github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
96,361 Commits 1 Branch 31 Tags 1,019 MiB
84ba901b60
Commit Graph

506 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
33c58af0f0
Merge pull request #94510 from pacoxu/fix/94500 
remove DefaultIngressClass feature gate for 1.20
 2020-09-15 08:58:07 -07:00
Michael Taufen
4f850f97de Graduate ServiceAccountIssuerDiscovery to beta 2020-09-11 12:01:47 -07:00
tangwz
a143803066 remove feature gate SupportIPVSProxyMode. 2020-09-10 09:03:00 +08:00
Kubernetes Prow Robot
293a53f2c0
Merge pull request #94140 from derekwaynecarr/pid-ga 
Promote PidLimits to GA
 2020-09-09 06:35:52 -07:00
pacoxu
291b36e00b remove DefaultIngressClass feature gate for 1.20 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-09-04 14:15:43 +08:00
Derek Carr
6f2153986a Promote PidLimits to GA 2020-08-24 13:57:48 -04:00
Matthias Bertschy
ea14585500 Remove StartupProbe featuregate and related logic 2020-08-22 15:09:52 +02:00
Kubernetes Prow Robot
ae7dce72ce
Merge pull request #91930 from RenaudWasTaken/DisableAcceleratorUsageMetrics 
Add DisableAcceleratorUsageMetrics Feature Gate
 2020-07-22 09:16:06 -07:00
Kubernetes Prow Robot
96c057ab48
Merge pull request #92001 from huffmanca/include-csidriver-fsgroup 
Include CSIDriver capability to indicate fsGroup support
 2020-07-16 09:11:42 -07:00
Renaud Gaubert
34dc785c0b Add the DisableAcceleratorUsageMetrics feature gate 
Signed-off-by: Renaud Gaubert <rgaubert@nvidia.com>
 2020-07-13 20:52:06 +00:00
Kubernetes Prow Robot
11348a38d7
Merge pull request #92871 from liggitt/kube-features 
Move proxy features to kube_features
 2020-07-11 20:57:22 -07:00
Christian Huffman
58bd3e5230 Include CSIDriver SupportsFsGroup 2020-07-11 23:29:24 -04:00
Kubernetes Prow Robot
5a5cb56e11
Merge pull request #92816 from divyenpatel/change-migration-flag-to-beta 
Set CSIMigrationvSphere feature gates to beta
 2020-07-10 15:43:21 -07:00
Kubernetes Prow Robot
0cb7e320a5
Merge pull request #92784 from pohly/generic-ephemeral-inline-volumes 
generic ephemeral inline volumes
 2020-07-10 15:41:46 -07:00
Kubernetes Prow Robot
10aeb93e07
Merge pull request #92736 from robscott/endpointslice-proxying-beta 
Graduating EndpointSliceProxying to beta for Linux
 2020-07-09 09:09:48 -07:00
Patrick Ohly
c05c8e915b GenericEphemeralVolume: feature gate, API, documentation 
As explained in
https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1698-generic-ephemeral-volumes,
CSI inline volumes are not suitable for more "normal" kinds of storage
systems. For those a new approach is needed: "generic ephemeral inline
volumes".
 2020-07-09 11:02:59 +02:00
Divyen Patel
e01de65444 setting CSIMigrationvSphere feature gates to beta 2020-07-08 07:36:44 -07:00
Rob Scott
8039cf9bb1
Graduating EndpointSliceProxying to beta for Linux 2020-07-07 14:18:03 -07:00
Jordan Liggitt
8d03ace92b Move proxy features to kube_features 2020-07-07 12:34:18 -04:00
Patrick Ohly
22aeb81e84 CSIStorageCapacity: CSIStorageCapacity API 
This adds the CSIStorageCapacity API change for
https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/1472-storage-capacity-tracking
 2020-07-03 21:54:14 +02:00
Patrick Ohly
158d70aeff features: CSIStorageCapacity 
This will cover all extensions required for tracking of storage
capacity that is provided by CSI drivers.
 2020-07-03 13:24:01 +02:00
Kubernetes Prow Robot
a138be8722
Merge pull request #92686 from pohly/csi-ephemeral-volumes-beta 
CSI ephemeral volumes: documentation and owner update
 2020-07-01 23:14:37 -07:00
Patrick Ohly
99b5b13394 CSI ephemeral volumes: documentation and owner update 
The promotion to beta missed some code locations. The owner also
changed since the feature was initially designed and implemented.

The "is handled by an external CSI driver" to "by certain external CSI
drivers" change is supposed to avoid the misconception that this
volume type will work with arbitrary CSI drivers.
 2020-07-01 09:19:18 +02:00
Alex Wang
209117413f
Promote NonPreempt feature gate to beta (#91899) 
* update nonpreempt featuregate to beta

* update
 2020-06-30 00:02:56 -07:00
RAKESH REDDY BANDI
d44a20f9ca Rename DefaultPodTopologySpread plugin #91994 2020-06-27 13:46:31 -04:00
Kubernetes Prow Robot
656a01fb04
Merge pull request #90592 from bart0sh/PR0089-promote-HugePageStorageMediumSize-to-Beta 
Promote HugePageStorageMediumSize feature to Beta
 2020-06-21 11:00:38 -07:00
Kubernetes Prow Robot
907a526919
Merge pull request #91699 from twosigma/hostnamefqdn_kubelet 
Allow setting FQDN in hostname
 2020-06-19 11:36:29 -07:00
Ed Bartosh
1540557dc1 Promote HugePageStorageMediumSize feature to Beta 2020-06-19 14:13:38 +03:00
Christopher M. Luciano
92506a98fc
ingress: Update IngressClass feature and admission controller for v1 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-06-17 12:11:31 -04:00
Kubernetes Prow Robot
59033b5ee4
Merge pull request #88932 from janosi/sctp-beta 
Change SCTPSupport default value to true
 2020-06-15 05:27:56 -07:00
Javier Diaz-Montes
4112d8db20 Adding new PodSpec field called setHostnameAsFQDN and SetHostnameAsFQDN gate 
These changes add a new field, called setHostnameAsFQDN, to the PodSpec. This
field is a bool that will be used to indicate whether we would like
FQDN be set as hostname or not.

This is PART1 of the changes to enable KEP #1797 and addresses #91036
 2020-06-14 21:26:26 -04:00
Kubernetes Prow Robot
ded1f58779
Merge pull request #90911 from divyenpatel/vsphere-csi-migration 
Support for vSphere in-tree volumes migration to vSphere CSI driver
 2020-06-13 04:25:55 -07:00
Jordan Liggitt
e5e557e902 apiserver: add API server plumbing for adding warnings 2020-06-11 16:04:19 -04:00
Kubernetes Prow Robot
17630c34cf
Merge pull request #91793 from alculquicondor/new-default-spread 
Use PodTopologySpread for default spreading
 2020-06-10 17:13:38 -07:00
Kubernetes Prow Robot
9089568465
Merge pull request #91780 from liggitt/csr-v1-rotate-kubelet-client 
CSR v1 - promote RotateKubeletClientCertificate to GA
 2020-06-10 17:13:24 -07:00
Aldo Culquicondor
170f81cff3 Use PodTopologySpread for default spreading 
Under the feature gate DefaultPodTopologySpread, which will disable the legacy DefaultPodTopologySpread plugin from the default algorithm providers.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-06-09 14:59:42 -04:00
Divyen Patel
148ef06a3d vSphere in-tree volumes migration to vSphere CSI driver 2020-06-08 16:17:02 -07:00
SataQiu
932e61aefa deprecate ResourceLimitsPriorityFunction feature gate in the scheduler 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-06-08 22:20:14 +08:00
Jordan Liggitt
71d77b54fd Promote RotateKubeletClientCertificate to GA 2020-06-05 18:45:01 -04:00
Wei Huang
133dde6358
Remove EvenPodsSpread featuregate and related logic 2020-06-02 11:24:12 -07:00
Kubernetes Prow Robot
3fc7831cd8
Merge pull request #90896 from andyzhangx/azure-migration 
feat: azure disk migration go beta in 1.19
 2020-06-01 08:39:56 -07:00
David Eads
ed4e6f1026 remove dynamic audit 2020-05-27 15:18:53 -04:00
andyzhangx
a39eeda381 feat: azure disk and azure file migration go beta 
fix comments
 2020-05-27 02:31:38 +00:00
Julian V. Modesto
df0ee9f88b Mark the server-side dry-run feature as GA 2020-05-05 17:13:24 -04:00
Kubernetes Prow Robot
df1a4c4e55
Merge pull request #90537 from freehan/enable-externalip 
Enable externalPolicyForExternalIP by default
 2020-04-27 16:28:04 -07:00
Minhan Xia
432ad6c677 enable externalPolicyForExternalIP by default 2020-04-27 14:52:14 -07:00
wojtekt
0360e4d1a1 Promote Immutable Secrets/ConfigMaps feature to Beta 2020-04-20 18:04:43 +02:00
Kubernetes Prow Robot
28c442ee2f
Merge pull request #90126 from smarterclayton/features_default 
Promote service exclusion and legacy node role to beta
 2020-04-15 01:12:03 -07:00
Kubernetes Prow Robot
864b4bcc1e
Merge pull request #90023 from robscott/app-protocol-beta 
Graduating ServiceAppProtocol to beta
 2020-04-13 22:49:11 -07:00
Clayton Coleman
2369ef090e
Promote service exclusion and legacy node role to beta 
We did not promote these to beta in 1.18 but will do so in 1.19.
As per the KEP we do not set disable LegacyNodeRoleBehavior to false
until 1.20.
 2020-04-13 21:00:57 -04:00
tanjunchen
dea7660ccd pkg/features/:Remove PodShareProcessNamespace feature 2020-04-13 11:06:09 +08:00
Rob Scott
0493a30805
Graduating ServiceAppProtocol to beta 2020-04-09 12:12:54 -07:00
Kevin Taylor
9fd48b4039 Remove VolumeSubpathEnvExpansion Feature Gate 2020-03-27 16:28:33 +00:00
Minhan Xia
df9a567f3f add feature gate ExternalPolicyForExternalIP for the bug fix 2020-03-13 14:59:39 -07:00
skilxn-go
6b8fc8dc5e Move TaintBasedEvictions feature gates to GA 2020-03-09 10:49:00 +08:00
Laszlo Janosi
1c393c73a6 Change SCTPSupport default value to true 2020-03-06 23:35:15 +01:00
Hemant Kumar
73611a473f Fix expected version for csidriver 
Add a comment about GA feature
 2020-03-06 08:21:26 -05:00
Christian Huffman
c6fd25d100 Updated CSIDriver references 2020-03-06 08:21:26 -05:00
Christian Huffman
726af6bd7f Moved CSIDriver to GA 2020-03-06 08:17:26 -05:00
Kubernetes Prow Robot
264e2f1744
Merge pull request #88488 from gnufied/implement-fix-recursive-chown 
Implement changes for fsgroup recursive chown
 2020-03-05 21:39:30 -08:00
Kubernetes Prow Robot
48541a0b16
Merge pull request #87650 from nolancon/beta-feature-gate 
Update TopologyManager Feature Gate
 2020-03-05 20:03:04 -08:00
Hemant Kumar
f7509d277e Define new type for storing volume fsgroupchangepolicy 
Address review comments for api change
 2020-03-04 21:23:27 -05:00
Ben Swartzlander
e8b09d3644 Add AnyVolumeDataSource feature gate 
Allow any custom resource to be the data source of a PVC, if the
AnyVolumeDataSource feature gate is enabled. This is an alpha feature.
 2020-03-04 18:55:50 -05:00
Kubernetes Prow Robot
e865c0b219
Merge pull request #88686 from j-griffith/upgrade_cloning_to_ga 
Mark PVCDataSource featuregate as GA
 2020-03-04 13:19:06 -08:00
j-griffith
9044fbfc5d Update VolumePVCDatasource to GA for 1.18 
Updates the VolumePVCDataSource featuregate (cloning) to GA for the 1.18 k8s
release.
 2020-03-04 10:48:30 -07:00
Kubernetes Prow Robot
497a998ba6
Merge pull request #88654 from ddebroy/gmsa-disable1 
Promote GMSA support for Windows to GA
 2020-03-04 02:32:01 -08:00
Deep Debroy
16d221e407 Promote GMSA to GA 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2020-03-04 02:56:21 +00:00
Kubernetes Prow Robot
9d0cbb7503
Merge pull request #88673 from jsafrane/block-feature-ga 
Promote block volumes to GA
 2020-03-03 12:17:12 -08:00
nolancon
1e613e5a4c Update TopologyManager Feature Gate: 
- Alpha to Beta.
- True by default.
- Remove redundant validation checks.
 2020-03-02 03:32:05 +00:00
Rob Scott
132d2afca0
Adding IngressClass to networking/v1beta1 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-01 18:17:09 -08:00
Kubernetes Prow Robot
901a884c71
Merge pull request #88338 from egernst/PodOverhead-beta 
Upgrade PodOverhead to beta
 2020-02-28 15:12:40 -08:00
Jan Safranek
2c1b743766 Promote block volume features to GA 2020-02-28 20:48:38 +01:00
Eric Ernst
4637991632 Update PodOverhead feature gate for beta 
Update from alpha to beta, and make the PodOverhead feature gate true by
default.

Signed-off-by: Eric Ernst <eric.ernst@intel.com>
 2020-02-27 17:27:06 +00:00
Kubernetes Prow Robot
86141c0cce
Merge pull request #88503 from robscott/app-protocol 
Adding AppProtocol to Service and Endpoints Ports
 2020-02-26 00:20:40 -08:00
Rob Scott
6a33727632
Adding AppProtocol to Service and Endpoints Ports 2020-02-25 17:42:34 -08:00
Kubernetes Prow Robot
851efa8a34
Merge pull request #84051 from bart0sh/PR0079-multiple-sizes-hugepages 
Implement support for multiple sizes huge pages
 2020-02-25 14:40:27 -08:00
Kubernetes Prow Robot
71b7b5175a
Merge pull request #87790 from marosset/windows-run-as-username-stable 
Moving Windows RunAsUserName feature to GA
 2020-02-24 17:46:21 -08:00
marosset
d44a30f0ed Moving Windows RunAsUserName feature to GA 2020-02-20 22:08:18 +00:00
Tim Allclair
98ad7416fa Start deprecation process for StreamingProxyRedirects 2020-02-19 10:53:45 -08:00
Ed Bartosh
0eb65bd7da Implement support for multiple sizes huge pages 
This implementation allows Pod to request multiple hugepage resources
of different size and mount hugepage volumes using storage medium
HugePage-<size>, e.g.

spec:
  containers:
    resources:
      requests:
        hugepages-2Mi: 2Mi
        hugepages-1Gi: 2Gi
    volumeMounts:
      - mountPath: /hugepages-2Mi
        name: hugepage-2mi
      - mountPath: /hugepages-1Gi
        name: hugepage-1gi
    ...
  volumes:
    - name: hugepage-2mi
      emptyDir:
        medium: HugePages-2Mi
    - name: hugepage-1gi
      emptyDir:
        medium: HugePages-1Gi

NOTE: This is an alpha feature.
      Feature gate HugePageStorageMediumSize must be enabled for it to work.
 2020-02-19 18:15:40 +02:00
Wei Huang
c93dffdfc4
E2E tests for PodTopologySpread 2020-02-14 16:48:35 -08:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints 
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-02-11 16:23:31 -08:00
Kubernetes Prow Robot
652f52b51c
Merge pull request #85637 from dims/cinder-migration-flag 
Flip CSIMigrationOpenStack flag to be beta and off by default
 2020-02-08 21:49:52 -08:00
Jordan Liggitt
57724766bc Remove deprecated GA feature gates 2020-01-23 13:44:21 -05:00
Kubernetes Prow Robot
37d9c22abe
Merge pull request #86377 from wojtek-t/immutable_secrets_api 
API for immutable Secrets and ConfigMaps
 2020-01-18 05:25:35 -08:00
Rob Scott
469de65c25
Enabling EndpointSlice feature gate by default 
This enables the EndpointSlice controller by default, but does not make
kube-proxy a consumer of the EndpointSlice API.
 2020-01-17 16:19:29 -08:00
Rob Scott
47b2593d59
Creating new EndpointSliceProxying feature gate for kube-proxy 
This creates a new EndpointSliceProxying feature gate to cover EndpointSlice
consumption (kube-proxy) and allow the existing EndpointSlice feature gate to
focus on EndpointSlice production only. Along with that addition, this enables
the EndpointSlice feature gate by default, now only affecting the controller.

The rationale here is that it's really difficult to guarantee all EndpointSlices
are created in a cluster upgrade process before kube-proxy attempts to consume
them. Although masters are generally upgraded before nodes, and in most cases,
the controller would have enough time to create EndpointSlices before a new node
with kube-proxy spun up, there are plenty of edge cases where that might not be
the case. The primary limitation on EndpointSlice creation is the API rate limit
of 20QPS. In clusters with a lot of endpoints and/or with a lot of other API
requests, it could be difficult to create all the EndpointSlices before a new
node with kube-proxy targeting EndpointSlices spun up.

Separating this into 2 feature gates allows for a more gradual rollout with the
EndpointSlice controller being enabled by default in 1.18, and EndpointSlices
for kube-proxy being enabled by default in the next release.
 2020-01-17 16:17:40 -08:00
wojtekt
e612ebfdff Immutable field and validation 2020-01-12 20:51:31 +01:00
Kubernetes Prow Robot
3ccdad175a
Merge pull request #86210 from draveness/feature/remove-ga-flags 
feat: remove several feature gates in 1.18
 2020-01-09 13:28:50 -08:00
Matthias Bertschy
6603f41a13 Promote StartupProbe to beta for 1.18 2019-12-15 14:49:34 +01:00
draveness
02f335d476 feat: remove several feature gates in 1.18 2019-12-12 18:17:14 +08:00
Davanum Srinivas
837fd41c42
Flip CSIMigrationOpenStack flag to be beta and off by default 2019-11-26 06:36:16 -05:00
Kubernetes Prow Robot
81af5baff8
Merge pull request #85237 from leakingtapan/ebs-migration-flag 
Flip CSIMigrationAWS flag to be beta and off by default
 2019-11-18 12:33:42 -08:00
Kubernetes Prow Robot
5848ee4945
Merge pull request #85365 from robscott/endpointslice-default-off 
Disabling EndpointSlice feature gate by default
 2019-11-15 17:57:50 -08:00
Rob Scott
37aa219fff
Disabling EndpointSlice feature gate by default 
Given the significance this change would have we've decided to hold off
on enabling this by default until we can have better test coverage and
more real world usage of the feature.
 2019-11-15 14:54:35 -08:00
David Zhu
d66ca2dc11 Flip CSIMigration and CSIMigrationGCE to Beta 2019-11-15 11:22:35 -08:00
Cheng Pan
2d13b97ef3 Flip CSIMigrationAWS flag to be beta and off by default 2019-11-15 05:40:34 +00:00
m1093782566
cdaeabfb46 Add API for feature gate ServiceTopology 2019-11-15 13:36:43 +08:00
Kubernetes Prow Robot
372ebd24f5
Merge pull request #83098 from ddebroy/disable-intree 
CSI Migration phase 2: disable probing of in-tree plugins
 2019-11-14 20:51:42 -08:00
Deep Debroy
129f15328b Disable in-tree plugins migrated to CSI 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2019-11-14 17:28:21 -08:00