Maciej Kwiek
9e1c886a80
Validate None Service ClusterIP against LB type
...
If the Service is a Load Balancer, it should not have None Cluster IP.
If it does, Service validation fails.
2016-09-29 10:17:29 +02:00
Christian Simon
1c11047ffb
Adds datasetUUID for referencing flocker datasets
...
* flocker datasets should be attached using an unique identifier. This
is not the case for the name metadata used by datasetName
* allow only one of datasetUUID / datasetName specified
2016-09-27 13:19:22 +00:00
Minhan Xia
ba45a3f74e
disallow user to update loadbalancerSourceRanges
2016-09-22 19:04:02 -07:00
Chao Xu
c5e1decc13
add validation rule to prevent adding finalizers if the object is being deleted
2016-09-09 15:29:08 -07:00
Ivan Shvedunov
1c9ee74987
Allow IP addresses to be used as node names
...
Fixes #32050
2016-09-05 02:37:00 +03:00
Girish Kalele
db95798b39
Enforce EndpointAddress.NodeName validation + added unit tests
2016-08-30 13:40:19 -07:00
Kubernetes Submit Queue
8e93fec7fa
Merge pull request #31146 from pmorie/recycle-hostpath-slash
...
Automatic merge from submit-queue
Add validation preventing recycle of / in a hostPath PV
Adds a validation that prevents a user from recycling `/` when it is used in a hostPath PV
cc @kubernetes/sig-storage
2016-08-26 18:09:32 -07:00
Dominika Hodovska
bea189e9c9
Add sysctl api, validation & Docker support
2016-08-25 13:22:01 +02:00
Huamin Chen
dea4b0226d
support Azure data disk volume
...
Signed-off-by: Huamin Chen <hchen@redhat.com >
2016-08-23 13:23:07 +00:00
Paul Morie
d22ffb0402
Add validation preventing recycle of / in a hostPath PV
2016-08-22 23:20:20 -04:00
Tim St. Clair
839034b46b
Validate AppArmor annotations in the API server
2016-08-21 20:59:11 -07:00
Clayton Coleman
e1ebde9f92
Add spec.nodeName and spec.serviceAccountName to downward env var
...
The serviceAccountName is occasionally useful for clients running on
Kube that need to know who they are when talking to other components.
The nodeName is useful for PetSet or DaemonSet pods that need to make
calls back to the API to fetch info about their node.
Both fields are immutable, and cannot easily be retrieved in another
way.
2016-08-20 15:50:36 -04:00
Rudi Chiarito
88fdb96bfb
Add ExternalName to ServiceSpec
...
ExternalName allows kubedns to return CNAME records for external
services. No proxying is involved.
See original issue at
https://github.com/kubernetes/kubernetes/issues/13748
Feature tracking at
https://github.com/kubernetes/features/issues/33
2016-08-19 11:30:57 -07:00
Kubernetes Submit Queue
0bef4243cd
Merge pull request #30386 from derekwaynecarr/fix-pvc-validation
...
Automatic merge from submit-queue
Fix pvc requests.storage validation
A `PersistentVolumeClaim` should not be able to request a negative amount of storage.
/cc @kubernetes/sig-storage @kubernetes/rh-cluster-infra @deads2k
2016-08-19 07:46:03 -07:00
Kubernetes Submit Queue
40367df750
Merge pull request #30590 from kevin-wangzefeng/taint-unique-by-key-effect
...
Automatic merge from submit-queue
make taints unique by <key, effect> on a node
closes #29362
2016-08-19 04:58:12 -07:00
Johannes Scheuermann
eed42380f9
Initial Quobyte support
2016-08-18 17:13:50 +02:00
Rodrigo Campos
568f4c2e63
Add mode permission bits to configmap, secrets and downwardAPI
...
This implements the proposal in:
docs/proposals/secret-configmap-downwarapi-file-mode.md
Fixes : #28317 .
The mounttest image is updated so it returns the permissions of the linked file
and not the symlink itself.
2016-08-17 14:44:41 -04:00
Kevin
1e2d560253
make taints unique by <key, effect> on a node
2016-08-17 15:40:33 +08:00
derekwaynecarr
cebb038935
Fix pvc requests.storage validation
2016-08-15 09:56:04 -04:00
Jess Frazelle
7e9d82129e
fix go vet errors
...
Signed-off-by: Jess Frazelle <jessfraz@google.com >
fix composites
Signed-off-by: Jess Frazelle <me@jessfraz.com >
2016-08-10 16:45:41 -07:00
Kubernetes Submit Queue
94fc389daa
Merge pull request #29837 from thockin/validate-dotdot-in-projections
...
Automatic merge from submit-queue
Validate .. in projections, fix tests
I noticed this when reviewing another PR. I fixed it but the test was beyond comprehension, so I fixed that too.
<!-- Reviewable:start -->
---
This change is [<img src="https://reviewable.kubernetes.io/review_button.svg " height="34" align="absmiddle" alt="Reviewable"/>](https://reviewable.kubernetes.io/reviews/kubernetes/kubernetes/29837 )
<!-- Reviewable:end -->
2016-08-09 02:31:58 -07:00
Kubernetes Submit Queue
1edf254efb
Merge pull request #25458 from errm/env-var-style-config-keys
...
Automatic merge from submit-queue
Allow Secret & ConfigMap keys to contain caps, dots, and underscores
[]()
Re: #23722
This makes loosens the regex used in in Secrets and ConfigMap,
in order to make environment variable style keys valid
2016-08-02 21:00:52 -07:00
Michael Fraenkel
b1e7e6cf46
Service names conform to RFC 1035
2016-08-02 08:42:15 -06:00
Ed Robinson
d4969ff032
Allows Secret & ConfigMap Keys to look like Environment Variables
...
This makes environment variable style keys (uppercase with underscores) valid
in Secrets and ConfigMap.
2016-08-01 20:56:40 +01:00
Tim Hockin
ef4bccf63e
Clean up the ugliest unit test ever
...
This volume-validation test was a disaster. Better now, if longer to
scroll-through.
2016-07-31 22:37:11 -07:00
Tim Hockin
9f2e13acca
Validate that projected files do not contain ..
...
This was checked in the kubelet, but not at the API.
2016-07-31 22:37:11 -07:00
Ivan Shvedunov
02baa44948
Fix update validation for pods w/init containers.
2016-07-20 00:30:12 +03:00
k8s-merge-robot
8677b0c545
Merge pull request #28743 from Clarifai/gpu-impl
...
Automatic merge from submit-queue
Fix GPU resource validation
This fixes scheduling of pods with GPU resources. The change was never upstreamed during the 1.3 beta period, as it got lost in the noise of other changes in our fork. Ooops. I'll submit a cherry-pick request for 1.3.1 as soon as this lands in master.
Because of defaulting, requests are always set if limits are. Thus, the check can never succeed. Instead, make sure that the two values are equal.
Also, remove a few other error messages and remove unnecessary Sprintf calls.
2016-07-16 11:48:42 -07:00
Rudi Chiarito
b86dfcf60a
Fix GPU resource validation
...
Because of defaulting, requests are always set if limits are. Thus, the check can never succeed. Instead, make sure that the two values are equal.
Also, remove a few other error messages and remove unnecessary Sprintf calls.
2016-07-13 15:05:59 -04:00
jiangyaoguo
4e91166bc6
Use PreferAvoidPods annotation to avoid pods being scheduled to specific node.
...
1. define PreferAvoidPods annotation
2. add PreferAvoidPodsPriority
3. validate AvoidPods in node annotations
2016-07-13 17:07:46 +08:00
markturansky
3ddb8470b9
make PVCs immutable (except volumeName) post-creation
2016-07-11 11:50:16 -04:00
Michail Kargakis
93c2656d5a
api: validate generation updates
2016-07-07 13:09:48 +02:00
Tim Hockin
87c1fc50a8
Make IsValidIP return error strings
...
Also treat 0.0.0.0 as special, like loopback and multicast.
2016-07-02 17:32:05 -07:00
Tim Hockin
14bece550f
Make IsValidPortNum/Name return error strings
2016-07-02 17:32:05 -07:00
Tim Hockin
189d4a5159
Make CIdentifier return error strings
2016-07-02 17:32:05 -07:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Dr. Stefan Schimanski
3826d2598c
Move seccomp annotation validation into api/validation
2016-06-14 14:58:32 +02:00
k8s-merge-robot
5288a255f4
Merge pull request #25567 from gmarek/validate
...
Automatic merge from submit-queue
Add Controller field to OwnerReference
cc @davidopp
2016-05-31 14:21:38 -07:00
gmarek
a6dd89d797
Add Controller field to OwnerReference
2016-05-31 15:33:35 +02:00
Paul Morie
faa112bad1
Add selector to PersistentVolumeClaim
2016-05-30 12:09:50 -04:00
k8s-merge-robot
a550cf16b9
Merge pull request #25826 from freehan/svcsourcerange
...
Automatic merge from submit-queue
promote sourceRange into service spec
@thockin one more for your pile
I will add docs at `http://releases.k8s.io/HEAD/docs/user-guide/services-firewalls.md `
cc: @justinsb
Fixes : #20392
2016-05-28 02:20:13 -07:00
Alex Mohr
edda837142
Merge pull request #25599 from caesarxuchao/orphaning-finalizer
...
Add orphaning finalizer logic to GC
2016-05-26 13:19:19 -07:00
Minhan Xia
a1bd33f510
promote sourceRange into service spec
2016-05-26 10:42:30 -07:00
Chao Xu
1665546d2d
add finalizer logics to the API server and the garbage collector; handling DeleteOptions.OrphanDependents in the API server
2016-05-24 13:07:28 -07:00
Avesh Agarwal
1931931494
Downward API implementation for resources limits and requests
2016-05-24 12:22:35 -04:00
Tim Hockin
5862a60ae7
Make IsDNS1123Subdomain return error strings
2016-05-19 08:57:49 -07:00
Tim Hockin
77eff06a53
Make IsDNS1123Label return error strings
2016-05-19 08:57:49 -07:00
k8s-merge-robot
4f09f51486
Merge pull request #24800 from thockin/validation_pt8-3
...
Automatic merge from submit-queue
Make name validators return string slices
Part of the larger validation PR, broken out for easier review and merge. Builds on previous PRs in the series.
2016-05-19 02:15:27 -07:00
Kevin
52fb89ff73
implement taints and tolerations
2016-05-18 15:06:23 +00:00
Tim Hockin
152c86ab06
Make name validators return string slices
2016-05-18 00:48:01 -07:00
