github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 20:00:07 +00:00
Code Issues Projects Releases Wiki Activity
131,051 Commits 42 Branches 9,765 Tags
5d20dc55bfdbc48ec371be7b2decf41ea67f1ece
Commit Graph

1894 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
2bdcad7419 Merge pull request #132803 from aramase/aramase/f/token_request_uid_check 
Make kubelet token cache UID-aware to prevent stale tokens after service account recreation
 2025-07-10 22:25:27 -07:00
Anish Ramasekar
45dfb46448 Add TokenRequestServiceAccountUIDValidation feature gate with UID validation 
This change introduces the TokenRequestServiceAccountUIDValidation feature
gate and implements feature-gated service account UID validation for the
TokenRequest API. When enabled, the API validates that the service account
UID in token requests matches the actual service account UID, preventing
token requests for recreated service accounts with the same name but
different UIDs.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2025-07-10 23:20:23 -05:00
Kubernetes Prow Robot
9fbd2dae14 Merge pull request #132339 from adrianmoisey/relaxed-validation-for-services-names 
KEP-5311 Relaxed validation for Services names
 2025-07-08 09:03:26 -07:00
Marek Siarkowicz
799aa8b2a8 Graduate streaming list encoding feature gates 2025-07-01 13:04:40 +02:00
Adrian Moisey
1134220e01 Add RelaxedServiceNameValidation feature gate 2025-06-28 14:06:34 +02:00
Davanum Srinivas
d50e1a684c Ensure all the files have the updated sorting 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-06-27 11:13:50 -04:00
Kubernetes Prow Robot
b7c9333f5c Merge pull request #131837 from sreeram-venkitesh/static-pod-strict-validation-for-api-object-reference 
Deny pod admission for static pods referencing API objects
 2025-06-26 12:18:30 -07:00
Kubernetes Prow Robot
bc8491416d Merge pull request #132487 from macsko/add_schedulerasyncapicalls_feature_flag 
KEP-5229: Add SchedulerAsyncAPICalls feature gate
 2025-06-26 05:54:36 -07:00
sreeram-venkitesh
5390f75360 Added podutil.HasAPIObjectReference to deny admission for static pods referencing API objects 2025-06-25 23:59:26 +05:30
Marek Siarkowicz
ec78b8305a Estimate average size of objects in etcd and plug it into request cost estimator 2025-06-25 17:25:56 +02:00
Maciej Skoczeń
ae13d10195 KEP-5229: Add SchedulerAsyncAPICalls feature gate 2025-06-24 12:41:42 +00:00
Dejan Zele Pejchev
bccc9fe470 KEP-3939: Job Pod Replacement Policy; promote to GA 
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
 2025-06-16 16:26:03 +02:00
Kubernetes Prow Robot
5a0f0f7b2d Merge pull request #122634 from carlory/KEP-3902 
Promote SeparateTaintEvictionController to stable
 2025-06-13 03:28:55 -07:00
carlory
901441c66e Promote SeparateTaintEvictionController to stable 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-06-13 11:15:35 +08:00
Kubernetes Prow Robot
bf84dd0cc9 Merge pull request #132127 from danwinship/kep-3015-to-beta 
KEP-3015: PreferSameTrafficDistribution to Beta
 2025-06-11 22:14:54 -07:00
Kubernetes Prow Robot
5596cc64c2 Merge pull request #131916 from aramase/aramase/f/authn_config_ga 
Mark StructuredAuthenticationConfiguration feature gate as GA
 2025-06-10 16:23:02 -07:00
Kubernetes Prow Robot
b0b28b53e4 Merge pull request #131300 from HarshalNeelkamal/beta-external-jwt 
KEP-740: promote ExternalJWTSigner feature to beta
 2025-06-10 16:22:55 -07:00
Anish Ramasekar
efebfe9e3a Set StructuredAuthenticationConfiguration feature gate to GA in v1.34 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2025-06-10 14:04:28 -07:00
Kubernetes Prow Robot
fa8c5acf5e Merge pull request #131654 from vinayakankugoyal/anonGA 
KEP-4633: Graduate to Stable.
 2025-06-10 12:44:56 -07:00
Kubernetes Prow Robot
4db16edaa8 Merge pull request #132054 from HirazawaUi/promote-4369-to-ga 
[KEP-4369]: Graduate RelaxedEnvironmentVariableValidation to GA
 2025-06-10 11:19:02 -07:00
Vinayak Goyal
26b188aaa8 KEP-4633: Graduate to Stable. 2025-06-10 17:13:15 +00:00
Harshal Neelkamal
0baeccd32f KEP-740: promote ExternalJWTSigner feature to beta 2025-06-10 16:16:13 +00:00
cici37
eb3c9a3184 Promote feature OrderedNamespaceDeletion to GA. 2025-06-10 15:41:50 +00:00
Dan Winship
dacafec88c KEP-3015: PreferSameTrafficDistribution to Beta 2025-06-10 08:46:34 -04:00
HirazawaUi
6a4751da7f Graduate RelaxedEnvironmentVariableValidation Feature gate to GA 2025-06-07 20:32:03 +08:00
Kubernetes Prow Robot
b5504bc2ae Merge pull request #132148 from soltysh/drop_poddisruptionconditions 
KEP-3329: drop PodDisruptionConditions feature gate
 2025-06-06 13:38:45 -07:00
Maciej Szulik
beb86a8391 KEP-3329: drop PodDisruptionConditions feature gate 
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
 2025-06-06 16:15:30 +02:00
Maciej Szulik
b5a8f5d0a5 KEP-3715: drop ElasticIndexedJob feature gate 
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
 2025-06-06 16:08:21 +02:00
Kubernetes Prow Robot
bbb4291153 Merge pull request #132119 from soltysh/drop_statefulsetordinal 
KEP-3335: drop StatefulSetStartOrdinal feature gate
 2025-06-05 15:28:45 -07:00
Maciej Szulik
2bf3d8b733 KEP-3335: drop StatefulSetStartOrdinal feature gate 
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
 2025-06-05 14:02:44 +02:00
Kubernetes Prow Robot
7f50c56b1a Merge pull request #131979 from serathius/watchcache-initialization-ga 
Gradute ResilientWatchCacheInitialization to GA
 2025-06-05 03:02:38 -07:00
Adrian Moisey
0a7d9f9bfd KEP-4427: Promote Relaxed DNS search string validation to GA 2025-05-31 07:45:16 +02:00
Marek Siarkowicz
741d0e2b81 Gradute ResilientWatchCacheInitialization to GA 2025-05-28 11:21:57 +02:00
Kensei Nakada
f694c58c6c feat: graduate QueueingHint to GA 2025-05-26 21:23:46 +02:00
Kubernetes Prow Robot
c96032addd Merge pull request #131318 from aojea/lock_servicecidr 
Lock MultiCIDRServiceAllocator to default and DisableAllocatorDualWrite to GA
 2025-05-13 09:51:28 -07:00
Keita Mochizuki
a3097010fa Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity (#129874) 
* Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity

* fix1
 2025-05-07 13:01:15 -07:00
Antonio Ojea
b2fe862ae3 graduate disableAllocatorDualWrite and lock MultiCIDRServiceAllocator 
Since previous version is already using the new allocator we no longer
need to keep the dual write active to synchronize the new and old
allocators.
 2025-05-06 13:29:45 +00:00
David Eads
660df229bf Stop exposing list-via-watch from the server 
With StreamingCollectionEncodingToJSON and
StreamingCollectionEncodingToProtobuf, the WatchList must re-justify its
necessity.  To prevent an ecosystem from building around a feature that
may not be promoted, we will stop serving list-via-watch until
performance numbers can justify its inclusion.

This also stops the kube-controller-manager from using the
list-via-watch by default.  The fallback is a regular list, so during
the skew during an upgrade the "right" thing will happen and the new
StreamingCollectionEncoding will be used.
 2025-04-18 09:21:23 -04:00
Filip Křepinský
b0b89d3bd2 fix the DeploymentReplicaSetTerminatingReplicas version 2025-03-27 20:28:21 +01:00
Filip Křepinský
8db1426554 rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingReplicas 2025-03-27 20:27:44 +01:00
Kubernetes Prow Robot
ff25881bc1 Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-signals 
KEP 4960: Container Stop Signals
 2025-03-24 16:36:32 -07:00
Kubernetes Prow Robot
34e80be133 Merge pull request #130797 from jm-franc/configurable-tolerance 
Add support for HPA configurable tolerance
 2025-03-24 14:20:32 -07:00
Sreeram
70540c9f43 API changes 2025-03-25 01:56:45 +05:30
Kubernetes Prow Robot
62555cadc7 Merge pull request #130701 from roycaihw/psi-metrics 
Surface Pressure Stall Information (PSI) metrics
 2025-03-24 10:38:33 -07:00
Jean-Marc François
463b15b9b2 Add the HPAConfigurableTolerance feature gate. 2025-03-21 18:48:37 -04:00
carlory
0882efaf8e Remove general available feature-gate CPUManager 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-03-21 10:42:29 +08:00
James Munnelly
a490960c92 fixup! KEP-4742: Node Topology Labels via Downward API 2025-03-20 20:23:19 +00:00
James Munnelly
01ae1b1b5a remove kubernetes.io/hostname label copying 2025-03-20 20:19:53 +00:00
James Munnelly
6ddabb6ee6 updating to reflect latest KEP design 2025-03-20 20:19:53 +00:00
James Munnelly
5e7e1e7cf1 KEP-4742: Node Topology Labels via Downward API 2025-03-20 20:19:51 +00:00