github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
115,367 Commits 1 Branch 31 Tags
a89fe3676a165696de48506c46b6de618b0a9932
Commit Graph

1122 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
9089568465 Merge pull request #91780 from liggitt/csr-v1-rotate-kubelet-client 
CSR v1 - promote RotateKubeletClientCertificate to GA
 2020-06-10 17:13:24 -07:00
Aldo Culquicondor
170f81cff3 Use PodTopologySpread for default spreading 
Under the feature gate DefaultPodTopologySpread, which will disable the legacy DefaultPodTopologySpread plugin from the default algorithm providers.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-06-09 14:59:42 -04:00
Divyen Patel
148ef06a3d vSphere in-tree volumes migration to vSphere CSI driver 2020-06-08 16:17:02 -07:00
SataQiu
932e61aefa deprecate ResourceLimitsPriorityFunction feature gate in the scheduler 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-06-08 22:20:14 +08:00
Jordan Liggitt
71d77b54fd Promote RotateKubeletClientCertificate to GA 2020-06-05 18:45:01 -04:00
Wei Huang
133dde6358 Remove EvenPodsSpread featuregate and related logic 2020-06-02 11:24:12 -07:00
Kubernetes Prow Robot
3fc7831cd8 Merge pull request #90896 from andyzhangx/azure-migration 
feat: azure disk migration go beta in 1.19
 2020-06-01 08:39:56 -07:00
David Eads
ed4e6f1026 remove dynamic audit 2020-05-27 15:18:53 -04:00
andyzhangx
a39eeda381 feat: azure disk and azure file migration go beta 
fix comments
 2020-05-27 02:31:38 +00:00
Julian V. Modesto
df0ee9f88b Mark the server-side dry-run feature as GA 2020-05-05 17:13:24 -04:00
Kubernetes Prow Robot
df1a4c4e55 Merge pull request #90537 from freehan/enable-externalip 
Enable externalPolicyForExternalIP by default
 2020-04-27 16:28:04 -07:00
Minhan Xia
432ad6c677 enable externalPolicyForExternalIP by default 2020-04-27 14:52:14 -07:00
wojtekt
0360e4d1a1 Promote Immutable Secrets/ConfigMaps feature to Beta 2020-04-20 18:04:43 +02:00
Kubernetes Prow Robot
28c442ee2f Merge pull request #90126 from smarterclayton/features_default 
Promote service exclusion and legacy node role to beta
 2020-04-15 01:12:03 -07:00
Kubernetes Prow Robot
864b4bcc1e Merge pull request #90023 from robscott/app-protocol-beta 
Graduating ServiceAppProtocol to beta
 2020-04-13 22:49:11 -07:00
Clayton Coleman
2369ef090e Promote service exclusion and legacy node role to beta 
We did not promote these to beta in 1.18 but will do so in 1.19.
As per the KEP we do not set disable LegacyNodeRoleBehavior to false
until 1.20.
 2020-04-13 21:00:57 -04:00
tanjunchen
dea7660ccd pkg/features/:Remove PodShareProcessNamespace feature 2020-04-13 11:06:09 +08:00
Rob Scott
0493a30805 Graduating ServiceAppProtocol to beta 2020-04-09 12:12:54 -07:00
Kevin Taylor
9fd48b4039 Remove VolumeSubpathEnvExpansion Feature Gate 2020-03-27 16:28:33 +00:00
Minhan Xia
df9a567f3f add feature gate ExternalPolicyForExternalIP for the bug fix 2020-03-13 14:59:39 -07:00
skilxn-go
6b8fc8dc5e Move TaintBasedEvictions feature gates to GA 2020-03-09 10:49:00 +08:00
Laszlo Janosi
1c393c73a6 Change SCTPSupport default value to true 2020-03-06 23:35:15 +01:00
Hemant Kumar
73611a473f Fix expected version for csidriver 
Add a comment about GA feature
 2020-03-06 08:21:26 -05:00
Christian Huffman
c6fd25d100 Updated CSIDriver references 2020-03-06 08:21:26 -05:00
Christian Huffman
726af6bd7f Moved CSIDriver to GA 2020-03-06 08:17:26 -05:00
Kubernetes Prow Robot
264e2f1744 Merge pull request #88488 from gnufied/implement-fix-recursive-chown 
Implement changes for fsgroup recursive chown
 2020-03-05 21:39:30 -08:00
Kubernetes Prow Robot
48541a0b16 Merge pull request #87650 from nolancon/beta-feature-gate 
Update TopologyManager Feature Gate
 2020-03-05 20:03:04 -08:00
Hemant Kumar
f7509d277e Define new type for storing volume fsgroupchangepolicy 
Address review comments for api change
 2020-03-04 21:23:27 -05:00
Ben Swartzlander
e8b09d3644 Add AnyVolumeDataSource feature gate 
Allow any custom resource to be the data source of a PVC, if the
AnyVolumeDataSource feature gate is enabled. This is an alpha feature.
 2020-03-04 18:55:50 -05:00
Kubernetes Prow Robot
e865c0b219 Merge pull request #88686 from j-griffith/upgrade_cloning_to_ga 
Mark PVCDataSource featuregate as GA
 2020-03-04 13:19:06 -08:00
j-griffith
9044fbfc5d Update VolumePVCDatasource to GA for 1.18 
Updates the VolumePVCDataSource featuregate (cloning) to GA for the 1.18 k8s
release.
 2020-03-04 10:48:30 -07:00
Kubernetes Prow Robot
497a998ba6 Merge pull request #88654 from ddebroy/gmsa-disable1 
Promote GMSA support for Windows to GA
 2020-03-04 02:32:01 -08:00
Deep Debroy
16d221e407 Promote GMSA to GA 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2020-03-04 02:56:21 +00:00
Kubernetes Prow Robot
9d0cbb7503 Merge pull request #88673 from jsafrane/block-feature-ga 
Promote block volumes to GA
 2020-03-03 12:17:12 -08:00
nolancon
1e613e5a4c Update TopologyManager Feature Gate: 
- Alpha to Beta.
- True by default.
- Remove redundant validation checks.
 2020-03-02 03:32:05 +00:00
Rob Scott
132d2afca0 Adding IngressClass to networking/v1beta1 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-01 18:17:09 -08:00
Kubernetes Prow Robot
901a884c71 Merge pull request #88338 from egernst/PodOverhead-beta 
Upgrade PodOverhead to beta
 2020-02-28 15:12:40 -08:00
Jan Safranek
2c1b743766 Promote block volume features to GA 2020-02-28 20:48:38 +01:00
Eric Ernst
4637991632 Update PodOverhead feature gate for beta 
Update from alpha to beta, and make the PodOverhead feature gate true by
default.

Signed-off-by: Eric Ernst <eric.ernst@intel.com>
 2020-02-27 17:27:06 +00:00
Kubernetes Prow Robot
86141c0cce Merge pull request #88503 from robscott/app-protocol 
Adding AppProtocol to Service and Endpoints Ports
 2020-02-26 00:20:40 -08:00
Rob Scott
6a33727632 Adding AppProtocol to Service and Endpoints Ports 2020-02-25 17:42:34 -08:00
Kubernetes Prow Robot
851efa8a34 Merge pull request #84051 from bart0sh/PR0079-multiple-sizes-hugepages 
Implement support for multiple sizes huge pages
 2020-02-25 14:40:27 -08:00
Kubernetes Prow Robot
71b7b5175a Merge pull request #87790 from marosset/windows-run-as-username-stable 
Moving Windows RunAsUserName feature to GA
 2020-02-24 17:46:21 -08:00
marosset
d44a30f0ed Moving Windows RunAsUserName feature to GA 2020-02-20 22:08:18 +00:00
Tim Allclair
98ad7416fa Start deprecation process for StreamingProxyRedirects 2020-02-19 10:53:45 -08:00
Ed Bartosh
0eb65bd7da Implement support for multiple sizes huge pages 
This implementation allows Pod to request multiple hugepage resources
of different size and mount hugepage volumes using storage medium
HugePage-<size>, e.g.

spec:
  containers:
    resources:
      requests:
        hugepages-2Mi: 2Mi
        hugepages-1Gi: 2Gi
    volumeMounts:
      - mountPath: /hugepages-2Mi
        name: hugepage-2mi
      - mountPath: /hugepages-1Gi
        name: hugepage-1gi
    ...
  volumes:
    - name: hugepage-2mi
      emptyDir:
        medium: HugePages-2Mi
    - name: hugepage-1gi
      emptyDir:
        medium: HugePages-1Gi

NOTE: This is an alpha feature.
      Feature gate HugePageStorageMediumSize must be enabled for it to work.
 2020-02-19 18:15:40 +02:00
Wei Huang
c93dffdfc4 E2E tests for PodTopologySpread 2020-02-14 16:48:35 -08:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints 
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-02-11 16:23:31 -08:00
Kubernetes Prow Robot
652f52b51c Merge pull request #85637 from dims/cinder-migration-flag 
Flip CSIMigrationOpenStack flag to be beta and off by default
 2020-02-08 21:49:52 -08:00
Jordan Liggitt
57724766bc Remove deprecated GA feature gates 2020-01-23 13:44:21 -05:00