Commit Graph

4769 Commits

Author SHA1 Message Date
Lalit Chauhan
0aea256ef9 revert of 8f0a6583ca 2025-11-05 00:13:26 +00:00
Kubernetes Prow Robot
c1a6a3ca71 Merge pull request #134152 from pohly/dra-device-taints-1.35
DRA: device taints: new ResourceSlice API, new features
2025-11-04 15:32:07 -08:00
Kubernetes Prow Robot
459bea5adf Merge pull request #135084 from tallclair/resize-validation
Fix pod resize validation when adding non-resizable resources
2025-11-04 14:32:04 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga
KEP-4368: Job Managed By; Promote to GA
2025-11-04 13:42:12 -08:00
Kubernetes Prow Robot
22151d719b Merge pull request #135079 from aaron-prindle/dra-shortcircuit-maxitems
feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case
2025-11-04 12:52:18 -08:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta
Promote Pod Certificates feature to beta
2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
276c59af7c Merge pull request #134769 from dejanzele/fix-job-starttime-validation-on-resume
fix: allow job startTime updates on resume from suspended state
2025-11-04 09:14:08 -08:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
2025-11-04 10:59:45 +01:00
Tim Allclair
9b95eaf593 Fix pod resize validation when adding non-resizable resources 2025-11-03 20:39:37 -08:00
Aaron Prindle
0631a66d52 address feedback - refactor validateSlice and validateSet to use validateItems 2025-11-04 04:15:56 +00:00
Aaron Prindle
39ad8278e2 feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case 2025-11-03 21:16:45 +00:00
tinatingyu
59e075e8d3 Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
Patrick Ohly
75c9186792 generated files 2025-10-31 18:11:18 +01:00
Patrick Ohly
e4dda7b282 DRA device taints: fix DeviceTaintRule + missing slice case
When the ResourceSlice no longer exists, the ResourceSlice tracker didn't and
couldn't report the tainted devices even if they are allocated and in use. The
controller must keep track of DeviceTaintRules itself and handle this scenario.

In this scenario it is impossible to evaluation CEL expressions because the
necessary device attributes aren't available. We could:
- Copy them in the allocation result: too large, big change.
- Limit usage of CEL expressions to rules with no eviction: inconsistent.
- Remove the fields which cannot be supported well.

The last option is chosen.

The tracker is now no longer needed by the eviction controller. Reading
directly from the informer means that we cannot assume that pointers are
consistent. We have to track ResourceSlices by their name, not their pointer.
2025-10-31 18:11:18 +01:00
Patrick Ohly
fee14ffca2 DRA API: device taints 1.35
This raises the number of allowed taints per device to 16 by lowering
the number of allowed devices to 64 per ResourceSlice if (and only if!)
taints are used.

"effect: None" and DeviceTaintRule status with conditions get added
to support giving feedback to admins.

Instead of merely adding the new effect value, this also changes validation of
the enum so that unknown values are valid if they were already stored. This
will simplify adding new effects in the future because validation won't fail
for them after a downgrade. Consumers must treat them like this new None
effect, i.e. ignore them.
2025-10-31 18:11:18 +01:00
Kubernetes Prow Robot
4ca91a6542 Merge pull request #134994 from liggitt/drop-strict-cost
Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
2025-10-31 07:38:12 -07:00
Jordan Liggitt
bd11e52bfc Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates 2025-10-31 00:03:42 -04:00
yongruilin
d80ac77d98 feat(dra): add k8s:optional for all DV migrated optional fields 2025-10-30 23:31:01 +00:00
yongruilin
2713803c78 feat(dra): migrate NetworkDeviceData.IPs maxItems to declarative validation 2025-10-30 07:14:06 +00:00
yongruilin
0d6d2aa6a5 feat(dra): migrate DeviceAllocationConfiguration.Requests maxItems to declarative validation 2025-10-30 07:14:06 +00:00
yongruilin
a553ac0e92 feat(dra): migrate DeviceAllocationConfiguration.Requests uniqueness to declarative validation 2025-10-30 07:06:35 +00:00
yongruilin
a4e8b54dee test(validation): add case for handling duplicate request names in ResourceClaim status update 2025-10-30 07:06:35 +00:00
yongruilin
9bbf28e2f4 feat(dra): migrate NetworkDeviceData.IPs uniqueness to declarative validation 2025-10-30 07:06:35 +00:00
Kubernetes Prow Robot
de28a5bfea Merge pull request #134602 from lalitc375/device-attirubute
[feat] Add k8s-resource-fully-qualified-name format
2025-10-29 16:36:01 -07:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2
SVM: bump the API to beta, remove unused fields
2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
2025-10-29 19:36:11 +00:00
Lalit Chauhan
37ba7bb454 Address feedbacks 2025-10-29 04:41:10 +00:00
Lalit Chauhan
ec8c2246b2 Use k8s-resource-fully-qualified-name format to validate MatchAttribute 2025-10-29 04:41:07 +00:00
Kubernetes Prow Robot
06bbf2abbc Merge pull request #134796 from darshansreenivas/dtumkur-pr-storage-tag-migration
feat: wire storage group for declarative validation and +k8s:required to StorageClass.Provisioner
2025-10-28 17:54:00 -07:00
Kubernetes Prow Robot
dbf19f370a Merge pull request #134836 from lalitc375/maxLen
Use eachKey DV in DRA resources.
2025-10-28 17:04:07 -07:00
Kubernetes Prow Robot
0b90cb5e5a Merge pull request #134493 from adrianmoisey/promote-kep-5311-to-beta
Promote KEP-5311 (Relaxed validation for Services names) to beta
2025-10-28 17:04:00 -07:00
darshansreenivas
68710ce086 add declarative validation test
- restore v1alpha1
- fix lint issues
- ensure tests run with valid objects
2025-10-28 14:56:10 -07:00
darshansreenivas
2e257dffd8 update code-gen for new tags and ignore v1alpha1 2025-10-28 14:53:54 -07:00
Lalit Chauhan
8f0a6583ca Use eachKey DV in DRA resources. 2025-10-28 20:09:09 +00:00
Kubernetes Prow Robot
bdcff90855 Merge pull request #134805 from aaron-prindle/dv-deviceclaim-subfield
feat: add subfield +k8s:format=k8s-long-name validation for DeviceClass ObjeMeta.Name field
2025-10-28 12:10:03 -07:00
Kubernetes Prow Robot
ffdfc17ebc Merge pull request #134824 from lalitc375/union
use union member DV in the DRA
2025-10-27 10:29:35 -07:00
Kubernetes Prow Robot
f051670a47 Merge pull request #133087 from atiratree/terminating-replicas-beta
promote DeploymentReplicaSetTerminatingReplicas to Beta
2025-10-27 04:47:37 -07:00
Dejan Zele Pejchev
bbd44717c1 fix: allow job startTime updates on resume from suspended state
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
2025-10-26 18:26:30 +01:00
Lalit Chauhan
8a6b3caaa0 use union member DV in the DRA 2025-10-24 23:04:48 +00:00
Aaron Prindle
97f9819f7e address feedback 2025-10-24 21:21:49 +00:00
Kubernetes Prow Robot
1135d04f1d Merge pull request #134826 from aramase/aramase/f/kep_5538_beta_impl
CSI driver opt-in for service account tokens via secrets field
2025-10-24 13:57:35 -07:00
Kubernetes Prow Robot
8de3b303e0 Merge pull request #134807 from yongruilin/master_maxlength
Add k8s:maxLength tag and use it on NetworkDeviceData fields
2025-10-24 12:15:41 -07:00
Anish Ramasekar
30a6d4b389 Add CSI driver opt-in for service account tokens via secrets field
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-10-24 11:04:02 -07:00
Dan Winship
715228f478 Remove LoadBalancerIPMode feature gate 2025-10-24 09:12:03 -04:00
Dan Winship
b5297b18ab Remove AllowServiceLBStatusOnNonLB feature gate 2025-10-24 09:12:01 -04:00
Kubernetes Prow Robot
6652c9fadf Merge pull request #134457 from danwinship/prefersamenode
KEP-3015: update PreferSameTrafficDistribution to GA
2025-10-23 14:41:33 -07:00
yongruilin
78796239cf feat(validation): add k8s:optional tag to InterfaceName and HardwareAddress in NetworkDeviceData across all versions 2025-10-23 21:04:02 +00:00
Aaron Prindle
9ba536c2e4 feat: add subfield +k8s:format=k8s-long-name validation for DeviceClass ObjeMeta.Name field 2025-10-23 16:42:58 +00:00
Kubernetes Prow Robot
87a2b7138b Merge pull request #134767 from lalitc375/slice
Enable DV for resourceslice
2025-10-22 17:38:52 -07:00
Kubernetes Prow Robot
370c2f1d98 Merge pull request #134537 from itzPranshul/master-vg-enable-clusterRole
[RBAC] Enable Declarative Validation(DV) support for ClusterRole and RoleBinding
2025-10-22 16:48:38 -07:00