Tim Hockin
fec8e721b2
job: API warn when name is not DNS label
2022-12-16 13:07:42 -08:00
Tim Hockin
b65cec86eb
deployment: API warn when name is not DNS label
2022-12-16 13:07:13 -08:00
Tim Hockin
820e2fff0d
rs: API warn when name is not DNS label
2022-12-16 13:06:43 -08:00
Tim Hockin
e27cf75094
rc: API warn when name is not DNS label
2022-12-16 13:06:10 -08:00
Tim Hockin
c555d290c1
pod: API warn when name is not DNS label
2022-12-16 13:05:17 -08:00
Antonio Ojea
1b804fc87c
Services API: warnings
...
The Services API should warn users about some IP addresses
representations, mainly because some of them are not allowed
by the golang std parsers since go 1.17
Specifically:
- IPv4 addresses with leading zeros, that may cause security risks
- IPv6 addresses in non canonical format, that may cause problems
with controllers hotlooping or cause security issues
Change-Id: Ife50a651d1b22dc4c318e42bd3e5f2e5f88ecbcd
2022-12-16 11:54:05 +00:00
Kubernetes Prow Robot
4b27077eb2
Merge pull request #114428 from SataQiu/clean-rest-20221212
...
apiserver: cleanup unused StrategyExceptions
2022-12-14 06:47:34 -08:00
aimuz
4a7ab7fd75
Verify that the key matches the cert
...
Signed-off-by: aimuz <mr.imuz@gmail.com >
2022-12-13 10:43:58 +08:00
SataQiu
090c36027f
apiserver: cleanup unused StrategyExceptions
2022-12-12 23:56:24 +08:00
Tim Hockin
dd0a50336e
ServiceInternalTrafficPolicyType: s/Type//
...
Rename ServiceInternalTrafficPolicyType => ServiceInternalTrafficPolicy
2022-12-11 13:48:31 -08:00
Tim Hockin
d0e2b06850
ServiceExternalTrafficPolicyType: s/Type//
...
Rename ServiceExternalTrafficPolicyType => ServiceExternalTrafficPolicy
2022-12-11 13:48:27 -08:00
Kubernetes Prow Robot
4106b10d9c
Merge pull request #112799 from kerthcet/cleanup/strategy-test
...
optimize testcases arrangement
2022-12-09 15:43:29 -08:00
Kubernetes Prow Robot
6f6bf42ee5
Merge pull request #113768 from lojies/codecleanupforkubeleteviction
...
cleanup:Omit comparison with boolean constant
2022-12-09 14:34:26 -08:00
Brian McQueen
25e990f738
added validation check to block adding an ephemeral container to a static pod and test cases
2022-12-02 15:39:11 -08:00
Arda Güçlü
43a889fc65
Add integration test to test singularnames for all resources
2022-11-21 09:59:37 +03:00
Arda Güçlü
1f54f610e4
minor integration test fixes and more singular resource
2022-11-18 13:11:16 +03:00
Arda Güçlü
23e2899556
Implement GetSingularName for LegacyBindingREST
...
LegacyBindingREST is only used for `bindings` resource. It is not
a subresource and that's why it is required to implement
`GetSingularName` function. However, there is no need to implement
this function for BindingREST because it is only used for binding
subresource.
That's why, this function statically adds GetSingularName for
LegacyBindingREST.
2022-11-18 12:21:19 +03:00
Arda Güçlü
d14b7781e2
Use casted SingularName for rbac types
2022-11-18 12:21:19 +03:00
Arda Güçlü
1abf94bec3
Remove GetSingularName for subresources
2022-11-18 12:21:19 +03:00
Arda Güçlü
672e0b1e01
Use correct singular name format for subresources
2022-11-18 12:21:19 +03:00
Arda Güçlü
578ddde80e
Add singular name for the rest of types
2022-11-18 12:21:13 +03:00
Arda Güçlü
0990ba1cc9
Introduce singularNameProvider for core types
...
This introduces `singularNameProvider`. This provider will be used
by core types to have their singular names are defined in discovery
endpoint. Thanks to that, core resources singular name always have
higher precedence than CRDs shortcuts or singular names.
2022-11-18 12:21:07 +03:00
Kubernetes Prow Robot
d1c0171aed
Merge pull request #111023 from pohly/dynamic-resource-allocation
...
dynamic resource allocation
2022-11-11 16:21:56 -08:00
Kubernetes Prow Robot
cc704f9778
Merge pull request #113375 from atiratree/PodHealthyPolicy-api
...
api: add unhealthyPodEvictionPolicy for PDBs
2022-11-11 04:02:10 -08:00
Filip Křepinský
a429797f2e
api: add UnhealthyPodEvictionPolicy for PDBs
2022-11-10 23:25:42 +01:00
Patrick Ohly
5cca60f0b8
api: dynamic resource allocation API
...
This adds a new resource.k8s.io API group with v1alpha1 as version. It contains
four new types: resource.ResourceClaim, resource.ResourceClass, resource.ResourceClaimTemplate, and
resource.PodScheduling.
2022-11-10 20:08:24 +01:00
Takafumi Takahashi
87c1ca88d4
Add API and validation for CrossNamespaceVolumeDataSource
2022-11-09 20:58:25 +00:00
Kubernetes Prow Robot
ff19efdf9b
Merge pull request #112744 from pwschuurman/statefulset-slice-impl
...
Add implementation of KEP-3335, StatefulSetSlice
2022-11-09 11:12:28 -08:00
Kubernetes Prow Robot
7e0e0c8ec3
Merge pull request #113360 from mimowo/handling-pod-failures-beta-enable
...
Enable the "Retriable and non-retriable pod failures for jobs" feature into beta
2022-11-09 08:30:24 -08:00
Michal Wozniak
c803892bd8
Enable the feature into beta
2022-11-09 09:02:40 +01:00
lojies
e2a4565a2b
cleanup:Omit comparison with boolean constant
2022-11-09 09:54:41 +08:00
Abu Kashem
424b23bb15
apiserver: fix defaulting for apf bootstrap configuration
2022-11-08 13:23:09 -08:00
Peter Schuurman
366997951b
Update doc comments and change name of feature gate
2022-11-08 07:48:10 -08:00
Peter Schuurman
7b3d77a41a
Adding implementation of KEP-3335, StatefulSetSlice
2022-11-08 07:48:00 -08:00
Jordan Liggitt
fc69084bf1
Update workload selector validation
2022-11-07 20:52:02 -05:00
Manjusaka
0843c4dfca
Add extra value validation for matchExpression field in LabelSelector
2022-11-07 20:48:21 -05:00
Kubernetes Prow Robot
595ea32411
Merge pull request #113314 from cici37/celIntegration
...
CEL validation in Admission chain
2022-11-07 17:08:33 -08:00
Cici Huang
d3f48136d0
Add Authz check to validate policy and binding.
...
Co-authored-by: Jiahui Feng <jhf@google.com >
Co-authored-by: Jordan Liggitt <liggitt@google.com >
2022-11-07 21:29:56 +00:00
Cici Huang
0486e06261
Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control
2022-11-07 20:51:51 +00:00
Kubernetes Prow Robot
0f3ac85d32
Merge pull request #113681 from andrewsykim/fix-node-address-validation
...
fix node address validation
2022-11-07 11:21:00 -08:00
Kubernetes Prow Robot
ac95e5b701
Merge pull request #113510 from alculquicondor/finalizers-stable
...
Graduate JobTrackingWithFinalizers to stable
2022-11-07 08:06:41 -08:00
Andrew Sy Kim
2aee9b26f7
fix node address validation
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com >
2022-11-07 10:22:44 -05:00
Aldo Culquicondor
4948918155
Graduate JobTrackingWithFinalizers to stable
...
Change-Id: Ifc749a85b1270c0155ac511b91d4681d53236820
2022-11-04 17:05:53 -04:00
Kubernetes Prow Robot
b20ddbd75a
Merge pull request #113351 from andrewsykim/endpointslice-terminating-ga
...
Promote EndpointSliceTerminatingCondition to GA
2022-11-04 09:36:39 -07:00
kerthcet
04573fb8c9
Add api-side enablement tests for nodeInclusionPolicy when updating
...
Signed-off-by: kerthcet <kerthcet@gmail.com >
2022-11-04 15:11:08 +08:00
kerthcet
21dea23f56
Add api-side enablement tests for nodeInclusionPolicy
...
Signed-off-by: kerthcet <kerthcet@gmail.com >
2022-11-04 15:11:05 +08:00
Kubernetes Prow Robot
8c77820759
Merge pull request #113274 from Huang-Wei/kep-3521-A
...
[KEP-3521] Part 1: New Pod API .spec.schedulingGates
2022-11-03 21:24:25 -07:00
Andrew Sy Kim
5ca805fdee
pkg/registry/discovery: remove references to EndpointSliceTerminatingCondition feature gate when dropping disabled fields
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com >
2022-11-03 20:26:51 -04:00
Wei Huang
7b6293b6b6
APIs, Validation and condition enforcements
...
- New API field .spec.schedulingGates
- Validation and drop disabled fields
- Disallow binding a Pod carrying non-nil schedulingGates
- Disallow creating a Pod with non-nil nodeName and non-nil schedulingGates
- Adds a {type:PodScheduled, reason:WaitingForGates} condition if necessary
- New literal SchedulingGated in the STATUS column of `k get pod`
2022-11-03 14:32:34 -07:00
Andy Voltz
29f4862ed8
Promote ServiceInternalTrafficPolicy to GA
2022-11-03 13:17:03 -04:00