Commit Graph

94 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ef37cb503b Merge pull request #128634 from thockin/remove_PodHostIPs_gate_for_1.32
Remove PodHostIPs feature gates
2024-11-07 13:47:54 +00:00
Lan Liang
6e5a3cde50 Remove PodHostIPs feature gates.
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-11-06 23:10:36 -08:00
Harshal Neelkamal
6fdacf0411 Add plugin and key-cache for ExternalJWTSigner integration 2024-11-07 03:16:23 +00:00
Kubernetes Prow Robot
4c487b00af Merge pull request #128627 from kannon92/revert-128046-ga3960
Revert "Graduate PodLifecycleSleepAction to GA"
2024-11-07 00:25:51 +00:00
Kevin Hannon
350b0d2b93 Revert "Graduate PodLifecycleSleepAction to GA" 2024-11-06 16:29:19 -05:00
Anish Ramasekar
51f7475b6a Add ServiceAccountNodeAudienceRestriction feature gate
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-11-06 09:51:36 -08:00
Patrick Ohly
ea51d975fc DRA: promote feature gate to beta 2024-11-06 13:03:20 +01:00
Kubernetes Prow Robot
a28f14089c Merge pull request #128539 from benluddy/cbor-feature-gates
KEP-4222: Add CBOR feature gates.
2024-11-05 23:21:56 +00:00
Kubernetes Prow Robot
f81a68f488 Merge pull request #128377 from tallclair/allocated-status-2
[FG:InPlacePodVerticalScaling] Implement AllocatedResources status changes for Beta
2024-11-05 23:21:49 +00:00
Kubernetes Prow Robot
be7d1000ee Merge pull request #127404 from zylxjtu/master
Windows node graceful shutdown
2024-11-05 23:21:42 +00:00
Ben Luddy
072dfcb416 Add CBOR feature gates.
For alpha, there is one apiserver feature gate and two client-go feature gates controlling
CBOR. They were initially wired to separate test-only feature gate instances in order to prevent
them from being configurable at runtime via command-line flags or environment variables (for
client-go feature gates outside of Kubernetes components). All of the integration tests required by
the KEP as alpha criteria have been implemented. This adds the feature gates to the usual feature
gate instances and removes the temporary code to support separate test-only feature gate instances.
2024-11-05 14:17:52 -05:00
Kubernetes Prow Robot
19d6337d59 Merge pull request #128415 from serathius/watchcache-btree-2
Use btree for watch cache storage to serve LIST more efficiently
2024-11-05 19:15:51 +00:00
zylxjtu
459952a067 Windows node graceful shutdown 2024-11-05 17:46:22 +00:00
Kubernetes Prow Robot
2d6c8a129d Merge pull request #127134 from jpbetz/mutating-admission
KEP-3962: MutatingAdmissionPolicy Alpha
2024-11-05 17:31:38 +00:00
Kubernetes Prow Robot
f56db61db5 Merge pull request #126862 from carlory/HPAContainerMetrics
Remove generally available feature gate HPAContainerMetrics
2024-11-05 16:19:29 +00:00
Marek Siarkowicz
5ea427ebb5 Use btree for watch cache storage to serve LIST more efficiently
Can be disabled via BtreeWatchCache feature flag.
2024-11-05 16:27:57 +01:00
Kubernetes Prow Robot
4932adf80d Merge pull request #125296 from jsturtevant/windows-numa-support
Support CPU and Topology manager on Windows
2024-11-05 00:33:28 +00:00
Kubernetes Prow Robot
5572688cef Merge pull request #128342 from gnufied/recovery-expansion-beta
Move RecoverVolumeExpansionFailure feature to beta
2024-11-04 23:15:36 +00:00
Kubernetes Prow Robot
9fe41b6198 Merge pull request #128046 from AxeZhan/ga3960
Graduate PodLifecycleSleepAction to GA
2024-11-04 22:09:35 +00:00
Kubernetes Prow Robot
97c79df18f Merge pull request #127981 from jsafrane/selinux-changepolicy
1710: Implement SELinuxChangePolicy
2024-11-04 22:09:29 +00:00
Alay Patel
3e3276e9fe Promote PodIndexLabel for Statefulset and IndexedJob stable (#128387)
* lock feature gate for PodIndexLabel and mark it GA

Signed-off-by: Alay Patel <alayp@nvidia.com>

* add emulated version if testing disabling of PodIndexLabel FG

Signed-off-by: Alay Patel <alayp@nvidia.com>

---------

Signed-off-by: Alay Patel <alayp@nvidia.com>
2024-11-04 19:11:28 +00:00
Kubernetes Prow Robot
b4d91d1b8a Merge pull request #128517 from Tal-or/memorymanager-ga-features
node: kubelet: memmgr: Memory Manager to GA
2024-11-04 17:19:36 +00:00
Kubernetes Prow Robot
6a1a6fd85f Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares
2024-11-04 17:19:29 +00:00
Talor Itzhak
004db73142 node:kubelet:memmgr: Memory Manager to GA
Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:56:06 +02:00
AxeZhan
200a61b6b9 Graduate PodLifecycleSleepAction to GA 2024-11-02 11:05:36 +08:00
Tim Allclair
0f0e27d226 Move container status AllocatedResources behind a separate feature gate 2024-11-01 14:02:58 -07:00
Jan Safranek
c73308e90a Introduce SELinuxChangePolicy
Feature gate + the API
2024-11-01 12:45:56 +01:00
Kubernetes Prow Robot
b337f048db Merge pull request #127094 from sreeram-venkitesh/4818-allow-zero-for-prestop-hook
KEP-4818: Relaxed validation for allowing zero in PreStop hook sleep action
2024-10-31 20:25:26 +00:00
Joe Betz
4b13362dda Add feature gate
Co-authored-by: cici37 <cicih@google.com>
2024-10-31 10:30:38 -04:00
Patrick Ohly
9a7e4ccab2 DRA admin access: add feature gate
The new DRAAdminAccess feature gate has the following effects:
- If disabled in the apiserver, the spec.devices.requests[*].adminAccess
  field gets cleared. Same in the status. In both cases the scenario
  that it was already set and a claim or claim template get updated
  is special: in those cases, the field is not cleared.

  Also, allocating a claim with admin access is allowed regardless of the
  feature gate and the field is not cleared. In practice, the scheduler
  will not do that.
- If disabled in the resource claim controller, creating ResourceClaims
  with the field set gets rejected. This prevents running workloads
  which depend on admin access.
- If disabled in the scheduler, claims with admin access don't get
  allocated. The effect is the same.

The alternative would have been to ignore the fields in claim controller and
scheduler. This is bad because a monitoring workload then runs, blocking
resources that probably were meant for production workloads.
2024-10-29 09:50:11 +01:00
Kubernetes Prow Robot
685b8b3ba1 Merge pull request #126981 from kannon92/stable-empty-dir-promotion
KEP-1967: promote size backed memory volumes to stable
2024-10-29 01:00:54 +00:00
Kubernetes Prow Robot
961344ddb2 Merge pull request #128124 from PiotrProkop/topology-manager-options-stable
topologymanager: Promote support for improved multi-numa alignment in Topology Manager to GA
2024-10-28 23:56:53 +00:00
Hemant Kumar
a9d71bd6e6 Move RecoverVolumeExpansionFailure feature to beta 2024-10-25 13:39:43 -04:00
James Sturtevant
2c5a8c2618 Add Windows Affinity Featuregate
Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
2024-10-25 09:14:54 -07:00
Maciej Szulik
db94009981 Promote job creation timestamp annotation to stable
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2024-10-25 16:09:54 +02:00
Kubernetes Prow Robot
0a62f0fd7b Merge pull request #128139 from Jefftree/revert-allowservicelb
Revert removal of feature AllowServiceLBStatusOnNonLB and LockToDefault first
2024-10-24 15:20:54 +01:00
Kubernetes Prow Robot
7fff5b6b02 Merge pull request #127566 from zhifei92/integrate-watchdog
integrate kubelet with the systemd watchdog
2024-10-23 02:21:34 +01:00
Kubernetes Prow Robot
f1e447b9d3 Merge pull request #126897 from HirazawaUi/promote-env-to-beta
KEP-4369: promote RelaxedEnvironmentVariableValidation feature gate to beta
2024-10-21 15:26:41 +01:00
zhifei92
dac7332ed2 integrate kubelet with the systemd watchdog
feat:  add unit test

feat:  add FeatureGate for SystemdWatchdog

fix:  linter and failed tests

feat:  add SystemdWatchdog to versioned feature list yaml
2024-10-21 10:46:14 +08:00
Kubernetes Prow Robot
79cca2786e Merge pull request #128172 from liggitt/3221-ga
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
2024-10-18 20:21:09 +01:00
Kubernetes Prow Robot
7adcad3138 Merge pull request #128169 from liggitt/4193-ga
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable
2024-10-18 17:39:11 +01:00
Kubernetes Prow Robot
d7bd728403 Merge pull request #128168 from liggitt/4601-beta
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
2024-10-18 17:39:03 +01:00
Sreeram Venkitesh
f1f9e7b398 Clean kube_features.go
Added tests, info about new feature gate in error message, fixes from review

Added basic e2e test

Added unit tests

Ran hack/update-featuregates.sh

Tolerate updates to existing resources after disabling feature gate

Added feature gate to versioned_kube_features.go

Fixed existing tests

Use PodValidationOptions for validation instead of using feature gate directly

Relaxed validation for allowing zero in prestop hook sleep action
2024-10-18 22:04:42 +05:30
HirazawaUi
98e3cb4c56 promote feature gate to beta 2024-10-18 23:08:28 +08:00
carlory
d62ee4ab5f Remove generally available feature gate HPAContainerMetrics 2024-10-18 14:37:53 +08:00
carlory
f68dc13760 remove general avaliable feature-gate ZeroLimitedNominalConcurrencyShares 2024-10-18 14:32:43 +08:00
Kubernetes Prow Robot
f5ae0413ca Merge pull request #126347 from vinayakankugoyal/kep2862impl
KEP-2862: Fine-grained Kubelet API Authorization
2024-10-18 03:53:04 +01:00
Jordan Liggitt
ad808e609a KEP-3221: Promote StructuredAuthorizationConfiguration to GA 2024-10-17 21:53:45 -04:00
Jordan Liggitt
0771f601e1 KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable 2024-10-17 21:25:09 -04:00
Jordan Liggitt
9caca73126 KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta 2024-10-17 21:02:55 -04:00