github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 04:54:54 +00:00
Code Issues Projects Releases Wiki Activity
133,950 Commits 42 Branches 9,765 Tags
326ce8b16d777edcfb3c19c2118ec2860945d4e1
Commit Graph

2066 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
326ce8b16d Merge pull request #134339 from huww98/mutable-pv-affinity 
KEP-5381: mutable pv nodeAffinity
 2025-11-06 01:33:11 -08:00
Kubernetes Prow Robot
b869afe68d Merge pull request #133389 from pravk03/node-capabilities 
Introduce node declared features framework
 2025-11-06 01:32:54 -08:00
胡玮文
b622363659 add feature gate MutablePVNodeAffinity 2025-11-06 14:31:55 +08:00
Kubernetes Prow Robot
ca03752ee7 Merge pull request #135104 from mimowo/mutable-job-directives 
Allow mutable job scheduling directives on suspended Jobs
 2025-11-05 21:57:11 -08:00
Kubernetes Prow Robot
0decbf4405 Merge pull request #134414 from HirazawaUi/promote-3721-to-beta 
KEP-3721: Promote EnvFiles feature gate to Beta
 2025-11-05 21:56:50 -08:00
Kubernetes Prow Robot
c35cd16295 Merge pull request #135088 from everpeace/KEP-3619-GA 
KEP-3619: Promote SupplementalGroupspolicy feature To GA
 2025-11-05 18:53:05 -08:00
Kubernetes Prow Robot
f025bcace9 Merge pull request #135068 from pohly/dra-device-taints-1.35-full 
DRA device taint eviction: several improvements
 2025-11-05 18:52:58 -08:00
HirazawaUi
879d81ff06 promote EnvFiles to beta 2025-11-06 09:17:42 +08:00
Praveen Krishna
c9327d00b1 feat: Add NodeDeclaredFeatures feature gate and API fields. 2025-11-06 00:50:02 +00:00
Michał Woźniak
5a7c90fb76 Allow mutable scheduling directives for suspended Jobs 2025-11-05 19:37:33 +00:00
Kubernetes Prow Robot
36622966a8 Merge pull request #132441 from kannon92/poc-job-relax-pod-template 
[KEP-5440]: MutablePodResourcesForSuspendedJobs
 2025-11-05 11:26:50 -08:00
Patrick Ohly
eaee6b6bce DRA device taints: add separate feature gate for rules 
Support for DeviceTaintRules depends on a significant amount of
additional code:
- ResourceSlice tracker is a NOP without it.
- Additional informers and corresponding permissions in scheduler and controller.
- Controller code for handling status.

Not all users necessarily need DeviceTaintRules, so adding a second feature
gate for that code makes it possible to limit the blast radius of bugs in that
code without having to turn off device taints and tolerations entirely.
 2025-11-05 20:03:17 +01:00
Kubernetes Prow Robot
3395c5358c Merge pull request #135012 from gnufied/volume-limits-redux-cas 
Do not schedule pods to a node without CSI driver
 2025-11-05 09:42:58 -08:00
Kubernetes Prow Robot
6bcac876f8 Merge pull request #134230 from Jefftree/agg-v2beta1-lock 
Lock AggregatedDiscoveryRemoveBetaType to true
 2025-11-05 09:42:51 -08:00
Kevin Hannon
7db5311952 feat: Add MutablePodResourcesForSuspendedJobs feature gate 
- Add feature gate to control mutable pod resources for suspended jobs
- Implement validatePodResourceUpdatesOnly function to allow only container resource updates
- Allow resource updates for suspended jobs regardless of whether they have started
- Add comprehensive unit and integration tests for all scenarios including started-then-suspended
- Ensure backward compatibility when feature gate is disabled

This enables users to update container resources on suspended jobs, including jobs that
have previously started and been suspended, while maintaining immutability for all other
pod template fields.
 2025-11-05 10:38:05 -05:00
Kubernetes Prow Robot
0452b0aec7 Merge pull request #134746 from HirazawaUi/fix-restart-kubelet-1 
KEP-4781: Restarting kubelet does not change pod status
 2025-11-05 01:48:52 -08:00
Kubernetes Prow Robot
22d41b5443 Merge pull request #135059 from macsko/reenable_async_api_calls 
Re-enable SchedulerAsyncAPICalls feature in v1.35
 2025-11-04 20:56:04 -08:00
Shingo Omura
d12663248d KEP-3619: fix removal version for SupplementalGroupsPolicy feature 2025-11-05 09:21:24 +09:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation 
KEP-5284: Implement Constrained Impersonation
 2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga 
KEP-4368: Job Managed By; Promote to GA
 2025-11-04 13:42:12 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
 2025-11-04 16:30:49 -05:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta 
Promote Pod Certificates feature to beta
 2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
af70ebcbf5 Merge pull request #132157 from haircommander/drop-userns-psa 
drop UserNamespacesPodSecurityStandards feature gate
 2025-11-04 08:20:08 -08:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA 
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
 2025-11-04 10:59:45 +01:00
Shingo Omura
b3aeead3e2 KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default 2025-11-04 16:44:57 +09:00
Kubernetes Prow Robot
48c56e04e0 Merge pull request #135017 from liggitt/stateful-set-noop-rollout 
Fix spurious statefulset rollout from 1.33 → 1.34
 2025-11-03 19:58:11 -08:00
Jordan Liggitt
979c442774 Fix spurious workload rollout due to null creationTimestamp in controller revisions 2025-11-03 17:11:06 -05:00
Jefftree
762b458700 Lock AggregatedDiscoveryRemoveBetaType to true 2025-11-03 14:56:36 +00:00
Maciej Skoczeń
363407c500 Re-enable SchedulerAsyncAPICalls feature in v1.35 2025-11-03 14:11:04 +00:00
tinatingyu
59e075e8d3 Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
Hemant Kumar
85d7626d2d Do not schedule pods if CSI driver is not ready 2025-10-31 15:09:03 -04:00
Peter Hunt
e8bd3f629d drop UserNamespacesPodSecurityStandards feature gate 
this feature gate was meant to be ephemeral, and only was used for guaranteeing a
cluster admin didn't accidentally relax PSA policies before the kubelet would deny a pod
was created if it didn't support user namespaces. As of kube 1.33, the supported apiserver version
skew of n-3 guarantees that all supported kubelets are of 1.30 or later, meaning they do this.

Now, we can unconditionally relax PSA policy if a pod is in a user namespace.

This PR reserves older policies default behavior by never relaxing

Signed-off-by: Peter Hunt <pehunt@redhat.com>
 2025-10-31 14:08:21 -04:00
Siyuan Zhang
d4c6e0bfd0 change client go default features to versioned 
so that their enablement can be consistent with emulated version.

Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-31 10:04:06 -05:00
Kubernetes Prow Robot
4ca91a6542 Merge pull request #134994 from liggitt/drop-strict-cost 
Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
 2025-10-31 07:38:12 -07:00
Kubernetes Prow Robot
b4d4cc9384 Merge pull request #123642 from aramase/aramase/f/kep_3331_jwks_metrics 
Add JWKS fetch metrics for jwt authenticator
 2025-10-30 22:42:02 -07:00
Jordan Liggitt
bd11e52bfc Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates 2025-10-31 00:03:42 -04:00
Kubernetes Prow Robot
a13ad97048 Merge pull request #134949 from natasha41575/ippr-ga 
Promote InPlacePodVerticalScaling to GA
 2025-10-30 20:06:01 -07:00
Kubernetes Prow Robot
1ffcea577b Merge pull request #134984 from michaelasp/crdObsGeneration 
Add ObservedGeneration to CRD conditions
 2025-10-30 16:22:02 -07:00
Michael Aspinwall
cde15e6450 Add ObservedGeneration to CRD conditions 2025-10-30 22:30:01 +00:00
Kubernetes Prow Robot
fb69410824 Merge pull request #133980 from siyuanfoundation/min-compat 
[KEP-4330] add min-compatibility-version to control plane.
 2025-10-30 13:16:03 -07:00
Kubernetes Prow Robot
31f83cdf2b Merge pull request #134647 from torredil/kadane-6123912 
Enable `MutableCSINodeAllocatableCount` by default in Beta
 2025-10-30 11:50:03 -07:00
Siyuan Zhang
67143028e7 Add --min-compatibility flag. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-30 13:36:38 -05:00
Hemant Kumar
7bbec73192 Add a interface for sharing CSINode objects between scheduler and CAS 2025-10-30 13:53:10 -04:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2 
SVM: bump the API to beta, remove unused fields
 2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta 
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
 2025-10-29 19:36:11 +00:00
Anish Ramasekar
24a53fa638 add JWKS fetch metrics for jwt authenticator 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2025-10-29 11:42:40 -07:00
Natasha Sarkar
d2f780e277 promote ippr to ga 2025-10-29 16:01:21 +00:00
Natasha Sarkar
21c832b47d promote pod generation to GA 2025-10-29 15:52:17 +00:00
HirazawaUi
9bf2363333 restarting kubelet does not change pod status 2025-10-29 20:25:50 +08:00
Kubernetes Prow Robot
0b90cb5e5a Merge pull request #134493 from adrianmoisey/promote-kep-5311-to-beta 
Promote KEP-5311 (Relaxed validation for Services names) to beta
 2025-10-28 17:04:00 -07:00