github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
122,180 Commits 1 Branch 31 Tags 1,019 MiB
a2fb1b51ac
Commit Graph

1424 Commits

Author SHA1 Message Date
Ricardo Katz
d816ab7657 Promote LoadBalancerIPMode to Beta 2024-02-22 08:35:12 -03:00
Jan Safranek
513c2a3690 Mark NewVolumeManagerReconstruction GA 2024-02-22 10:06:04 +01:00
Cici Huang
9bc5257c45
[KEP-3962]Add feature gate for MAP (#123425) 
* Add feature gate for MAP

* sort feature gates.

---------

Co-authored-by: Jiahui Feng <jhf@google.com>
 2024-02-21 17:00:13 -08:00
Jan Safranek
d7028a8ed5 Add SELinuxMount feature gate 
The feature gate enables mounting with -o context=XYZ mount option for all
volume types, not only ReadWriteOncePod.

All SELinux label tracking & error reporting infrastructure is already in
place from SELinuxMountReadWriteOncePod feature gate. This is just a
trivial extension to all access modes.
 2024-02-20 15:40:21 +01:00
Adrian Reber
da8ffcd1dc
Switch 'ContainerCheckpoint' from Alpha to Beta 
* Forensic Container Checkpointing as described in KEP 2008 moves from
   Alpha to Beta. This is corresponding code change.

 * Adapt e2e test to handle
   '(rpc error: code = Unimplemented desc = unknown method CheckpointContainer'
   and
   '(rpc error: code = Unimplemented desc = method CheckpointContainer not implemented)'
   and
   '(rpc error: code = Unknown desc = checkpoint/restore support not available)'
   One error message is if the CRI implementation does
   not implement the CRI RPC (too old) and the second is
   if the CRI implementation does explicitly not support the feature.
   The third error message can be seen if the container engine
   explicitly disabled the checkpoint/restore support,

 * As described in the corresponding KEP 2008 explicitly test for
   disabled functionality.

 * Extended test to look for the checkpoint kubelet metric.

 * Extended test to look for the CRI error metric.

 *  Add separate sub-resource permission to control permissions on
    the checkpoint kubelet API endpoint

Signed-off-by: Adrian Reber <areber@redhat.com>
 2024-02-19 18:09:38 +00:00
Kubernetes Prow Robot
3516bc6f49
Merge pull request #122456 from AxeZhan/beta3960 
[KEP 3960]: graduate PodLifecycleSleepAction to beta
 2024-02-19 07:44:50 -08:00
AxeZhan
c74ec3df09 graduate PodLifecycleSleepAction to beta 2024-02-19 19:40:52 +08:00
Kubernetes Prow Robot
6c04679617
Merge pull request #120902 from linxiulei/watch_stack 
Add handler to run execution in separate goroutine
 2024-02-16 03:21:33 -08:00
Eric Lin
7b2698a5e5 Add handler to run watch serving in separate goroutine 
This handler allows running execution prior to actual serving in a separate
goroutine when serving requests. Doing so benefits cases in serving long running
requests because it allows freeing memory used by the separate goroutine
and keeps the serving routines slim.

Signed-off-by: Eric Lin <exlin@google.com>
 2024-02-16 10:22:16 +00:00
Kubernetes Prow Robot
58c77d7b63
Merge pull request #122887 from jpbetz/retry-generate-name-create 
Implement KEP-4420: Retry Generate Name
 2024-02-14 21:07:24 -08:00
Kubernetes Prow Robot
8e11104f0b
Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta 
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
 2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
7bea14097b
Merge pull request #122612 from mtardy/remove-scdeny 
auth: remove SecurityContextDeny admission plugin
 2024-02-12 08:37:13 -08:00
Aravindh Puthiyaparambil
d42d9a9b07
features: promote NodeLogQuery to beta 2024-02-08 14:51:17 -08:00
Kubernetes Prow Robot
862ff187ba
Merge pull request #123001 from tkashem/apf-allow-zero-concurrency 
Allow zero value for the 'nominalConcurrencyShares' field
 2024-02-06 09:08:18 -08:00
James Munnelly
1eab8be822 KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta 2024-02-05 16:55:18 +00:00
Dan Winship
eba4fd82eb KEP-3705 CloudDualStackNodeIPs to GA 2024-02-05 10:17:03 -05:00
Kubernetes Prow Robot
42941cb88a
Merge pull request #122635 from carlory/KEP-2799 
Promote LegacyServiceAccountTokenCleanUp to GA
 2024-02-02 12:47:23 -08:00
Kubernetes Prow Robot
7f5cd1961c
Merge pull request #122961 from alexanderConstantinescu/kep-3458-stable 
KEP 3458 - promote to stable
 2024-01-29 15:19:08 -08:00
Alexander Zielenski
768c169dd8 feature: promote CRDValidationRatcheting to beta 
also fixup test which needs feature to be disabled
it was set to enable by default in this CL
 2024-01-26 13:17:17 -08:00
Abu Kashem
5f75c35edf
apiserver: allow zero value for the 'nominalConcurrencyShares' field 2024-01-26 15:55:50 -05:00
Alexander Constantinescu
a15f437669 KEP 3458 - promote to stable 2024-01-26 19:22:15 +01:00
cyclinder
bcf512693a kep-3836: promote to beta in 1.30 2024-01-25 13:53:50 +08:00
Kubernetes Prow Robot
f025a96d2f
Merge pull request #122728 from RomanBednar/pv-phase-transition-time-doc-fix 
Remove alpha reference from PersistentVolumeStatus.lastPhaseTransitionTime docs
 2024-01-24 19:51:51 +01:00
Alexander Constantinescu
31de75f62c KEP 3836 - promote to beta 2024-01-22 17:47:41 +01:00
Joe Betz
a05db0dd22 Add retry around create 2024-01-19 18:22:44 -05:00
Roman Bednar
2ce04fc04b flag PersistentVolumeLastPhaseTransitionTime field as beta 2024-01-17 13:14:09 +01:00
Ben Luddy
995135973d
Inject feature gate instance into client-go for kube components. 
In order to avoid a dependency cycle between component-base and client-go, client-go maintains
parallel definitions of component-base's feature types and constants. Passing kube's default feature
gate instance to client-go requires an adapter.
 2024-01-16 12:51:00 -05:00
ahutsunshine
6cd25f43a6 fix version typo of namespace indexer 2024-01-12 20:50:00 +08:00
Paco Xu
56321a7779 Revert "Graduate Evented PLEG to Beta" 
This reverts commit d971809b49.
 2024-01-11 15:27:23 +08:00
carlory
0fc1b9c9aa Promote LegacyServiceAccountTokenCleanUp to GA 2024-01-08 10:58:49 +08:00
Nikola
5704a58810 add test for the registered feature gates 2024-01-07 18:10:25 +02:00
Mahe Tardy
73bec0f6d9 api: remove SecurityContextDeny admission plugin 2024-01-05 15:11:18 +00:00
Kubernetes Prow Robot
6427e2c9c8
Merge pull request #122578 from carlory/lock-default-ConsistentHTTPGetHandlers 
lock GA feature-gate ConsistentHTTPGetHandlers to default
 2024-01-04 18:00:52 +01:00
Kubernetes Prow Robot
a21487f78b
Merge pull request #122138 from ii2day/ga/remove_KubeletPodResourcesGetAllocatable 
Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30
 2024-01-04 17:59:57 +01:00
Kubernetes Prow Robot
744b2db652
Merge pull request #122135 from Rei1010/sidecarContainerToBeta 
Add SidecarContainers feature beta version
 2024-01-04 17:59:48 +01:00
Kubernetes Prow Robot
a65dcd616e
Merge pull request #122086 from bzsuni/ga/ExpandedDNSConfig 
Remove GA featuregate about ExpandedDNSConfig in 1.30
 2024-01-04 14:42:42 +01:00
carlory
55c5db172e lock GA feature-gate ConsistentHTTPGetHandlers to default 2024-01-04 15:12:08 +08:00
carlory
55e1646fa4 removed the deprecated azureFile in-tree storage plugin 2024-01-04 14:41:33 +08:00
Kubernetes Prow Robot
1850794626
Merge pull request #122139 from bzsuni/ga/KubeletPodResources 
Remove GA featuregate about KubeletPodResources in 1.30
 2024-01-02 19:56:33 +01:00
Kubernetes Prow Robot
adc256ff04
Merge pull request #122409 from Rei1010/removeKubeletPodResourcesGetAllocatable 
Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30
 2024-01-02 18:04:35 +01:00
Kubernetes Prow Robot
f68a965e5a
Merge pull request #122032 from carlory/remove-fg-APISelfSubjectReview 
remove feature-gate APISelfSubjectReview in 1.30
 2023-12-20 16:46:53 +01:00
wen.rui
4a7592f8a4 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30 2023-12-20 13:41:10 +08:00
bzsuni
fe29f47372 Remove GA featuregate about ExpandedDNSConfig in 1.30 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-12-15 14:09:38 +08:00
Kubernetes Prow Robot
b1b3398cb7
Merge pull request #122088 from bzsuni/ga/ExperimentalHostUserNamespaceDefaultingGate 
Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30
 2023-12-14 14:12:30 +01:00
Kubernetes Prow Robot
66a4d25afa
Merge pull request #122137 from bzsuni/ga/IPTablesOwnershipCleanup 
Remove GA featuregate about IPTablesOwnershipCleanup in 1.30
 2023-12-14 10:49:12 +01:00
Kubernetes Prow Robot
7825325a42
Merge pull request #122136 from ty-dc/ga/remove_MinimizeIPTablesRestore 
Remove GA featuregate about MinimizeIPTablesRestore in 1.30
 2023-12-14 06:18:34 +01:00
Kubernetes Prow Robot
9694ebd2a7
Merge pull request #122134 from ty-dc/ga/remove_ProxyTerminatingEndpoints 
Remove GA featuregate about ProxyTerminatingEndpoints in 1.30
 2023-12-14 06:18:25 +01:00
Kubernetes Prow Robot
2eb2a62e15
Merge pull request #121906 from ahutsunshine/namespace-indexer 
support namespace indexer for namespaced resources like pods
 2023-12-13 23:55:46 +01:00
Kubernetes Prow Robot
b9e4176a2e
Merge pull request #121622 from aramase/aramase/f/authn_feature_gate 
add `StructuredAuthenticationConfiguration` feature to kube feature gates file
 2023-12-13 23:53:58 +01:00
Kensei Nakada
3b8f25dfdd fix: disable SchedulerQueueingHints feature flag by default 2023-12-13 04:16:43 +00:00
bzsuni
fa31b4d30d Remove GA featuregate about KubeletPodResources in 1.30 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-12-01 15:08:12 +08:00
ii2day
eb60b31e6e Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30 
Signed-off-by: ii2day <ji.li@daocloud.io>
 2023-12-01 15:07:42 +08:00
bzsuni
a20093aa07 Remove GA featuregate about IPTablesOwnershipCleanup in 1.30 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-12-01 15:03:51 +08:00
tao.yang
965b3634ff Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-12-01 15:02:08 +08:00
wen.rui
84c0ed2642 Add SidecarContainers feature beta version 2023-12-01 14:57:29 +08:00
tao.yang
e13dca64cf Remove GA featuregate about ProxyTerminatingEndpoints in 1.30 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-12-01 14:47:54 +08:00
ahutsunshine
d8bd150784 support pod namespace indexer 
fix comments

optimize code

small optimization for the namespace scope check
 2023-11-30 18:39:09 +08:00
bzsuni
a6e48ef978 Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-11-28 20:23:07 +08:00
carlory
57a5db8da3 remove feature-gate APISelfSubjectReview 2023-11-24 16:59:21 +08:00
Taahir Ahmed
0fd1362782 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2023-11-03 11:40:48 -07:00
Kevin Hannon
26923b91e8 implementation of split disk kep 2023-11-01 14:46:33 -04:00
Humble Chirammal
3890546265 Update APIs and adjust tests 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-11-01 09:28:36 +05:30
Humble Chirammal
77f4178c98 Promote CSINodeExpandSecret to GA 
This feature is in Beta since 1.27 and this has been promoted
to GA in this release.

KEP: https://github.com/kubernetes/enhancements/pull/4239

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-11-01 11:32:05 +08:00
Kubernetes Prow Robot
a8b7e1953f
Merge pull request #121456 from kiashok/addRuntimeClassInCriFeatureGate 
KEP 4216: Add changes for alpha version under RuntimeClassInImageCriApi feature gate
 2023-11-01 03:52:38 +01:00
Kubernetes Prow Robot
9b10019b91
Merge pull request #121477 from wzshiming/kep-2681 
Promote KEP-2681 to beta in 1.29
 2023-11-01 01:51:08 +01:00
Kubernetes Prow Robot
257b8c3666
Merge pull request #121046 from danwinship/nftables 
kube-proxy nftables backend
 2023-11-01 01:50:59 +01:00
kiashok
252e1d2dfe Imagepull per runtime class alpha release changes 
This commit does the following:
1. Add RuntimeClassInImageCriApi feature gate
2. Extend pkg/kubelet/container Image struct
3. Adds runtimeHandler string in the following CRI calls
   i.   ImageStatus
   ii.  PullImageRequest
   iii.  RemoveImage

Signed-off-by: kiashok <kiashok@microsoft.com>
 2023-10-31 15:52:46 -07:00
Kubernetes Prow Robot
84aca4ac74
Merge pull request #121579 from gjkim42/test-enable-sidecarcontainers 
Promote SidecarContainers feature to beta
 2023-10-31 22:56:50 +01:00
Dan Winship
a70653143e Add a dummy nftables kube-proxy backend which is just a copy of iptables 2023-10-31 17:31:42 -04:00
Kubernetes Prow Robot
dba565193c
Merge pull request #121104 from carlory/kep-3751-api-changes 
[KEP-3571] introduce the VolumeAttributesClass API
 2023-10-31 20:23:50 +01:00
Kubernetes Prow Robot
d475c249da
Merge pull request #120954 from HirazawaUi/deprecate-kubeProxyVersione-field 
deprecate the kubeProxyVersion field of v1.Node
 2023-10-31 19:16:20 +01:00
Abu Kashem
c7fcef1875
apiserver: set APF featuregate to ga 2023-10-31 08:46:24 -04:00
carlory
ae90a69677 volumeattributesclass and core api changes 2023-10-31 11:18:56 +08:00
Kubernetes Prow Robot
f5a5d83d7c
Merge pull request #121089 from tkashem/apf-v1 
Promote APF API to v1
 2023-10-31 02:39:30 +01:00
Kubernetes Prow Robot
ab13d0b47c
Merge pull request #120780 from munnerz/bound-token-improvements 
Including JTI & node reference in issued service account tokens (kep 4193)
 2023-10-31 01:22:56 +01:00
Kubernetes Prow Robot
08070433cc
Merge pull request #121373 from cici37/crdGA 
[KEP-2876] Promote CRD validation rule to GA
 2023-10-30 22:42:09 +01:00
James Munnelly
76463e21d4 KEP-4193: bound service account token improvements 2023-10-30 21:15:10 +00:00
Kubernetes Prow Robot
e4212878dd
Merge pull request #119208 from atosatto/separate-taint-manager 
Decouple TaintManager from NodeLifeCycleController (KEP-3902)
 2023-10-30 21:11:33 +01:00
Anish Ramasekar
6b00f3a797
add StructuredAuthenticationConfiguration feature to kube feature gates file 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-10-30 18:08:21 +00:00
Jordan Liggitt
79c5b3ca6f
Mirror apiserver feature gates to kube feature gates file for consistent enablement 2023-10-30 10:22:37 -04:00
Andrea Tosatto
ccda2d6fd4 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 2023-10-30 12:23:56 +00:00
Abu Kashem
9fd2ab419a
apiserver: allow zero value for the 'nominalConcurrencyShares' field 2023-10-30 08:18:40 -04:00
HirazawaUi
2c2fa2107a deprecate the kubeProxyVersion field of v1.Node 2023-10-29 15:04:11 +08:00
Kubernetes Prow Robot
1c8f88d4b6
Merge pull request #118760 from saschagrunert/user-namespaces-pss 
KEP-127: Update PSS based on feature gate
 2023-10-28 09:48:54 +02:00
Kubernetes Prow Robot
6a4f08e7e6
Merge pull request #120627 from RomanBednar/pv-phase-transition-time-beta 
graduate PersistentVolumeLastPhaseTransitionTime to beta in v1.29
 2023-10-27 23:41:46 +02:00
Kubernetes Prow Robot
fe21e4d749
Merge pull request #120682 from yt2985/cleanSA 
LegacyServiceAccountTokenCleanUp beta
 2023-10-27 19:08:05 +02:00
Kubernetes Prow Robot
6f4ad7a413
Merge pull request #121491 from dejanzele/pod-replacement-policy-e2e 
Switch feature flag to beta for pod replacement policy and add e2e test
 2023-10-27 14:49:16 +02:00
Gunju Kim
a73725d799
Promote SidecarContainers feature to beta 2023-10-27 20:37:25 +09:00
Sascha Grunert
77e0adeb31
KEP-127: Update PSS based on feature gate 
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-10-27 10:49:11 +02:00
tinatingyu
5925dc0775 LegacyServiceAccountTokenCleanUp beta 2023-10-27 03:52:06 +00:00
Dejan Pejchev
e98c33bfaf
switch feature flag to beta for pod replacement policy and add e2e test 
update pod replacement policy feature flag comment and refactor the e2e test for pod replacement policy

minor fixes for pod replacement policy and e2e test

fix wrong assertions for pod replacement policy e2e test

more fixes to pod replacement policy e2e test

refactor PodReplacementPolicy e2e test to use finalizers

fix unit tests when pod replacement policy feature flag is promoted to beta

fix podgc controller unit tests when pod replacement feature is enabled

fix lint issue in pod replacement policy e2e test

assert no error in defer function for removing finalizer in pod replacement policy e2e test

implement test using a sh trap for pod replacement policy

reduce sleep after SIGTERM in pod replacement policy e2e test to 5s
 2023-10-26 21:50:37 +02:00
Kubernetes Prow Robot
993c918311
Merge pull request #121255 from tukwila/OpenAPIV3-cleanup 
Remove GAed feature gates OpenAPIV3
 2023-10-26 14:09:17 +02:00
Kubernetes Prow Robot
4aea803f3f
Merge pull request #121254 from bart0sh/PR124-graduate-DevicePluginCDIDevices-to-Beta 
Graduate DevicePluginCDIDevices to Beta
 2023-10-26 12:59:19 +02:00
Roman Bednar
9cfd96dbb5 graduate PersistentVolumeLastPhaseTransitionTime to beta 2023-10-26 11:47:01 +02:00
Kubernetes Prow Robot
0501933e56
Merge pull request #121291 from bzsuni/ga/CSIMigrationvSphere 
Remove GA featuregate about CSIMigrationvSphere in 1.29
 2023-10-26 01:08:06 +02:00
Kubernetes Prow Robot
12b01aff1b
Merge pull request #121275 from haircommander/image-max-gc 
KEP-4210: add support for ImageMaximumGCAge field
 2023-10-25 21:29:10 +02:00
Kubernetes Prow Robot
87981480f3
Merge pull request #119186 from seans3/stream-translator-proxy 
Stream Translator Proxy and FallbackExecutor for WebSockets
 2023-10-24 17:10:34 +02:00
Shiming Zhang
12a972cc1e Promote KEP-2681 to beta in 1.29 2023-10-24 20:39:41 +08:00
Kubernetes Prow Robot
6d7d249372
Merge pull request #121077 from chrishenzie/readwriteoncepod-ga 
Graduate ReadWriteOncePod to GA
 2023-10-24 05:26:05 +02:00
Sean Sullivan
168998e87b StreamTranslator and FallbackExecutor for WebSockets 2023-10-23 15:33:38 -07:00