Commit Graph

1122 Commits

Author SHA1 Message Date
Hanlin Shi
c8bc420245 Fix the beta release version.
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-02 21:58:49 +00:00
Andrew Sy Kim
05c6eaf0d1 promote ServiceLBNodePortControl to beta
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-02 20:09:14 +00:00
Monis Khan
cd91e59f7c csr: add expirationSeconds field to control cert lifetime
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
98d20f552b Merge pull request #99378 from mattcary/api
StatefulSet PersistentVolumeClaimDeletePolicy
2021-06-30 11:49:03 -07:00
Kubernetes Prow Robot
21f41b8e82 Merge pull request #101711 from hbagdi/ingressclass-namespaced-params-beta
graduate IngressClassNamespacedParams to beta
2021-06-29 17:07:03 -07:00
Elana Hashman
0dd4ce40ad Add NodeSwapEnabled feature flag 2021-06-29 11:57:34 -07:00
Chris Henzie
48ba5020a2 ReadWriteOncePod PV access mode and feature gate 2021-06-28 21:25:35 -07:00
Kubernetes Prow Robot
d92f6c424d Merge pull request #103099 from liggitt/podsecurity
PodSecurity admission
2021-06-28 20:46:52 -07:00
Kubernetes Prow Robot
db3a216fbb Merge pull request #97238 from andrewsykim/kube-proxy-handle-terminating
kube-proxy handle terminating endpoints
2021-06-28 20:46:40 -07:00
Kubernetes Prow Robot
38f012320f Merge pull request #101947 from cynepco3hahue/memory_manager_move_to_beta
memory manager: move to beta
2021-06-28 15:38:28 -07:00
Jordan Liggitt
65a42a483c PodSecurity: pkg/features: feature gate 2021-06-28 17:45:35 -04:00
Kubernetes Prow Robot
a0f9c8c277 Merge pull request #103001 from zshihang/csi
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Rob Scott
0cdd8c1c10 Removing ServiceAppProtocol feature gate
This feature gate went GA in 1.20 and can be safely removed as part of
1.22.
2021-06-25 10:24:50 -07:00
Kubernetes Prow Robot
9254610765 Merge pull request #103129 from XudongLiuHarold/service-loadbalancer-class-e2e
Promote loadbalancerclass feature to beta
2021-06-25 09:48:57 -07:00
Xudong Liu
fe161579e2 Add integration test to promote serviceloadbalancerclass feature to beta. 2021-06-24 17:30:17 -07:00
Kubernetes Prow Robot
2e93b3924a Merge pull request #101943 from saschagrunert/seccomp-default
Add kubelet `SeccompDefault` alpha feature
2021-06-24 13:07:41 -07:00
Kubernetes Prow Robot
de04c067ad Merge pull request #101581 from carlory/remove-fg-RunAsGroup
remove RunAsGroup feature gate
2021-06-23 16:09:41 -07:00
Matthew Cary
0feba0c4ee Add StatefulSetAutoDeletePVC feature gate
Change-Id: Iacb48932bd5402bf7e95431ffb95b0896421f88a
2021-06-23 10:33:05 -07:00
Sascha Grunert
8b7003aff4 Add SeccompDefault feature
This adds the gate `SeccompDefault` as new alpha feature. Seccomp path
and field fallbacks are now passed to the helper functions, whereas unit
tests covering those code paths have been added as well.

Beside enabling the feature gate, the feature has to be enabled by the
`SeccompDefault` kubelet configuration or its corresponding
`--seccomp-default` CLI flag.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Apply suggestions from code review

Co-authored-by: Paulo Gomes <pjbgf@linux.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-06-23 10:22:57 +02:00
Kubernetes Prow Robot
268cab5f44 Merge pull request #102022 from adtac/sbeta
graduate SuspendJob to beta
2021-06-22 17:18:10 -07:00
Artyom Lukianov
d4767ed5eb memory manager: move to beta
Move the memory manager feature to beta.

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
2021-06-22 20:15:29 +03:00
ravisantoshgudimetla
b6c75bee15 Remove balanced attached node volumes
kubernetes#60525 introduced
Balanced attached node volumes feature gate to include volume
count for prioritizing nodes. The reason for introducing this
flag was its usefulness in Red Hat OpenShift Online environment
which is not being used any more. So, removing the flag
as it helps in maintainability of the scheduler code base
as mentioned at kubernetes#101489 (comment)
2021-06-22 11:19:30 -04:00
Shihang Zhang
8231a3e921 CSIServiceAccountToken ga 2021-06-21 11:35:24 -07:00
Ricardo Pchevuzinske Katz
9f18ddf03c Promote endPort field in netpolicies to beta
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2021-06-15 10:47:17 -03:00
Kubernetes Prow Robot
230a63514b Merge pull request #100776 from pacoxu/fix/94495-ga-follow-up
remove GAed feature gates group: LegacyNodeRoleBehavior
2021-06-14 10:55:28 -07:00
Kubernetes Prow Robot
3d6e0694bb Merge pull request #101294 from twosigma/gasethostnamefqdn
Promote setHostnameAsFQDN feature to GA
2021-06-09 09:07:48 -07:00
Kubernetes Prow Robot
29a8105cec Merge pull request #101272 from Jiawei0227/deprecateflag
Remove CSIMigrationvSphereComplete flag
2021-06-05 10:40:38 -07:00
Andrew Sy Kim
25e2c92733 add feature gate ProxyTerminatingEndpoints
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-04 15:17:43 -04:00
Andrew Sy Kim
8c376426f3 features: remove alpha ServiceTopology feature gate
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-03 22:17:45 -04:00
Adhityaa Chandrasekar
ba708e5fc9 graduate SuspendJob to beta
Also adds a label to two existing Job metrics.

Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
2021-06-03 18:48:32 +00:00
Maciej Szulik
c3a9c7da16 Promote CronJobControllerV2 flag to GA 2021-06-02 15:03:08 +02:00
pacoxu
1bf8edfdd4 remove GAed feature gates group: LegacyNodeRoleBehavior/ServiceNodeExclusion/NodeDisruptionExclusion
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-06-02 18:49:22 +08:00
Kubernetes Prow Robot
12e3860cb0 Merge pull request #102504 from thockin/master
Add KEP links to sig-net feature gates
2021-06-01 20:55:07 -07:00
Kubernetes Prow Robot
053aa7fde4 Merge pull request #102201 from chendave/graduate
Graduate prefer nominated node to beta
2021-06-01 20:54:50 -07:00
Tim Hockin
9880ceceb9 Add KEP links to sig-net feature gates
Adjust 1 removal and comment another.
2021-06-01 12:49:36 -07:00
Gunju Kim
6317ce63c6 Add feature gate ExpandedDNSConfig
ExpandedDNSConfig allows kubernetes to have expanded DNS(Domain Name
System) configuration
2021-05-27 07:10:13 +09:00
Kubernetes Prow Robot
c8abbc0edb Merge pull request #101647 from pacoxu/disable-StreamingProxyRedirects
Default StreamingProxyRedirects to disabled
2021-05-26 13:46:02 -07:00
Kubernetes Prow Robot
a98d3d0700 Merge pull request #100842 from ravisantoshgudimetla/add-minReadySeconds-ss
api: Add min ready seconds & availablereplicas for statefulsets
2021-05-26 13:45:50 -07:00
pacoxu
27044f4855 depracate ValidateProxyRedirects as it is with StreamingProxyRedirects
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-05-26 20:18:49 +08:00
ravisantoshgudimetla
d11cc95376 feature: Add minReadySeconds featuregate 2021-05-25 19:59:59 -04:00
Kubernetes Prow Robot
548f16dbbb Merge pull request #101992 from zshihang/bound
BoundServiceAccountTokenVolume ga
2021-05-25 07:52:22 -07:00
Kubernetes Prow Robot
d8f9e4587a Merge pull request #101742 from ravisantoshgudimetla/promote-maxSurge-beta
Promote DS MaxSurge to beta
2021-05-23 04:33:38 -07:00
Danil-Grigorev
5d57b3794c Add DisableCloudProviders FG
FeatureGate acts as a secondary switch to disable cloud-controller loops
in KCM, Kubelet and KAPI.

Provide comprehensive logging information to users, so they will be
guided in adoption of out-of-tree cloud provider implementation.
2021-05-21 16:09:44 +02:00
Dave Chen
fadf3e1531 Graduate prefer nominated node to beta
Signed-off-by: Dave Chen <dave.chen@arm.com>
2021-05-21 15:13:50 +08:00
Kubernetes Prow Robot
6e4e32985a Merge pull request #99576 from marosset/windows-host-process-work
Windows host process work
2021-05-20 14:16:15 -07:00
Kubernetes Prow Robot
77e769b040 Merge pull request #100754 from liggitt/warning-ga
Graduate WarningHeader feature to GA
2021-05-20 13:14:16 -07:00
ravisantoshgudimetla
040e9c8b51 Promote DS MaxSurge to beta 2021-05-19 16:12:52 -04:00
Kubernetes Prow Robot
49a60be8ab Merge pull request #101496 from ahg-g/ahg-nss-beta
Graduate pod affinity NamespaceSelector to Beta
2021-05-14 08:48:04 -07:00
Abdullah Gharaibeh
e49d1144d5 graduate pod affinity NamespaceSelector to Beta 2021-05-14 10:44:57 -04:00
Shihang Zhang
88b31814f4 BoundServiceAccountTokenVolume ga 2021-05-13 20:45:47 -07:00