github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 22:40:35 +00:00
Code Issues Projects Releases Wiki Activity
134,041 Commits 42 Branches 9,765 Tags
6232175b94d57ff9da0cf2530f554cbfdbdca7dc
Commit Graph

2080 Commits

Author SHA1 Message Date
Richa Banker
8f2c0a9a60 kube-apiserver: Enable peer proxy and peer-aggregated discovery 
Wire up peer proxy infrastructure in kube-apiserver:
- Add UnknownVersionInteroperabilityProxy feature gate
- Configure peer proxy with identity lease selectors
- Register CRD and APIService informers with exclusion filters
- Start peer discovery sync and GV cleanup workers

Includes extractors for CRDs and APIServices to identify which
GroupVersions should be excluded from peer discovery.

Part of KEP-4020: Unknown Version Interoperability Proxy
 2025-11-06 12:48:19 -08:00
Kubernetes Prow Robot
171d2dacd2 Merge pull request #134893 from HirazawaUi/kep-5607 
KEP-5607: Allow hostNetwork pods to use user namespace
 2025-11-06 12:43:15 -08:00
Kubernetes Prow Robot
ee0485adb9 Merge pull request #134736 from haircommander/4210-ga 
features: bump image gc max age feature to stable
 2025-11-06 12:43:07 -08:00
Kubernetes Prow Robot
5ac53d43a7 Merge pull request #135158 from andrewsykim/pod-topology-admission-beta 
Graduate PodTopologyLabelsAdmission feature gate to Beta and on by default
 2025-11-06 11:51:06 -08:00
Kubernetes Prow Robot
5815405389 Merge pull request #135044 from hankfreund/clb_fg 
Set KubeletCrashLoopBackOffMax feature gate to default enabled for beta.
 2025-11-06 11:50:59 -08:00
Kubernetes Prow Robot
566525725d Merge pull request #131220 from lukasmetzner/feat-ccm-watch-based-route-controller 
feat(ccm): watch-based route controller reconciliation
 2025-11-06 10:06:53 -08:00
HirazawaUi
e986000e6a KEP-5607: Allow hostNetwork pods to use user namespaces 2025-11-06 22:45:36 +08:00
Andrew Sy Kim
54702182c2 graduate PodTopologyLabelsAdmission feature gate to Beta and on by default 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2025-11-06 14:42:32 +00:00
Maciej Skoczeń
b6006528e1 Add feature gates 2025-11-06 09:36:08 +00:00
Kubernetes Prow Robot
326ce8b16d Merge pull request #134339 from huww98/mutable-pv-affinity 
KEP-5381: mutable pv nodeAffinity
 2025-11-06 01:33:11 -08:00
Kubernetes Prow Robot
b869afe68d Merge pull request #133389 from pravk03/node-capabilities 
Introduce node declared features framework
 2025-11-06 01:32:54 -08:00
胡玮文
b622363659 add feature gate MutablePVNodeAffinity 2025-11-06 14:31:55 +08:00
Kubernetes Prow Robot
ca03752ee7 Merge pull request #135104 from mimowo/mutable-job-directives 
Allow mutable job scheduling directives on suspended Jobs
 2025-11-05 21:57:11 -08:00
Kubernetes Prow Robot
0decbf4405 Merge pull request #134414 from HirazawaUi/promote-3721-to-beta 
KEP-3721: Promote EnvFiles feature gate to Beta
 2025-11-05 21:56:50 -08:00
Kubernetes Prow Robot
c35cd16295 Merge pull request #135088 from everpeace/KEP-3619-GA 
KEP-3619: Promote SupplementalGroupspolicy feature To GA
 2025-11-05 18:53:05 -08:00
Kubernetes Prow Robot
f025bcace9 Merge pull request #135068 from pohly/dra-device-taints-1.35-full 
DRA device taint eviction: several improvements
 2025-11-05 18:52:58 -08:00
HirazawaUi
879d81ff06 promote EnvFiles to beta 2025-11-06 09:17:42 +08:00
Praveen Krishna
c9327d00b1 feat: Add NodeDeclaredFeatures feature gate and API fields. 2025-11-06 00:50:02 +00:00
Michał Woźniak
5a7c90fb76 Allow mutable scheduling directives for suspended Jobs 2025-11-05 19:37:33 +00:00
Kubernetes Prow Robot
36622966a8 Merge pull request #132441 from kannon92/poc-job-relax-pod-template 
[KEP-5440]: MutablePodResourcesForSuspendedJobs
 2025-11-05 11:26:50 -08:00
Patrick Ohly
eaee6b6bce DRA device taints: add separate feature gate for rules 
Support for DeviceTaintRules depends on a significant amount of
additional code:
- ResourceSlice tracker is a NOP without it.
- Additional informers and corresponding permissions in scheduler and controller.
- Controller code for handling status.

Not all users necessarily need DeviceTaintRules, so adding a second feature
gate for that code makes it possible to limit the blast radius of bugs in that
code without having to turn off device taints and tolerations entirely.
 2025-11-05 20:03:17 +01:00
Kubernetes Prow Robot
3395c5358c Merge pull request #135012 from gnufied/volume-limits-redux-cas 
Do not schedule pods to a node without CSI driver
 2025-11-05 09:42:58 -08:00
Kubernetes Prow Robot
6bcac876f8 Merge pull request #134230 from Jefftree/agg-v2beta1-lock 
Lock AggregatedDiscoveryRemoveBetaType to true
 2025-11-05 09:42:51 -08:00
Kevin Hannon
7db5311952 feat: Add MutablePodResourcesForSuspendedJobs feature gate 
- Add feature gate to control mutable pod resources for suspended jobs
- Implement validatePodResourceUpdatesOnly function to allow only container resource updates
- Allow resource updates for suspended jobs regardless of whether they have started
- Add comprehensive unit and integration tests for all scenarios including started-then-suspended
- Ensure backward compatibility when feature gate is disabled

This enables users to update container resources on suspended jobs, including jobs that
have previously started and been suspended, while maintaining immutability for all other
pod template fields.
 2025-11-05 10:38:05 -05:00
Kubernetes Prow Robot
0452b0aec7 Merge pull request #134746 from HirazawaUi/fix-restart-kubelet-1 
KEP-4781: Restarting kubelet does not change pod status
 2025-11-05 01:48:52 -08:00
Kubernetes Prow Robot
22d41b5443 Merge pull request #135059 from macsko/reenable_async_api_calls 
Re-enable SchedulerAsyncAPICalls feature in v1.35
 2025-11-04 20:56:04 -08:00
Shingo Omura
d12663248d KEP-3619: fix removal version for SupplementalGroupsPolicy feature 2025-11-05 09:21:24 +09:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation 
KEP-5284: Implement Constrained Impersonation
 2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga 
KEP-4368: Job Managed By; Promote to GA
 2025-11-04 13:42:12 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
 2025-11-04 16:30:49 -05:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta 
Promote Pod Certificates feature to beta
 2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
af70ebcbf5 Merge pull request #132157 from haircommander/drop-userns-psa 
drop UserNamespacesPodSecurityStandards feature gate
 2025-11-04 08:20:08 -08:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA 
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
 2025-11-04 10:59:45 +01:00
Shingo Omura
b3aeead3e2 KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default 2025-11-04 16:44:57 +09:00
Kubernetes Prow Robot
48c56e04e0 Merge pull request #135017 from liggitt/stateful-set-noop-rollout 
Fix spurious statefulset rollout from 1.33 → 1.34
 2025-11-03 19:58:11 -08:00
Jordan Liggitt
979c442774 Fix spurious workload rollout due to null creationTimestamp in controller revisions 2025-11-03 17:11:06 -05:00
Hank Freund
96edaa43d2 Set KubeletCrashLoopBackOffMax feature gate to default enabled for beta. 2025-11-03 17:30:17 +00:00
Jefftree
762b458700 Lock AggregatedDiscoveryRemoveBetaType to true 2025-11-03 14:56:36 +00:00
Maciej Skoczeń
363407c500 Re-enable SchedulerAsyncAPICalls feature in v1.35 2025-11-03 14:11:04 +00:00
tinatingyu
59e075e8d3 Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
lukasmetzner
956964d6e5 fix: register feature gate dependencies 2025-11-01 11:10:17 +01:00
lukasmetzner
806cf9ef51 style: alphabetic ordering 2025-11-01 10:59:37 +01:00
lukasmetzner
abf60333ad feat: add feature gate to kube features 2025-11-01 10:59:37 +01:00
Hemant Kumar
85d7626d2d Do not schedule pods if CSI driver is not ready 2025-10-31 15:09:03 -04:00
Peter Hunt
e8bd3f629d drop UserNamespacesPodSecurityStandards feature gate 
this feature gate was meant to be ephemeral, and only was used for guaranteeing a
cluster admin didn't accidentally relax PSA policies before the kubelet would deny a pod
was created if it didn't support user namespaces. As of kube 1.33, the supported apiserver version
skew of n-3 guarantees that all supported kubelets are of 1.30 or later, meaning they do this.

Now, we can unconditionally relax PSA policy if a pod is in a user namespace.

This PR reserves older policies default behavior by never relaxing

Signed-off-by: Peter Hunt <pehunt@redhat.com>
 2025-10-31 14:08:21 -04:00
Siyuan Zhang
d4c6e0bfd0 change client go default features to versioned 
so that their enablement can be consistent with emulated version.

Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-31 10:04:06 -05:00
Kubernetes Prow Robot
4ca91a6542 Merge pull request #134994 from liggitt/drop-strict-cost 
Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
 2025-10-31 07:38:12 -07:00
Kubernetes Prow Robot
b4d4cc9384 Merge pull request #123642 from aramase/aramase/f/kep_3331_jwks_metrics 
Add JWKS fetch metrics for jwt authenticator
 2025-10-30 22:42:02 -07:00
Jordan Liggitt
bd11e52bfc Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates 2025-10-31 00:03:42 -04:00
Kubernetes Prow Robot
a13ad97048 Merge pull request #134949 from natasha41575/ippr-ga 
Promote InPlacePodVerticalScaling to GA
 2025-10-30 20:06:01 -07:00