Commit Graph

4626 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
7f180515d7 Merge pull request #134233 from aaron-prindle/dv-validate-csi-driver-option-support
refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration
2025-09-29 12:20:20 -07:00
Kubernetes Prow Robot
da552ef1d7 Merge pull request #134240 from yongruilin/master_vg_strategy-call
Refactor: Centralize declarative validation logic
2025-09-29 11:30:17 -07:00
yongruilin
9a7e2291d1 refactor: Remove Validate(Update)Declaratively and improve error handling 2025-09-26 17:22:48 +00:00
Joe Betz
d2ec0308c7 simplify scale subresource testing and document expectations
Co-Authored-by: Yongrui Lin <yongrlin@outlook.com>
2025-09-26 17:22:48 +00:00
Kubernetes Prow Robot
0bdf1f89c3 Merge pull request #134279 from yongruilin/master_customunique
feat(validation-gen): Introduce k8s:customUnique to control listmap uniqueness
2025-09-26 10:10:16 -07:00
Aaron Prindle
5119b86966 refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration 2025-09-26 01:42:33 +00:00
Joe Betz
7efc77f493 Apply feedback 2025-09-25 14:51:52 -04:00
yongruilin
7bab54a7c8 emit comment for uniqueness is disabled by k8s:customUnique 2025-09-25 17:37:17 +00:00
Joe Betz
dbe4143de6 generate 2025-09-24 10:00:17 -04:00
Joe Betz
7019a088c3 Add declarative validation tests for ResourceClaim status 2025-09-24 10:00:17 -04:00
Kubernetes Prow Robot
a742db1bf6 Merge pull request #134093 from yongruilin/master_resource_ratcheting
refactor: skip re-validating for unchanged resource claim specs
2025-09-18 15:24:18 -07:00
yongruilin
f8d2df0f74 refactor: skip re-validating for unchanged resource claim specs 2025-09-17 21:47:45 +00:00
Kubernetes Prow Robot
ec4e321f00 Merge pull request #134072 from yongruilin/master_vg_enable-resourceclaim
Enable Declarative Validation for resource.k8s.io v1/v1beta1/v1beta2
2025-09-17 12:50:14 -07:00
Kubernetes Prow Robot
79af149f86 Merge pull request #133850 from yongruilin/vg_error-mismatch
refactor(DRA validation): Add granular controls for declarative validation migration
2025-09-16 15:28:10 -07:00
yongruilin
380c4c222e feat(validation-gen): Add declarative validation support for ResourceClaim/(v1,v1beta1,v1beta2) 2025-09-16 21:36:18 +00:00
Lalit Chauhan
92dcd02459 Add helpers for declarative validation tests
Introduces new testing helpers to simplify testing of declarative validation rules. The new `VerifyValidationEquivalence` and `VerifyUpdateValidationEquivalence` functions reduce boilerplate by encapsulating the logic for:

- Toggling the `DeclarativeValidation` and `DeclarativeValidationTakeover` feature gates.
- Comparing the validation output from the imperative and declarative paths.

The declarative validation tests for CertificateSigningRequest and ReplicationController are updated to use these new, simpler helpers.
2025-09-16 16:57:21 +00:00
yongruilin
4db49d0f4e feat(validation): enhance slice validation with declarative options 2025-09-15 20:35:51 +00:00
Joe Betz
5647c07179 generate
Signed-off-by: Joe Betz <jpbetz@google.com>
2025-09-10 15:52:58 -04:00
Joe Betz
e910c181cb Add model name generator tags
Signed-off-by: Joe Betz <jpbetz@google.com>
2025-09-10 15:52:58 -04:00
Tim Hockin
c4d8c9b544 Re-disable listmap uniqueness (for now) 2025-09-09 22:12:25 +00:00
Tim Hockin
6fb020b194 Temporary: Re-enable listmap uniqueness checks
Testing this exposed a bug -- we do this check for both the field AND
the type when the field is a typedef.  Now fixed to only emit a
uniqueness check at the site where listmap keys are defined.
2025-09-09 22:11:47 +00:00
Tim Hockin
b6fdbe4a6a Emit ratchet check for fields with a type func
This could go inside the type func but then we end up with a double
ratchet sometimes.

Co-Authored-By: Yongrui Lin <yongrlin@outlook.com>
2025-09-09 21:58:55 +00:00
Tim Hockin
3e2e2195ed Unions: replace [2]string with a type 2025-09-09 16:55:11 +00:00
yongruilin
8130cf82b5 run "hack/update-codegen.sh valid" 2025-09-09 16:54:46 +00:00
Tim Hockin
348d576c9f validation: Use JSON names in paths
This ensures that things that parse paths (e.g. to extract the leaf
part) get API-style names.
2025-09-09 16:15:17 +00:00
杨军10092085
62cadde688 Fix incorrect description of feature PodObservedGenerationTracking 2025-09-05 16:22:32 +08:00
Kubernetes Prow Robot
7284237ac4 Merge pull request #133229 from SergeyKanzhelev/fixupTypes
fix up types for 1.34 release - remove GA feature gates
2025-09-02 17:49:19 -07:00
Kubernetes Prow Robot
a6693542b7 Merge pull request #133781 from pohly/test-apiserver-flag-registration
test/integration/apiserver: fix several data races
2025-09-02 13:09:17 -07:00
Patrick Ohly
e32adad657 apiserver: fix PriorityClasses creation data race
As mentioned for SystemPriorityClasses:

     NOTE: be careful not to modify any of elements of the returned array directly.

Create violates that because it temporarily changes the kind during encoding.
This led to a data race in test/integration/apiserver/oidc, found during local
testing.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2025-09-02 21:00:18 +02:00
Joe Betz
b6927088c8 Use consistent documentation of aliases in the API 2025-08-29 15:46:12 -04:00
Kubernetes Prow Robot
6b33567f9b Merge pull request #133684 from soltysh/drop_StatefulSetAutoDeletePVC
Drop StatefulSetAutoDeletePVC after the feature GA-ed in 1.32
2025-08-28 10:49:15 -07:00
Maciej Szulik
09e357d31f Drop StatefulSetAutoDeletePVC after the feature GA-ed in 1.32
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2025-08-28 13:35:16 +02:00
Harry Li
f1ceec70a6 feat(apis/batch): PodFailurePolicyOnPodConditionsPattern.Status can be omitted (#133479)
* feat(apis/batch): PodFailurePolicyOnPodConditionsPattern.Status can be omitted

Signed-off-by: Harry Li <bertram_li@163.com>

* chore: update generated files after API changes

---------

Signed-off-by: Harry Li <bertram_li@163.com>
Co-authored-by: Harry Li <bertram_li@163.com>
2025-08-27 18:30:08 -07:00
PatrickLaabs
62dcfe3bc0 Added WithOrigin within apis/core/validation with adjusted tests 2025-08-01 19:26:20 +02:00
Sunyanan Choochotkaew
59bba92717 KEP-5075: generated codes from make update
Signed-off-by: Sunyanan Choochotkaew <sunyanan.choochotkaew1@ibm.com>
2025-07-30 09:26:52 +09:00
Sunyanan Choochotkaew
5ad969588d KEP-5075: API updates
Signed-off-by: Sunyanan Choochotkaew <sunyanan.choochotkaew1@ibm.com>
2025-07-30 09:26:40 +09:00
yliao
34a64db2c7 extended resource backed by DRA: implementation 2025-07-29 18:55:21 +00:00
yliao
3068b60b83 extended resource backed by DRA: codegen 2025-07-29 17:17:20 +00:00
yliao
1f2fd18ac8 extended resource backed by DRA: API types.go 2025-07-29 17:17:19 +00:00
Kubernetes Prow Robot
fd3c879a5b Merge pull request #132443 from utam0k/clearn-nnn-bind-api
Clear pod.Status.NominatedNodeName when pod is bound
2025-07-29 10:12:26 -07:00
utam0k
60fa65db88 Clear pod.Status.NominatedNodeName when pod is bound
Signed-off-by: utam0k <k0ma@utam0k.jp>
2025-07-29 23:48:11 +09:00
Kubernetes Prow Robot
e2ab840708 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
Implement DRA Device Binding Conditions (KEP-5007)
2025-07-29 07:34:26 -07:00
Kobayashi,Daisuke
ac81b829e4 KEP-5007 DRA Device Binding Conditions: Run make update 2025-07-29 11:34:03 +00:00
Kobayashi,Daisuke
987ad39516 KEP-5007 DRA Device Binding Conditions: API Related code Update 2025-07-29 11:32:47 +00:00
Kobayashi,Daisuke
34c3b09383 KEP-5007 DRA Device Binding Conditions: API Update 2025-07-29 11:31:48 +00:00
Rodrigo Campos
48f8458c41 validation: Fix user-namespaces test case name
hostPath is a supported volume since Kubernetes 1.28. Let's update it.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Rodrigo Campos
50a7a8af4d validation: Align usage of hostUsers in error messages
Other validation errors, like using hostNetwork, don't put
pod.spec.HostNetwork in the error message.

Let's remove align with that.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Rodrigo Campos
5f7e611f73 validation: Return error if hostUsers=false && volumeDevices
Now if a pod tries to use user namespaces (hostUsers: false) and a
volume device, it will see this error:
	$ kubectl apply -f pod.yaml
	...
	* spec.ephemeralContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.initContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.containers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false

Note that if a pod is already created with volumeDevices and userns,
then we allow modifications to that object.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Sergey Kanzhelev
cd4771d737 fix up types for 1.34 release - remove GA feature gates 2025-07-26 00:02:20 +00:00
Kubernetes Prow Robot
b93bcbfba1 Merge pull request #133195 from nojnhuh/dra-ga-comment
Update DRA Pod spec comments
2025-07-25 00:32:35 -07:00