Commit Graph

2044 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
22d41b5443 Merge pull request #135059 from macsko/reenable_async_api_calls
Re-enable SchedulerAsyncAPICalls feature in v1.35
2025-11-04 20:56:04 -08:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation
KEP-5284: Implement Constrained Impersonation
2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga
KEP-4368: Job Managed By; Promote to GA
2025-11-04 13:42:12 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
2025-11-04 16:30:49 -05:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta
Promote Pod Certificates feature to beta
2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
af70ebcbf5 Merge pull request #132157 from haircommander/drop-userns-psa
drop UserNamespacesPodSecurityStandards feature gate
2025-11-04 08:20:08 -08:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
2025-11-04 10:59:45 +01:00
Kubernetes Prow Robot
48c56e04e0 Merge pull request #135017 from liggitt/stateful-set-noop-rollout
Fix spurious statefulset rollout from 1.33 → 1.34
2025-11-03 19:58:11 -08:00
Jordan Liggitt
979c442774 Fix spurious workload rollout due to null creationTimestamp in controller revisions 2025-11-03 17:11:06 -05:00
Maciej Skoczeń
363407c500 Re-enable SchedulerAsyncAPICalls feature in v1.35 2025-11-03 14:11:04 +00:00
tinatingyu
59e075e8d3 Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
Peter Hunt
e8bd3f629d drop UserNamespacesPodSecurityStandards feature gate
this feature gate was meant to be ephemeral, and only was used for guaranteeing a
cluster admin didn't accidentally relax PSA policies before the kubelet would deny a pod
was created if it didn't support user namespaces. As of kube 1.33, the supported apiserver version
skew of n-3 guarantees that all supported kubelets are of 1.30 or later, meaning they do this.

Now, we can unconditionally relax PSA policy if a pod is in a user namespace.

This PR reserves older policies default behavior by never relaxing

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2025-10-31 14:08:21 -04:00
Siyuan Zhang
d4c6e0bfd0 change client go default features to versioned
so that their enablement can be consistent with emulated version.

Signed-off-by: Siyuan Zhang <sizhang@google.com>
2025-10-31 10:04:06 -05:00
Kubernetes Prow Robot
4ca91a6542 Merge pull request #134994 from liggitt/drop-strict-cost
Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
2025-10-31 07:38:12 -07:00
Kubernetes Prow Robot
b4d4cc9384 Merge pull request #123642 from aramase/aramase/f/kep_3331_jwks_metrics
Add JWKS fetch metrics for jwt authenticator
2025-10-30 22:42:02 -07:00
Jordan Liggitt
bd11e52bfc Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates 2025-10-31 00:03:42 -04:00
Kubernetes Prow Robot
a13ad97048 Merge pull request #134949 from natasha41575/ippr-ga
Promote InPlacePodVerticalScaling to GA
2025-10-30 20:06:01 -07:00
Kubernetes Prow Robot
1ffcea577b Merge pull request #134984 from michaelasp/crdObsGeneration
Add ObservedGeneration to CRD conditions
2025-10-30 16:22:02 -07:00
Michael Aspinwall
cde15e6450 Add ObservedGeneration to CRD conditions 2025-10-30 22:30:01 +00:00
Kubernetes Prow Robot
fb69410824 Merge pull request #133980 from siyuanfoundation/min-compat
[KEP-4330] add min-compatibility-version to control plane.
2025-10-30 13:16:03 -07:00
Kubernetes Prow Robot
31f83cdf2b Merge pull request #134647 from torredil/kadane-6123912
Enable `MutableCSINodeAllocatableCount` by default in Beta
2025-10-30 11:50:03 -07:00
Siyuan Zhang
67143028e7 Add --min-compatibility flag.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
2025-10-30 13:36:38 -05:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2
SVM: bump the API to beta, remove unused fields
2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
2025-10-29 19:36:11 +00:00
Anish Ramasekar
24a53fa638 add JWKS fetch metrics for jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-10-29 11:42:40 -07:00
Natasha Sarkar
d2f780e277 promote ippr to ga 2025-10-29 16:01:21 +00:00
Natasha Sarkar
21c832b47d promote pod generation to GA 2025-10-29 15:52:17 +00:00
Kubernetes Prow Robot
0b90cb5e5a Merge pull request #134493 from adrianmoisey/promote-kep-5311-to-beta
Promote KEP-5311 (Relaxed validation for Services names) to beta
2025-10-28 17:04:00 -07:00
Kubernetes Prow Robot
d5efbf2ebf Merge pull request #134452 from pohly/dra-ga-feature-gate
DRA: lock to default-on
2025-10-28 07:49:36 -07:00
Kubernetes Prow Robot
f051670a47 Merge pull request #133087 from atiratree/terminating-replicas-beta
promote DeploymentReplicaSetTerminatingReplicas to Beta
2025-10-27 04:47:37 -07:00
Kubernetes Prow Robot
59616d50fd Merge pull request #134691 from SergeyKanzhelev/watchdogIsGA
Lock SystemdWatchdog feature gate
2025-10-27 03:43:37 -07:00
Kubernetes Prow Robot
1135d04f1d Merge pull request #134826 from aramase/aramase/f/kep_5538_beta_impl
CSI driver opt-in for service account tokens via secrets field
2025-10-24 13:57:35 -07:00
Patrick Ohly
8b6f98b06e DRA: lock to default-on
The core functionality was enabled by default in 1.34 without any issues that
would have suggested turning it off, so now we can lock it to on-by-default.

Tests which cover disabling the feature must use version emulation.
2025-10-24 20:04:20 +02:00
Anish Ramasekar
30a6d4b389 Add CSI driver opt-in for service account tokens via secrets field
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-10-24 11:04:02 -07:00
Dan Winship
715228f478 Remove LoadBalancerIPMode feature gate 2025-10-24 09:12:03 -04:00
Dan Winship
b5297b18ab Remove AllowServiceLBStatusOnNonLB feature gate 2025-10-24 09:12:01 -04:00
Kubernetes Prow Robot
6652c9fadf Merge pull request #134457 from danwinship/prefersamenode
KEP-3015: update PreferSameTrafficDistribution to GA
2025-10-23 14:41:33 -07:00
Kubernetes Prow Robot
d8a53105dd Merge pull request #134631 from yuanwang04/restart-rules
Promote ContainerRestartRules to beta
2025-10-21 19:44:44 -07:00
Yuan Wang
f2a4ffd5b8 Promote ContainerRestartRules to beta
Fix prober not running properly with containerRestartRules and add unit test coverage
2025-10-21 23:58:39 +00:00
Sean Sullivan
413c34f319 Added feature gate and tests 2025-10-21 20:31:24 +00:00
HirazawaUi
ba6074dd0b Promote HostnameOverride feature gate to beta stage 2025-10-20 20:22:39 +08:00
Kubernetes Prow Robot
76f5a1c8c2 Merge pull request #134635 from vivzbansal/execprobe1
Locked the (generally available) feature gate `ExecProbeTimeout` to true.
2025-10-17 18:06:40 -07:00
Vivek Bansal
af17392630 Setting the default feature-gate ExecProbeTimeout value to TRUE 2025-10-17 18:38:05 +00:00
Sergey Kanzhelev
9864c29861 Lock SystemdWatchdog feature gate 2025-10-17 17:50:41 +00:00
Kubernetes Prow Robot
7af016ec31 Merge pull request #133153 from helayoty/helayoty/enable-beta-maxUnavailable
Update MaxUnavailableStatefulSet feature gate to beta
2025-10-16 12:04:50 -07:00
Kubernetes Prow Robot
50e3cb3f58 Merge pull request #133128 from jm-franc/set-gate-to-beta
Promote HPAConfigurableTolerance gate to beta
2025-10-16 12:04:43 -07:00
Eddie Torres
bec583bc3d Enable MutableCSINodeAllocatableCount by default in Beta
Signed-off-by: Eddie Torres <torredil@amazon.com>
2025-10-16 13:21:22 +00:00
Tim Allclair
36e3a8f269 Record and require all kube-feature dependencies 2025-10-15 10:29:15 -07:00
Kubernetes Prow Robot
b35220c725 Merge pull request #134608 from tallclair/disable-allocator-dual-write-2
Fix DisableAllocatorDualWrite dependency on MultiCIDRServiceAllocator
2025-10-15 01:53:41 -07:00
Tim Allclair
bf88ae7d73 Fix DisableAllocatorDualWrite dependency on MultiCIDRServiceAllocator 2025-10-14 17:22:19 -07:00