the 10s.
-	// In case of equal version priorities, the version string will be used to compute the order inside a group.
-	// If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-	// lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-	// then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-	// by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major
-	// version, then minor version. An example sorted list of versions:
-	// v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-	VersionPriority int32 `json:"versionPriority" protobuf:"varint,8,opt,name=versionPriority"`
-
-	// leaving this here so everyone remembers why proto index 6 is skipped
-	// Priority int64 `json:"priority" protobuf:"varint,6,opt,name=priority"`
-}
-
-type ConditionStatus string
-
-// These are valid condition statuses. "ConditionTrue" means a resource is in the condition;
-// "ConditionFalse" means a resource is not in the condition; "ConditionUnknown" means kubernetes
-// can't decide if a resource is in the condition or not. In the future, we could add other
-// intermediate conditions, e.g. ConditionDegraded.
-const (
-	ConditionTrue    ConditionStatus = "True"
-	ConditionFalse   ConditionStatus = "False"
-	ConditionUnknown ConditionStatus = "Unknown"
-)
-
-// APIConditionConditionType is a valid value for APIServiceCondition.Type
-type APIServiceConditionType string
-
-const (
-	// Available indicates that the service exists and is reachable
-	Available APIServiceConditionType = "Available"
-)
-
-type APIServiceCondition struct {
-	// Type is the type of the condition.
-	Type APIServiceConditionType `json:"type" protobuf:"bytes,1,opt,name=type,casttype=APIServiceConditionType"`
-	// Status is the status of the condition.
-	// Can be True, False, Unknown.
-	Status ConditionStatus `json:"status" protobuf:"bytes,2,opt,name=status,casttype=ConditionStatus"`
-	// Last time the condition transitioned from one status to another.
-	// +optional
-	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty" protobuf:"bytes,3,opt,name=lastTransitionTime"`
-	// Unique, one-word, CamelCase reason for the condition's last transition.
-	// +optional
-	Reason string `json:"reason,omitempty" protobuf:"bytes,4,opt,name=reason"`
-	// Human-readable message indicating details about last transition.
-	// +optional
-	Message string `json:"message,omitempty" protobuf:"bytes,5,opt,name=message"`
-}
-
-// APIServiceStatus contains derived information about an API server
-type APIServiceStatus struct {
-	// Current service state of apiService.
-	// +optional
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	Conditions []APIServiceCondition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`
-}
-
-// +genclient
-// +genclient:nonNamespaced
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIService represents a server for a particular GroupVersion.
-// Name must be "version.group".
-type APIService struct {
-	metav1.TypeMeta   `json:",inline"`
-	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
-
-	// Spec contains information for locating and communicating with a server
-	Spec APIServiceSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
-	// Status contains derived information about an API server
-	Status APIServiceStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1/zz_generated.deepcopy.go

-// +build !ignore_autogenerated
-
-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by deepcopy-gen. DO NOT EDIT.
-
-package v1
-
-import (
-	runtime "k8s.io/apimachinery/pkg/runtime"
-)
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIService) DeepCopyInto(out *APIService) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
-	in.Spec.DeepCopyInto(&out.Spec)
-	in.Status.DeepCopyInto(&out.Status)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIService.
-func (in *APIService) DeepCopy() *APIService {
-	if in == nil {
-		return nil
-	}
-	out := new(APIService)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIService) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceCondition) DeepCopyInto(out *APIServiceCondition) {
-	*out = *in
-	in.LastTransitionTime.DeepCopyInto(&out.LastTransitionTime)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceCondition.
-func (in *APIServiceCondition) DeepCopy() *APIServiceCondition {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceCondition)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceList) DeepCopyInto(out *APIServiceList) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	out.ListMeta = in.ListMeta
-	if in.Items != nil {
-		in, out := &in.Items, &out.Items
-		*out = make([]APIService, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceList.
-func (in *APIServiceList) DeepCopy() *APIServiceList {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceList)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIServiceList) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceSpec) DeepCopyInto(out *APIServiceSpec) {
-	*out = *in
-	if in.Service != nil {
-		in, out := &in.Service, &out.Service
-		*out = new(ServiceReference)
-		**out = **in
-	}
-	if in.CABundle != nil {
-		in, out := &in.CABundle, &out.CABundle
-		*out = make([]byte, len(*in))
-		copy(*out, *in)
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceSpec.
-func (in *APIServiceSpec) DeepCopy() *APIServiceSpec {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceSpec)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceStatus) DeepCopyInto(out *APIServiceStatus) {
-	*out = *in
-	if in.Conditions != nil {
-		in, out := &in.Conditions, &out.Conditions
-		*out = make([]APIServiceCondition, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceStatus.
-func (in *APIServiceStatus) DeepCopy() *APIServiceStatus {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceStatus)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *ServiceReference) DeepCopyInto(out *ServiceReference) {
-	*out = *in
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceReference.
-func (in *ServiceReference) DeepCopy() *ServiceReference {
-	if in == nil {
-		return nil
-	}
-	out := new(ServiceReference)
-	in.DeepCopyInto(out)
-	return out
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "doc.go",
-        "generated.pb.go",
-        "register.go",
-        "types.go",
-        "zz_generated.conversion.go",
-        "zz_generated.deepcopy.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1",
-    importpath = "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/conversion:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//vendor/github.com/gogo/protobuf/proto:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/doc.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// +k8s:deepcopy-gen=package
-// +k8s:conversion-gen=k8s.io/kube-aggregator/pkg/apis/apiregistration
-// +k8s:openapi-gen=true
-
-// Package v1beta1 contains the API Registration API, which is responsible for
-// registering an API `Group`/`Version` with another kubernetes like API server.
-// The `APIService` holds information about the other API server in
-// `APIServiceSpec` type as well as general `TypeMeta` and `ObjectMeta`. The
-// `APIServiceSpec` type have the main configuration needed to do the
-// aggregation. Any request coming for specified `Group`/`Version` will be
-// directed to the service defined by `ServiceReference` (on port 443) after
-// validating the target using provided `CABundle` or skipping validation
-// if development flag `InsecureSkipTLSVerify` is set. `Priority` is controlling
-// the order of this API group in the overall discovery document.
-// The return status is a set of conditions for this aggregation. Currently
-// there is only one condition named "Available", if true, it means the
-// api/server requests will be redirected to specified API server.
-//
-// +groupName=apiregistration.k8s.io
-package v1beta1 // import "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1"

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/generated.proto

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-
-// This file was autogenerated by go-to-protobuf. Do not edit it manually!
-
-syntax = 'proto2';
-
-package k8s.io.kube_aggregator.pkg.apis.apiregistration.v1beta1;
-
-import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
-import "k8s.io/apimachinery/pkg/runtime/generated.proto";
-import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
-
-// Package-wide variables from generator "generated".
-option go_package = "v1beta1";
-
-// APIService represents a server for a particular GroupVersion.
-// Name must be "version.group".
-message APIService {
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
-
-  // Spec contains information for locating and communicating with a server
-  optional APIServiceSpec spec = 2;
-
-  // Status contains derived information about an API server
-  optional APIServiceStatus status = 3;
-}
-
-message APIServiceCondition {
-  // Type is the type of the condition.
-  optional string type = 1;
-
-  // Status is the status of the condition.
-  // Can be True, False, Unknown.
-  optional string status = 2;
-
-  // Last time the condition transitioned from one status to another.
-  // +optional
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
-
-  // Unique, one-word, CamelCase reason for the condition's last transition.
-  // +optional
-  optional string reason = 4;
-
-  // Human-readable message indicating details about last transition.
-  // +optional
-  optional string message = 5;
-}
-
-// APIServiceList is a list of APIService objects.
-message APIServiceList {
-  optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
-
-  repeated APIService items = 2;
-}
-
-// APIServiceSpec contains information for locating and communicating with a server.
-// Only https is supported, though you are able to disable certificate verification.
-message APIServiceSpec {
-  // Service is a reference to the service for this API server.  It must communicate
-  // on port 443
-  // If the Service is nil, that means the handling for the API groupversion is handled locally on this server.
-  // The call will simply delegate to the normal handler chain to be fulfilled.
-  optional ServiceReference service = 1;
-
-  // Group is the API group name this server hosts
-  optional string group = 2;
-
-  // Version is the API version this server hosts.  For example, "v1"
-  optional string version = 3;
-
-  // InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server.
-  // This is strongly discouraged.  You should use the CABundle instead.
-  optional bool insecureSkipTLSVerify = 4;
-
-  // CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate.
-  // +optional
-  optional bytes caBundle = 5;
-
-  // GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones.
-  // Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority.
-  // The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10).
-  // The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo)
-  // We'd recommend something like: *.k8s.io (except extensions) at 18000 and
-  // PaaSes (OpenShift, Deis) are recommended to be in the 2000s
-  optional int32 groupPriorityMinimum = 7;
-
-  // VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero.
-  // The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10).
-  // Since it's inside of a group, the number can be small, probably in the 10s.
-  // In case of equal version priorities, the version string will be used to compute the order inside a group.
-  // If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-  // lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-  // then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-  // by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major
-  // version, then minor version. An example sorted list of versions:
-  // v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-  optional int32 versionPriority = 8;
-}
-
-// APIServiceStatus contains derived information about an API server
-message APIServiceStatus {
-  // Current service state of apiService.
-  // +optional
-  // +patchMergeKey=type
-  // +patchStrategy=merge
-  repeated APIServiceCondition conditions = 1;
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-message ServiceReference {
-  // Namespace is the namespace of the service
-  optional string namespace = 1;
-
-  // Name is the name of the service
-  optional string name = 2;
-}
-

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/register.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1beta1
-
-import (
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-)
-
-const GroupName = "apiregistration.k8s.io"
-
-// SchemeGroupVersion is group version used to register these objects
-var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}
-
-// Resource takes an unqualified resource and returns back a Group qualified GroupResource
-func Resource(resource string) schema.GroupResource {
-	return SchemeGroupVersion.WithResource(resource).GroupResource()
-}
-
-var (
-	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
-	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
-	SchemeBuilder      runtime.SchemeBuilder
-	localSchemeBuilder = &SchemeBuilder
-	AddToScheme        = localSchemeBuilder.AddToScheme
-)
-
-func init() {
-	// We only register manually written functions here. The registration of the
-	// generated functions takes place in the generated files. The separation
-	// makes the code compile even when the generated files are missing.
-	localSchemeBuilder.Register(addKnownTypes)
-}
-
-// Adds the list of known types to the given scheme.
-func addKnownTypes(scheme *runtime.Scheme) error {
-	scheme.AddKnownTypes(SchemeGroupVersion,
-		&APIService{},
-		&APIServiceList{},
-	)
-	metav1.AddToGroupVersion(scheme, SchemeGroupVersion)
-	return nil
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/types.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1beta1
-
-import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIServiceList is a list of APIService objects.
-type APIServiceList struct {
-	metav1.TypeMeta `json:",inline"`
-	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
-
-	Items []APIService `json:"items" protobuf:"bytes,2,rep,name=items"`
-}
-
-// ServiceReference holds a reference to Service.legacy.k8s.io
-type ServiceReference struct {
-	// Namespace is the namespace of the service
-	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
-	// Name is the name of the service
-	Name string `json:"name,omitempty" protobuf:"bytes,2,opt,name=name"`
-}
-
-// APIServiceSpec contains information for locating and communicating with a server.
-// Only https is supported, though you are able to disable certificate verification.
-type APIServiceSpec struct {
-	// Service is a reference to the service for this API server.  It must communicate
-	// on port 443
-	// If the Service is nil, that means the handling for the API groupversion is handled locally on this server.
-	// The call will simply delegate to the normal handler chain to be fulfilled.
-	Service *ServiceReference `json:"service" protobuf:"bytes,1,opt,name=service"`
-	// Group is the API group name this server hosts
-	Group string `json:"group,omitempty" protobuf:"bytes,2,opt,name=group"`
-	// Version is the API version this server hosts.  For example, "v1"
-	Version string `json:"version,omitempty" protobuf:"bytes,3,opt,name=version"`
-
-	// InsecureSkipTLSVerify disables TLS certificate verification when communicating with this server.
-	// This is strongly discouraged.  You should use the CABundle instead.
-	InsecureSkipTLSVerify bool `json:"insecureSkipTLSVerify,omitempty" protobuf:"varint,4,opt,name=insecureSkipTLSVerify"`
-	// CABundle is a PEM encoded CA bundle which will be used to validate an API server's serving certificate.
-	// +optional
-	CABundle []byte `json:"caBundle,omitempty" protobuf:"bytes,5,opt,name=caBundle"`
-
-	// GroupPriorityMininum is the priority this group should have at least. Higher priority means that the group is preferred by clients over lower priority ones.
-	// Note that other versions of this group might specify even higher GroupPriorityMininum values such that the whole group gets a higher priority.
-	// The primary sort is based on GroupPriorityMinimum, ordered highest number to lowest (20 before 10).
-	// The secondary sort is based on the alphabetical comparison of the name of the object.  (v1.bar before v1.foo)
-	// We'd recommend something like: *.k8s.io (except extensions) at 18000 and
-	// PaaSes (OpenShift, Deis) are recommended to be in the 2000s
-	GroupPriorityMinimum int32 `json:"groupPriorityMinimum" protobuf:"varint,7,opt,name=groupPriorityMinimum"`
-
-	// VersionPriority controls the ordering of this API version inside of its group.  Must be greater than zero.
-	// The primary sort is based on VersionPriority, ordered highest to lowest (20 before 10).
-	// Since it's inside of a group, the number can be small, probably in the 10s.
-	// In case of equal version priorities, the version string will be used to compute the order inside a group.
-	// If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
-	// lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
-	// then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
-	// by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing major
-	// version, then minor version. An example sorted list of versions:
-	// v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
-	VersionPriority int32 `json:"versionPriority" protobuf:"varint,8,opt,name=versionPriority"`
-
-	// leaving this here so everyone remembers why proto index 6 is skipped
-	// Priority int64 `json:"priority" protobuf:"varint,6,opt,name=priority"`
-}
-
-type ConditionStatus string
-
-// These are valid condition statuses. "ConditionTrue" means a resource is in the condition;
-// "ConditionFalse" means a resource is not in the condition; "ConditionUnknown" means kubernetes
-// can't decide if a resource is in the condition or not. In the future, we could add other
-// intermediate conditions, e.g. ConditionDegraded.
-const (
-	ConditionTrue    ConditionStatus = "True"
-	ConditionFalse   ConditionStatus = "False"
-	ConditionUnknown ConditionStatus = "Unknown"
-)
-
-// APIConditionConditionType is a valid value for APIServiceCondition.Type
-type APIServiceConditionType string
-
-const (
-	// Available indicates that the service exists and is reachable
-	Available APIServiceConditionType = "Available"
-)
-
-type APIServiceCondition struct {
-	// Type is the type of the condition.
-	Type APIServiceConditionType `json:"type" protobuf:"bytes,1,opt,name=type,casttype=APIServiceConditionType"`
-	// Status is the status of the condition.
-	// Can be True, False, Unknown.
-	Status ConditionStatus `json:"status" protobuf:"bytes,2,opt,name=status,casttype=ConditionStatus"`
-	// Last time the condition transitioned from one status to another.
-	// +optional
-	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty" protobuf:"bytes,3,opt,name=lastTransitionTime"`
-	// Unique, one-word, CamelCase reason for the condition's last transition.
-	// +optional
-	Reason string `json:"reason,omitempty" protobuf:"bytes,4,opt,name=reason"`
-	// Human-readable message indicating details about last transition.
-	// +optional
-	Message string `json:"message,omitempty" protobuf:"bytes,5,opt,name=message"`
-}
-
-// APIServiceStatus contains derived information about an API server
-type APIServiceStatus struct {
-	// Current service state of apiService.
-	// +optional
-	// +patchMergeKey=type
-	// +patchStrategy=merge
-	Conditions []APIServiceCondition `json:"conditions,omitempty" patchStrategy:"merge" patchMergeKey:"type" protobuf:"bytes,1,rep,name=conditions"`
-}
-
-// +genclient
-// +genclient:nonNamespaced
-// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
-
-// APIService represents a server for a particular GroupVersion.
-// Name must be "version.group".
-type APIService struct {
-	metav1.TypeMeta   `json:",inline"`
-	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
-
-	// Spec contains information for locating and communicating with a server
-	Spec APIServiceSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
-	// Status contains derived information about an API server
-	Status APIServiceStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1/zz_generated.deepcopy.go

-// +build !ignore_autogenerated
-
-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by deepcopy-gen. DO NOT EDIT.
-
-package v1beta1
-
-import (
-	runtime "k8s.io/apimachinery/pkg/runtime"
-)
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIService) DeepCopyInto(out *APIService) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
-	in.Spec.DeepCopyInto(&out.Spec)
-	in.Status.DeepCopyInto(&out.Status)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIService.
-func (in *APIService) DeepCopy() *APIService {
-	if in == nil {
-		return nil
-	}
-	out := new(APIService)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIService) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceCondition) DeepCopyInto(out *APIServiceCondition) {
-	*out = *in
-	in.LastTransitionTime.DeepCopyInto(&out.LastTransitionTime)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceCondition.
-func (in *APIServiceCondition) DeepCopy() *APIServiceCondition {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceCondition)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceList) DeepCopyInto(out *APIServiceList) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	out.ListMeta = in.ListMeta
-	if in.Items != nil {
-		in, out := &in.Items, &out.Items
-		*out = make([]APIService, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceList.
-func (in *APIServiceList) DeepCopy() *APIServiceList {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceList)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIServiceList) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceSpec) DeepCopyInto(out *APIServiceSpec) {
-	*out = *in
-	if in.Service != nil {
-		in, out := &in.Service, &out.Service
-		*out = new(ServiceReference)
-		**out = **in
-	}
-	if in.CABundle != nil {
-		in, out := &in.CABundle, &out.CABundle
-		*out = make([]byte, len(*in))
-		copy(*out, *in)
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceSpec.
-func (in *APIServiceSpec) DeepCopy() *APIServiceSpec {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceSpec)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceStatus) DeepCopyInto(out *APIServiceStatus) {
-	*out = *in
-	if in.Conditions != nil {
-		in, out := &in.Conditions, &out.Conditions
-		*out = make([]APIServiceCondition, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceStatus.
-func (in *APIServiceStatus) DeepCopy() *APIServiceStatus {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceStatus)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *ServiceReference) DeepCopyInto(out *ServiceReference) {
-	*out = *in
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceReference.
-func (in *ServiceReference) DeepCopy() *ServiceReference {
-	if in == nil {
-		return nil
-	}
-	out := new(ServiceReference)
-	in.DeepCopyInto(out)
-	return out
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/validation/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = ["validation.go"],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apis/apiregistration/validation",
-    importpath = "k8s.io/kube-aggregator/pkg/apis/apiregistration/validation",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/api/validation:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/api/validation/path:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/validation:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/validation/field:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/validation/validation.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package validation
-
-import (
-	"fmt"
-
-	"k8s.io/apimachinery/pkg/api/validation"
-	"k8s.io/apimachinery/pkg/api/validation/path"
-	utilvalidation "k8s.io/apimachinery/pkg/util/validation"
-	"k8s.io/apimachinery/pkg/util/validation/field"
-
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-)
-
-func ValidateAPIService(apiService *apiregistration.APIService) field.ErrorList {
-	requiredName := apiService.Spec.Version + "." + apiService.Spec.Group
-
-	allErrs := validation.ValidateObjectMeta(&apiService.ObjectMeta, false,
-		func(name string, prefix bool) []string {
-			if minimalFailures := path.IsValidPathSegmentName(name); len(minimalFailures) > 0 {
-				return minimalFailures
-			}
-			// the name *must* be version.group
-			if name != requiredName {
-				return []string{fmt.Sprintf("must be `spec.version+\".\"+spec.group`: %q", requiredName)}
-			}
-
-			return []string{}
-		},
-		field.NewPath("metadata"))
-
-	// in this case we allow empty group
-	if len(apiService.Spec.Group) == 0 && apiService.Spec.Version != "v1" {
-		allErrs = append(allErrs, field.Required(field.NewPath("spec", "group"), "only v1 may have an empty group and it better be legacy kube"))
-	}
-	if len(apiService.Spec.Group) > 0 {
-		for _, errString := range utilvalidation.IsDNS1123Subdomain(apiService.Spec.Group) {
-			allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "group"), apiService.Spec.Group, errString))
-		}
-	}
-
-	for _, errString := range utilvalidation.IsDNS1035Label(apiService.Spec.Version) {
-		allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "version"), apiService.Spec.Version, errString))
-	}
-
-	if apiService.Spec.GroupPriorityMinimum <= 0 || apiService.Spec.GroupPriorityMinimum > 20000 {
-		allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "groupPriorityMinimum"), apiService.Spec.GroupPriorityMinimum, "must be positive and less than 20000"))
-	}
-	if apiService.Spec.VersionPriority <= 0 || apiService.Spec.VersionPriority > 1000 {
-		allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "versionPriority"), apiService.Spec.VersionPriority, "must be positive and less than 1000"))
-	}
-
-	if apiService.Spec.Service == nil {
-		if len(apiService.Spec.CABundle) != 0 {
-			allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "caBundle"), fmt.Sprintf("%d bytes", len(apiService.Spec.CABundle)), "local APIServices may not have a caBundle"))
-		}
-		if apiService.Spec.InsecureSkipTLSVerify {
-			allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "insecureSkipTLSVerify"), apiService.Spec.InsecureSkipTLSVerify, "local APIServices may not have insecureSkipTLSVerify"))
-		}
-		return allErrs
-	}
-
-	if len(apiService.Spec.Service.Namespace) == 0 {
-		allErrs = append(allErrs, field.Required(field.NewPath("spec", "service", "namespace"), ""))
-	}
-	if len(apiService.Spec.Service.Name) == 0 {
-		allErrs = append(allErrs, field.Required(field.NewPath("spec", "service", "name"), ""))
-	}
-	if apiService.Spec.InsecureSkipTLSVerify && len(apiService.Spec.CABundle) > 0 {
-		allErrs = append(allErrs, field.Invalid(field.NewPath("spec", "insecureSkipTLSVerify"), apiService.Spec.InsecureSkipTLSVerify, "may not be true if caBundle is present"))
-	}
-
-	return allErrs
-}
-
-func ValidateAPIServiceUpdate(newAPIService *apiregistration.APIService, oldAPIService *apiregistration.APIService) field.ErrorList {
-	allErrs := validation.ValidateObjectMetaUpdate(&newAPIService.ObjectMeta, &oldAPIService.ObjectMeta, field.NewPath("metadata"))
-	allErrs = append(allErrs, ValidateAPIService(newAPIService)...)
-
-	return allErrs
-}
-
-func ValidateAPIServiceStatus(status *apiregistration.APIServiceStatus, fldPath *field.Path) field.ErrorList {
-	allErrs := field.ErrorList{}
-
-	for i, condition := range status.Conditions {
-		if condition.Status != apiregistration.ConditionTrue &&
-			condition.Status != apiregistration.ConditionFalse &&
-			condition.Status != apiregistration.ConditionUnknown {
-			allErrs = append(allErrs, field.NotSupported(fldPath.Child("conditions").Index(i).Child("status"), condition.Status, []string{
-				string(apiregistration.ConditionTrue), string(apiregistration.ConditionFalse), string(apiregistration.ConditionUnknown)}))
-		}
-	}
-
-	return allErrs
-}
-
-func ValidateAPIServiceStatusUpdate(newAPIService *apiregistration.APIService, oldAPIService *apiregistration.APIService) field.ErrorList {
-	allErrs := validation.ValidateObjectMetaUpdate(&newAPIService.ObjectMeta, &oldAPIService.ObjectMeta, field.NewPath("metadata"))
-	allErrs = append(allErrs, ValidateAPIServiceStatus(&newAPIService.Status, field.NewPath("status"))...)
-	return allErrs
-}

staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/zz_generated.deepcopy.go

-// +build !ignore_autogenerated
-
-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by deepcopy-gen. DO NOT EDIT.
-
-package apiregistration
-
-import (
-	runtime "k8s.io/apimachinery/pkg/runtime"
-)
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIService) DeepCopyInto(out *APIService) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
-	in.Spec.DeepCopyInto(&out.Spec)
-	in.Status.DeepCopyInto(&out.Status)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIService.
-func (in *APIService) DeepCopy() *APIService {
-	if in == nil {
-		return nil
-	}
-	out := new(APIService)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIService) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceCondition) DeepCopyInto(out *APIServiceCondition) {
-	*out = *in
-	in.LastTransitionTime.DeepCopyInto(&out.LastTransitionTime)
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceCondition.
-func (in *APIServiceCondition) DeepCopy() *APIServiceCondition {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceCondition)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceList) DeepCopyInto(out *APIServiceList) {
-	*out = *in
-	out.TypeMeta = in.TypeMeta
-	out.ListMeta = in.ListMeta
-	if in.Items != nil {
-		in, out := &in.Items, &out.Items
-		*out = make([]APIService, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceList.
-func (in *APIServiceList) DeepCopy() *APIServiceList {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceList)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *APIServiceList) DeepCopyObject() runtime.Object {
-	if c := in.DeepCopy(); c != nil {
-		return c
-	}
-	return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceSpec) DeepCopyInto(out *APIServiceSpec) {
-	*out = *in
-	if in.Service != nil {
-		in, out := &in.Service, &out.Service
-		*out = new(ServiceReference)
-		**out = **in
-	}
-	if in.CABundle != nil {
-		in, out := &in.CABundle, &out.CABundle
-		*out = make([]byte, len(*in))
-		copy(*out, *in)
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceSpec.
-func (in *APIServiceSpec) DeepCopy() *APIServiceSpec {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceSpec)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *APIServiceStatus) DeepCopyInto(out *APIServiceStatus) {
-	*out = *in
-	if in.Conditions != nil {
-		in, out := &in.Conditions, &out.Conditions
-		*out = make([]APIServiceCondition, len(*in))
-		for i := range *in {
-			(*in)[i].DeepCopyInto(&(*out)[i])
-		}
-	}
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServiceStatus.
-func (in *APIServiceStatus) DeepCopy() *APIServiceStatus {
-	if in == nil {
-		return nil
-	}
-	out := new(APIServiceStatus)
-	in.DeepCopyInto(out)
-	return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in ByGroupPriorityMinimum) DeepCopyInto(out *ByGroupPriorityMinimum) {
-	{
-		in := &in
-		*out = make(ByGroupPriorityMinimum, len(*in))
-		for i := range *in {
-			if (*in)[i] != nil {
-				in, out := &(*in)[i], &(*out)[i]
-				*out = new(APIService)
-				(*in).DeepCopyInto(*out)
-			}
-		}
-		return
-	}
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ByGroupPriorityMinimum.
-func (in ByGroupPriorityMinimum) DeepCopy() ByGroupPriorityMinimum {
-	if in == nil {
-		return nil
-	}
-	out := new(ByGroupPriorityMinimum)
-	in.DeepCopyInto(out)
-	return *out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in ByVersionPriority) DeepCopyInto(out *ByVersionPriority) {
-	{
-		in := &in
-		*out = make(ByVersionPriority, len(*in))
-		for i := range *in {
-			if (*in)[i] != nil {
-				in, out := &(*in)[i], &(*out)[i]
-				*out = new(APIService)
-				(*in).DeepCopyInto(*out)
-			}
-		}
-		return
-	}
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ByVersionPriority.
-func (in ByVersionPriority) DeepCopy() ByVersionPriority {
-	if in == nil {
-		return nil
-	}
-	out := new(ByVersionPriority)
-	in.DeepCopyInto(out)
-	return *out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *ServiceReference) DeepCopyInto(out *ServiceReference) {
-	*out = *in
-	return
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceReference.
-func (in *ServiceReference) DeepCopy() *ServiceReference {
-	if in == nil {
-		return nil
-	}
-	out := new(ServiceReference)
-	in.DeepCopyInto(out)
-	return out
-}

staging/src/k8s.io/kube-aggregator/pkg/apiserver/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-    "go_test",
-)
-
-go_test(
-    name = "go_default_test",
-    srcs = [
-        "handler_apis_test.go",
-        "handler_proxy_test.go",
-    ],
-    embed = [":go_default_library"],
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/api/equality:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/diff:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/sets:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/authentication/user:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/endpoints/request:go_default_library",
-        "//staging/src/k8s.io/client-go/tools/cache:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apiserver/scheme:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion:go_default_library",
-        "//vendor/golang.org/x/net/websocket:go_default_library",
-    ],
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "apiserver.go",
-        "apiservice_controller.go",
-        "handler_apis.go",
-        "handler_proxy.go",
-        "resolvers.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apiserver",
-    importpath = "k8s.io/kube-aggregator/pkg/apiserver",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/api/errors:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/labels:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/httpstream:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/httpstream/spdy:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/net:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/proxy:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/sets:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/wait:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/endpoints/request:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/features:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/server:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/server/storage:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/util/feature:go_default_library",
-        "//staging/src/k8s.io/apiserver/pkg/util/proxy:go_default_library",
-        "//staging/src/k8s.io/client-go/listers/core/v1:go_default_library",
-        "//staging/src/k8s.io/client-go/pkg/version:go_default_library",
-        "//staging/src/k8s.io/client-go/rest:go_default_library",
-        "//staging/src/k8s.io/client-go/tools/cache:go_default_library",
-        "//staging/src/k8s.io/client-go/transport:go_default_library",
-        "//staging/src/k8s.io/client-go/util/workqueue:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apiserver/scheme:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/internalclientset:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion/apiregistration/internalversion:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/controllers:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/controllers/openapi:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/controllers/status:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/registry/apiservice/rest:go_default_library",
-        "//vendor/github.com/golang/glog:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [
-        ":package-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apiserver/scheme:all-srcs",
-    ],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apiserver/apiservice_controller.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiserver
-
-import (
-	"fmt"
-	"time"
-
-	"github.com/golang/glog"
-
-	apierrors "k8s.io/apimachinery/pkg/api/errors"
-	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
-	"k8s.io/apimachinery/pkg/util/wait"
-	"k8s.io/client-go/tools/cache"
-	"k8s.io/client-go/util/workqueue"
-
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-	informers "k8s.io/kube-aggregator/pkg/client/informers/internalversion/apiregistration/internalversion"
-	listers "k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion"
-	"k8s.io/kube-aggregator/pkg/controllers"
-)
-
-type APIHandlerManager interface {
-	AddAPIService(apiService *apiregistration.APIService) error
-	RemoveAPIService(apiServiceName string)
-}
-
-type APIServiceRegistrationController struct {
-	apiHandlerManager APIHandlerManager
-
-	apiServiceLister listers.APIServiceLister
-	apiServiceSynced cache.InformerSynced
-
-	// To allow injection for testing.
-	syncFn func(key string) error
-
-	queue workqueue.RateLimitingInterface
-}
-
-func NewAPIServiceRegistrationController(apiServiceInformer informers.APIServiceInformer, apiHandlerManager APIHandlerManager) *APIServiceRegistrationController {
-	c := &APIServiceRegistrationController{
-		apiHandlerManager: apiHandlerManager,
-		apiServiceLister:  apiServiceInformer.Lister(),
-		apiServiceSynced:  apiServiceInformer.Informer().HasSynced,
-		queue:             workqueue.NewNamedRateLimitingQueue(workqueue.DefaultControllerRateLimiter(), "APIServiceRegistrationController"),
-	}
-
-	apiServiceInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
-		AddFunc:    c.addAPIService,
-		UpdateFunc: c.updateAPIService,
-		DeleteFunc: c.deleteAPIService,
-	})
-
-	c.syncFn = c.sync
-
-	return c
-}
-
-func (c *APIServiceRegistrationController) sync(key string) error {
-	apiService, err := c.apiServiceLister.Get(key)
-	if apierrors.IsNotFound(err) {
-		c.apiHandlerManager.RemoveAPIService(key)
-		return nil
-	}
-	if err != nil {
-		return err
-	}
-
-	return c.apiHandlerManager.AddAPIService(apiService)
-}
-
-func (c *APIServiceRegistrationController) Run(stopCh <-chan struct{}) {
-	defer utilruntime.HandleCrash()
-	defer c.queue.ShutDown()
-
-	glog.Infof("Starting APIServiceRegistrationController")
-	defer glog.Infof("Shutting down APIServiceRegistrationController")
-
-	if !controllers.WaitForCacheSync("APIServiceRegistrationController", stopCh, c.apiServiceSynced) {
-		return
-	}
-
-	// only start one worker thread since its a slow moving API and the aggregation server adding bits
-	// aren't threadsafe
-	go wait.Until(c.runWorker, time.Second, stopCh)
-
-	<-stopCh
-}
-
-func (c *APIServiceRegistrationController) runWorker() {
-	for c.processNextWorkItem() {
-	}
-}
-
-// processNextWorkItem deals with one key off the queue.  It returns false when it's time to quit.
-func (c *APIServiceRegistrationController) processNextWorkItem() bool {
-	key, quit := c.queue.Get()
-	if quit {
-		return false
-	}
-	defer c.queue.Done(key)
-
-	err := c.syncFn(key.(string))
-	if err == nil {
-		c.queue.Forget(key)
-		return true
-	}
-
-	utilruntime.HandleError(fmt.Errorf("%v failed with : %v", key, err))
-	c.queue.AddRateLimited(key)
-
-	return true
-}
-
-func (c *APIServiceRegistrationController) enqueue(obj *apiregistration.APIService) {
-	key, err := cache.DeletionHandlingMetaNamespaceKeyFunc(obj)
-	if err != nil {
-		glog.Errorf("Couldn't get key for object %#v: %v", obj, err)
-		return
-	}
-
-	c.queue.Add(key)
-}
-
-func (c *APIServiceRegistrationController) addAPIService(obj interface{}) {
-	castObj := obj.(*apiregistration.APIService)
-	glog.V(4).Infof("Adding %s", castObj.Name)
-	c.enqueue(castObj)
-}
-
-func (c *APIServiceRegistrationController) updateAPIService(obj, _ interface{}) {
-	castObj := obj.(*apiregistration.APIService)
-	glog.V(4).Infof("Updating %s", castObj.Name)
-	c.enqueue(castObj)
-}
-
-func (c *APIServiceRegistrationController) deleteAPIService(obj interface{}) {
-	castObj, ok := obj.(*apiregistration.APIService)
-	if !ok {
-		tombstone, ok := obj.(cache.DeletedFinalStateUnknown)
-		if !ok {
-			glog.Errorf("Couldn't get object from tombstone %#v", obj)
-			return
-		}
-		castObj, ok = tombstone.Obj.(*apiregistration.APIService)
-		if !ok {
-			glog.Errorf("Tombstone contained object that is not expected %#v", obj)
-			return
-		}
-	}
-	glog.V(4).Infof("Deleting %q", castObj.Name)
-	c.enqueue(castObj)
-}

staging/src/k8s.io/kube-aggregator/pkg/apiserver/handler_apis.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiserver
-
-import (
-	"net/http"
-
-	apierrors "k8s.io/apimachinery/pkg/api/errors"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/apimachinery/pkg/labels"
-	"k8s.io/apimachinery/pkg/runtime/schema"
-	"k8s.io/apimachinery/pkg/runtime/serializer"
-	"k8s.io/apiserver/pkg/endpoints/handlers/responsewriters"
-
-	apiregistrationapi "k8s.io/kube-aggregator/pkg/apis/apiregistration"
-	apiregistrationv1api "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"
-	apiregistrationv1beta1api "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1"
-	listers "k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion"
-)
-
-// apisHandler serves the `/apis` endpoint.
-// This is registered as a filter so that it never collides with any explicitly registered endpoints
-type apisHandler struct {
-	codecs serializer.CodecFactory
-	lister listers.APIServiceLister
-}
-
-var discoveryGroup = metav1.APIGroup{
-	Name: apiregistrationapi.GroupName,
-	Versions: []metav1.GroupVersionForDiscovery{
-		{
-			GroupVersion: apiregistrationv1api.SchemeGroupVersion.String(),
-			Version:      apiregistrationv1api.SchemeGroupVersion.Version,
-		},
-		{
-			GroupVersion: apiregistrationv1beta1api.SchemeGroupVersion.String(),
-			Version:      apiregistrationv1beta1api.SchemeGroupVersion.Version,
-		},
-	},
-	PreferredVersion: metav1.GroupVersionForDiscovery{
-		GroupVersion: apiregistrationv1api.SchemeGroupVersion.String(),
-		Version:      apiregistrationv1api.SchemeGroupVersion.Version,
-	},
-}
-
-func (r *apisHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
-	discoveryGroupList := &metav1.APIGroupList{
-		// always add OUR api group to the list first.  Since we'll never have a registered APIService for it
-		// and since this is the crux of the API, having this first will give our names priority.  It's good to be king.
-		Groups: []metav1.APIGroup{discoveryGroup},
-	}
-
-	apiServices, err := r.lister.List(labels.Everything())
-	if err != nil {
-		http.Error(w, err.Error(), http.StatusInternalServerError)
-		return
-	}
-	apiServicesByGroup := apiregistrationapi.SortedByGroupAndVersion(apiServices)
-	for _, apiGroupServers := range apiServicesByGroup {
-		// skip the legacy group
-		if len(apiGroupServers[0].Spec.Group) == 0 {
-			continue
-		}
-		discoveryGroup := convertToDiscoveryAPIGroup(apiGroupServers)
-		if discoveryGroup != nil {
-			discoveryGroupList.Groups = append(discoveryGroupList.Groups, *discoveryGroup)
-		}
-	}
-
-	responsewriters.WriteObjectNegotiated(r.codecs, schema.GroupVersion{}, w, req, http.StatusOK, discoveryGroupList)
-}
-
-// convertToDiscoveryAPIGroup takes apiservices in a single group and returns a discovery compatible object.
-// if none of the services are available, it will return nil.
-func convertToDiscoveryAPIGroup(apiServices []*apiregistrationapi.APIService) *metav1.APIGroup {
-	apiServicesByGroup := apiregistrationapi.SortedByGroupAndVersion(apiServices)[0]
-
-	var discoveryGroup *metav1.APIGroup
-
-	for _, apiService := range apiServicesByGroup {
-		// the first APIService which is valid becomes the default
-		if discoveryGroup == nil {
-			discoveryGroup = &metav1.APIGroup{
-				Name: apiService.Spec.Group,
-				PreferredVersion: metav1.GroupVersionForDiscovery{
-					GroupVersion: apiService.Spec.Group + "/" + apiService.Spec.Version,
-					Version:      apiService.Spec.Version,
-				},
-			}
-		}
-
-		discoveryGroup.Versions = append(discoveryGroup.Versions,
-			metav1.GroupVersionForDiscovery{
-				GroupVersion: apiService.Spec.Group + "/" + apiService.Spec.Version,
-				Version:      apiService.Spec.Version,
-			},
-		)
-	}
-
-	return discoveryGroup
-}
-
-// apiGroupHandler serves the `/apis/<group>` endpoint.
-type apiGroupHandler struct {
-	codecs    serializer.CodecFactory
-	groupName string
-
-	lister listers.APIServiceLister
-
-	delegate http.Handler
-}
-
-func (r *apiGroupHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
-	apiServices, err := r.lister.List(labels.Everything())
-	if statusErr, ok := err.(*apierrors.StatusError); ok && err != nil {
-		responsewriters.WriteRawJSON(int(statusErr.Status().Code), statusErr.Status(), w)
-		return
-	}
-	if err != nil {
-		http.Error(w, err.Error(), http.StatusInternalServerError)
-		return
-	}
-
-	apiServicesForGroup := []*apiregistrationapi.APIService{}
-	for _, apiService := range apiServices {
-		if apiService.Spec.Group == r.groupName {
-			apiServicesForGroup = append(apiServicesForGroup, apiService)
-		}
-	}
-
-	if len(apiServicesForGroup) == 0 {
-		r.delegate.ServeHTTP(w, req)
-		return
-	}
-
-	discoveryGroup := convertToDiscoveryAPIGroup(apiServicesForGroup)
-	if discoveryGroup == nil {
-		http.Error(w, "", http.StatusNotFound)
-		return
-	}
-	responsewriters.WriteObjectNegotiated(r.codecs, schema.GroupVersion{}, w, req, http.StatusOK, discoveryGroup)
-}

staging/src/k8s.io/kube-aggregator/pkg/apiserver/handler_proxy.go

-/*
-Copyright 2016 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiserver
-
-import (
-	"context"
-	"net/http"
-	"net/url"
-	"sync/atomic"
-
-	"github.com/golang/glog"
-
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/util/httpstream"
-	"k8s.io/apimachinery/pkg/util/httpstream/spdy"
-	utilnet "k8s.io/apimachinery/pkg/util/net"
-	"k8s.io/apimachinery/pkg/util/proxy"
-	"k8s.io/apiserver/pkg/endpoints/handlers/responsewriters"
-	genericapirequest "k8s.io/apiserver/pkg/endpoints/request"
-	genericfeatures "k8s.io/apiserver/pkg/features"
-	utilfeature "k8s.io/apiserver/pkg/util/feature"
-	restclient "k8s.io/client-go/rest"
-	"k8s.io/client-go/transport"
-	apiregistrationapi "k8s.io/kube-aggregator/pkg/apis/apiregistration"
-)
-
-// proxyHandler provides a http.Handler which will proxy traffic to locations
-// specified by items implementing Redirector.
-type proxyHandler struct {
-	// localDelegate is used to satisfy local APIServices
-	localDelegate http.Handler
-
-	// proxyClientCert/Key are the client cert used to identify this proxy. Backing APIServices use
-	// this to confirm the proxy's identity
-	proxyClientCert []byte
-	proxyClientKey  []byte
-	proxyTransport  *http.Transport
-
-	// Endpoints based routing to map from cluster IP to routable IP
-	serviceResolver ServiceResolver
-
-	handlingInfo atomic.Value
-}
-
-type proxyHandlingInfo struct {
-	// local indicates that this APIService is locally satisfied
-	local bool
-
-	// restConfig holds the information for building a roundtripper
-	restConfig *restclient.Config
-	// transportBuildingError is an error produced while building the transport.  If this
-	// is non-nil, it will be reported to clients.
-	transportBuildingError error
-	// proxyRoundTripper is the re-useable portion of the transport.  It does not vary with any request.
-	proxyRoundTripper http.RoundTripper
-	// serviceName is the name of the service this handler proxies to
-	serviceName string
-	// namespace is the namespace the service lives in
-	serviceNamespace string
-	// serviceAvailable indicates this APIService is available or not
-	serviceAvailable bool
-}
-
-func (r *proxyHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
-	value := r.handlingInfo.Load()
-	if value == nil {
-		r.localDelegate.ServeHTTP(w, req)
-		return
-	}
-	handlingInfo := value.(proxyHandlingInfo)
-	if handlingInfo.local {
-		if r.localDelegate == nil {
-			http.Error(w, "", http.StatusNotFound)
-			return
-		}
-		r.localDelegate.ServeHTTP(w, req)
-		return
-	}
-
-	if !handlingInfo.serviceAvailable {
-		http.Error(w, "service unavailable", http.StatusServiceUnavailable)
-		return
-	}
-
-	if handlingInfo.transportBuildingError != nil {
-		http.Error(w, handlingInfo.transportBuildingError.Error(), http.StatusInternalServerError)
-		return
-	}
-
-	user, ok := genericapirequest.UserFrom(req.Context())
-	if !ok {
-		http.Error(w, "missing user", http.StatusInternalServerError)
-		return
-	}
-
-	// write a new location based on the existing request pointed at the target service
-	location := &url.URL{}
-	location.Scheme = "https"
-	rloc, err := r.serviceResolver.ResolveEndpoint(handlingInfo.serviceNamespace, handlingInfo.serviceName)
-	if err != nil {
-		glog.Errorf("error resolving %s/%s: %v", handlingInfo.serviceNamespace, handlingInfo.serviceName, err)
-		http.Error(w, "service unavailable", http.StatusServiceUnavailable)
-		return
-	}
-	location.Host = rloc.Host
-	location.Path = req.URL.Path
-	location.RawQuery = req.URL.Query().Encode()
-
-	// WithContext creates a shallow clone of the request with the new context.
-	newReq := req.WithContext(context.Background())
-	newReq.Header = utilnet.CloneHeader(req.Header)
-	newReq.URL = location
-
-	if handlingInfo.proxyRoundTripper == nil {
-		http.Error(w, "", http.StatusNotFound)
-		return
-	}
-
-	// we need to wrap the roundtripper in another roundtripper which will apply the front proxy headers
-	proxyRoundTripper, upgrade, err := maybeWrapForConnectionUpgrades(handlingInfo.restConfig, handlingInfo.proxyRoundTripper, req)
-	if err != nil {
-		http.Error(w, err.Error(), http.StatusInternalServerError)
-		return
-	}
-	proxyRoundTripper = transport.NewAuthProxyRoundTripper(user.GetName(), user.GetGroups(), user.GetExtra(), proxyRoundTripper)
-
-	// if we are upgrading, then the upgrade path tries to use this request with the TLS config we provide, but it does
-	// NOT use the roundtripper.  Its a direct call that bypasses the round tripper.  This means that we have to
-	// attach the "correct" user headers to the request ahead of time.  After the initial upgrade, we'll be back
-	// at the roundtripper flow, so we only have to muck with this request, but we do have to do it.
-	if upgrade {
-		transport.SetAuthProxyHeaders(newReq, user.GetName(), user.GetGroups(), user.GetExtra())
-	}
-
-	handler := proxy.NewUpgradeAwareHandler(location, proxyRoundTripper, true, upgrade, &responder{w: w})
-	handler.ServeHTTP(w, newReq)
-}
-
-// maybeWrapForConnectionUpgrades wraps the roundtripper for upgrades.  The bool indicates if it was wrapped
-func maybeWrapForConnectionUpgrades(restConfig *restclient.Config, rt http.RoundTripper, req *http.Request) (http.RoundTripper, bool, error) {
-	if !httpstream.IsUpgradeRequest(req) {
-		return rt, false, nil
-	}
-
-	tlsConfig, err := restclient.TLSConfigFor(restConfig)
-	if err != nil {
-		return nil, true, err
-	}
-	followRedirects := utilfeature.DefaultFeatureGate.Enabled(genericfeatures.StreamingProxyRedirects)
-	requireSameHostRedirects := utilfeature.DefaultFeatureGate.Enabled(genericfeatures.ValidateProxyRedirects)
-	upgradeRoundTripper := spdy.NewRoundTripper(tlsConfig, followRedirects, requireSameHostRedirects)
-	wrappedRT, err := restclient.HTTPWrappersForConfig(restConfig, upgradeRoundTripper)
-	if err != nil {
-		return nil, true, err
-	}
-
-	return wrappedRT, true, nil
-}
-
-// responder implements rest.Responder for assisting a connector in writing objects or errors.
-type responder struct {
-	w http.ResponseWriter
-}
-
-// TODO this should properly handle content type negotiation
-// if the caller asked for protobuf and you write JSON bad things happen.
-func (r *responder) Object(statusCode int, obj runtime.Object) {
-	responsewriters.WriteRawJSON(statusCode, obj, r.w)
-}
-
-func (r *responder) Error(_ http.ResponseWriter, _ *http.Request, err error) {
-	http.Error(r.w, err.Error(), http.StatusInternalServerError)
-}
-
-// these methods provide locked access to fields
-
-func (r *proxyHandler) updateAPIService(apiService *apiregistrationapi.APIService) {
-	if apiService.Spec.Service == nil {
-		r.handlingInfo.Store(proxyHandlingInfo{local: true})
-		return
-	}
-
-	newInfo := proxyHandlingInfo{
-		restConfig: &restclient.Config{
-			TLSClientConfig: restclient.TLSClientConfig{
-				Insecure:   apiService.Spec.InsecureSkipTLSVerify,
-				ServerName: apiService.Spec.Service.Name + "." + apiService.Spec.Service.Namespace + ".svc",
-				CertData:   r.proxyClientCert,
-				KeyData:    r.proxyClientKey,
-				CAData:     apiService.Spec.CABundle,
-			},
-		},
-		serviceName:      apiService.Spec.Service.Name,
-		serviceNamespace: apiService.Spec.Service.Namespace,
-		serviceAvailable: apiregistrationapi.IsAPIServiceConditionTrue(apiService, apiregistrationapi.Available),
-	}
-	if r.proxyTransport != nil && r.proxyTransport.DialContext != nil {
-		newInfo.restConfig.Dial = r.proxyTransport.DialContext
-	}
-	newInfo.proxyRoundTripper, newInfo.transportBuildingError = restclient.TransportFor(newInfo.restConfig)
-	if newInfo.transportBuildingError != nil {
-		glog.Warning(newInfo.transportBuildingError.Error())
-	}
-	r.handlingInfo.Store(newInfo)
-}

staging/src/k8s.io/kube-aggregator/pkg/apiserver/resolvers.go

-/*
-Copyright 2017 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package apiserver
-
-import (
-	"net/url"
-
-	"k8s.io/apiserver/pkg/util/proxy"
-	listersv1 "k8s.io/client-go/listers/core/v1"
-)
-
-// A ServiceResolver knows how to get a URL given a service.
-type ServiceResolver interface {
-	ResolveEndpoint(namespace, name string) (*url.URL, error)
-}
-
-// NewEndpointServiceResolver returns a ServiceResolver that chooses one of the
-// service's endpoints.
-func NewEndpointServiceResolver(services listersv1.ServiceLister, endpoints listersv1.EndpointsLister) ServiceResolver {
-	return &aggregatorEndpointRouting{
-		services:  services,
-		endpoints: endpoints,
-	}
-}
-
-type aggregatorEndpointRouting struct {
-	services  listersv1.ServiceLister
-	endpoints listersv1.EndpointsLister
-}
-
-func (r *aggregatorEndpointRouting) ResolveEndpoint(namespace, name string) (*url.URL, error) {
-	return proxy.ResolveEndpoint(r.services, r.endpoints, namespace, name)
-}
-
-// NewEndpointServiceResolver returns a ServiceResolver that directly calls the
-// service's cluster IP.
-func NewClusterIPServiceResolver(services listersv1.ServiceLister) ServiceResolver {
-	return &aggregatorClusterRouting{
-		services: services,
-	}
-}
-
-type aggregatorClusterRouting struct {
-	services listersv1.ServiceLister
-}
-
-func (r *aggregatorClusterRouting) ResolveEndpoint(namespace, name string) (*url.URL, error) {
-	return proxy.ResolveCluster(r.services, namespace, name)
-}
-
-// NewLoopbackServiceResolver returns a ServiceResolver that routes the kubernetes/default service to loopback.
-func NewLoopbackServiceResolver(delegate ServiceResolver, host *url.URL) ServiceResolver {
-	return &loopbackResolver{
-		delegate: delegate,
-		host:     host,
-	}
-}
-
-type loopbackResolver struct {
-	delegate ServiceResolver
-	host     *url.URL
-}
-
-func (r *loopbackResolver) ResolveEndpoint(namespace, name string) (*url.URL, error) {
-	if namespace == "default" && name == "kubernetes" {
-		return r.host, nil
-	}
-	return r.delegate.ResolveEndpoint(namespace, name)
-}

staging/src/k8s.io/kube-aggregator/pkg/apiserver/scheme/BUILD

-load("@io_bazel_rules_go//go:def.bzl", "go_library")
-
-go_library(
-    name = "go_default_library",
-    srcs = ["scheme.go"],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/apiserver/scheme",
-    importpath = "k8s.io/kube-aggregator/pkg/apiserver/scheme",
-    visibility = ["//visibility:public"],
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-    visibility = ["//visibility:public"],
-)

staging/src/k8s.io/kube-aggregator/pkg/apiserver/scheme/scheme.go

-/*
-Copyright 2018 The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package scheme
-
-import (
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/runtime/serializer"
-	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
-
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration/install"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"
-	"k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1"
-)
-
-var (
-	// Scheme defines methods for serializing and deserializing API objects.
-	Scheme = runtime.NewScheme()
-	// Codecs provides methods for retrieving codecs and serializers for specific
-	// versions and content types.
-	Codecs = serializer.NewCodecFactory(Scheme)
-)
-
-func init() {
-	AddToScheme(Scheme)
-	install.Install(Scheme)
-}
-
-// AddToScheme adds the types of this group into the given scheme.
-func AddToScheme(scheme *runtime.Scheme) {
-	utilruntime.Must(v1beta1.AddToScheme(scheme))
-	utilruntime.Must(v1.AddToScheme(scheme))
-	utilruntime.Must(apiregistration.AddToScheme(scheme))
-}

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "clientset.go",
-        "doc.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset",
-    importpath = "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset",
-    deps = [
-        "//staging/src/k8s.io/client-go/discovery:go_default_library",
-        "//staging/src/k8s.io/client-go/rest:go_default_library",
-        "//staging/src/k8s.io/client-go/util/flowcontrol:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [
-        ":package-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1:all-srcs",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1:all-srcs",
-    ],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/clientset.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package clientset
-
-import (
-	discovery "k8s.io/client-go/discovery"
-	rest "k8s.io/client-go/rest"
-	flowcontrol "k8s.io/client-go/util/flowcontrol"
-	apiregistrationv1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1"
-	apiregistrationv1beta1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1"
-)
-
-type Interface interface {
-	Discovery() discovery.DiscoveryInterface
-	ApiregistrationV1beta1() apiregistrationv1beta1.ApiregistrationV1beta1Interface
-	ApiregistrationV1() apiregistrationv1.ApiregistrationV1Interface
-	// Deprecated: please explicitly pick a version if possible.
-	Apiregistration() apiregistrationv1.ApiregistrationV1Interface
-}
-
-// Clientset contains the clients for groups. Each group has exactly one
-// version included in a Clientset.
-type Clientset struct {
-	*discovery.DiscoveryClient
-	apiregistrationV1beta1 *apiregistrationv1beta1.ApiregistrationV1beta1Client
-	apiregistrationV1      *apiregistrationv1.ApiregistrationV1Client
-}
-
-// ApiregistrationV1beta1 retrieves the ApiregistrationV1beta1Client
-func (c *Clientset) ApiregistrationV1beta1() apiregistrationv1beta1.ApiregistrationV1beta1Interface {
-	return c.apiregistrationV1beta1
-}
-
-// ApiregistrationV1 retrieves the ApiregistrationV1Client
-func (c *Clientset) ApiregistrationV1() apiregistrationv1.ApiregistrationV1Interface {
-	return c.apiregistrationV1
-}
-
-// Deprecated: Apiregistration retrieves the default version of ApiregistrationClient.
-// Please explicitly pick a version.
-func (c *Clientset) Apiregistration() apiregistrationv1.ApiregistrationV1Interface {
-	return c.apiregistrationV1
-}
-
-// Discovery retrieves the DiscoveryClient
-func (c *Clientset) Discovery() discovery.DiscoveryInterface {
-	if c == nil {
-		return nil
-	}
-	return c.DiscoveryClient
-}
-
-// NewForConfig creates a new Clientset for the given config.
-func NewForConfig(c *rest.Config) (*Clientset, error) {
-	configShallowCopy := *c
-	if configShallowCopy.RateLimiter == nil && configShallowCopy.QPS > 0 {
-		configShallowCopy.RateLimiter = flowcontrol.NewTokenBucketRateLimiter(configShallowCopy.QPS, configShallowCopy.Burst)
-	}
-	var cs Clientset
-	var err error
-	cs.apiregistrationV1beta1, err = apiregistrationv1beta1.NewForConfig(&configShallowCopy)
-	if err != nil {
-		return nil, err
-	}
-	cs.apiregistrationV1, err = apiregistrationv1.NewForConfig(&configShallowCopy)
-	if err != nil {
-		return nil, err
-	}
-
-	cs.DiscoveryClient, err = discovery.NewDiscoveryClientForConfig(&configShallowCopy)
-	if err != nil {
-		return nil, err
-	}
-	return &cs, nil
-}
-
-// NewForConfigOrDie creates a new Clientset for the given config and
-// panics if there is an error in the config.
-func NewForConfigOrDie(c *rest.Config) *Clientset {
-	var cs Clientset
-	cs.apiregistrationV1beta1 = apiregistrationv1beta1.NewForConfigOrDie(c)
-	cs.apiregistrationV1 = apiregistrationv1.NewForConfigOrDie(c)
-
-	cs.DiscoveryClient = discovery.NewDiscoveryClientForConfigOrDie(c)
-	return &cs
-}
-
-// New creates a new Clientset for the given RESTClient.
-func New(c rest.Interface) *Clientset {
-	var cs Clientset
-	cs.apiregistrationV1beta1 = apiregistrationv1beta1.New(c)
-	cs.apiregistrationV1 = apiregistrationv1.New(c)
-
-	cs.DiscoveryClient = discovery.NewDiscoveryClient(c)
-	return &cs
-}

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/doc.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-// This package has the automatically generated clientset.
-package clientset

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "clientset_generated.go",
-        "doc.go",
-        "register.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake",
-    importpath = "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/watch:go_default_library",
-        "//staging/src/k8s.io/client-go/discovery:go_default_library",
-        "//staging/src/k8s.io/client-go/discovery/fake:go_default_library",
-        "//staging/src/k8s.io/client-go/testing:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1/fake:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1/fake:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake/clientset_generated.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package fake
-
-import (
-	"k8s.io/apimachinery/pkg/runtime"
-	"k8s.io/apimachinery/pkg/watch"
-	"k8s.io/client-go/discovery"
-	fakediscovery "k8s.io/client-go/discovery/fake"
-	"k8s.io/client-go/testing"
-	clientset "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset"
-	apiregistrationv1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1"
-	fakeapiregistrationv1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1/fake"
-	apiregistrationv1beta1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1"
-	fakeapiregistrationv1beta1 "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/typed/apiregistration/v1beta1/fake"
-)
-
-// NewSimpleClientset returns a clientset that will respond with the provided objects.
-// It's backed by a very simple object tracker that processes creates, updates and deletions as-is,
-// without applying any validations and/or defaults. It shouldn't be considered a replacement
-// for a real clientset and is mostly useful in simple unit tests.
-func NewSimpleClientset(objects ...runtime.Object) *Clientset {
-	o := testing.NewObjectTracker(scheme, codecs.UniversalDecoder())
-	for _, obj := range objects {
-		if err := o.Add(obj); err != nil {
-			panic(err)
-		}
-	}
-
-	cs := &Clientset{}
-	cs.discovery = &fakediscovery.FakeDiscovery{Fake: &cs.Fake}
-	cs.AddReactor("*", "*", testing.ObjectReaction(o))
-	cs.AddWatchReactor("*", func(action testing.Action) (handled bool, ret watch.Interface, err error) {
-		gvr := action.GetResource()
-		ns := action.GetNamespace()
-		watch, err := o.Watch(gvr, ns)
-		if err != nil {
-			return false, nil, err
-		}
-		return true, watch, nil
-	})
-
-	return cs
-}
-
-// Clientset implements clientset.Interface. Meant to be embedded into a
-// struct to get a default implementation. This makes faking out just the method
-// you want to test easier.
-type Clientset struct {
-	testing.Fake
-	discovery *fakediscovery.FakeDiscovery
-}
-
-func (c *Clientset) Discovery() discovery.DiscoveryInterface {
-	return c.discovery
-}
-
-var _ clientset.Interface = &Clientset{}
-
-// ApiregistrationV1beta1 retrieves the ApiregistrationV1beta1Client
-func (c *Clientset) ApiregistrationV1beta1() apiregistrationv1beta1.ApiregistrationV1beta1Interface {
-	return &fakeapiregistrationv1beta1.FakeApiregistrationV1beta1{Fake: &c.Fake}
-}
-
-// ApiregistrationV1 retrieves the ApiregistrationV1Client
-func (c *Clientset) ApiregistrationV1() apiregistrationv1.ApiregistrationV1Interface {
-	return &fakeapiregistrationv1.FakeApiregistrationV1{Fake: &c.Fake}
-}
-
-// Apiregistration retrieves the ApiregistrationV1Client
-func (c *Clientset) Apiregistration() apiregistrationv1.ApiregistrationV1Interface {
-	return &fakeapiregistrationv1.FakeApiregistrationV1{Fake: &c.Fake}
-}

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake/doc.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-// This package has the automatically generated fake clientset.
-package fake

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/fake/register.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package fake
-
-import (
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	runtime "k8s.io/apimachinery/pkg/runtime"
-	schema "k8s.io/apimachinery/pkg/runtime/schema"
-	serializer "k8s.io/apimachinery/pkg/runtime/serializer"
-	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
-	apiregistrationv1 "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1"
-	apiregistrationv1beta1 "k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1"
-)
-
-var scheme = runtime.NewScheme()
-var codecs = serializer.NewCodecFactory(scheme)
-var parameterCodec = runtime.NewParameterCodec(scheme)
-var localSchemeBuilder = runtime.SchemeBuilder{
-	apiregistrationv1beta1.AddToScheme,
-	apiregistrationv1.AddToScheme,
-}
-
-// AddToScheme adds all types of this clientset into the given scheme. This allows composition
-// of clientsets, like in:
-//
-//   import (
-//     "k8s.io/client-go/kubernetes"
-//     clientsetscheme "k8s.io/client-go/kubernetes/scheme"
-//     aggregatorclientsetscheme "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme"
-//   )
-//
-//   kclientset, _ := kubernetes.NewForConfig(c)
-//   _ = aggregatorclientsetscheme.AddToScheme(clientsetscheme.Scheme)
-//
-// After this, RawExtensions in Kubernetes types will serialize kube-aggregator types
-// correctly.
-var AddToScheme = localSchemeBuilder.AddToScheme
-
-func init() {
-	v1.AddToGroupVersion(scheme, schema.GroupVersion{Version: "v1"})
-	utilruntime.Must(AddToScheme(scheme))
-}

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme/BUILD

-package(default_visibility = ["//visibility:public"])
-
-load(
-    "@io_bazel_rules_go//go:def.bzl",
-    "go_library",
-)
-
-go_library(
-    name = "go_default_library",
-    srcs = [
-        "doc.go",
-        "register.go",
-    ],
-    importmap = "k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme",
-    importpath = "k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme",
-    deps = [
-        "//staging/src/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/schema:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
-        "//staging/src/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1:go_default_library",
-        "//staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/v1beta1:go_default_library",
-    ],
-)
-
-filegroup(
-    name = "package-srcs",
-    srcs = glob(["**"]),
-    tags = ["automanaged"],
-    visibility = ["//visibility:private"],
-)
-
-filegroup(
-    name = "all-srcs",
-    srcs = [":package-srcs"],
-    tags = ["automanaged"],
-)

staging/src/k8s.io/kube-aggregator/pkg/client/clientset_generated/clientset/scheme/doc.go

-/*
-Copyright The Kubernetes Authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-// This package contains the scheme of the automatically generated clientset.
-package scheme