github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-18 16:21:13 +00:00
Code Issues Projects Releases Wiki Activity

Promote Immutable Secrets/ConfigMaps feature to Beta

Browse Source
This commit is contained in:
wojtekt 2020-03-27 11:15:53 +01:00
parent 5655350b2b
commit 0360e4d1a1
5 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/apis/core/types.go
View File

@ -4780,7 +4780,7 @@ type Secret struct {
// Immutable field, if set, ensures that data stored in the Secret cannot // Immutable field, if set, ensures that data stored in the Secret cannot
// be updated (only object metadata can be modified). // be updated (only object metadata can be modified).
// This is an alpha field enabled by ImmutableEphemeralVolumes feature gate. // This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
// +optional // +optional
Immutable *bool Immutable *bool
@ -4908,7 +4908,7 @@ type ConfigMap struct {
// Immutable field, if set, ensures that data stored in the ConfigMap cannot // Immutable field, if set, ensures that data stored in the ConfigMap cannot
// be updated (only object metadata can be modified). // be updated (only object metadata can be modified).
// This is an alpha field enabled by ImmutableEphemeralVolumes feature gate. // This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
// +optional // +optional
Immutable *bool Immutable *bool

3
pkg/features/kube_features.go
View File

@ -543,6 +543,7 @@ const (
// owner: @wojtek-t // owner: @wojtek-t
// alpha: v1.18 // alpha: v1.18
// beta: v1.19
// //
// Enables a feature to make secrets and configmaps data immutable. // Enables a feature to make secrets and configmaps data immutable.
ImmutableEphemeralVolumes featuregate.Feature = "ImmutableEphemeralVolumes" ImmutableEphemeralVolumes featuregate.Feature = "ImmutableEphemeralVolumes"
@ -657,7 +658,7 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS
PodDisruptionBudget: {Default: true, PreRelease: featuregate.Beta}, PodDisruptionBudget: {Default: true, PreRelease: featuregate.Beta},
ServiceTopology: {Default: false, PreRelease: featuregate.Alpha}, ServiceTopology: {Default: false, PreRelease: featuregate.Alpha},
ServiceAppProtocol: {Default: true, PreRelease: featuregate.Beta}, ServiceAppProtocol: {Default: true, PreRelease: featuregate.Beta},
ImmutableEphemeralVolumes: {Default: false, PreRelease: featuregate.Alpha}, ImmutableEphemeralVolumes: {Default: true, PreRelease: featuregate.Beta},
DefaultIngressClass: {Default: true, PreRelease: featuregate.Beta}, DefaultIngressClass: {Default: true, PreRelease: featuregate.Beta},
HugePageStorageMediumSize: {Default: false, PreRelease: featuregate.Alpha}, HugePageStorageMediumSize: {Default: false, PreRelease: featuregate.Alpha},
ExternalPolicyForExternalIP: {Default: false, PreRelease: featuregate.GA}, // remove in 1.19 ExternalPolicyForExternalIP: {Default: false, PreRelease: featuregate.GA}, // remove in 1.19

4
staging/src/k8s.io/api/core/v1/types.go
View File

@ -5495,7 +5495,7 @@ type Secret struct {
// be updated (only object metadata can be modified). // be updated (only object metadata can be modified).
// If not set to true, the field can be modified at any time. // If not set to true, the field can be modified at any time.
// Defaulted to nil. // Defaulted to nil.
// This is an alpha field enabled by ImmutableEphemeralVolumes feature gate. // This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
// +optional // +optional
Immutable *bool `json:"immutable,omitempty" protobuf:"varint,5,opt,name=immutable"` Immutable *bool `json:"immutable,omitempty" protobuf:"varint,5,opt,name=immutable"`
@ -5636,7 +5636,7 @@ type ConfigMap struct {
// be updated (only object metadata can be modified). // be updated (only object metadata can be modified).
// If not set to true, the field can be modified at any time. // If not set to true, the field can be modified at any time.
// Defaulted to nil. // Defaulted to nil.
// This is an alpha field enabled by ImmutableEphemeralVolumes feature gate. // This is a beta field enabled by ImmutableEphemeralVolumes feature gate.
// +optional // +optional
Immutable *bool `json:"immutable,omitempty" protobuf:"varint,4,opt,name=immutable"` Immutable *bool `json:"immutable,omitempty" protobuf:"varint,4,opt,name=immutable"`

2
test/e2e/common/configmap_volume.go
View File

@ -554,7 +554,7 @@ var _ = ginkgo.Describe("[sig-storage] ConfigMap", func() {
// It should be forbidden to change data for configmaps marked as immutable, but // It should be forbidden to change data for configmaps marked as immutable, but
// allowed to modify its metadata independently of its state. // allowed to modify its metadata independently of its state.
ginkgo.It("should be immutable if `immutable` field is set [Feature:ImmutableEphemeralVolume]", func() { ginkgo.It("should be immutable if `immutable` field is set", func() {
name := "immutable" name := "immutable"
configMap := newConfigMap(f, name) configMap := newConfigMap(f, name)

2
test/e2e/common/secrets_volume.go
View File

@ -372,7 +372,7 @@ var _ = ginkgo.Describe("[sig-storage] Secrets", func() {
// It should be forbidden to change data for secrets marked as immutable, but // It should be forbidden to change data for secrets marked as immutable, but
// allowed to modify its metadata independently of its state. // allowed to modify its metadata independently of its state.
ginkgo.It("should be immutable if `immutable` field is set [Feature:ImmutableEphemeralVolume]", func() { ginkgo.It("should be immutable if `immutable` field is set", func() {
name := "immutable" name := "immutable"
secret := secretForTest(f.Namespace.Name, name) secret := secretForTest(f.Namespace.Name, name)