github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 20:00:07 +00:00
Code Issues Projects Releases Wiki Activity
136,189 Commits 42 Branches 9,765 Tags
0b0b77ae20f8dc2cd4cd1be538773ae99a672a43
Commit Graph

2162 Commits

Author SHA1 Message Date
Tim Allclair
63e5f3aac3 On-demand PLEG pod relisting 2026-03-11 23:22:13 +00:00
Kubernetes Prow Robot
f5bafe93ac Merge pull request #135048 from yliaog/beta_promo 
DRA Extended Resource: promote to Beta in 1.36
 2026-03-07 01:12:19 +05:30
Kubernetes Prow Robot
b5e83c2d21 Merge pull request #136762 from HarshalNeelkamal/client-ca-reload 
Introduce a kubelet configuration that reloads ClientCA in TLSConfig
 2026-03-06 00:46:25 +05:30
Rita Zhang
c4f88de33e Move DRAAdminAccess feature to GA (#137373) 
* Move DRAAdminAccess feature to GA

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

---------

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2026-03-05 23:42:21 +05:30
Harshal Neelkamal
40d8705d28 Introduce a kubelet-server configuration that allows reloading ClientCA in TLSConfig 2026-03-05 02:04:08 +00:00
Kubernetes Prow Robot
be6162afb8 Merge pull request #135196 from harche/i133202 
KEP-4680: Add message field support to DRA device health reporting
 2026-03-04 00:11:24 +05:30
Kubernetes Prow Robot
5941fed3d6 Merge pull request #136912 from dfajmon/selinux-ga 
Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA
 2026-03-03 22:07:29 +05:30
Sunyanan Choochotkaew
e035c41256 DRA: Promote DRAConsumableCapacity to Beta 
Signed-off-by: Sunyanan Choochotkaew <sunyanan.choochotkaew1@ibm.com>
 2026-03-03 18:30:26 +09:00
Kubernetes Prow Robot
040699432e Merge pull request #137172 from richabanker/mvp-graduate-beta 
Graduate Mixed Version Proxy feature gate to Beta
 2026-03-03 04:56:54 +05:30
Carlos Eduardo Arango Gutierrez
ad6c155449 KEP-4680: Add message field support to DRA device health reporting 
Author: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-Authored-By: Harshal Patil <12152047+harche@users.noreply.github.com>

Signed-off-by: Harshal Patil <12152047+harche@users.noreply.github.com>
 2026-03-02 11:58:43 -05:00
Eddie
41bb4b6a8b Promote sig-storage feature MutableCSINodeAllocatableCount to GA (#136230) 
* Promote MutableCSINodeAllocatableCount to GA

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Lock MutableCSINodeAllocatableCount feature gate to default

Signed-off-by: Eddie Torres <torredil@amazon.com>

---------

Signed-off-by: Eddie Torres <torredil@amazon.com>
 2026-02-28 06:03:30 +05:30
Kubernetes Prow Robot
330950ca52 Merge pull request #137254 from michaelasp/statefulConsistency 
Add the ability for the statefulset controller to read its own writes
 2026-02-28 01:39:30 +05:30
Kubernetes Prow Robot
d63c9049c3 Merge pull request #137053 from danwinship/kep-4858-beta 
KEP-4858: update StrictIPCIDRValidation to Beta
 2026-02-28 00:49:30 +05:30
Michael Aspinwall
c8e8bd5085 Add the ability for the statefulset controller to read its own writes 2026-02-27 18:21:30 +00:00
Daniel Fajmon
b0919d81a0 Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA 2026-02-27 14:58:14 +01:00
Richa Banker
6e6efbce27 Graduate Mixed Version Proxy to Beta 2026-02-25 13:38:11 -08:00
Michael Aspinwall
f18f0df7fe Add the ability for the replicaset controller to read its own writes 2026-02-25 17:15:53 +00:00
Kubernetes Prow Robot
7b7c291631 Merge pull request #137210 from michaelasp/consistentJobController 
Add the ability for the job controller to read its own writes
 2026-02-25 07:51:34 +05:30
Michael Aspinwall
61d0dd30fb Add the ability for the job controller to read its own writes 2026-02-25 01:19:48 +00:00
Kubernetes Prow Robot
862b0673c2 Merge pull request #136959 from natasha41575/allocated_status_cleanup 
remove the InPlacePodVerticalScalingAllocatedStatus feature gate
 2026-02-25 00:47:35 +05:30
Antoni Zawodny
ee5f014e51 KEP-5710: Add WorkloadAwarePreemption feature gate 2026-02-23 14:05:27 +01:00
yliao
d50f814bea promote DRA Extended Resource feature to beta in 1.36 2026-02-20 18:42:50 +00:00
Kubernetes Prow Robot
f3c452e8f4 Merge pull request #137128 from brejman/tas-feature-gate 
KEP-5732: Add TopologyAwareWorkloadScheduling feature gate
 2026-02-20 05:09:38 +05:30
Kubernetes Prow Robot
6adb2afe55 Merge pull request #134937 from michaelasp/pocConsistentDs 
Daemonset controller staleness detection
 2026-02-19 23:11:38 +05:30
Michael Aspinwall
65eb0e94c2 Daemonset Consistency 
Add the ability for the daemonset controller to figure out whether it has read its own writes for pods and daemonset objects.
 2026-02-19 16:53:19 +00:00
Bartosz
2fdc032273 Add feature gate for TopologyAwareWorkloadScheduling 2026-02-19 13:32:22 +00:00
Lalit Chauhan
0d5bdaedc9 promote MutatingAdmissionPolicy to v1: update plugin implementation 
- Update MutatingAdmissionPolicy plugin to use v1 types.
 2026-02-18 17:51:43 +00:00
Kubernetes Prow Robot
0ca5cba140 Merge pull request #135965 from kannon92/kep-5440-feature-gate-enable-e2e-test 
set KEP-5440 to enabled by default
 2026-02-18 18:13:38 +05:30
Dan Winship
6182de8b13 KEP-4858: update StrictIPCIDRValidation to Beta 2026-02-16 10:55:45 -05:00
Kubernetes Prow Robot
ec2c7739bc Merge pull request #135808 from tico88612/cleanup/SeparateCacheWatchRPC 
SeparateCacheWatchRPC LockToDefault set true
 2026-02-13 08:53:59 +05:30
Kubernetes Prow Robot
1132395d4a Merge pull request #136793 from yongruilin/master_vg-strategy-alpha 
KEP-5073:  Declarative Validation Lifecycle Update
 2026-02-13 07:16:00 +05:30
yongruilin
0c679cea68 Introduce DeclarativeValidationBeta and deprecate Takeover gate 
This change introduces the DeclarativeValidationBeta feature gate in v1.36
as the global safety switch for Beta-stage validation rules and marks
DeclarativeValidationTakeover as deprecated.

Following KEP-5073.
 2026-02-13 00:54:11 +00:00
Kubernetes Prow Robot
7f13600dad Merge pull request #136400 from vinayakankugoyal/gitrepo 
KEP:5040 Lock gitRepo Volume Driver to disabled.
 2026-02-13 03:58:10 +05:30
Natasha Sarkar
d25c688bf7 remove the InPlacePodVerticalScalingAllocatedStatus feature gate 2026-02-12 17:20:10 +00:00
Kevin Hannon
94cc00aebb set KEP-5440 to enabled by default and add two e2e tests confirming behavior 2026-02-11 23:17:21 -05:00
Francesco Romani
5a2578ce09 kubelet: promote the CustomCPUCFSQuotaPeriod to GA 
Promote the CustomCPUCFSQuotaPeriod gate to GA, turning it enabled by
default. Short history of this feature so far:

As far as git and github history allows to reconstruct, this
feature was introduced without KEP/design doc process (kubernetes 1.12).
It was a double-opt-in feature: users set to first enable a FG to make
the kubelet honor a setting, then change a specific tunable to change
the behavior This is more like a “safeguard” FG
(Other noteworthy examples: `UnauthenticatedHTTP2DOSMitigation` or
`DisableCPUQuotaWithExclusiveCPUs`) rather than a KEP-driven feature gate

Major past events:
- introduced in: https://github.com/kubernetes/kubernetes/pull/63437
- Discussion about adding a FG: https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-387828654
- The change was initially accepted as straightforward, but it was
  later discovered systemd had gaps, and the change was downgraded
  as experimental: https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-391740566
- FG re-introduced because systemd acknowledged and fixed the gap,
  but the systemd rollout would take quite some time:
  https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-407950436

There's a  gap, still relevant in 2026: missing e2e tests to move past alpha:
https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-417674790

Other noteworthy work related to this feature:
- https://github.com/kubernetes/kubernetes/pull/94687
- https://github.com/kubernetes/kubernetes/pull/111520
- https://github.com/kubernetes/kubernetes/pull/129726
- https://github.com/kubernetes/kubernetes/pull/133845

Fix and modernize the related unit tests.

Signed-off-by: Francesco Romani <fromani@redhat.com>

fixup
 2026-02-09 08:27:21 +01:00
Francesco Romani
ccb70a6577 kubelet: deprecate DisableCPUQuotaWithExclusiveCPUs 
We missed the proper process initially, it should have
been set to deprecated from the beginning, to convey
this is a safety FG for a delicate, long needed fix
rather than a FG for a proper feature

Signed-off-by: Francesco Romani <fromani@redhat.com>
 2026-02-09 08:25:56 +01:00
Kubernetes Prow Robot
d863fbe80b Merge pull request #135335 from carlory/cleanup 
[1.36] Remove feature gate HonorPVReclaimPolicy
 2026-02-07 06:30:28 +05:30
carlory
4bc5464553 Remove feature gate HonorPVReclaimPolicy 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2026-02-06 13:31:16 +08:00
Kubernetes Prow Robot
5dd7be6b4f Merge pull request #136118 from HarshalNeelkamal/ga-external-jwt 
Make ExternalServiceAccountTokenSigner GA
 2026-02-06 03:16:29 +05:30
HirazawaUi
9703ce508f Lock the DisableNodeKubeProxyVersion feature gate to be enabled by default. 2026-02-04 21:45:15 +08:00
Harshal Neelkamal
754c108b96 Make ExternalServiceAccountTokenSigner GA 2026-02-03 23:47:33 +00:00
Kubernetes Prow Robot
3760cdc64a Merge pull request #136482 from aaron-prindle/dv-feature-gate-ga 
Graduate DeclarativeValidation feature gate to GA
 2026-01-30 03:07:48 +05:30
Aaron Prindle
0cab277183 Graduate DeclarativeValidation feature gate to GA 
This change graduates the 'DeclarativeValidation' feature gate to GA in v1.36.
The feature gate is now locked to 'true' by default.

Changes:
- Updated 'DeclarativeValidation' feature gate to GA in 'pkg/features/kube_features.go' and 'staging/src/k8s.io/apiserver/pkg/features/kube_features.go'.
- Updated feature gate documentation and versioned lists via 'hack/update-featuregates.sh'.
- Added feature gate emulation versioning to tests that explicitly disable 'DeclarativeValidation' to prevent panics now that the gate is locked to default.
 2026-01-29 05:38:20 +00:00
Anish Ramasekar
d6d215821a Mark CSIServiceAccountTokenSecrets feature gate as GA 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2026-01-28 14:41:34 -06:00
Kubernetes Prow Robot
3dd404d7cd Merge pull request #136544 from aramase/aramase/c/rm_structured_authz_fg 
Drop StructuredAuthorizationConfiguration feature gate
 2026-01-27 21:43:52 +05:30
Kubernetes Prow Robot
028015267e Merge pull request #136116 from vinayakankugoyal/ga 
KEP:2862 Graduate to STABLE.
 2026-01-27 05:09:49 +05:30
Anish Ramasekar
a1478c7730 Drop StructuredAuthorizationConfiguration feature gate 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2026-01-26 11:35:39 -06:00
Kubernetes Prow Robot
30607b55b4 Merge pull request #136389 from adrianmoisey/promote-kep-5311-to-beta 
Promote KEP-5311 (Relaxed validation for Services names) to beta
 2026-01-22 18:11:28 +05:30
Vinayak Goyal
cfd7b49484 KEP:5040 Lock gitRepo Volume Driver to disabled. 2026-01-21 21:16:52 -05:00