Commit Graph

1358 Commits

Author SHA1 Message Date
kiashok
252e1d2dfe Imagepull per runtime class alpha release changes
This commit does the following:
1. Add RuntimeClassInImageCriApi feature gate
2. Extend pkg/kubelet/container Image struct
3. Adds runtimeHandler string in the following CRI calls
   i.   ImageStatus
   ii.  PullImageRequest
   iii.  RemoveImage

Signed-off-by: kiashok <kiashok@microsoft.com>
2023-10-31 15:52:46 -07:00
Kubernetes Prow Robot
84aca4ac74
Merge pull request #121579 from gjkim42/test-enable-sidecarcontainers
Promote SidecarContainers feature to beta
2023-10-31 22:56:50 +01:00
Dan Winship
a70653143e Add a dummy nftables kube-proxy backend which is just a copy of iptables 2023-10-31 17:31:42 -04:00
Kubernetes Prow Robot
dba565193c
Merge pull request #121104 from carlory/kep-3751-api-changes
[KEP-3571] introduce the VolumeAttributesClass API
2023-10-31 20:23:50 +01:00
Kubernetes Prow Robot
d475c249da
Merge pull request #120954 from HirazawaUi/deprecate-kubeProxyVersione-field
deprecate the kubeProxyVersion field of v1.Node
2023-10-31 19:16:20 +01:00
Abu Kashem
c7fcef1875
apiserver: set APF featuregate to ga 2023-10-31 08:46:24 -04:00
carlory
ae90a69677 volumeattributesclass and core api changes 2023-10-31 11:18:56 +08:00
Kubernetes Prow Robot
f5a5d83d7c
Merge pull request #121089 from tkashem/apf-v1
Promote APF API to v1
2023-10-31 02:39:30 +01:00
Kubernetes Prow Robot
ab13d0b47c
Merge pull request #120780 from munnerz/bound-token-improvements
Including JTI & node reference in issued service account tokens (kep 4193)
2023-10-31 01:22:56 +01:00
Kubernetes Prow Robot
08070433cc
Merge pull request #121373 from cici37/crdGA
[KEP-2876] Promote CRD validation rule to GA
2023-10-30 22:42:09 +01:00
James Munnelly
76463e21d4 KEP-4193: bound service account token improvements 2023-10-30 21:15:10 +00:00
Kubernetes Prow Robot
e4212878dd
Merge pull request #119208 from atosatto/separate-taint-manager
Decouple TaintManager from NodeLifeCycleController (KEP-3902)
2023-10-30 21:11:33 +01:00
Anish Ramasekar
6b00f3a797
add StructuredAuthenticationConfiguration feature to kube feature gates file
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-10-30 18:08:21 +00:00
Jordan Liggitt
79c5b3ca6f
Mirror apiserver feature gates to kube feature gates file for consistent enablement 2023-10-30 10:22:37 -04:00
Andrea Tosatto
ccda2d6fd4 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 2023-10-30 12:23:56 +00:00
Abu Kashem
9fd2ab419a
apiserver: allow zero value for the 'nominalConcurrencyShares' field 2023-10-30 08:18:40 -04:00
HirazawaUi
2c2fa2107a deprecate the kubeProxyVersion field of v1.Node 2023-10-29 15:04:11 +08:00
Kubernetes Prow Robot
1c8f88d4b6
Merge pull request #118760 from saschagrunert/user-namespaces-pss
KEP-127: Update PSS based on feature gate
2023-10-28 09:48:54 +02:00
Kubernetes Prow Robot
6a4f08e7e6
Merge pull request #120627 from RomanBednar/pv-phase-transition-time-beta
graduate PersistentVolumeLastPhaseTransitionTime to beta in v1.29
2023-10-27 23:41:46 +02:00
Kubernetes Prow Robot
fe21e4d749
Merge pull request #120682 from yt2985/cleanSA
LegacyServiceAccountTokenCleanUp beta
2023-10-27 19:08:05 +02:00
Kubernetes Prow Robot
6f4ad7a413
Merge pull request #121491 from dejanzele/pod-replacement-policy-e2e
Switch feature flag to beta for pod replacement policy and add e2e test
2023-10-27 14:49:16 +02:00
Gunju Kim
a73725d799
Promote SidecarContainers feature to beta 2023-10-27 20:37:25 +09:00
Sascha Grunert
77e0adeb31
KEP-127: Update PSS based on feature gate
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-10-27 10:49:11 +02:00
tinatingyu
5925dc0775 LegacyServiceAccountTokenCleanUp beta 2023-10-27 03:52:06 +00:00
Dejan Pejchev
e98c33bfaf
switch feature flag to beta for pod replacement policy and add e2e test
update pod replacement policy feature flag comment and refactor the e2e test for pod replacement policy

minor fixes for pod replacement policy and e2e test

fix wrong assertions for pod replacement policy e2e test

more fixes to pod replacement policy e2e test

refactor PodReplacementPolicy e2e test to use finalizers

fix unit tests when pod replacement policy feature flag is promoted to beta

fix podgc controller unit tests when pod replacement feature is enabled

fix lint issue in pod replacement policy e2e test

assert no error in defer function for removing finalizer in pod replacement policy e2e test

implement test using a sh trap for pod replacement policy

reduce sleep after SIGTERM in pod replacement policy e2e test to 5s
2023-10-26 21:50:37 +02:00
Kubernetes Prow Robot
993c918311
Merge pull request #121255 from tukwila/OpenAPIV3-cleanup
Remove GAed feature gates OpenAPIV3
2023-10-26 14:09:17 +02:00
Kubernetes Prow Robot
4aea803f3f
Merge pull request #121254 from bart0sh/PR124-graduate-DevicePluginCDIDevices-to-Beta
Graduate DevicePluginCDIDevices to Beta
2023-10-26 12:59:19 +02:00
Roman Bednar
9cfd96dbb5 graduate PersistentVolumeLastPhaseTransitionTime to beta 2023-10-26 11:47:01 +02:00
Kubernetes Prow Robot
0501933e56
Merge pull request #121291 from bzsuni/ga/CSIMigrationvSphere
Remove GA featuregate about CSIMigrationvSphere in 1.29
2023-10-26 01:08:06 +02:00
Kubernetes Prow Robot
12b01aff1b
Merge pull request #121275 from haircommander/image-max-gc
KEP-4210: add support for ImageMaximumGCAge field
2023-10-25 21:29:10 +02:00
Kubernetes Prow Robot
87981480f3
Merge pull request #119186 from seans3/stream-translator-proxy
Stream Translator Proxy and FallbackExecutor for WebSockets
2023-10-24 17:10:34 +02:00
Shiming Zhang
12a972cc1e Promote KEP-2681 to beta in 1.29 2023-10-24 20:39:41 +08:00
Kubernetes Prow Robot
6d7d249372
Merge pull request #121077 from chrishenzie/readwriteoncepod-ga
Graduate ReadWriteOncePod to GA
2023-10-24 05:26:05 +02:00
Sean Sullivan
168998e87b StreamTranslator and FallbackExecutor for WebSockets 2023-10-23 15:33:38 -07:00
Kubernetes Prow Robot
52107864ba
Merge pull request #121445 from aojea/hostips
Revert "Promote KEP-2681 to beta in 1.29"
2023-10-23 19:52:11 +02:00
Kubernetes Prow Robot
8149ab3f3f
Merge pull request #121356 from mimowo/backoff-limit-per-index-beta
Graduate BackoffLimitPerIndex to Beta
2023-10-23 18:39:58 +02:00
Kubernetes Prow Robot
581552eaf0
Merge pull request #116065 from sanposhiho/match-label-key-alternative
feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
2023-10-23 18:39:13 +02:00
Antonio Ojea
6d02fbdbe0 Revert "Promote KEP-2681 to beta in 1.29"
This reverts commit 33f2d487e2.
2023-10-23 13:19:17 +00:00
Chris Henzie
2dbd405583 Graduate ReadWriteOncePod to GA 2023-10-20 10:40:39 -07:00
Peter Hunt
d992ea4b30 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2023-10-20 12:23:31 -04:00
Anton Stuchinskii
34294cd67f locking feature-gate for ready pods job status 2023-10-20 16:08:54 +02:00
Kubernetes Prow Robot
b32c6ff749
Merge pull request #120257 from wzshiming/promote-kep-2681-beta
Promote KEP-2681 to beta in 1.29
2023-10-20 06:14:05 +02:00
Cici Huang
cbe3d89762 Promote CRD validation rule to stable 2023-10-19 20:31:17 +00:00
guangli.bao
27bb40a9d8 Remove GAed feature gates OpenAPIV3
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-10-19 22:31:43 +08:00
Michal Wozniak
6dd0ad5c0f Graduate BackoffLimitPerIndex to Beta 2023-10-19 12:18:36 +02:00
Kubernetes Prow Robot
a78fbb685e
Merge pull request #121246 from tukwila/SeccompDefault-cleanup
Remove GAed feature gates SeccompDefault
2023-10-19 06:15:36 +02:00
Kubernetes Prow Robot
ca43bf0582
Merge pull request #120154 from palnabarun/authz-config-external-changes
[StructuredAuthorizationConfiguration] Add --authorization-config flag and guard it using a Feature Gate
2023-10-18 16:21:13 +02:00
Kensei Nakada
d5d3c26337 feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity 2023-10-18 11:28:02 +00:00
Kubernetes Prow Robot
2fcddbd37f
Merge pull request #121252 from tukwila/TopologyManager-cleanup
Remove GAed feature gates TopologyManager
2023-10-18 06:06:45 +02:00
Nabarun Pal
007ef653ad
add feature gates for authorization config
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-10-17 23:49:09 +05:30
Kubernetes Prow Robot
62643ca145
Merge pull request #121083 from thockin/gate_bump_remove_gce_readonly_pd_validation
Set gate SkipReadOnlyValidationGCE to Deprecated
2023-10-17 20:08:11 +02:00
Kubernetes Prow Robot
bbcbfe4b97
Merge pull request #121257 from bzsuni/ga/ProbeTerminationGracePeriod
Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
2023-10-17 16:14:19 +02:00
bzsuni
7561284819 Remove GA featuregate about CSIMigrationvSphere in 1.29
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-10-17 20:44:50 +08:00
Kubernetes Prow Robot
bb16282831
Merge pull request #120249 from pacoxu/downwardAPI-hugepages
remove GAed FG DownwardAPIHugePages
2023-10-16 23:40:57 +02:00
Tim Hockin
d6d2c5775f
Set gate SkipReadOnlyValidationGCE to Deprecated
This was created as alpha (off by default) but should probably have used
the "Deprecated" setting.  Changing it now makes it on by default and
still disable-able.
2023-10-16 12:37:26 -07:00
bzsuni
27abf99148 Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-10-16 20:12:47 +08:00
Ed Bartosh
73a8965e2a Graduate DevicePluginCDIDevices to Beta 2023-10-16 13:12:39 +03:00
guangli.bao
f69e1fed82 Remove GAed feature gates TopologyManager
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-10-16 17:53:42 +08:00
guangli.bao
fed4f16a7a Remove GAed feature gates SeccompDefault
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-10-16 12:35:04 +08:00
Shiming Zhang
33f2d487e2 Promote KEP-2681 to beta in 1.29 2023-10-16 10:10:35 +08:00
AxeZhan
9327f3a173 api changes 2023-10-15 13:32:54 +08:00
Kubernetes Prow Robot
8e8ac86cf1
Merge pull request #120861 from RomanBednar/retro-sc-assignment-cleanup
remove RetroactiveDefaultStorageClass feature gate
2023-10-15 07:05:46 +02:00
Kubernetes Prow Robot
4d8a51acac
Merge pull request #121229 from aojea/remove_cluster_cidr
remove ClusterCIDR alpha API
2023-10-15 02:56:33 +02:00
Kubernetes Prow Robot
43e617f252
Merge pull request #120248 from pacoxu/grpc-container-probe
remove feature gate GRPCContainerProbe
2023-10-14 23:50:20 +02:00
Kubernetes Prow Robot
9988f6371b
Merge pull request #120192 from SataQiu/remove-featuregate-20230827
Remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
2023-10-14 23:50:11 +02:00
Kubernetes Prow Robot
414a5f6692
Merge pull request #119100 from bzsuni/ga/JobTrackingWithFinalizers
Remove GA featuregate about JobTrackingWithFinalizers in 1.28
2023-10-14 23:50:01 +02:00
Antonio Ojea
c2d473f0d4 remove ClusterCIDR
KEP-2593 proposed to expand the existing node-ipam controller
to be configurable via a ClusterCIDR objects, however, there
were reasonable doubts on the SIG about the feature and after
several months of dicussions we decided to not move forward
with the KEP intree, hence, we are going to remove the existing
code, that is still in alpha.

https://groups.google.com/g/kubernetes-sig-network/c/nts1xEZ--gQ/m/2aTOUNFFAAAJ

Change-Id: Ieaf2007b0b23c296cde333247bfb672441fe6dfc
2023-10-14 19:06:22 +00:00
Jordan Liggitt
c72923b17a
Register UnauthenticatedHTTP2DOSMitigation into kube components 2023-10-13 17:50:31 -04:00
Kubernetes Prow Robot
8923c3c871
Merge pull request #119659 from kannon92/beta-pod-ready-to-start
[KEP-3085] Promote PodReadyToStartContainers to beta in 1.29
2023-10-12 22:49:16 +02:00
Kevin Hannon
c94240e2e2 move kubelet constant for podreadytostart to staging 2023-10-12 11:18:11 -04:00
Kensei Nakada
990a46f9bd
Update QueueingHInt's KEP 2023-10-11 11:54:10 +09:00
Roman Bednar
84d5e7c8fa remove RetroactiveDefaultStorageClass feature gate 2023-09-25 11:37:44 +02:00
bzsuni
14e7d97151 Remove GA featuregate for JobTrackingWithFinalizers in 1.28
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-09-05 14:25:02 +08:00
Davanum Srinivas
ceaed508ce
Validate the cloud-provider passed in and the corresponding feature flags
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-09-02 13:08:04 -04:00
Davanum Srinivas
42e8cfa28a
fix failing metadata test
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-09-01 15:22:07 -04:00
Davanum Srinivas
cdcbfcc0a6
[KEP-2395] Phase 4 - Disabling In-Tree Providers
https://github.com/kubernetes/enhancements/tree/master/keps/sig-cloud-provider/2395-removing-in-tree-cloud-providers#phase-4---disabling-in-tree-providers

DisableCloudProviders - this feature gate will disable any functionality
in kube-apiserver, kube-controller-manager and kubelet related to the
--cloud-provider component flag.

DisableKubeletCloudCredentialProvider - this feature gate will disable
in-tree functionality in the kubelet to authenticate to the Azure and
GCP container registries for image pull credentials.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-09-01 15:22:07 -04:00
Kubernetes Prow Robot
470fe396bd
Merge pull request #120275 from danwinship/kep-3705-to-beta
Bump CloudDualStackNodeIPs to beta for 1.29
2023-09-01 11:28:43 -07:00
Kubernetes Prow Robot
36352ba306
Merge pull request #120233 from xuzhenglun/master
KEP-3668: promote ServiceNodePortStaticSubrange to stable
2023-08-31 19:44:31 -07:00
Dan Winship
04f0b4a014 Bump CloudDualStackNodeIPs to beta for 1.29 2023-08-30 13:22:39 -04:00
Paco Xu
41adc93ca3 remove GAed FG DownwardAPIHugePages 2023-08-30 10:56:35 +08:00
Paco Xu
7e7b67f2cc remove GAed FG GRPCContainerProbe 2023-08-30 10:29:37 +08:00
xuzhenglun
af7d76fa05
Promoted feature gate ServiceNodePortStaticSubrange to stable and locked it to always active 2023-08-30 10:06:46 +08:00
SataQiu
6fc3d0ecef remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration 2023-08-27 16:51:27 +08:00
Kubernetes Prow Robot
2e6eafca3f
Merge pull request #119503 from wojtek-t/pagination_ga
Graduate APIListChunking to GA
2023-08-23 10:39:29 -07:00
Tim Hockin
a930892769
Gate: disallow .status.loadBalancer on non-LB svc
The fact that the .status.loadBalancer field can be set while .spec.type
is not "LoadBalancer" is a flub.  Any spec update will already clear
.status.ingress, so it's hard to really rely on this.  After this
change, updates which try to set this combination will fail validation.

Existing cases of this will not be broken.  Any spec/metadata update
will clear it (no error) and this is the only stanza of status.

New gate "AllowServiceLBStatusOnNonLB" is off by default, but can be
enabled if this change actually breaks someone, which seems exceeedingly
unlikely.
2023-08-20 16:40:41 -07:00
Aohan Yang
3ac2899d2b Add IP mode field 2023-08-14 11:24:49 +08:00
Mark Rossetti
0d90d1ffa5
Revert "Merge pull request #118895 from RyanAoh/kep-1860"
This reverts commit 890a6c8f70, reversing
changes made to 4f60a8d493.
2023-08-09 15:51:20 -07:00
Alexander Zielenski
5e2e8c8064 bump validatingadmissionpolicy alpha->beta 2023-07-21 18:14:50 -07:00
Kubernetes Prow Robot
f3a070f9c6
Merge pull request #116469 from RomanBednar/pv-phase-transition-time
PersistentVolume last phase transition time
2023-07-21 16:10:07 -07:00
Roman Bednar
5310dd7ff5 add PersistentVolumeLastPhaseTransitionTime feature gate 2023-07-21 17:19:11 +02:00
Wojciech Tyczyński
6acfa3cb4a Graduate APIListChunking to GA 2023-07-21 14:09:40 +02:00
kannon92
ce92952037 add podReplacementPolicy and terminating field to job api 2023-07-19 16:34:38 +00:00
Kubernetes Prow Robot
66e99b3ff1
Merge pull request #117740 from Richabanker/uvip-impl
Unknown Version Interoperability Proxy Impl
2023-07-18 18:36:02 -07:00
Richa Banker
cd5f3d9f9d Add impl for uvip 2023-07-18 17:36:22 -07:00
Kubernetes Prow Robot
d1d86dafb7
Merge pull request #118772 from kannon92/terminating-pod-gc
KEP-3939: pod gc changes for pod replacement policy kep
2023-07-18 16:46:03 -07:00
Kubernetes Prow Robot
c684de526c
Merge pull request #118990 from alexzielenski/apiserver/apiextensions/crd-validation-ratcheting
CRD Validation Ratcheting alpha implementation
2023-07-18 14:46:03 -07:00
Alexander Zielenski
6f238334ab add CRDValidationRatcheting feature gate 2023-07-18 11:49:30 -07:00
Michal Wozniak
fcbfdc1710 Extend the Job API for BackoffLimitPerIndex 2023-07-18 11:28:15 +02:00
Kubernetes Prow Robot
da2fdf8cc3
Merge pull request #118764 from iholder101/Swap/burstableQoS-impl
Add full cgroup v2 swap support with automatically calculated swap limit for LimitedSwap and Burstable QoS Pods
2023-07-17 19:49:07 -07:00
Kubernetes Prow Robot
704970877e
Merge pull request #119380 from A-Hilaly/api-server/webhooks/match-conditions-beta-graduations
Graduate `AdmissionWebhookMatchCondition` to beta
2023-07-17 16:55:07 -07:00