github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
110,078 Commits 1 Branch 31 Tags 1,019 MiB
22cb7ac766
Commit Graph

3457 Commits

Author SHA1 Message Date
ravisantoshgudimetla
807ae0c318 [sts] api: Make available replicas optional 2022-04-01 11:54:50 -04:00
Kubernetes Prow Robot
cc3a250f6a
Merge pull request #108491 from liggitt/feature-defaults-test 
Exercise defaulting tests with/without features enabled
 2022-03-31 14:43:06 -07:00
Maciej Wyrzuc
1108bed763 Revert "Field status.hostIPs added for Pod (#101566)" 
This reverts commit 61b3c028ba.
 2022-03-31 12:39:45 +00:00
Sarvesh Rangnekar
b9792a9dae
Introduce APIs to support multiple ClusterCIDRs (#108290) 
* Introduce networking/v1alpha1 api, ClusterCIDRConfig type

Introduce networking/v1alpha1 api group.

Add `ClusterCIDRConfig` type to networking/v1alpha1 api group, this type
will enable the NodeIPAM controller to support multiple ClusterCIDRs.

* Change ClusterCIDRConfig.NodeSelector type in api

* Fix review comments for API

* Update ClusterCIDRConfig API Spec

Introduce PerNodeHostBits field, remove PerNodeMaskSize
 2022-03-30 19:39:00 -07:00
Kubernetes Prow Robot
9fe98d8bab
Merge pull request #108736 from NetApp/any-volume-data-source-beta 
Update AnyVolumeDataSource feature gate to beta
 2022-03-29 17:35:25 -07:00
Kubernetes Prow Robot
0f2300575c
Merge pull request #108032 from deejross/kep3140-cronjob-timezone 
KEP 3140: TimeZone support for CronJob
 2022-03-29 17:34:20 -07:00
Kubernetes Prow Robot
dd1e43332a
Merge pull request #107476 from alculquicondor/job-ready 
Graduate JobReadyPods to beta
 2022-03-29 16:08:06 -07:00
Shiming Zhang
61b3c028ba
Field status.hostIPs added for Pod (#101566) 
* Add FeatureGate PodHostIPs

* Add HostIPs field and update PodIPs field

* Types conversion

* Add dropDisabledStatusFields

* Add HostIPs for kubelet

* Add fuzzer for PodStatus

* Add status.hostIPs in ConvertDownwardAPIFieldLabel

* Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions

* Downward API support for status.hostIPs

* Add DownwardAPI validation for status.hostIPs

* Add e2e to check that hostIPs works

* Add e2e to check that Downward API works

* Regenerate
 2022-03-29 11:46:07 -07:00
Ben Swartzlander
08948ca779 Update AnyVolumeDataSource feature gate to beta 
Default to enabled
Fix validation of null-updates/patches when the "old" PVC was persisted by
an older version. Add upgrade integration tests written by liggitt.
 2022-03-29 13:39:48 -04:00
Ross Peoples
d26e6cca72 make update after timeZone support for CronJob 2022-03-29 11:40:46 -05:00
Ross Peoples
dbb3906a09 Fix for timeZone validation and strategy 2022-03-29 11:40:34 -05:00
Aldo Culquicondor
8c00f510ef Graduate JobReadyPods to beta 
Set podUpdateBatchPeriod to 1s

Change-Id: I8a10fd8f8559adad9df179b664b8c82851607855
 2022-03-29 10:07:41 -04:00
Ricardo Katz
42a1201082
Implementation on Network Policy Status (#107963) 
* Implement status subresource in NetworkPolicy

* add NetworkPolicyStatus generated files

* Fix comments in netpol status review
 2022-03-29 01:52:48 -07:00
Kubernetes Prow Robot
f85ff4b574
Merge pull request #82162 from krmayankk/maxun 
API: maxUnavailable for StatefulSet
 2022-03-28 17:57:10 -07:00
Ross Peoples
98837de446 TimeZone support for CronJobs 2022-03-28 16:33:00 -05:00
Kubernetes Prow Robot
3a3c9bc5c0
Merge pull request #108282 from sftim/20220222_reword_types_container_runtime_neutral 
Update types to be neutral about container runtime
 2022-03-28 13:01:08 -07:00
Mayank Kumar
357203d992 API: maxUnavailable for StatefulSet 2022-03-28 11:01:05 -07:00
Jordan Liggitt
5443ead637 Exercise defaulting tests with/without features enabled 2022-03-26 13:49:03 -04:00
Kubernetes Prow Robot
c239b406f0
Merge pull request #108929 from gnufied/move-expansion-feature-gate-ga 
Move all volume expansion feature gates to GA
 2022-03-25 18:08:16 -07:00
Tim Bannister
b803c8ebe2
Update types to be neutral about container runtime 
Replace references to Docker / Docker Engine with more neutral
terminology.
 2022-03-24 23:46:31 +00:00
Hemant Kumar
9343cce20b remove ExpandPersistentVolume feature gate 2022-03-24 10:02:47 -04:00
Kubernetes Prow Robot
96aa41513e
Merge pull request #107859 from ravisantoshgudimetla/promote-PodOS-beta 
Promote PodOS field to beta
 2022-03-24 00:14:41 -07:00
Kubernetes Prow Robot
bb67b5e9e8
Merge pull request #108717 from lavalamp/remove-clustername 
Remove ClusterName
 2022-03-23 22:31:33 -07:00
Kubernetes Prow Robot
8168c68bb6
Merge pull request #108522 from SergeyKanzhelev/grpcToBeta 
promote grpcProbes to beta
 2022-03-23 22:31:05 -07:00
Kubernetes Prow Robot
f97825e1ce
Merge pull request #107395 from alculquicondor/indexed-job 
Graduate IndexedJob to stable
 2022-03-23 17:44:41 -07:00
Daniel Smith
2831f9a343 remove unneeded references 2022-03-23 15:26:38 +00:00
Kubernetes Prow Robot
24a71990e0
Merge pull request #108445 from pohly/storage-capacity-ga 
storage capacity GA
 2022-03-23 08:06:21 -07:00
Ryan Richard
e29ac0f8be Promote CertificateSigningRequest's Spec.ExpirationSeconds field to GA 
Remove the comment "As of v1.22, this field is beta and is controlled
via the CSRDuration feature gate" from the expirationSeconds field's
godoc.

Mark the "CSRDuration" feature gate as GA in 1.24, lock its value to
"true", and remove the various logic which handled when the gate was
"false".

Update conformance test to check that the CertificateSigningRequest's
Spec.ExpirationSeconds field is stored, but do not check if the field
is honored since this functionality is optional.
 2022-03-18 14:41:43 -07:00
Paco Xu
acd696266e mark PodOverhead to GA in v1.24; remove in v1.26 2022-03-17 09:30:14 +08:00
Aldo Culquicondor
2c5d0a273c Graduate IndexedJob to stable 
- Lock feature gate to true and schedule for deletion in 1.26
- Remove checks on feature gate
- Graduate E2E test to Conformance

Change-Id: I6814819d318edaed5c86dae4055f4b050a4d39fd
 2022-03-15 13:41:06 -04:00
Sergey Kanzhelev
792a37e2f1 promote grpcProbes to beta 2022-03-14 22:49:38 +00:00
Patrick Ohly
b1aefb9b90 storage capacity: generated files 2022-03-14 20:05:45 +01:00
Patrick Ohly
5122b6bb92 storage capacity: clarify relationship between capacity fields 2022-03-14 20:05:45 +01:00
Patrick Ohly
921edae2b4 storage capacity: v1 API 2022-03-14 20:05:45 +01:00
Patrick Ohly
3a7deaa141 storage capacity: GA, always enabled, remove feature check 
The code and tests for scenarios where the feature is disabled are no longer
needed because the feature is graduating to GA.
 2022-03-14 20:05:45 +01:00
Kubernetes Prow Robot
5b52c4d127
Merge pull request #107674 from sanposhiho/api-min-domains 
Add MinDomains API to TopologySpreadConstraints field
 2022-03-14 09:33:57 -07:00
Humble Chirammal
f2473781a3 csi: add validation of secretRef format in CSI spec for PV update 
at present the spec.csi.secretRef name has to be DNS1035 label
format and it should fail if we use DNSSubdomain secretRef in
the secretReference field of CSI spec. The newly added test cases
validate this behaviour in validation tests for controllerPublish,
nodePublish and nodeStage secretRef formats.

Additionally csiExpansionEnabled struct field also removed from
the validation function.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-09 23:01:00 +05:30
sanposhiho
3b13e9445a Add MinDomains API to TopologySpreadConstraints field 2022-03-09 20:57:12 +09:00
Humble Chirammal
d727d7db1a csi: add validation tests for CSIVolumeSource 
This commit adds the validation tests for CSIVolumeSource explictly.
Also validate driver,nodePublishSecretRef..etc

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 16:10:18 +05:30
Humble Chirammal
1f0d37c082 csi: add unit tests for {controller,node}Publish name & namespace 
Extra test conditions are added in CSIPersistentVolumeSource validation
for controllerPublishSecretRef and nodePublishSecretRef name and namespace to check
whether name field or namespace field is missing from the secretRef while
validating CSI PersistentVolumeSource

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 16:10:11 +05:30
Humble Chirammal
8ae6e10fd0 csi: correct typo and use strings.Repeat func for long driver name 
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 15:50:58 +05:30
ravisantoshgudimetla
905ab6866b Promote PodOS field to beta 2022-03-01 20:26:41 -05:00
Jordan Liggitt
6b09e232cd Update secrets field API doc 2022-02-22 13:12:03 -05:00
Abdullah Gharaibeh
8a1c70b48c Graduate PodAffinityNamespaceSelector to GA 2022-02-18 12:07:29 -05:00
Kubernetes Prow Robot
8a6439d2b1
Merge pull request #108129 from ahg-g/ahg-suspend 
Graduate SuspendJob to GA
 2022-02-17 19:36:23 -08:00
Kubernetes Prow Robot
e8d0009746
Merge pull request #108143 from tallclair/apparmor 
Forbid empty AppArmor localhost profile
 2022-02-16 12:46:44 -08:00
mango
f97cdeb419 refactor: Change the users of IsQualifiedName to ValidateQualifiedName 2022-02-16 14:02:11 +08:00
Tim Allclair
5f2b12e0d4 Move AppArmor profile validation to the API validation pkg 2022-02-15 16:17:37 -08:00
Kubernetes Prow Robot
4033355d29
Merge pull request #107909 from sebastiansterk/master 
🤓 simple grammar fix
 2022-02-15 12:15:18 -08:00
Abdullah Gharaibeh
b2d2ec9e76 Graduate SuspendJob to GA 2022-02-15 10:46:13 -05:00
Kubernetes Prow Robot
cfb2219ded
Merge pull request #107175 from roycaihw/doc/webhook-rule-validation 
Fix examples of admission registration rules that contain wildcards
 2022-02-09 15:35:44 -08:00
Kubernetes Prow Robot
24e5d1fdb7
Merge pull request #107432 from denkensk/graduate-nonpreemptingpriority-to-ga 
Graduate NonPreemptingPriority to GA
 2022-02-08 11:05:03 -08:00
Alex Wang
541907334e graduate nonpreemptingpriority to ga 2022-02-08 18:11:23 +08:00
Kubernetes Prow Robot
9b09612d1b
Merge pull request #107656 from dims/add-labels-when-there-are-sig-aliases-used-in-approvers-reviewers 
Add labels when there sig aliases used in approvers/reviewers
 2022-02-05 02:20:50 -08:00
Sebastian Sterk
efdfaab301
Update pkg/apis/coordination/validation/validation.go 
Co-authored-by: Katrina Verey <kn.verey@gmail.com>
 2022-02-03 18:25:43 +01:00
Sebastian Sterk
bf4e43b736
simple grammar fix 2022-02-01 23:59:39 +01:00
Davanum Srinivas
35864ac0de
Add labels when there sig aliases used in approvers/reviewers 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-20 10:02:07 -05:00
Sergey Kanzhelev
7e7bc6d53b remove DynamicKubeletConfig logic from kubelet 2022-01-19 22:38:04 +00:00
Jayesh Srivastava
c5fcc0ff44 Update IANA links 2022-01-17 18:48:08 +05:30
Davanum Srinivas
ba1f853b5a
Add mwielgus back 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-10 09:02:53 -05:00
Davanum Srinivas
9682b7248f
OWNERS cleanup - Jan 2021 Week 1 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-10 08:14:29 -05:00
Kubernetes Prow Robot
e720bae30e
Merge pull request #106215 from shawnhanx/apiserverinternal_validation 
fix "k8s.io/apimachinery/pkg/util/validation" is imported more than once
 2022-01-05 09:22:51 -08:00
Kubernetes Prow Robot
a7905d76c7
Merge pull request #106397 from shawnhanx/core_validation 
fix S1017 and S1002 in pkg/apis/core/validation/validation.go
 2022-01-04 23:02:58 -08:00
Kubernetes Prow Robot
d2969bd260
Merge pull request #106294 from gy95/continue 
fix duplicate webhook insert operation
 2022-01-04 23:02:43 -08:00
guoyao
d9f99489ee fix duplicate webhook insert operation 
Signed-off-by: guoyao <1015105054@qq.com>
 2022-01-05 08:59:13 +08:00
Andrew Sy Kim
5d2702b0fd core/v1: add comments about why Service internalTrafficPolicy is not forbidden when type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
99cb5d2f21 core/v1: add unit tests that allow internalTrafficPolicy field when type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
60b38ee180 core/v1: add validation and defaulting unit tests for when internalTrafficPolicy is nil and Service type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
3a927cc6b3 core/v1: stop defaulting Service internalTrafficPolicy when Type=ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Kubernetes Prow Robot
6d0913fb4d
Merge pull request #99329 from chymy/linkcheck-404 
Fix link 404
 2022-01-04 11:26:39 -08:00
Kubernetes Prow Robot
a599399468
Merge pull request #103036 from lsytj0413/fix-pod-update-err-msg 
fix(*): display the diff as new-old
 2022-01-04 09:44:52 -08:00
Lars Ekman
2dd8ae8fb0 Deprecate service.spec.LoadBalancerIP 2021-12-27 16:42:23 +01:00
Haowei Cai
8ddd030cd9 Fix examples of rules with wildcard 2021-12-21 16:46:54 -08:00
lsytj0413
c6bd8d6713 fix(*): display the diff as new-old 2021-12-21 14:00:57 +08:00
Lars Ekman
1ef96752da Mark ServiceLBNodePortControl as GA 2021-12-16 16:48:58 +01:00
Davanum Srinivas
497e9c1971
Cleanup OWNERS files (No Activity in the last year) 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-15 10:34:02 -05:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:26 -05:00
Kubernetes Prow Robot
2daa3415ec
Merge pull request #106838 from mengjiao-liu/remove-NamespaceDefaultLabelName-feature-gate 
Remove feature gate NamespaceDefaultLabelName
 2021-12-08 08:53:46 -08:00
Kubernetes Prow Robot
a90f31f85a
Merge pull request #106179 from vivek-koppuru/fix-secret-format 
Fix string output format for secret validations
 2021-12-07 17:26:10 -08:00
Mengjiao Liu
f3c37c2c82 Remove feature gate NamespaceDefaultLabelName 2021-12-07 16:51:17 +08:00
Sergey Kanzhelev
1918ecad04 update the grpc field name for consistency 2021-12-01 18:16:08 +00:00
Matthew Cary
f1d5d4df5a tests for statefulset PersistentVolumeClaimDeletePolicy api change 2021-11-17 16:46:48 -08:00
Matthew Cary
98c37f9e2a statefulset PersistentVolumeClaimDeletePolicy api change 2021-11-17 16:46:47 -08:00
Sergey Kanzhelev
b7affcced1 implement :grpc probe action 2021-11-17 17:31:23 +00:00
Kubernetes Prow Robot
f151a40d8d
Merge pull request #106154 from gnufied/recover-expansion-failure-123 
Recover expansion failure
 2021-11-16 13:21:34 -08:00
Hemant Kumar
63fffd37b1 Implement API changes necessary for recovery from resize failure 2021-11-15 18:39:30 -05:00
Kubernetes Prow Robot
058ce89c60
Merge pull request #106285 from SergeyKanzhelev/updateHandlersDescription 
updated probe handler types descriptions
 2021-11-15 15:07:52 -08:00
Sergey Kanzhelev
57ed0174b1 updated probe handler types descriptions 2021-11-15 19:55:27 +00:00
shawnhanx
063e64c4ec fix S1017 and S1002 in pkg/apis/core/validation/validation.go 2021-11-13 17:02:40 +08:00
Kubernetes Prow Robot
1ff64edffb
Merge pull request #104636 from hbagdi/ingress-class-namespaced-params-ga 
Graduate IngressClassNamespacedParams to GA
 2021-11-10 12:53:26 -08:00
Harry Bagdi
d09a8c0a88 Graduate IngressClassNamespacedParams to GA 2021-11-10 08:58:39 -08:00
Kubernetes Prow Robot
5d60c8d857
Merge pull request #102393 from mengjiao-liu/fix-sysctl-regex 
Upgrade preparation to verify sysctl values containing forward slashes by regex
 2021-11-09 18:23:26 -08:00
wangyysde
d2abddd909 rename v2beta2 to v2 
Signed-off-by: wangyysde <net_use@bzhy.com>

Generation swagger.json.

Use v2 path for hpa_cpu_field.

run update-codegen.sh

Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-11-09 10:34:54 +08:00
wangyysde
f5c75813e3 just copy v2beta2 to v2 
Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-11-09 08:19:33 +08:00
shawnhanx
d3804784ee fix "k8s.io/apimachinery/pkg/util/validation" is being imported more than once 2021-11-08 09:43:44 +08:00
Vivek Koppuru
de680aec08 Fix string output format for secret validations 2021-11-05 18:29:48 +05:30
Kubernetes Prow Robot
2af34cf54d
Merge pull request #105940 from dobsonj/kep-1682-ga 
Move CSIVolumeFSGroupPolicy feature to GA
 2021-11-04 12:34:23 -07:00
Mengjiao Liu
275d832ce2 Upgrade preparation to verify sysctl values containing forward slashes by regex 2021-11-04 11:49:56 +08:00
Jonathan Dobson
082cb15648 Move CSIVolumeFSGroupPolicy feature to GA 2021-11-02 15:22:33 -06:00
Kubernetes Prow Robot
6ebd6f38b9
Merge pull request #104909 from pacoxu/kubectl-qos 
kubectl: include init containers when determining pod QoS
 2021-11-01 20:00:58 -07:00
Kubernetes Prow Robot
36e69a3303
Merge pull request #105980 from ahg-g/ahg-mutable 
Make job pod template annotations and labels mutable for suspended jobs that never started
 2021-10-29 13:15:23 -07:00
Tim Hockin
11a25bfeb6
De-share the Handler struct in core API (#105979) 
* De-share the Handler struct in core API

An upcoming PR adds a handler that only applies on one of these paths.
Having fields that don't work seems bad.

This never should have been shared.  Lifecycle hooks are like a "write"
while probes are more like a "read". HTTPGet and TCPSocket don't really
make sense as lifecycle hooks (but I can't take that back). When we add
gRPC, it is EXPLICITLY a health check (defined by gRPC) not an arbitrary
RPC - so a probe makes sense but a hook does not.

In the future I can also see adding lifecycle hooks that don't make
sense as probes.  E.g. 'sleep' is a common lifecycle request. The only
option is `exec`, which requires having a sleep binary in your image.

* Run update scripts
 2021-10-29 13:15:11 -07:00
Shivanshu Raj Shrivastava
c2fba6b84d
referenced the V1Secret type (#105901) 2021-10-29 12:13:11 -07:00
Kubernetes Prow Robot
bb24c265ce
Merge pull request #104693 from ravisantoshgudimetla/add-podOS-field 
Add pod os field
 2021-10-28 21:38:50 -07:00
Kubernetes Prow Robot
c592bd40f2
Merge pull request #105609 from pohly/generic-ephemeral-volume-ga 
generic ephemeral volume GA
 2021-10-28 17:36:50 -07:00
ravisantoshgudimetla
41f8f95fc5 generated: Add os field to Pod Spec 2021-10-28 17:31:52 -04:00
ravisantoshgudimetla
d7d0beb65f api: Handle validation of PodOS field presence 2021-10-28 17:31:52 -04:00
ravisantoshgudimetla
3b936d310c api: Introduce os field to pod spec 2021-10-28 17:31:52 -04:00
Abdullah Gharaibeh
f466ab0989 Make job pod template annotations and labels mutable for suspended jobs that never started 2021-10-28 14:53:15 -04:00
Kubernetes Prow Robot
6edcb60d9f
Merge pull request #104915 from alculquicondor/job-ready 
Track ready pods in Job status
 2021-10-28 09:20:26 -07:00
Patrick Ohly
d55f7c85ef psp: remove unused PodSecurityPolicyValidationOptions 
Since the only member of that struct is gone, the struct itself can also be
removed. If for whatever reason the struct is needed again, then this commit
can be reverted to bring it back.
 2021-10-28 17:25:07 +02:00
Kubernetes Prow Robot
7fbb384e15
Merge pull request #105682 from pohly/generic-ephemeral-volume-raw-block 
storage validation: accept generic ephemeral volumes as volume device
 2021-10-22 18:04:50 -07:00
Kubernetes Prow Robot
18104ecf1f
Merge pull request #105405 from verb/1.23-ec-beta 
Promote EphemeralContainers to beta
 2021-10-20 09:24:10 -07:00
Lee Verberne
d33bbb8940 Allow volumeDevices in ephemeral containers 2021-10-19 23:04:05 -04:00
Lee Verberne
d874cf8ffd List disallowed ephemeral container fields 
Listing these explicitly makes it easier to determine whether a new
Container field has been evaluated for use with ephemeral containers.
This does not change the behavior of ephemeral containers.
 2021-10-19 23:03:57 -04:00
Lee Verberne
f81c48cd0a Disallow subpath for ephemeral container mounts 2021-10-19 23:01:15 -04:00
Lee Verberne
d1d7882186 Add test for EphemeralContainerCommon struct tags 
The tags for type EphemeralContainerCommon should be kept in sync with
those of type Container.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
 2021-10-19 23:01:07 -04:00
Lee Verberne
26e183b9d9 Clarify EphemeralContainer behavior in docs 
- Apply doc style guide
- Specify behavior when namespace targeting isn't supported by runtime
 2021-10-19 23:00:51 -04:00
Lee Verberne
764859081a Validate ephemeralContainerStatuses during update 2021-10-19 23:00:51 -04:00
Aldo Culquicondor
1bff5eb44d Add ready field to Job status 
to keep a count of the pods that have the ready condition.

Also:
- Add feature gate JobReadyPods.
- Add Ready to describe.

Change-Id: Ib934730a430a8e2a2f485671e345fe2330006939
 2021-10-19 15:18:34 -04:00
Kubernetes Prow Robot
c733594040
Merge pull request #105687 from alculquicondor/job-tracking 
Graduate JobTrackingWithFinalizers to beta
 2021-10-19 11:40:37 -07:00
Lee Verberne
6f4b8da9a3 Promote EphemeralContainers feature to beta 2021-10-19 08:47:57 -04:00
Patrick Ohly
a40d2eb18c storage validation: accept generic ephemeral volumes as volume device 
Raw block devices are possible with generic ephemeral volumes, so rejecting a
pod with that combination is wrong.
 2021-10-19 13:30:32 +02:00
Mark Rossetti
3ddff55fe6 Adding unit test coverage for API validation for emphermal contaienrs in hostprocess pods on Windows 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2021-10-18 15:46:27 -07:00
Aldo Culquicondor
2c1b3fdb5b Graduate JobTrackingWithFinalizers to beta 
Enable feature by default.

Update integration tests for other features to assume that finalizers are present.

Change-Id: Ie969344f572627dba882c0e862e5700dadaf3026
 2021-10-15 10:29:40 -04:00
Abdullah Gharaibeh
335817cbce Allow updating node affinity, selector and tolerations for suspended jobs that never started 2021-10-14 10:04:47 -04:00
Patrick Ohly
a8c930ef46 generic ephemeral volume: graduation to GA 
The feature gate gets locked to "true", with the goal to remove it in two
releases.

All code now can assume that the feature is enabled. Tests for "feature
disabled" are no longer needed and get removed.

Some code wasn't using the new helper functions yet. That gets changed while
touching those lines.
 2021-10-11 20:54:20 +02:00
Sahil Vazirani
3988405c8d
GA TTLAfterFinish 2021-10-07 16:58:50 -07:00
Kubernetes Prow Robot
c46d84b991
Merge pull request #105293 from verb/1.23-ec-validation 
Validate PodSpec in EphemeralContainersUpdate
 2021-10-01 07:31:34 -07:00
Lee Verberne
8b24dc07ff Test ephemeral container/pod conflicting fields 
This adds a test case to cover the scenario where the fields of an
ephemeral container conflict with other fields in the pod and must be
detected by full PodSpec validation.
 2021-09-30 21:47:19 +02:00
Lee Verberne
4451138bfa Validate PodSpec in EphemeralContainersUpdate 
Previously this only validated the ephemeral containers, but it's safer
to validate the entire PodSpec in case other parts of validation add
logic that checks ephemeral containers.
 2021-09-27 22:58:08 +02:00
Kubernetes Prow Robot
48d844ec64
Merge pull request #104483 from margocrawf/master 
Add UID to client-go impersonation config
 2021-09-27 07:33:36 -07:00
Khaled Henidak (Kal)
a53e2eaeab
move IPv6DualStack feature to stable. (#104691) 
* kube-proxy

* endpoints controller

* app: kube-controller-manager

* app: cloud-controller-manager

* kubelet

* app: api-server

* node utils + registry/strategy

* api: validation (comment removal)

* api:pod strategy (util pkg)

* api: docs

* core: integration testing

* kubeadm: change feature gate to GA

* service registry and rest stack

* move feature to GA

* generated
 2021-09-24 16:30:22 -07:00
Margo Crawford
d9ddfb26e1 Introduces Impersonate-Uid to client-go. 
* Updates ImpersonationConfig in rest/config.go to include UID
  attribute, and pass it through when copying the config
* Updates ImpersonationConfig in transport/config.go to include UID
  attribute
* In transport/round_tripper.go, Set the "Impersonate-Uid" header in
  requests based on the UID value in the config
* Update auth_test.go integration test to specify a UID through the new
  rest.ImpersonationConfig field rather than manually setting the
  Impersonate-Uid header

Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2021-09-24 14:06:30 -07:00
saad-ali
beb17fe10b Remove VolumeSubpath feature gate 
Remove the VolumeSubpath feature gate.

Feature gate convention has been updated since this was introduced to
indicate that they "are intended to be deprecated and removed after a
feature becomes GA or is dropped.".
 2021-09-17 01:59:23 -07:00
h4ghhh
0734820279
'New' Event namespace validate failed (#100125) 2021-09-16 04:29:45 -07:00
Paco Xu
b74214ebcb cleanup: add update notice in origin file & make it diff cleanly 2021-09-15 15:57:11 +08:00
Kubernetes Prow Robot
9c147baa70
Merge pull request #104969 from liggitt/crd-error-validation 
Fix conversion of literal null JSON values
 2021-09-13 18:01:27 -07:00
Kubernetes Prow Robot
cdcf2a239e
Merge pull request #104399 from tkashem/apf-v1beta2 
apf: introduce v1beta2
 2021-09-13 18:01:08 -07:00
Kubernetes Prow Robot
62a6df9e0b
Merge pull request #104045 from ravisantoshgudimetla/promote-minReadySec-sts-beta 
Promote min ready sec sts beta
 2021-09-13 14:33:50 -07:00
Jordan Liggitt
ba1ca0d459 Propagate conversion errors 2021-09-13 12:04:16 -04:00
Tim Hockin
650f8cfd35 Svc REST: Validate input before IP allocation 
This commit started as removing FIXME comments, but in doing so I
realized that the IP allocation process was using unvalidated user
input.  Before de-layering, validation was called twice - once before
init and once after, which the init code depended on.

Fortunately (or not?) we had duplicative checks that caught errors but
with less friendly messages.

This commit calls validation before initializing the rest of the
IP-related fields.

This also re-organizes that code a bit, cleans up error messages and
comments, and adds a test SPECIFICALLY for the errors in those cases.
 2021-09-11 11:30:01 -07:00
Tim Hockin
8bcba526b6 Svc REST: Better errors on stack-downgrades 
Converting dual-stack to single-stack needs good errors.
 2021-09-11 11:30:01 -07:00
Tim Hockin
f4521aa75a Fix validation on ETP: "" is not valid 
This was causing tests to pass which ought not be passing.  This is not
an API change because we default the value of it when needed.  So we
would never see this in the wild, but it makes the tests sloppy.
 2021-09-11 11:30:01 -07:00
Tim Hockin
ccf3376570 Svc REST: De-layer Update 
This is the last layered method.  All allocator logic is moved to the
beginUpdate() path.  Removing the now-useless layer will happen in a
subsequent commit.
 2021-09-11 11:30:00 -07:00
Tim Hockin
14d0571a5f Svc REST: Don't call validation directly 
The validation is called soon after anyway.
 2021-09-11 10:49:13 -07:00
Kubernetes Prow Robot
c91287c7b9
Merge pull request #104747 from kinvolk/invidian/typos 
Fix typos in files which are used for generating OpenAPI
 2021-09-09 18:04:57 -07:00
Abu Kashem
28f2b42a41
apf: update apf logic to use v1beta2 2021-09-09 08:28:58 -04:00
Abu Kashem
2f19f8c2df
apf: regenerate for v1beta2 2021-09-09 08:28:58 -04:00
Abu Kashem
e2b8701545
apf: ebable v1beta2 2021-09-09 08:28:53 -04:00