github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
115,481 Commits 1 Branch 31 Tags 1,019 MiB
76a94fd836
Commit Graph

3745 Commits

Author SHA1 Message Date
Tim Hockin
c2ee067221 Remove obsolete refs to gate EndpointSliceNodeName 2022-07-07 13:19:59 -07:00
Tim Hockin
55232e2ef7 Rename IPFamilyPolicyType => IPFamilyPolicy 2022-07-06 15:42:26 -07:00
Kubernetes Prow Robot
65361245ed
Merge pull request #110824 from Abirdcfly/simple 
cleanup:use copy other than for loop
 2022-07-06 12:03:33 -07:00
Kubernetes Prow Robot
bd2776e0c9
Merge pull request #110868 from rikatz/endport-to-ga 
Promote endPort in Network Policy to GA
 2022-07-05 19:48:49 -07:00
Ricardo Katz
3e7bdbbf30 Promote endPort to GA 2022-06-30 00:33:43 +00:00
Abirdcfly
1dbd9de96d
cleanup:delete same utils.go in pkg/apis/storage 
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
 2022-06-29 20:54:34 +08:00
Abirdcfly
f715e9cb24 cleanup:use copy other than for loop 
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
 2022-06-28 16:29:22 +08:00
21kyu
df168d5b5c Change reflect.Ptr to reflect.Pointer 2022-06-26 01:23:43 +09:00
Kubernetes Prow Robot
18b5efceda
Merge pull request #110410 from Jiawei0227/master 
CSIMigration feature gate to GA
 2022-06-22 04:05:48 -07:00
Mengjiao Liu
20bb84b3f1 Pod SecurityContext and PodSecurityPolicy supports slash as sysctl separator 2022-06-22 10:24:35 +08:00
Kensei Nakada
27e7d167e6 Graduate MinDomains in Pod Topology Spread to beta 2022-06-20 06:18:45 +00:00
Shubham Kuchhal
b1994772ee RBAC: Modify the Description for the apiGroup. 2022-06-14 13:31:09 +05:30
Antonio Ojea
2124f17c72 unit tests for Class E IP addresses 2022-06-08 15:29:48 +02:00
Jiawei Wang
760365d5c9 CSIMigration feature gate to GA 2022-06-06 21:19:19 +00:00
areller
a6943ad863
[fix] fix and refactor TestValidateStatefulSet and TestValidateStatefulSet test cases (#109809) 
* restructure tests

restructure TestValidateStatefulSet and TestValidateStatefulSetUpdate to be an array and accept list of expected errors. in this commits, no tests were changed and expected errors are not filled yet

* add expected errors

adding expected errors and making the tests pass, without making any changes to the tests

* clean up TestValidateStatefulSet error cases

* clean up TestValidateStatefulSetUpdate cases

* validate new statefulset as part of update validation

* address PR comments
 2022-05-24 11:55:24 -07:00
Kubernetes Prow Robot
71da53c28b
Merge pull request #108218 from cyclinder/remove_featuregate 
remove featuregate in 1.25
 2022-05-17 20:08:53 -07:00
cyclinder
6150737d11 remove feature gate GA for 1.25 
Signed-off-by: cyclinder qifeng.guo@daocloud.io
 2022-05-12 14:15:23 +08:00
kerthcet
5e3df9a155 amend comment of NodeInclusionPolicy 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-05-11 07:48:46 +08:00
kerthcet
02f0a3ee91 feat: add NodeInclusionPolicy to TopologySpreadConstraint in PodSpec 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-05-10 12:54:49 +08:00
Kubernetes Prow Robot
7af5a7bfc5
Merge pull request #109602 from lavalamp/remove-clustername 
Finish clustername removal
 2022-05-07 08:01:16 -07:00
Kubernetes Prow Robot
af4dceeac2
Merge pull request #109308 from danwinship/traffic-policy-docs 
Clarify ExternalTrafficPolicy/InternalTrafficPolicy definitions
 2022-05-06 17:23:16 -07:00
Kubernetes Prow Robot
8ca76bad17
Merge pull request #108420 from humblec/secretRef-introduction 
csi: modularize validation of secretRef object fields for PV
 2022-05-06 07:57:04 -07:00
Daniel Smith
331525670b Remove ClusterName 2022-05-05 20:12:50 +00:00
Jordan Liggitt
410ac59c0d Remove PodSecurityPolicy admission plugin 2022-05-04 16:00:56 -04:00
Humble Chirammal
49833aaae3 csi: modularize validation of secretRef object fields for PV 
considering many PV sources exist today with secretRef fields
this introduce a secretRef validation function which could be
used based on the pv spec source type. There are different field
restrictions exist today for these PV types like some of them
dont need namespace reference..etc. The PV spec validation has
to be adjusted for different PVs, but this commit try to make
use of this newly introduced secretRef validation function for
CSI volume source.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-05-04 16:05:05 +05:30
Kubernetes Prow Robot
76d6473136
Merge pull request #109506 from wangrzneu/fix-comment 
fix comment of IngressClassParametersReferenceScopeCluster
 2022-05-04 01:28:33 -07:00
Kubernetes Prow Robot
de68e86a95
Merge pull request #109139 from krmayankk/fixnits 
fix some nits from API changes
 2022-05-03 18:24:51 -07:00
Kubernetes Prow Robot
c0ec0c2a31
Merge pull request #108150 from mangoGoForward/refactor/change-isqualifiedname-to-validatequalifiedname 
refactor: Change the uses of IsQualifiedName to ValidateQualifiedName
 2022-05-03 17:18:55 -07:00
Kubernetes Prow Robot
1aec0c81b1
Merge pull request #105963 from zhucan/bugfix-95367 
csi: add nodeExpandSecret support for CSI client & add unit test
 2022-05-03 17:17:58 -07:00
Dan Winship
e343ea57a6 Clarify ExternalTrafficPolicy/InternalTrafficPolicy definitions 2022-04-21 11:06:43 -04:00
renzheng.wang
7486d1bf1b fix comment of IngressClassParametersReferenceScopeCluster 2022-04-15 23:22:50 +08:00
James Laverack
7d57d5c70d Revert "Introduce APIs to support multiple ClusterCIDRs (#108290)" 
This reverts commit b9792a9dae.
 2022-04-13 13:58:19 +01:00
Mayank Kumar
376b3c4b9a fix some nits from API changes 2022-04-05 13:41:29 -07:00
zhucan
1c1faf97ee generated code and doc 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
 2022-04-05 11:36:24 +08:00
Humble Chirammal
c74b393771 csi: add nodeExpandSecret support for CSI client 
CSI spec 1.5 enhanced the spec to add optional secrets field to
NodeExpandVolumeRequest. This commit adds NodeExpandSecret to the
CSI PV source and also derive the expansion secret in csiclient to
send it out as part of the nodeexpand request.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
 2022-04-05 11:36:23 +08:00
zhucan
eb2ebddf61 fix: add unit test 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
 2022-04-05 11:35:14 +08:00
Kubernetes Prow Robot
3b5044fefd
Merge pull request #109218 from Abirdcfly/delete_test 
cleanup: skip a test validate time_zone letter case in darwin
 2022-04-04 07:38:12 -07:00
Abirdcfly
ceceb96f3d
cleanup: skip a test validate time_zone letter case in darwin 
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
 2022-04-04 16:50:45 +08:00
ravisantoshgudimetla
807ae0c318 [sts] api: Make available replicas optional 2022-04-01 11:54:50 -04:00
Kubernetes Prow Robot
cc3a250f6a
Merge pull request #108491 from liggitt/feature-defaults-test 
Exercise defaulting tests with/without features enabled
 2022-03-31 14:43:06 -07:00
Maciej Wyrzuc
1108bed763 Revert "Field status.hostIPs added for Pod (#101566)" 
This reverts commit 61b3c028ba.
 2022-03-31 12:39:45 +00:00
Sarvesh Rangnekar
b9792a9dae
Introduce APIs to support multiple ClusterCIDRs (#108290) 
* Introduce networking/v1alpha1 api, ClusterCIDRConfig type

Introduce networking/v1alpha1 api group.

Add `ClusterCIDRConfig` type to networking/v1alpha1 api group, this type
will enable the NodeIPAM controller to support multiple ClusterCIDRs.

* Change ClusterCIDRConfig.NodeSelector type in api

* Fix review comments for API

* Update ClusterCIDRConfig API Spec

Introduce PerNodeHostBits field, remove PerNodeMaskSize
 2022-03-30 19:39:00 -07:00
Kubernetes Prow Robot
9fe98d8bab
Merge pull request #108736 from NetApp/any-volume-data-source-beta 
Update AnyVolumeDataSource feature gate to beta
 2022-03-29 17:35:25 -07:00
Kubernetes Prow Robot
0f2300575c
Merge pull request #108032 from deejross/kep3140-cronjob-timezone 
KEP 3140: TimeZone support for CronJob
 2022-03-29 17:34:20 -07:00
Kubernetes Prow Robot
dd1e43332a
Merge pull request #107476 from alculquicondor/job-ready 
Graduate JobReadyPods to beta
 2022-03-29 16:08:06 -07:00
Shiming Zhang
61b3c028ba
Field status.hostIPs added for Pod (#101566) 
* Add FeatureGate PodHostIPs

* Add HostIPs field and update PodIPs field

* Types conversion

* Add dropDisabledStatusFields

* Add HostIPs for kubelet

* Add fuzzer for PodStatus

* Add status.hostIPs in ConvertDownwardAPIFieldLabel

* Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions

* Downward API support for status.hostIPs

* Add DownwardAPI validation for status.hostIPs

* Add e2e to check that hostIPs works

* Add e2e to check that Downward API works

* Regenerate
 2022-03-29 11:46:07 -07:00
Ben Swartzlander
08948ca779 Update AnyVolumeDataSource feature gate to beta 
Default to enabled
Fix validation of null-updates/patches when the "old" PVC was persisted by
an older version. Add upgrade integration tests written by liggitt.
 2022-03-29 13:39:48 -04:00
Ross Peoples
d26e6cca72 make update after timeZone support for CronJob 2022-03-29 11:40:46 -05:00
Ross Peoples
dbb3906a09 Fix for timeZone validation and strategy 2022-03-29 11:40:34 -05:00
Aldo Culquicondor
8c00f510ef Graduate JobReadyPods to beta 
Set podUpdateBatchPeriod to 1s

Change-Id: I8a10fd8f8559adad9df179b664b8c82851607855
 2022-03-29 10:07:41 -04:00
Ricardo Katz
42a1201082
Implementation on Network Policy Status (#107963) 
* Implement status subresource in NetworkPolicy

* add NetworkPolicyStatus generated files

* Fix comments in netpol status review
 2022-03-29 01:52:48 -07:00
Kubernetes Prow Robot
f85ff4b574
Merge pull request #82162 from krmayankk/maxun 
API: maxUnavailable for StatefulSet
 2022-03-28 17:57:10 -07:00
Ross Peoples
98837de446 TimeZone support for CronJobs 2022-03-28 16:33:00 -05:00
Kubernetes Prow Robot
3a3c9bc5c0
Merge pull request #108282 from sftim/20220222_reword_types_container_runtime_neutral 
Update types to be neutral about container runtime
 2022-03-28 13:01:08 -07:00
Mayank Kumar
357203d992 API: maxUnavailable for StatefulSet 2022-03-28 11:01:05 -07:00
Jordan Liggitt
5443ead637 Exercise defaulting tests with/without features enabled 2022-03-26 13:49:03 -04:00
Kubernetes Prow Robot
c239b406f0
Merge pull request #108929 from gnufied/move-expansion-feature-gate-ga 
Move all volume expansion feature gates to GA
 2022-03-25 18:08:16 -07:00
Tim Bannister
b803c8ebe2
Update types to be neutral about container runtime 
Replace references to Docker / Docker Engine with more neutral
terminology.
 2022-03-24 23:46:31 +00:00
Hemant Kumar
9343cce20b remove ExpandPersistentVolume feature gate 2022-03-24 10:02:47 -04:00
Kubernetes Prow Robot
96aa41513e
Merge pull request #107859 from ravisantoshgudimetla/promote-PodOS-beta 
Promote PodOS field to beta
 2022-03-24 00:14:41 -07:00
Kubernetes Prow Robot
bb67b5e9e8
Merge pull request #108717 from lavalamp/remove-clustername 
Remove ClusterName
 2022-03-23 22:31:33 -07:00
Kubernetes Prow Robot
8168c68bb6
Merge pull request #108522 from SergeyKanzhelev/grpcToBeta 
promote grpcProbes to beta
 2022-03-23 22:31:05 -07:00
Kubernetes Prow Robot
f97825e1ce
Merge pull request #107395 from alculquicondor/indexed-job 
Graduate IndexedJob to stable
 2022-03-23 17:44:41 -07:00
Daniel Smith
2831f9a343 remove unneeded references 2022-03-23 15:26:38 +00:00
Kubernetes Prow Robot
24a71990e0
Merge pull request #108445 from pohly/storage-capacity-ga 
storage capacity GA
 2022-03-23 08:06:21 -07:00
Ryan Richard
e29ac0f8be Promote CertificateSigningRequest's Spec.ExpirationSeconds field to GA 
Remove the comment "As of v1.22, this field is beta and is controlled
via the CSRDuration feature gate" from the expirationSeconds field's
godoc.

Mark the "CSRDuration" feature gate as GA in 1.24, lock its value to
"true", and remove the various logic which handled when the gate was
"false".

Update conformance test to check that the CertificateSigningRequest's
Spec.ExpirationSeconds field is stored, but do not check if the field
is honored since this functionality is optional.
 2022-03-18 14:41:43 -07:00
Paco Xu
acd696266e mark PodOverhead to GA in v1.24; remove in v1.26 2022-03-17 09:30:14 +08:00
Aldo Culquicondor
2c5d0a273c Graduate IndexedJob to stable 
- Lock feature gate to true and schedule for deletion in 1.26
- Remove checks on feature gate
- Graduate E2E test to Conformance

Change-Id: I6814819d318edaed5c86dae4055f4b050a4d39fd
 2022-03-15 13:41:06 -04:00
Sergey Kanzhelev
792a37e2f1 promote grpcProbes to beta 2022-03-14 22:49:38 +00:00
Patrick Ohly
b1aefb9b90 storage capacity: generated files 2022-03-14 20:05:45 +01:00
Patrick Ohly
5122b6bb92 storage capacity: clarify relationship between capacity fields 2022-03-14 20:05:45 +01:00
Patrick Ohly
921edae2b4 storage capacity: v1 API 2022-03-14 20:05:45 +01:00
Patrick Ohly
3a7deaa141 storage capacity: GA, always enabled, remove feature check 
The code and tests for scenarios where the feature is disabled are no longer
needed because the feature is graduating to GA.
 2022-03-14 20:05:45 +01:00
Kubernetes Prow Robot
5b52c4d127
Merge pull request #107674 from sanposhiho/api-min-domains 
Add MinDomains API to TopologySpreadConstraints field
 2022-03-14 09:33:57 -07:00
Humble Chirammal
f2473781a3 csi: add validation of secretRef format in CSI spec for PV update 
at present the spec.csi.secretRef name has to be DNS1035 label
format and it should fail if we use DNSSubdomain secretRef in
the secretReference field of CSI spec. The newly added test cases
validate this behaviour in validation tests for controllerPublish,
nodePublish and nodeStage secretRef formats.

Additionally csiExpansionEnabled struct field also removed from
the validation function.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-09 23:01:00 +05:30
sanposhiho
3b13e9445a Add MinDomains API to TopologySpreadConstraints field 2022-03-09 20:57:12 +09:00
Humble Chirammal
d727d7db1a csi: add validation tests for CSIVolumeSource 
This commit adds the validation tests for CSIVolumeSource explictly.
Also validate driver,nodePublishSecretRef..etc

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 16:10:18 +05:30
Humble Chirammal
1f0d37c082 csi: add unit tests for {controller,node}Publish name & namespace 
Extra test conditions are added in CSIPersistentVolumeSource validation
for controllerPublishSecretRef and nodePublishSecretRef name and namespace to check
whether name field or namespace field is missing from the secretRef while
validating CSI PersistentVolumeSource

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 16:10:11 +05:30
Humble Chirammal
8ae6e10fd0 csi: correct typo and use strings.Repeat func for long driver name 
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-03-02 15:50:58 +05:30
ravisantoshgudimetla
905ab6866b Promote PodOS field to beta 2022-03-01 20:26:41 -05:00
Jordan Liggitt
6b09e232cd Update secrets field API doc 2022-02-22 13:12:03 -05:00
Abdullah Gharaibeh
8a1c70b48c Graduate PodAffinityNamespaceSelector to GA 2022-02-18 12:07:29 -05:00
Kubernetes Prow Robot
8a6439d2b1
Merge pull request #108129 from ahg-g/ahg-suspend 
Graduate SuspendJob to GA
 2022-02-17 19:36:23 -08:00
Kubernetes Prow Robot
e8d0009746
Merge pull request #108143 from tallclair/apparmor 
Forbid empty AppArmor localhost profile
 2022-02-16 12:46:44 -08:00
mango
f97cdeb419 refactor: Change the users of IsQualifiedName to ValidateQualifiedName 2022-02-16 14:02:11 +08:00
Tim Allclair
5f2b12e0d4 Move AppArmor profile validation to the API validation pkg 2022-02-15 16:17:37 -08:00
Kubernetes Prow Robot
4033355d29
Merge pull request #107909 from sebastiansterk/master 
🤓 simple grammar fix
 2022-02-15 12:15:18 -08:00
Abdullah Gharaibeh
b2d2ec9e76 Graduate SuspendJob to GA 2022-02-15 10:46:13 -05:00
Kubernetes Prow Robot
cfb2219ded
Merge pull request #107175 from roycaihw/doc/webhook-rule-validation 
Fix examples of admission registration rules that contain wildcards
 2022-02-09 15:35:44 -08:00
Kubernetes Prow Robot
24e5d1fdb7
Merge pull request #107432 from denkensk/graduate-nonpreemptingpriority-to-ga 
Graduate NonPreemptingPriority to GA
 2022-02-08 11:05:03 -08:00
Alex Wang
541907334e graduate nonpreemptingpriority to ga 2022-02-08 18:11:23 +08:00
Kubernetes Prow Robot
9b09612d1b
Merge pull request #107656 from dims/add-labels-when-there-are-sig-aliases-used-in-approvers-reviewers 
Add labels when there sig aliases used in approvers/reviewers
 2022-02-05 02:20:50 -08:00
Sebastian Sterk
efdfaab301
Update pkg/apis/coordination/validation/validation.go 
Co-authored-by: Katrina Verey <kn.verey@gmail.com>
 2022-02-03 18:25:43 +01:00
Sebastian Sterk
bf4e43b736
simple grammar fix 2022-02-01 23:59:39 +01:00
Davanum Srinivas
35864ac0de
Add labels when there sig aliases used in approvers/reviewers 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-20 10:02:07 -05:00
Sergey Kanzhelev
7e7bc6d53b remove DynamicKubeletConfig logic from kubelet 2022-01-19 22:38:04 +00:00
Jayesh Srivastava
c5fcc0ff44 Update IANA links 2022-01-17 18:48:08 +05:30
Davanum Srinivas
ba1f853b5a
Add mwielgus back 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-10 09:02:53 -05:00
Davanum Srinivas
9682b7248f
OWNERS cleanup - Jan 2021 Week 1 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-01-10 08:14:29 -05:00
Kubernetes Prow Robot
e720bae30e
Merge pull request #106215 from shawnhanx/apiserverinternal_validation 
fix "k8s.io/apimachinery/pkg/util/validation" is imported more than once
 2022-01-05 09:22:51 -08:00
Kubernetes Prow Robot
a7905d76c7
Merge pull request #106397 from shawnhanx/core_validation 
fix S1017 and S1002 in pkg/apis/core/validation/validation.go
 2022-01-04 23:02:58 -08:00
Kubernetes Prow Robot
d2969bd260
Merge pull request #106294 from gy95/continue 
fix duplicate webhook insert operation
 2022-01-04 23:02:43 -08:00
guoyao
d9f99489ee fix duplicate webhook insert operation 
Signed-off-by: guoyao <1015105054@qq.com>
 2022-01-05 08:59:13 +08:00
Andrew Sy Kim
5d2702b0fd core/v1: add comments about why Service internalTrafficPolicy is not forbidden when type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
99cb5d2f21 core/v1: add unit tests that allow internalTrafficPolicy field when type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
60b38ee180 core/v1: add validation and defaulting unit tests for when internalTrafficPolicy is nil and Service type is ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Andrew Sy Kim
3a927cc6b3 core/v1: stop defaulting Service internalTrafficPolicy when Type=ExternalName 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2022-01-04 14:36:19 -05:00
Kubernetes Prow Robot
6d0913fb4d
Merge pull request #99329 from chymy/linkcheck-404 
Fix link 404
 2022-01-04 11:26:39 -08:00
Kubernetes Prow Robot
a599399468
Merge pull request #103036 from lsytj0413/fix-pod-update-err-msg 
fix(*): display the diff as new-old
 2022-01-04 09:44:52 -08:00
Lars Ekman
2dd8ae8fb0 Deprecate service.spec.LoadBalancerIP 2021-12-27 16:42:23 +01:00
Haowei Cai
8ddd030cd9 Fix examples of rules with wildcard 2021-12-21 16:46:54 -08:00
lsytj0413
c6bd8d6713 fix(*): display the diff as new-old 2021-12-21 14:00:57 +08:00
Lars Ekman
1ef96752da Mark ServiceLBNodePortControl as GA 2021-12-16 16:48:58 +01:00
Davanum Srinivas
497e9c1971
Cleanup OWNERS files (No Activity in the last year) 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-15 10:34:02 -05:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:26 -05:00
Kubernetes Prow Robot
2daa3415ec
Merge pull request #106838 from mengjiao-liu/remove-NamespaceDefaultLabelName-feature-gate 
Remove feature gate NamespaceDefaultLabelName
 2021-12-08 08:53:46 -08:00
Kubernetes Prow Robot
a90f31f85a
Merge pull request #106179 from vivek-koppuru/fix-secret-format 
Fix string output format for secret validations
 2021-12-07 17:26:10 -08:00
Mengjiao Liu
f3c37c2c82 Remove feature gate NamespaceDefaultLabelName 2021-12-07 16:51:17 +08:00
Sergey Kanzhelev
1918ecad04 update the grpc field name for consistency 2021-12-01 18:16:08 +00:00
Matthew Cary
f1d5d4df5a tests for statefulset PersistentVolumeClaimDeletePolicy api change 2021-11-17 16:46:48 -08:00
Matthew Cary
98c37f9e2a statefulset PersistentVolumeClaimDeletePolicy api change 2021-11-17 16:46:47 -08:00
Sergey Kanzhelev
b7affcced1 implement :grpc probe action 2021-11-17 17:31:23 +00:00
Kubernetes Prow Robot
f151a40d8d
Merge pull request #106154 from gnufied/recover-expansion-failure-123 
Recover expansion failure
 2021-11-16 13:21:34 -08:00
Hemant Kumar
63fffd37b1 Implement API changes necessary for recovery from resize failure 2021-11-15 18:39:30 -05:00
Kubernetes Prow Robot
058ce89c60
Merge pull request #106285 from SergeyKanzhelev/updateHandlersDescription 
updated probe handler types descriptions
 2021-11-15 15:07:52 -08:00
Sergey Kanzhelev
57ed0174b1 updated probe handler types descriptions 2021-11-15 19:55:27 +00:00
shawnhanx
063e64c4ec fix S1017 and S1002 in pkg/apis/core/validation/validation.go 2021-11-13 17:02:40 +08:00
Kubernetes Prow Robot
1ff64edffb
Merge pull request #104636 from hbagdi/ingress-class-namespaced-params-ga 
Graduate IngressClassNamespacedParams to GA
 2021-11-10 12:53:26 -08:00
Harry Bagdi
d09a8c0a88 Graduate IngressClassNamespacedParams to GA 2021-11-10 08:58:39 -08:00
Kubernetes Prow Robot
5d60c8d857
Merge pull request #102393 from mengjiao-liu/fix-sysctl-regex 
Upgrade preparation to verify sysctl values containing forward slashes by regex
 2021-11-09 18:23:26 -08:00
wangyysde
d2abddd909 rename v2beta2 to v2 
Signed-off-by: wangyysde <net_use@bzhy.com>

Generation swagger.json.

Use v2 path for hpa_cpu_field.

run update-codegen.sh

Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-11-09 10:34:54 +08:00
wangyysde
f5c75813e3 just copy v2beta2 to v2 
Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-11-09 08:19:33 +08:00
shawnhanx
d3804784ee fix "k8s.io/apimachinery/pkg/util/validation" is being imported more than once 2021-11-08 09:43:44 +08:00
Vivek Koppuru
de680aec08 Fix string output format for secret validations 2021-11-05 18:29:48 +05:30
Kubernetes Prow Robot
2af34cf54d
Merge pull request #105940 from dobsonj/kep-1682-ga 
Move CSIVolumeFSGroupPolicy feature to GA
 2021-11-04 12:34:23 -07:00
Mengjiao Liu
275d832ce2 Upgrade preparation to verify sysctl values containing forward slashes by regex 2021-11-04 11:49:56 +08:00
Jonathan Dobson
082cb15648 Move CSIVolumeFSGroupPolicy feature to GA 2021-11-02 15:22:33 -06:00
Kubernetes Prow Robot
6ebd6f38b9
Merge pull request #104909 from pacoxu/kubectl-qos 
kubectl: include init containers when determining pod QoS
 2021-11-01 20:00:58 -07:00
Kubernetes Prow Robot
36e69a3303
Merge pull request #105980 from ahg-g/ahg-mutable 
Make job pod template annotations and labels mutable for suspended jobs that never started
 2021-10-29 13:15:23 -07:00
Tim Hockin
11a25bfeb6
De-share the Handler struct in core API (#105979) 
* De-share the Handler struct in core API

An upcoming PR adds a handler that only applies on one of these paths.
Having fields that don't work seems bad.

This never should have been shared.  Lifecycle hooks are like a "write"
while probes are more like a "read". HTTPGet and TCPSocket don't really
make sense as lifecycle hooks (but I can't take that back). When we add
gRPC, it is EXPLICITLY a health check (defined by gRPC) not an arbitrary
RPC - so a probe makes sense but a hook does not.

In the future I can also see adding lifecycle hooks that don't make
sense as probes.  E.g. 'sleep' is a common lifecycle request. The only
option is `exec`, which requires having a sleep binary in your image.

* Run update scripts
 2021-10-29 13:15:11 -07:00
Shivanshu Raj Shrivastava
c2fba6b84d
referenced the V1Secret type (#105901) 2021-10-29 12:13:11 -07:00
Kubernetes Prow Robot
bb24c265ce
Merge pull request #104693 from ravisantoshgudimetla/add-podOS-field 
Add pod os field
 2021-10-28 21:38:50 -07:00
Kubernetes Prow Robot
c592bd40f2
Merge pull request #105609 from pohly/generic-ephemeral-volume-ga 
generic ephemeral volume GA
 2021-10-28 17:36:50 -07:00
ravisantoshgudimetla
41f8f95fc5 generated: Add os field to Pod Spec 2021-10-28 17:31:52 -04:00
ravisantoshgudimetla
d7d0beb65f api: Handle validation of PodOS field presence 2021-10-28 17:31:52 -04:00
ravisantoshgudimetla
3b936d310c api: Introduce os field to pod spec 2021-10-28 17:31:52 -04:00
Abdullah Gharaibeh
f466ab0989 Make job pod template annotations and labels mutable for suspended jobs that never started 2021-10-28 14:53:15 -04:00
Kubernetes Prow Robot
6edcb60d9f
Merge pull request #104915 from alculquicondor/job-ready 
Track ready pods in Job status
 2021-10-28 09:20:26 -07:00
Patrick Ohly
d55f7c85ef psp: remove unused PodSecurityPolicyValidationOptions 
Since the only member of that struct is gone, the struct itself can also be
removed. If for whatever reason the struct is needed again, then this commit
can be reverted to bring it back.
 2021-10-28 17:25:07 +02:00
Kubernetes Prow Robot
7fbb384e15
Merge pull request #105682 from pohly/generic-ephemeral-volume-raw-block 
storage validation: accept generic ephemeral volumes as volume device
 2021-10-22 18:04:50 -07:00
Kubernetes Prow Robot
18104ecf1f
Merge pull request #105405 from verb/1.23-ec-beta 
Promote EphemeralContainers to beta
 2021-10-20 09:24:10 -07:00
Lee Verberne
d33bbb8940 Allow volumeDevices in ephemeral containers 2021-10-19 23:04:05 -04:00
Lee Verberne
d874cf8ffd List disallowed ephemeral container fields 
Listing these explicitly makes it easier to determine whether a new
Container field has been evaluated for use with ephemeral containers.
This does not change the behavior of ephemeral containers.
 2021-10-19 23:03:57 -04:00
Lee Verberne
f81c48cd0a Disallow subpath for ephemeral container mounts 2021-10-19 23:01:15 -04:00
Lee Verberne
d1d7882186 Add test for EphemeralContainerCommon struct tags 
The tags for type EphemeralContainerCommon should be kept in sync with
those of type Container.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
 2021-10-19 23:01:07 -04:00
Lee Verberne
26e183b9d9 Clarify EphemeralContainer behavior in docs 
- Apply doc style guide
- Specify behavior when namespace targeting isn't supported by runtime
 2021-10-19 23:00:51 -04:00
Lee Verberne
764859081a Validate ephemeralContainerStatuses during update 2021-10-19 23:00:51 -04:00
Aldo Culquicondor
1bff5eb44d Add ready field to Job status 
to keep a count of the pods that have the ready condition.

Also:
- Add feature gate JobReadyPods.
- Add Ready to describe.

Change-Id: Ib934730a430a8e2a2f485671e345fe2330006939
 2021-10-19 15:18:34 -04:00
Kubernetes Prow Robot
c733594040
Merge pull request #105687 from alculquicondor/job-tracking 
Graduate JobTrackingWithFinalizers to beta
 2021-10-19 11:40:37 -07:00
Lee Verberne
6f4b8da9a3 Promote EphemeralContainers feature to beta 2021-10-19 08:47:57 -04:00
Patrick Ohly
a40d2eb18c storage validation: accept generic ephemeral volumes as volume device 
Raw block devices are possible with generic ephemeral volumes, so rejecting a
pod with that combination is wrong.
 2021-10-19 13:30:32 +02:00
Mark Rossetti
3ddff55fe6 Adding unit test coverage for API validation for emphermal contaienrs in hostprocess pods on Windows 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2021-10-18 15:46:27 -07:00
Aldo Culquicondor
2c1b3fdb5b Graduate JobTrackingWithFinalizers to beta 
Enable feature by default.

Update integration tests for other features to assume that finalizers are present.

Change-Id: Ie969344f572627dba882c0e862e5700dadaf3026
 2021-10-15 10:29:40 -04:00
Abdullah Gharaibeh
335817cbce Allow updating node affinity, selector and tolerations for suspended jobs that never started 2021-10-14 10:04:47 -04:00
Patrick Ohly
a8c930ef46 generic ephemeral volume: graduation to GA 
The feature gate gets locked to "true", with the goal to remove it in two
releases.

All code now can assume that the feature is enabled. Tests for "feature
disabled" are no longer needed and get removed.

Some code wasn't using the new helper functions yet. That gets changed while
touching those lines.
 2021-10-11 20:54:20 +02:00
Sahil Vazirani
3988405c8d
GA TTLAfterFinish 2021-10-07 16:58:50 -07:00
Kubernetes Prow Robot
c46d84b991
Merge pull request #105293 from verb/1.23-ec-validation 
Validate PodSpec in EphemeralContainersUpdate
 2021-10-01 07:31:34 -07:00
Lee Verberne
8b24dc07ff Test ephemeral container/pod conflicting fields 
This adds a test case to cover the scenario where the fields of an
ephemeral container conflict with other fields in the pod and must be
detected by full PodSpec validation.
 2021-09-30 21:47:19 +02:00
Lee Verberne
4451138bfa Validate PodSpec in EphemeralContainersUpdate 
Previously this only validated the ephemeral containers, but it's safer
to validate the entire PodSpec in case other parts of validation add
logic that checks ephemeral containers.
 2021-09-27 22:58:08 +02:00
Kubernetes Prow Robot
48d844ec64
Merge pull request #104483 from margocrawf/master 
Add UID to client-go impersonation config
 2021-09-27 07:33:36 -07:00
Khaled Henidak (Kal)
a53e2eaeab
move IPv6DualStack feature to stable. (#104691) 
* kube-proxy

* endpoints controller

* app: kube-controller-manager

* app: cloud-controller-manager

* kubelet

* app: api-server

* node utils + registry/strategy

* api: validation (comment removal)

* api:pod strategy (util pkg)

* api: docs

* core: integration testing

* kubeadm: change feature gate to GA

* service registry and rest stack

* move feature to GA

* generated
 2021-09-24 16:30:22 -07:00
Margo Crawford
d9ddfb26e1 Introduces Impersonate-Uid to client-go. 
* Updates ImpersonationConfig in rest/config.go to include UID
  attribute, and pass it through when copying the config
* Updates ImpersonationConfig in transport/config.go to include UID
  attribute
* In transport/round_tripper.go, Set the "Impersonate-Uid" header in
  requests based on the UID value in the config
* Update auth_test.go integration test to specify a UID through the new
  rest.ImpersonationConfig field rather than manually setting the
  Impersonate-Uid header

Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2021-09-24 14:06:30 -07:00
saad-ali
beb17fe10b Remove VolumeSubpath feature gate 
Remove the VolumeSubpath feature gate.

Feature gate convention has been updated since this was introduced to
indicate that they "are intended to be deprecated and removed after a
feature becomes GA or is dropped.".
 2021-09-17 01:59:23 -07:00
h4ghhh
0734820279
'New' Event namespace validate failed (#100125) 2021-09-16 04:29:45 -07:00
Paco Xu
b74214ebcb cleanup: add update notice in origin file & make it diff cleanly 2021-09-15 15:57:11 +08:00
Kubernetes Prow Robot
9c147baa70
Merge pull request #104969 from liggitt/crd-error-validation 
Fix conversion of literal null JSON values
 2021-09-13 18:01:27 -07:00
Kubernetes Prow Robot
cdcf2a239e
Merge pull request #104399 from tkashem/apf-v1beta2 
apf: introduce v1beta2
 2021-09-13 18:01:08 -07:00
Kubernetes Prow Robot
62a6df9e0b
Merge pull request #104045 from ravisantoshgudimetla/promote-minReadySec-sts-beta 
Promote min ready sec sts beta
 2021-09-13 14:33:50 -07:00
Jordan Liggitt
ba1ca0d459 Propagate conversion errors 2021-09-13 12:04:16 -04:00
Tim Hockin
650f8cfd35 Svc REST: Validate input before IP allocation 
This commit started as removing FIXME comments, but in doing so I
realized that the IP allocation process was using unvalidated user
input.  Before de-layering, validation was called twice - once before
init and once after, which the init code depended on.

Fortunately (or not?) we had duplicative checks that caught errors but
with less friendly messages.

This commit calls validation before initializing the rest of the
IP-related fields.

This also re-organizes that code a bit, cleans up error messages and
comments, and adds a test SPECIFICALLY for the errors in those cases.
 2021-09-11 11:30:01 -07:00
Tim Hockin
8bcba526b6 Svc REST: Better errors on stack-downgrades 
Converting dual-stack to single-stack needs good errors.
 2021-09-11 11:30:01 -07:00
Tim Hockin
f4521aa75a Fix validation on ETP: "" is not valid 
This was causing tests to pass which ought not be passing.  This is not
an API change because we default the value of it when needed.  So we
would never see this in the wild, but it makes the tests sloppy.
 2021-09-11 11:30:01 -07:00
Tim Hockin
ccf3376570 Svc REST: De-layer Update 
This is the last layered method.  All allocator logic is moved to the
beginUpdate() path.  Removing the now-useless layer will happen in a
subsequent commit.
 2021-09-11 11:30:00 -07:00
Tim Hockin
14d0571a5f Svc REST: Don't call validation directly 
The validation is called soon after anyway.
 2021-09-11 10:49:13 -07:00
Kubernetes Prow Robot
c91287c7b9
Merge pull request #104747 from kinvolk/invidian/typos 
Fix typos in files which are used for generating OpenAPI
 2021-09-09 18:04:57 -07:00
Abu Kashem
28f2b42a41
apf: update apf logic to use v1beta2 2021-09-09 08:28:58 -04:00
Abu Kashem
2f19f8c2df
apf: regenerate for v1beta2 2021-09-09 08:28:58 -04:00
Abu Kashem
e2b8701545
apf: ebable v1beta2 2021-09-09 08:28:53 -04:00
Mike Danese
acb85012ba rbac: remove AttributeRestriction documentation 
This field never made it past the alpha API.
 2021-09-07 16:45:49 -07:00
Abu Kashem
5d0bf053b6
apf: rename to v1beta2 2021-09-07 09:42:13 -04:00
Abu Kashem
54064ff337
apf: copy v1beta1 to v1beta2 2021-09-07 09:42:12 -04:00
Kubernetes Prow Robot
eb729620c5
Merge pull request #99682 from chymy/fix-misspelling 
Fix misspelling and misgrammar
 2021-09-05 12:46:28 -07:00
Mateusz Gozdek
d7768519ee
Fix typo assigment -> assignment 
Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
 2021-09-04 11:55:26 +02:00
Mateusz Gozdek
3066f1550f
Fix typo fileystem -> filesystem 
Signed-off-by: Mateusz Gozdek <mgozdek@microsoft.com>
 2021-09-04 11:55:18 +02:00
Stephen Augustus
481cf6fbe7
generated: Run hack/update-gofmt.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-08-24 15:47:49 -04:00
wangyamei
c128411815 fix typo: Modify PodTrackingWithFinalizers to JobTrackingWithFinalizers 2021-08-23 15:38:30 +08:00
ravisantoshgudimetla
bcc288eeee api: Promote statefulset MinReadySeconds to beta 2021-08-20 12:51:35 -04:00
Antonio Ojea
0cd75e8fec run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
Kubernetes Prow Robot
f805f5588b
Merge pull request #104416 from liggitt/go117-certificates 
Update unit tests to handle go1.17 certificate parsing error messages
 2021-08-17 17:04:07 -07:00
Jordan Liggitt
0e925f266f Update unit tests to handle go1.17 certificate parsing error messages 2021-08-17 11:24:03 -04:00
Jordan Liggitt
87a4e082ac Change defaulter-gen input to package path 2021-08-14 11:00:18 -04:00
Patrick Ohly
dfaeacb51f CSIDriver: allow "StorageCapacity" to be modified 
When originally introduced, the field was made immutable to be
consistent with the other fields. But in practice allowing it to be
toggled makes more sense, in particular when considering the rollout
of a CSI driver (let it run without using the published
CSIStorageCapacity object, then flip the field, or upgrading from a
driver without support to one which supports it).

The only consumer of this field, the kube-scheduler, can handle
mutation without problems because it always consults the informer
cache to get the current value.
 2021-08-11 15:10:30 +02:00
Jordan Liggitt
c702dd4394 Drop legacy validation logic for networking API 2021-08-09 12:37:45 -04:00
Jordan Liggitt
b1d344db44 Drop legacy validation logic for certificates API 2021-08-09 12:37:34 -04:00
Jordan Liggitt
befffd1565 Drop legacy validation logic for admission registration 2021-08-09 12:37:18 -04:00
Kubernetes Prow Robot
84b94e8d80
Merge pull request #103456 from vikramcse/test_validate_ingress_class 
Refactor of TestValidateIngressClass and TestValidateIngressClassUpdate Methods
 2021-08-05 22:06:53 -07:00
Kubernetes Prow Robot
0123a893a8
Merge pull request #103872 from able8/fix-a-typo-in-comment 
Fix a typo in comment
 2021-08-05 14:10:21 -07:00
Kubernetes Prow Robot
41fdc193ff
Merge pull request #101370 from RyanAoh/master 
Set out.TargetCPUUtilizationPercentage correctly when converting autscaling_HorizontalPodAutoscalerSpec to v1_HorizontalPodAutoscalerSpec
 2021-08-04 18:59:02 -07:00
able8
3520e8b339 Fix a typo in comment 2021-07-23 19:47:33 +08:00
Matthew Cary
aeb82243fc Revert "tests for statefulset PersistentVolumeClaimDeletePolicy api change" 
This reverts commit b259686b36.

Change-Id: I25cc8ae8a9aa77d0bc483147d3f8fb65616a2b2b
 2021-07-16 11:51:35 -07:00
Aohan Yang
4101c8b3cb Set out.TargetCPUUtilizationPercentage correctly when converting autoscaling_HorizontalPodAutoscalerSpec to v1_HorizontalPodAutoscalerSpec 2021-07-16 11:29:22 +08:00
Matthew Cary
10a3cc815b Revert "statefulset PersistentVolumeClaimDeletePolicy api change" 
This reverts commit e4e735cd1c.

Change-Id: I3e17aa585fd9ae4f9e74b97326ae6b9fadd2a94c
 2021-07-15 17:14:19 -07:00
Davanum Srinivas
75748c185e
enable verify-golangci-lint.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-07-14 08:53:33 -04:00
Davanum Srinivas
07332ad398
fix ineffassign and varcheck 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-07-14 08:41:22 -04:00
Elana Hashman
aaa7de0ac6 Update API description for probe.terminationGracePeriodSeconds 2021-07-13 14:28:06 -05:00
Kubernetes Prow Robot
e375563732
Merge pull request #103245 from wzshiming/fix/prober-termination 
Add validation for Prober TerminationGracePeriodSeconds
 2021-07-13 09:30:30 -07:00
Kubernetes Prow Robot
e799d7b191
Merge pull request #99023 from verb/1.21-securitycontext 
Allow setting securityContext in ephemeral containers
 2021-07-09 20:50:46 -07:00
Shiming Zhang
513bd93f76 update test for feature gate 2021-07-09 10:37:38 +08:00
Kubernetes Prow Robot
b765496650
Merge pull request #98817 from alculquicondor/job-completion-api 
Add Job.status.uncountedTerminatedPods for Job tracking
 2021-07-08 10:44:54 -07:00
Aldo Culquicondor
bb56a0bd04 Add Job.status.uncountedPodUIDs 
For tracking Job Pods that have finished but are not yet counted as failed or succeeded

And feature gate JobTrackingWithFinalizers

Change-Id: I3e080f3ec090922640384b692e88eaf9a544d3b5
 2021-07-08 15:31:59 +00:00
Kubernetes Prow Robot
36a7426aa5
Merge pull request #99144 from bart0sh/PR0094-promote-HugePageStorageMediumSize-to-GA 
promote huge page storage medium size to GA
 2021-07-07 18:09:05 -07:00
Kubernetes Prow Robot
7bfd0b0503
Merge pull request #103467 from thockin/svc-alloc-lb-nodeports-bug 
Fix small bug with AllocateLoadBalancerNodePorts
 2021-07-07 17:05:40 -07:00
Vikram Jadhav
a9a3c4bb9a Refactor of TestValidateIngressClass and TestValidateIngressClassUpdate methods by adding Boilerplate in helper functions #FIXES: 99005 2021-07-07 22:35:35 +05:30
Kubernetes Prow Robot
eaba61b4de
Merge pull request #103276 from NetApp/data-source-ref 
Add DataSourceRef field to PVC spec
 2021-07-07 08:56:44 -07:00
Shiming Zhang
d8fe255f41 Add test for validateProbe 2021-07-07 11:31:23 +08:00
Shiming Zhang
e378600c90 Add validation for Prober TerminationGracePeriodSeconds 2021-07-07 10:51:30 +08:00
Ben Swartzlander
00dba76918 Add DataSourceRef field to PVC spec 
Modify the behavior of the AnyVolumeDataSource alpha feature gate to enable
a new field, DataSourceRef, rather than modifying the behavior of the
existing DataSource field. This allows addition Volume Populators in a way
that doesn't risk breaking backwards compatibility, although it will
result in eventually deprecating the DataSource field.
 2021-07-06 21:17:41 -04:00
Tim Hockin
eae4a19bd3 Fix small bug with AllocateLoadBalancerNodePorts 
If the user specified a port, DO reserve it, even if they asked you not
to allocate new ports.
 2021-07-06 16:36:51 -07:00
Andrew Sy Kim
28f3f36505
Promote the ServiceInternalTrafficPolicy field to Beta and on by default (#103462) 
* pkg/features: promote the ServiceInternalTrafficPolicy field to Beta and on by default

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/api/service/testing: update Service test fixture functions to set internalTrafficPolicy=Cluster by default

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/apis/core/validation: add more Service validation tests for internalTrafficPolicy

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/registry/core/service/storage: fix failing Service REST storage tests to use internalTrafficPolicy: Cluster

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/registry/core/service/storage: add two test cases for Service REST TestServiceRegistryInternalTrafficPolicyClusterThenLocal and TestServiceRegistryInternalTrafficPolicyLocalThenCluster

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/registry/core/service: update strategy unit tests to expect default
internalTrafficPolicy=Cluster

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/proxy/ipvs: fix unit test Test_EndpointSliceReadyAndTerminatingLocal to use internalTrafficPolicy=Cluster

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/apis/core: update fuzzers to set Service internalTrafficPolicy field

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>

* pkg/api/service/testing: refactor Service test fixtures to use Tweak funcs

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 06:16:30 -07:00
Kubernetes Prow Robot
687f0aa35b
Merge pull request #101296 from Miciah/fix-RollingUpdateDaemonSet-godoc-regarding-rounding 
Fix RollingUpdateDaemonSet godoc regarding rounding
 2021-07-05 02:14:54 -07:00
Hanlin Shi
79b6df96fc Add tests for LB type service 
1. create LB type svc with nodeport allocation set to false
1. create LB type svc with nodeport allocation unset
3. update LB type svc's nodeport allocation field

Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:49 +00:00
Hanlin Shi
24592ca989 Update the related tests 
1. add AllocateLoadBalancerNodePorts fields in specs for validation test cases
2. update fuzzer
3. in resource quota e2e, allocate node port for loadbalancer type service and
   exceed the node port quota

Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:41 +00:00
Monis Khan
29b3fa7826
Generated 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:16 -04:00
Monis Khan
cd91e59f7c
csr: add expirationSeconds field to control cert lifetime 
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
98d20f552b
Merge pull request #99378 from mattcary/api 
StatefulSet PersistentVolumeClaimDeletePolicy
 2021-06-30 11:49:03 -07:00
Kubernetes Prow Robot
21f41b8e82
Merge pull request #101711 from hbagdi/ingressclass-namespaced-params-beta 
graduate IngressClassNamespacedParams to beta
 2021-06-29 17:07:03 -07:00
Harry Bagdi
f0d917a3ca add fuzzer patch to fix tests 2021-06-29 12:59:59 -07:00
Chris Henzie
5f98f6cfa4 Update helper methods to print and parse ReadWriteOncePod access mode 2021-06-28 21:25:37 -07:00
Chris Henzie
7491d01651 Validate use of the ReadWriteOncePod access mode 
This will only work if the "ReadWriteOncePod" feature gate is enabled.
Additionally, this access mode will only work when used by itself. This
is because when ReadWriteOncePod is used on a PV or PVC, it renders all
other access modes useless since it is most restrictive.
 2021-06-28 21:25:37 -07:00
Chris Henzie
48ba5020a2 ReadWriteOncePod PV access mode and feature gate 2021-06-28 21:25:35 -07:00
Chris Henzie
358d2e0bd1 Export contains access mode helper method 
Will be used during validation of PVs and PVCs
 2021-06-28 21:24:56 -07:00
Chris Henzie
dba8ee229e Add validation options for PersistentVolumeClaims 
These options provide an extensible way of configuring how PVCs are
validated
 2021-06-28 21:24:55 -07:00
Chris Henzie
9ba0eed7c5 Add validation options for PersistentVolumes 
These options provide an extensible way of configuring how PVs are
validated
 2021-06-28 21:24:55 -07:00
Shiming Zhang
40593fa4d3 spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative 2021-06-28 11:49:39 +08:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi 
CSIServiceAccountToken ga
 2021-06-26 19:31:23 -07:00
Lee Verberne
70765fa24d Allow securityContext in EphemeralContainers 2021-06-25 18:47:22 +02:00
Mike Spreitzer
179e48c4be Add missing comments in APF API types 2021-06-25 00:27:40 -04:00
Matthew Cary
b259686b36 tests for statefulset PersistentVolumeClaimDeletePolicy api change 
Change-Id: I07c8e31a8c76a6a1022c08fb749af7e353b731de
 2021-06-23 11:55:35 -07:00
Matthew Cary
e4e735cd1c statefulset PersistentVolumeClaimDeletePolicy api change 2021-06-23 10:33:05 -07:00
Kubernetes Prow Robot
7b24c7e4a7
Merge pull request #101256 from Jiawei0227/length2 
Relax csiNodeIDMaxLength length limit to 256
 2021-06-23 02:10:10 -07:00
Kubernetes Prow Robot
268cab5f44
Merge pull request #102022 from adtac/sbeta 
graduate SuspendJob to beta
 2021-06-22 17:18:10 -07:00
Shihang Zhang
8231a3e921 CSIServiceAccountToken ga 2021-06-21 11:35:24 -07:00
Kubernetes Prow Robot
7e23c5367d
Merge pull request #95768 from danwinship/document-nodeaddresstype 
Document the NodeAddressType values
 2021-06-18 16:42:42 -07:00
Ricardo Pchevuzinske Katz
9f18ddf03c Promote endPort field in netpolicies to beta 
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
 2021-06-15 10:47:17 -03:00
Davanum Srinivas
4b36a5cbe9
Switch to github.com/robfig/cron/v3 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-06-14 19:03:03 -04:00
Kubernetes Prow Robot
5aedca2758
Merge pull request #102550 from CKchen0726/fix_log_error_for_mr98753 
update error info with the new limit in #98753
 2021-06-14 10:55:41 -07:00
chymy
b250a985d2 Fix misspelling and misgrammar 
Signed-off-by: chymy <chang.min1@zte.com.cn>
 2021-06-05 05:02:17 -04:00
Andrew Sy Kim
f119b8df5f apis: update generated code after removing Service topologyKeys 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-06-03 22:17:46 -04:00
Andrew Sy Kim
4d38d21880 apis: remove Service topologyKeys 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-06-03 22:17:45 -04:00
Adhityaa Chandrasekar
ba708e5fc9 graduate SuspendJob to beta 
Also adds a label to two existing Job metrics.

Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2021-06-03 18:48:32 +00:00
CKchen0726
918246d7a1 update error info with the new limit in #98753 2021-06-03 11:08:09 +08:00
Miciah Masters
452e2eaf1b Fix RollingUpdateDaemonSet godoc regarding rounding 
Fix the godoc for RollingUpdateDaemonSet to state that
spec.updateStrategy.rollingUpdate.maxUnavailable is rounded up.

A recent commit changed the godoc to say that the value of this field
was rounded down, but the actual implementation rounds up and always has
rounded up.  (This is in contrast to Deployments, where
spec.strategy.rollingUpdate.maxUnavailable is rounded down.)

Follow-up to commit 5aa53f885c.

* api/openapi-spec/swagger.json:
* staging/src/k8s.io/api/apps/v1/generated.proto:
* pkg/apis/apps/types.go:
* staging/src/k8s.io/api/apps/v1/types.go:
* staging/src/k8s.io/api/apps/v1/types_swagger_doc_generated.go:
* staging/src/k8s.io/api/apps/v1beta2/generated.proto:
* staging/src/k8s.io/api/apps/v1beta2/types.go:
* staging/src/k8s.io/api/apps/v1beta2/types_swagger_doc_generated.go:
* staging/src/k8s.io/api/extensions/v1beta1/generated.proto:
* staging/src/k8s.io/api/extensions/v1beta1/types.go:
* staging/src/k8s.io/api/extensions/v1beta1/types_swagger_doc_generated.go:
* staging/src/k8s.io/cli-runtime/artifacts/openapi/swagger.json:
* staging/src/k8s.io/kubectl/testdata/openapi/swagger.json:
Change "rounding down" to "rounding up".
 2021-06-01 10:09:26 -04:00
Kubernetes Prow Robot
e8760b95bb
Merge pull request #102336 from SataQiu/remove-podpreset 
cleanup PodPreset testdata
 2021-05-27 11:36:23 -07:00
Gunju Kim
6317ce63c6 Add feature gate ExpandedDNSConfig 
ExpandedDNSConfig allows kubernetes to have expanded DNS(Domain Name
System) configuration
 2021-05-27 07:10:13 +09:00
Kubernetes Prow Robot
a98d3d0700
Merge pull request #100842 from ravisantoshgudimetla/add-minReadySeconds-ss 
api: Add min ready seconds & availablereplicas for statefulsets
 2021-05-26 13:45:50 -07:00
SataQiu
9cfbf06225 cleanup PodPreset testdata 2021-05-26 19:57:29 +08:00
ravisantoshgudimetla
f3ab955018 validation: Handle presence of api introduced 
When the StatefulSetMinReadySeconds feature gate is disabled,
the registry and validation must properly handle dropping the
minReadySeconds and AvailableReplicas fields
 2021-05-25 20:03:18 -04:00
ravisantoshgudimetla
5464b64981 generated: Changes for api introduced 2021-05-25 19:59:58 -04:00
ravisantoshgudimetla
49af835852 api: Introduce minReadySeconds,AvailableReplicas in Statefulset 
The minReadySeconds field on StatefulSet specifies the minimum
number of seconds for which a newly created Pod should be
ready without any of its containers crashing, for it to
be considered available. The AvailableReplicas field
in the status reflects the replicas that are available
 2021-05-25 19:59:57 -04:00
Kubernetes Prow Robot
815bae5aaa
Merge pull request #102074 from creydr/change-the-users-of-isqualifiedname-to-validatequalifiedname 
Change the users of IsQualifiedName to ValidateQualifiedName
 2021-05-24 13:38:49 -07:00
Kubernetes Prow Robot
d8f9e4587a
Merge pull request #101742 from ravisantoshgudimetla/promote-maxSurge-beta 
Promote DS MaxSurge to beta
 2021-05-23 04:33:38 -07:00
Kubernetes Prow Robot
6e4e32985a
Merge pull request #99576 from marosset/windows-host-process-work 
Windows host process work
 2021-05-20 14:16:15 -07:00
Kubernetes Prow Robot
8a70c48553
Merge pull request #102159 from roycaihw/mark-containerimage-name-optional 
Mark ContainerImage.names as optional
 2021-05-20 13:14:40 -07:00
Kubernetes Prow Robot
f52ab3845d
Merge pull request #101099 from pacoxu/podpreset-clean 
remove pod preset testdata and args
 2021-05-20 10:40:36 -07:00
Haowei Cai
1652e59c9b mark ContainerImage.names as optional 
kubelet is the only writer of v1.Node .status.images[].names. When an
image has neither RepoDigests nor RepoTags, the value gets stored in
etcd as null. Marking the field as optional can help JSON API clients
to avoid hitting serialization error when the returned status contains
null .status.images[].names.
 2021-05-19 18:55:56 -07:00
marosset
93da0fd45d API support for Windows host process containers 
Co-authored-by: James Sturtevant <jstur@microsoft.com>
 2021-05-19 16:24:13 -07:00
ravisantoshgudimetla
040e9c8b51 Promote DS MaxSurge to beta 2021-05-19 16:12:52 -04:00
Kubernetes Prow Robot
1d0e5ac583
Merge pull request #101916 from MartinKanters/101137-document-double-dollar-behavior 
Added the behavior of double dollar signs in env, command and args
 2021-05-19 02:20:50 -07:00
Martin Kanters
8a4cdb847c Processed review suggestions 2021-05-18 21:11:45 +02:00
creydr
f38615fb9d Change the users of IsQualifiedName to ValidateQualifiedName 2021-05-18 10:49:15 +02:00
Kubernetes Prow Robot
f576fa9164
Merge pull request #101230 from lojies/fixrbacvalidation 
code cleanup:fix broken link in validation
 2021-05-17 16:15:30 -07:00
Aldo Culquicondor
7c50cd762a Use aliases in sig apps and scheduling APIs OWNERS 
Add alculquicondor to sig-scheduling-api-reviewers and sig-apps-api-reviewers
 2021-05-17 17:56:20 +00:00
Kubernetes Prow Robot
49a60be8ab
Merge pull request #101496 from ahg-g/ahg-nss-beta 
Graduate pod affinity NamespaceSelector to Beta
 2021-05-14 08:48:04 -07:00
Abdullah Gharaibeh
e49d1144d5 graduate pod affinity NamespaceSelector to Beta 2021-05-14 10:44:57 -04:00
Kubernetes Prow Robot
09268c1685
Merge pull request #101627 from rikatz/fix-ingress-doc 
Change ingress api doc to reflect the correct path validation
 2021-05-13 05:44:25 -07:00
Martin Kanters
6d77ed7375 Ran gofmt 2021-05-13 10:28:29 +02:00
chymy
5a0fc32a47 Fix link 404 
Signed-off-by: chymy <chang.min1@zte.com.cn>
 2021-05-12 11:48:48 -04:00
Martin Kanters
3bbb1f3f8d
Added the behavior of double dollar signs in env, command and args 2021-05-11 20:12:21 +02:00
Kubernetes Prow Robot
8ba1831951
Merge pull request #99391 from zhuangqh/update-doc 
docs: fix outdated enhancement doc link
 2021-05-10 12:43:36 -07:00
Ed Bartosh
c12aa0f6b7 promote HugePageStorageMediumSize to GA 2021-05-10 15:57:55 +03:00
卢振兴10069964
17889cc3ad code cleanup:fix broken link in validation 2021-05-08 09:01:57 +08:00
Kubernetes Prow Robot
548fb43643
Merge pull request #101292 from AliceZhang2016/job_controller_metrics 
Graduate indexed job to beta
 2021-05-07 13:31:44 -07:00
Kubernetes Prow Robot
d9abcee491
Merge pull request #100936 from lojies/cleanuppkgapi 
code cleanup for pkg/api and pkg/apis
 2021-05-07 13:31:25 -07:00
Mengxue Zhang
0c99f29f98 add restriction to indexed job name 2021-05-07 13:29:01 +00:00
Kubernetes Prow Robot
b58a7e233e
Merge pull request #100879 from JaredTan95/remove_old_ip_checks 
remove old ip checks.
 2021-05-04 15:39:14 -07:00
Aldo Culquicondor
1d17b18ccf Set OWNERS of pkg/apis to api-(approvers/reviewers) 
Drop OWNERS in pkg/apis/core
 2021-05-04 19:33:36 +00:00
JaredTan95
b6fbe5e622 remove old ip checks 
Signed-off-by: JaredTan95 <jian.tan@daocloud.io>
 2021-05-04 08:57:29 +08:00
Harry Bagdi
60377ba1a3 graduate IngressClassNamespacedParams to beta 2021-05-03 15:00:40 -07:00
Ricardo Pchevuzinske Katz
11316a6d84 Change ingress api doc to reflect the correct path validation 
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
 2021-04-30 16:24:03 -03:00
Mengxue Zhang
2d2ee6bc3a change default feature gate value of IndexedJob 2021-04-30 14:36:15 +00:00
卢振兴10069964
4e447acab0 code cleanup for pkg/api and pkg/apis 2021-04-28 08:57:23 +08:00
Kubernetes Prow Robot
21ab9c4175
Merge pull request #95286 from SergeyKanzhelev/removePodUnknown 
Deprecating PodUnknown podPhase
 2021-04-27 11:21:38 -07:00
Kubernetes Prow Robot
75d571a10b
Merge pull request #101342 from rosenhouse/promote-namespace-default-labels-to-ga 
Promote NamespaceDefaultLabelName to GA
 2021-04-22 13:19:57 -07:00
Kubernetes Prow Robot
972ee2d425
Merge pull request #101034 from verb/1.22-ec-api 
Switch alpha Pod ephemeralcontainers API to use Pod kind
 2021-04-22 06:21:41 -07:00
Gabe Rosenhouse
176c07dfdd fix up test for setting default namespace labels 2021-04-21 23:50:58 +00:00
Jiawei Wang
125fb04dbf Relax node_id length limit to 256 2021-04-19 12:55:19 -07:00
Kubernetes Prow Robot
889f1c3951
Merge pull request #101084 from robscott/endpointslice-ip-validation 
Updating EndpointSlice validation to match Endpoints validation
 2021-04-16 17:10:21 -07:00
Kubernetes Prow Robot
df9ad4d7d2
Merge pull request #96094 from Hellcatlk/m 
Some comments' typos
 2021-04-16 11:54:22 -07:00
Kubernetes Prow Robot
27a625cf89
Merge pull request #100724 from liggitt/eviction-v1beta1 
Add policy/v1 Eviction support
 2021-04-16 10:02:22 -07:00
Kubernetes Prow Robot
24350a922e
Merge pull request #101086 from enj/enj/i/auth_owners_gen 
Prune stale entries from OWNERS files
 2021-04-15 08:27:50 -07:00
pacoxu
e9a3b92985 remove pod preset testdata and args 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-04-14 16:23:23 +08:00
Monis Khan
91241eac9b
Prune stale entries from OWNERS files 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-04-13 20:54:50 -04:00
Abdullah Gharaibeh
6ebafb37dd Graduate PodDeletionCost to Beta 2021-04-13 20:01:21 -04:00
Rob Scott
764b501ac4
Updating EndpointSlice validation to match Endpoints validation 2021-04-13 15:26:19 -07:00
Jordan Liggitt
e22cd7dbc4 Generated files 
Change-Id: Ibd7ac0392fd52ae7ce2f6864aefb47bf1b74f8c3
 2021-04-13 17:27:42 -04:00
Dan Winship
4272ac92a7 Document the NodeAddressType values 2021-04-13 13:57:54 -04:00
Lee Verberne
d8ee5ab09e Generated code for Pod-based ephemeralcontainers 2021-04-13 13:36:48 +02:00
Lee Verberne
d22dc5cb72 Switch ephemeralcontainers SR to Pod Kind 
This changes the `/ephemeralcontainers` subresource of `/pods` to use
the `Pod` kind rather than `EphemeralContainers`.

When designing this API initially it seemed preferable to create a new
kind containing only the pod's ephemeral containers, similar to how
binding and scaling work.

It later became clear that this made admission control more difficult
because the controller wouldn't be presented with the entire Pod, so we
updated this to operate on the entire Pod, similar to how `/status`
works.
 2021-04-13 13:36:48 +02:00
Kubernetes Prow Robot
d51f15ed0d
Merge pull request #100885 from enj/enj/i/auth_owners 
Update sig-auth OWNERS
 2021-04-12 22:18:49 -07:00
zhuangqh
adf28648cb docs: fix outdated enhancement doc link 
Signed-off-by: zhuangqh <zhuangqhc@gmail.com>
 2021-04-12 15:15:58 +08:00
Kubernetes Prow Robot
3723713c55
Merge pull request #100922 from lojies/cleanupvalidation 
code cleanup for validation.go
 2021-04-10 19:05:10 -07:00
Kubernetes Prow Robot
b8c6de0e00
Merge pull request #100866 from bowei/small-validation-msg 
Update IP address validation message to include IPv6
 2021-04-10 19:04:12 -07:00
Kubernetes Prow Robot
96790dc69e
Merge pull request #100730 from mikedanese/rbacdoc 
clarify RBAC API documentation
 2021-04-09 05:20:49 -07:00
Kubernetes Prow Robot
1cedfef5c6
Merge pull request #100728 from robscott/topology-auto 
Updating Topology Aware Hints to support "Auto" value for annotation
 2021-04-09 05:20:38 -07:00
Kubernetes Prow Robot
7edb592e3d
Merge pull request #100575 from ZP-AlwaysWin/dev-moons 
Add unit tests and fix scenarios not covered in unit tests
 2021-04-09 05:19:20 -07:00
Kubernetes Prow Robot
50b0211233
Merge pull request #100245 from mengjiao-liu/Update-broken-links 
Update `PodSpec.Overhead` broken links
 2021-04-08 20:29:03 -07:00
Kubernetes Prow Robot
6409ec97e8
Merge pull request #99165 from danielamlins/test_validate_network_policy_refactor 
TestValidateNetworkPolicy refactor
 2021-04-08 14:27:49 -07:00
卢振兴10069964
9e96fe77e8 code cleanup for validation.go 2021-04-08 20:14:33 +08:00
Bowei Du
89ebf47640 Update IP address validation message to include IPv6 
Adds unit test

Change-Id: I08c46f68b164e1ea82bf40f8a1316dfc1e95a6fb
 2021-04-07 08:45:29 -07:00
Monis Khan
bca4993004
Update auth OWNERS files to only use aliases 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-04-07 10:46:03 -04:00
Sergey Kanzhelev
4b05fe6644 podUnknown is marked as Obsolete 2021-04-06 22:43:08 +00:00
Christian Huffman
8efa9e2f6c Updated generated dependencies 2021-04-05 16:06:17 -04:00
Christian Huffman
3bcf407d2f Addresses nitpicks for FSGroupPolicy 2021-04-05 15:45:40 -04:00
Mike Danese
724e760721 clarify RBAC API documentation 
(Resource|Verb)All are meaningless in the context of openapi spec. I saw
ResourceAll used in an RBAC policy.

Change-Id: I8ab5f230bed23be902f77cadee3fbcdec6b24064
 2021-03-31 17:21:56 -07:00
Rob Scott
50b377fe4e
Updating Topology Aware Hints to support "Auto" value for annotation 
Previously only "auto" was supported, a value that was inconsistent with
Kubernetes naming patterns.
 2021-03-31 15:58:42 -07:00
ZP-AlwaysWin
b56d8dd513 Add unit test 2021-03-26 11:10:30 +08:00
Daniela Lins
6c105c9e8a Linewrap for makePort calls and lint fixes 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-25 17:12:02 +01:00
Daniela Lins
22cc8dc3a8 Specify IPV4 on tweak names 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-25 16:57:11 +01:00
Daniela Lins
f4e469ee14 Standardize Namespace and Podselector tweaks 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-25 16:50:28 +01:00
Daniela Lins
5f47d0e8ef Reduce vertical space 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-25 16:41:06 +01:00
Daniela Lins
cb48e3cfca Handle int and string port in makePort 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-25 16:35:23 +01:00
mengjiao.liu
2f9f72a563 Update PodSpec/Overhead broken links 2021-03-19 13:49:13 +08:00
Aldo Culquicondor
e6c3d7b34d Only default Job fields when feature gates are enabled 
Also use pointer for completionMode enum
 2021-03-12 20:46:52 +00:00
Kubernetes Prow Robot
faa5c8ccd4
Merge pull request #99375 from ehashman/probe-kep-2238 
Add Probe-level terminationGracePeriodSeconds
 2021-03-11 23:10:18 -08:00
Kubernetes Prow Robot
d43ffff007
Merge pull request #99298 from zshihang/csi 
graduate CSIServiceAccountToken to beta
 2021-03-11 17:28:25 -08:00
Elana Hashman
7df1259d09
Generated changes for probe terminationGracePeriodSeconds 2021-03-11 16:40:40 -08:00
Elana Hashman
81cfbccea4
Validate that readiness probes can't set terminationGracePeriodSeconds 2021-03-11 14:37:57 -08:00
Elana Hashman
9cdd673a8b
Add terminationGracePeriodSeconds to Probe API 2021-03-11 14:37:49 -08:00
Aldo Culquicondor
ae0ac3109e Rename job completion index annotation to not contain alpha 2021-03-11 19:25:11 +00:00
Shihang Zhang
4ad1c71174 graduate CSIServiceAccountToken to beta 2021-03-09 18:36:35 -08:00
Kubernetes Prow Robot
410d092d8a
Merge pull request #99643 from pohly/generic-ephemeral-volume-beta 
generic ephemeral volume beta
 2021-03-09 17:39:26 -08:00
Kubernetes Prow Robot
05c4febbe7
Merge pull request #99975 from robscott/endpoints-over-capacity 
Adding new EndpointsOverCapacity annotation for Endpoints controller
 2021-03-09 16:08:48 -08:00
Kubernetes Prow Robot
00e81db174
Merge pull request #99946 from deads2k/tidy-node-validation-master 
refine validation
 2021-03-09 16:08:32 -08:00
Kubernetes Prow Robot
046ad61479
Merge pull request #99290 from mortent/PromotePDBsToGA 
Promote PodDisruptionBudget to policy/v1
 2021-03-09 11:05:05 -08:00
Rob Scott
8a3f72074e
Adding new EndpointsOverCapacity annotation for Endpoints controller 
Now that the EndpointSlice API and controllers are GA, the Endpoints
controller will use this annotation to warn when Endpoints are over
capacity. In a future release, this warning will be replaced with
truncation.
 2021-03-09 09:48:53 -08:00
Kubernetes Prow Robot
207c75c6f7
Merge pull request #99522 from robscott/topology-hints 
Adding support for Topology Aware Hints
 2021-03-09 09:19:12 -08:00
Kubernetes Prow Robot
dc74b9d0c7
Merge pull request #98753 from Jiawei0227/length 
Relax csiNodeIDMaxLength to longer limit
 2021-03-09 09:19:00 -08:00
Morten Torkildsen
621aed4d32 generated 2021-03-09 10:29:11 -05:00
Morten Torkildsen
21fba79d45 Promote PDBs to GA 2021-03-09 10:29:11 -05:00
Patrick Ohly
52b758c9b6 generic ephemeral volume: generate code 
This is the result of "make update" minus the testdata update which
will be committed separately.
 2021-03-09 08:22:48 +01:00
Patrick Ohly
555d4a12bf generic ephemeral volumes: drop ReadOnly field 
As discussed during the alpha review, the ReadOnly field is not really
needed because volume mounts can also be read-only. It's a historical
oddity that can be avoided for generic ephemeral volumes as part
of the promotion to beta.
 2021-03-09 08:22:48 +01:00
Patrick Ohly
dcce753eda generic ephemeral volumes: promote to beta 2021-03-09 08:22:48 +01:00
jay vyas
c94ce8c507
Add default namespace labels to all namespaces for selectors (#96968) 
* namespace by name default labelling

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Abhishek Raut <rauta@vmware.com>

* Make some logic improvement into default namespace label

* Fix unit tests

* minor change to trigger the CI

* Correct some tests and validation behaviors

* Add Canonicalize normalization and improve validation

* Remove label validation that should be dealt by strategy

* Update defaults_test.go
add fuzzer
ns spec

* remove the finalizer thingy

* Fix integration test

* Add namespace canonicalize unit test

* Improve validation code and code comments

* move validation of labels to validateupdate

* spacex will save us all

* add comment to testget

* readablility of canonicalize

* Added namespace finalize and status update validation

* comment about ungenerated names

* correcting a missing line on storage_test

* Update the namespace validation unit test

* Add more missing unit test changes

* Let's just blast the value. Also documenting the workflow here

* Remove unnecessary validations

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Abhishek Raut <rauta@vmware.com>
Co-authored-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
 2021-03-08 20:46:59 -08:00
Kubernetes Prow Robot
a0341d7471
Merge pull request #98727 from adtac/suspend 
batch API: add suspended job
 2021-03-08 16:26:59 -08:00
Rob Scott
11f0944dbc
Adding Hints to EndpointSlice API 2021-03-08 15:37:34 -08:00
Jiawei Wang
1e16615fb0 Relax csiNodeIDMaxLength to longer limit 
Update csiNodeIDMaxLength to 192 bytes
 2021-03-08 13:52:43 -08:00
Adhityaa Chandrasekar
a0844da8f7 batch: add suspended job 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2021-03-08 20:08:21 +00:00
Patrick Ohly
2b062a6281 CSIStorageCapacity: generated files for beta 2021-03-08 20:59:52 +01:00
Patrick Ohly
a2972eba07 CSIStorageCapacity: add MaximumVolumeSize to v1beta1 API 2021-03-08 20:52:50 +01:00
Patrick Ohly
a94c141060 CSIStorageCapacity: promote API to beta 
The v1alpha1 API is left in place for now to ease the migration.
 2021-03-08 20:52:50 +01:00
Patrick Ohly
504f105a9e CSIStorageCapacity: prepare tests for enabling the feature by default 
Defaults and validation are such that the field has to be set when
the feature is enabled, just as for the other boolean fields. This
was missing in some tests, which was okay as long as they ran
with the feature disabled. Once it gets enabled, validation will
flag the missing field as error.

Other tests didn't run at all.
 2021-03-08 20:52:50 +01:00
David Eads
2a0ef026b6 deepcopy statefulsets 2021-03-08 10:03:26 -05:00
David Eads
eb264c05c5 full deepcopy on munged pod spec 2021-03-08 10:02:56 -05:00
David Eads
5130ea0da3 remove pod toleration toleration seconds mutation 2021-03-08 10:02:51 -05:00
David Eads
5570a81040 add markers for inspected validation mutation hits 2021-03-08 10:02:46 -05:00
David Eads
bd5b1e2d05 move secret mutation from validation to prepareforupdate 2021-03-08 10:02:41 -05:00
David Eads
555eba5651 remove unnecessary mutations in validation 
These mutations are already done in the strategy
 2021-03-08 10:02:29 -05:00
David Eads
d000f2c8c5 tweak validation to avoid mutation 2021-03-08 09:58:34 -05:00
Daniela Lins
853d2a6a0a Delete not used tweak 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-08 15:03:12 +01:00
Fangyuan Li
7ed2f1d94d Implements Service Internal Traffic Policy 
1. Add API definitions;
2. Add feature gate and drops the field when feature gate is not on;
3. Set default values for the field;
4. Add API Validation
5. add kube-proxy iptables and ipvs implementations
6. add tests
 2021-03-07 16:52:59 -08:00
Daniela Lins
36e040f86e Fix empty setter logic 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-07 13:13:09 +01:00
Patrick Ohly
fb4b380fe2 PSP: validation errors for generic volume type 
It's not enough to silently drop the volume type if the feature is
disabled. Instead, the policy should fail validation, just as it would
have if the API server didn't know about the feature at all.
 2021-03-07 10:58:45 +01:00
Patrick Ohly
38384d5c13 PSP: conditional support for generic volume type 
When introducing the new "generic" volume type for generic ephemeral
inline volumes, the storage policy for PodSecurityPolicy objects
should have been extended so that this new type is valid only
if the generic ephemeral volume feature is enabled or an
existing object already has it.

Adding the new type to the internal API was also missed.
 2021-03-07 10:56:48 +01:00
Kubernetes Prow Robot
36244f31ef
Merge pull request #99662 from swetharepakula/eps-ga-api-changes 
Graduate EndpointSlice API to GA
 2021-03-06 15:23:54 -08:00
Harry Bagdi
a7fc92089a Add namespace scoped ParametersReference to IngressClass 2021-03-07 00:45:32 +05:30
Daniela Lins
0444bdc944 Remove success case comments 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-06 19:18:19 +01:00
Daniela Lins
f8e7d30e46 Make tweaks only reset slices if empty 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-06 18:58:33 +01:00
Daniela Lins
6d330d9738 Refactored setIngressPorts and setEgressPorts 
Signed-off-by: Daniela Lins <danielamlins@gmail.com>
 2021-03-06 16:51:35 +01:00
Kubernetes Prow Robot
4e95e1df04
Merge pull request #98515 from lala123912/huge_page 
Add request value verification for hugepage
 2021-03-05 22:11:43 -08:00
Swetha Repakula
a9891b4b9b Graduate EndpointSlice API to GA 
* Removes discovery v1alpha1 API
  * Replaces per Endpoint Topology with a read only DeprecatedTopology
  in GA API
  * Adds per Endpoint Zone field in GA API
 2021-03-05 12:02:41 -08:00
Kubernetes Prow Robot
b2af8aefba
Merge pull request #97216 from joejulian/docs_missing_quotes 
Re-clarify NetworkPolicy policyTypes in docs
 2021-03-05 11:21:42 -08:00
Joe Julian
e7945befbc
Re-clarify NetworkPolicy policyTypes in docs 2021-03-05 09:07:12 -08:00
Maciej Szulik
1fc8fe0f7d
Generated changes 2021-03-05 14:03:05 +01:00
Maciej Szulik
9364d0fc81
Promote CronJobs to batch/v1 2021-03-05 12:44:23 +01:00
Maciej Szulik
22b3a9cd21
Introduce .status.lastSuccessfulTime field for CronJob 2021-03-05 12:44:23 +01:00
lala123912
e162fcc1bf Add request value verification for hugepage 2021-03-05 17:36:22 +08:00
Kubernetes Prow Robot
66cbf0196b
Merge pull request #98277 from XudongLiuHarold/add-loadbalancerclass-field 
Add LoadBalancerClass field in service
 2021-03-04 23:56:21 -08:00
Morten Torkildsen
b08eb95168 generated 2021-03-04 19:03:00 -08:00
Morten Torkildsen
1e2a7f381f Add conditions to PDB status 2021-03-04 18:52:02 -08:00
Xudong Liu
72da0b1bb0 Add LoadBalancerClass field in service 
KEP-1959: https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/1959-service-lb-class-field
 2021-03-04 17:11:50 -08:00