Commit Graph

118 Commits

Author SHA1 Message Date
Jan Safranek
c73308e90a Introduce SELinuxChangePolicy
Feature gate + the API
2024-11-01 12:45:56 +01:00
Kubernetes Prow Robot
b337f048db Merge pull request #127094 from sreeram-venkitesh/4818-allow-zero-for-prestop-hook
KEP-4818: Relaxed validation for allowing zero in PreStop hook sleep action
2024-10-31 20:25:26 +00:00
Joe Betz
4b13362dda Add feature gate
Co-authored-by: cici37 <cicih@google.com>
2024-10-31 10:30:38 -04:00
Patrick Ohly
9a7e4ccab2 DRA admin access: add feature gate
The new DRAAdminAccess feature gate has the following effects:
- If disabled in the apiserver, the spec.devices.requests[*].adminAccess
  field gets cleared. Same in the status. In both cases the scenario
  that it was already set and a claim or claim template get updated
  is special: in those cases, the field is not cleared.

  Also, allocating a claim with admin access is allowed regardless of the
  feature gate and the field is not cleared. In practice, the scheduler
  will not do that.
- If disabled in the resource claim controller, creating ResourceClaims
  with the field set gets rejected. This prevents running workloads
  which depend on admin access.
- If disabled in the scheduler, claims with admin access don't get
  allocated. The effect is the same.

The alternative would have been to ignore the fields in claim controller and
scheduler. This is bad because a monitoring workload then runs, blocking
resources that probably were meant for production workloads.
2024-10-29 09:50:11 +01:00
Kubernetes Prow Robot
685b8b3ba1 Merge pull request #126981 from kannon92/stable-empty-dir-promotion
KEP-1967: promote size backed memory volumes to stable
2024-10-29 01:00:54 +00:00
Kubernetes Prow Robot
961344ddb2 Merge pull request #128124 from PiotrProkop/topology-manager-options-stable
topologymanager: Promote support for improved multi-numa alignment in Topology Manager to GA
2024-10-28 23:56:53 +00:00
Hemant Kumar
a9d71bd6e6 Move RecoverVolumeExpansionFailure feature to beta 2024-10-25 13:39:43 -04:00
James Sturtevant
2c5a8c2618 Add Windows Affinity Featuregate
Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
2024-10-25 09:14:54 -07:00
Maciej Szulik
db94009981 Promote job creation timestamp annotation to stable
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2024-10-25 16:09:54 +02:00
Kubernetes Prow Robot
0a62f0fd7b Merge pull request #128139 from Jefftree/revert-allowservicelb
Revert removal of feature AllowServiceLBStatusOnNonLB and LockToDefault first
2024-10-24 15:20:54 +01:00
Kubernetes Prow Robot
7fff5b6b02 Merge pull request #127566 from zhifei92/integrate-watchdog
integrate kubelet with the systemd watchdog
2024-10-23 02:21:34 +01:00
Kubernetes Prow Robot
f1e447b9d3 Merge pull request #126897 from HirazawaUi/promote-env-to-beta
KEP-4369: promote RelaxedEnvironmentVariableValidation feature gate to beta
2024-10-21 15:26:41 +01:00
zhifei92
dac7332ed2 integrate kubelet with the systemd watchdog
feat:  add unit test

feat:  add FeatureGate for SystemdWatchdog

fix:  linter and failed tests

feat:  add SystemdWatchdog to versioned feature list yaml
2024-10-21 10:46:14 +08:00
Kubernetes Prow Robot
79cca2786e Merge pull request #128172 from liggitt/3221-ga
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
2024-10-18 20:21:09 +01:00
Kubernetes Prow Robot
7adcad3138 Merge pull request #128169 from liggitt/4193-ga
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable
2024-10-18 17:39:11 +01:00
Kubernetes Prow Robot
d7bd728403 Merge pull request #128168 from liggitt/4601-beta
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
2024-10-18 17:39:03 +01:00
Sreeram Venkitesh
f1f9e7b398 Clean kube_features.go
Added tests, info about new feature gate in error message, fixes from review

Added basic e2e test

Added unit tests

Ran hack/update-featuregates.sh

Tolerate updates to existing resources after disabling feature gate

Added feature gate to versioned_kube_features.go

Fixed existing tests

Use PodValidationOptions for validation instead of using feature gate directly

Relaxed validation for allowing zero in prestop hook sleep action
2024-10-18 22:04:42 +05:30
HirazawaUi
98e3cb4c56 promote feature gate to beta 2024-10-18 23:08:28 +08:00
carlory
d62ee4ab5f Remove generally available feature gate HPAContainerMetrics 2024-10-18 14:37:53 +08:00
carlory
f68dc13760 remove general avaliable feature-gate ZeroLimitedNominalConcurrencyShares 2024-10-18 14:32:43 +08:00
Kubernetes Prow Robot
f5ae0413ca Merge pull request #126347 from vinayakankugoyal/kep2862impl
KEP-2862: Fine-grained Kubelet API Authorization
2024-10-18 03:53:04 +01:00
Jordan Liggitt
ad808e609a KEP-3221: Promote StructuredAuthorizationConfiguration to GA 2024-10-17 21:53:45 -04:00
Jordan Liggitt
0771f601e1 KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable 2024-10-17 21:25:09 -04:00
Jordan Liggitt
9caca73126 KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta 2024-10-17 21:02:55 -04:00
Kubernetes Prow Robot
b1b4e5d397 Merge pull request #128003 from pohly/dra-classic-dra-removal
DRA: remove "classic DRA"
2024-10-18 00:55:17 +01:00
Vinayak Goyal
b1f290d444 KEP-2862: Fine-grained Kubelet API Authorization
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-10-17 20:53:27 +00:00
PiotrProkop
37ac9aa060 topologymanager: promote TopologyManagerPolicyOptions feature to GA
* Promote TopologyManagerPolicyOptions feature to GA
* Promote PreferClosestNUMANodes TopologyManagerPolicyOption to stable

Signed-off-by: PiotrProkop <pprokop@nvidia.com>
2024-10-17 20:58:34 +02:00
Kubernetes Prow Robot
51f76febd7 Merge pull request #127402 from mimowo/managed-by-beta-update
Graduate JobManagedBy to Beta in 1.32
2024-10-17 19:27:14 +01:00
Lukasz Szaszkiewicz
06a15c5cf9 Promote WatchList feature to Beta (#128053)
* e2e/apimachinery/watchlist: always run WatchList e2e tests

* kube-controller-manager: enable WatchListClient

* kube-apiserver: promote WatchList feature to beta
2024-10-17 11:07:04 +01:00
Michal Wozniak
70a8ceb6f0 Graduate JobManagedBy to Beta in 1.32
# Conflicts:
#	pkg/features/kube_features.go
2024-10-17 09:01:54 +02:00
Jefftree
cdf2b03bbe Lock deprecated feature AllowServiceLBStatusOnNonLB 2024-10-16 18:05:40 -04:00
Kevin Hannon
1d752200af promote size backed memory volumes to stable 2024-10-16 17:15:02 -04:00
Patrick Ohly
f84eb5ecf8 DRA: remove "classic DRA"
This removes the DRAControlPlaneController feature gate, the fields controlled
by it (claim.spec.controller, claim.status.deallocationRequested,
claim.status.allocation.controller, class.spec.suitableNodes), the
PodSchedulingContext type, and all code related to the feature.

The feature gets removed because there is no path towards beta and GA and DRA
with "structured parameters" should be able to replace it.
2024-10-16 23:09:50 +02:00
Kubernetes Prow Robot
61d9bae274 Merge pull request #127348 from RyanAoh/kep-1860-ga
Promote LoadBalancerIPMode to GA
2024-10-10 16:36:19 +01:00
Cici Huang
4c64aa7a4e Promote cost enforcement feature gates to GA 2024-10-08 17:02:07 +00:00
Aohan Yang
b47e80a319 Promote LoadBalancerIPMode to GA 2024-10-08 23:00:57 +08:00
Kubernetes Prow Robot
523a2b6da8 Merge pull request #127673 from jpbetz/crd-field-selector-ga
KEP-4358: Promote Custom Resource Field Selectors to GA
2024-10-01 19:49:48 +01:00
Joe Betz
cedae122cc Promote CustomResourceFieldSelectors to GA 2024-10-01 11:58:41 -04:00
Jefftree
d918804a5a reorder retrygeneratename and fix feature gate to lint versioned features 2024-09-27 20:29:16 +00:00
Jefftree
a8390dcddd Port the rest of unversioned features 2024-09-27 19:10:11 +00:00
Jefftree
de2e232a85 port kcm feature to versioned 2024-09-27 19:08:15 +00:00
Jefftree
c9a999df1a Port deprecated features to versioned 2024-09-27 19:08:06 +00:00
Jefftree
a20039f3d4 update and reorder features that should not be listed under deprecated 2024-09-27 18:43:27 +00:00
Joe Betz
138106896e Migrate apiextensions-apiserver to versioned feature gates 2024-09-26 20:09:01 -04:00
Omer Aplatony
ade7305940 chore: moving apiserver featuregates to versioned
Signed-off-by: Omer Aplatony <omerap12@gmail.com>
2024-09-25 07:41:26 +03:00
Kubernetes Prow Robot
1137a6a0cc Merge pull request #127093 from jpbetz/retry-generate-name-ga
Promote RetryGenerateName to GA
2024-09-24 00:46:06 +01:00
HirazawaUi
7c85784b9f fix the bug where pod grace period will be overwritten 2024-09-20 22:25:01 +08:00
Joe Betz
e3cae09e63 Promote RetryGenerateName to GA 2024-09-19 14:01:46 -04:00
Jefftree
da308ea4a4 Update feature gate comment on referenced features 2024-09-19 17:25:11 +00:00
Jefftree
a5641b33c9 Reorder features alphabetical and add comments for adding features 2024-09-19 17:03:47 +00:00