github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-12-03 21:04:47 +00:00
Code Issues Projects Releases Wiki Activity
116,733 Commits 42 Branches 8,286 Tags
9d4b489107ec6b432091065e77af4c34c13f1444
Commit Graph

384 Commits

Author SHA1 Message Date
twelcon
9d4b489107 Renaming restartPolicy to containerRestartPolicy for better calrity 
Signed-off-by: twelcon <mastermind12210@gmail.com>
 2023-06-21 12:33:14 +05:30
twelcon
a609beb6b1 Decline on resizePolicy if the restartPolicy is Never 
Signed-off-by: twelcon <mastermind12210@gmail.com>
 2023-06-20 18:48:47 +05:30
Kubernetes Prow Robot
0bb17a88fa Merge pull request #116741 from gjkim42/promote-expanded-dns-config-to-ga 
Promote ExpandedDNSConfig feature to the GA stage
 2023-05-30 18:19:56 -07:00
aleskandro
4c9887e3eb Updating the nodeAffinity of gated pods having nil affinity should be allowed 2023-05-18 07:44:34 +02:00
Tim Hockin
4bbf611773 Retool validation for pod HostNetwork ports 
This will ensure that HostPort == ContainerPort for pods and that
HostPort == 0 || HostPort == ContainerPort for embedded PodSpecs.
 2023-05-09 18:10:44 -07:00
Tim Hockin
ec3379a717 Do hostNet Pod-ports -> hostPorts in Pod defaults 
Rather than doing it in PodSpec defaulting, which triggers in
Deployments and DaemonSets, do it only when a Pod is actually in play.
 2023-05-09 18:10:20 -07:00
Gunju Kim
b249b4ca9b Promote ExpandedDNSConfig feature to the GA stage 2023-05-04 20:37:10 +09:00
Stephen Kitt
4911e9de4a api: replace intstr.FromInt with intstr.FromInt32 
This touches cases where FromInt() is used on numeric constants, or
values which are already int32s, or int variables which are defined
close by and can be changed to int32s with little impact.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2023-05-01 09:16:15 +02:00
mfordjody
c3384191ea remove validation GCE-ism 
update testing

update testing

update testing

update core and testing

update testing
 2023-04-24 14:27:37 +08:00
vinay kulkarni
0e9dd5c51d Call function that validates in-place vpa resize policy 2023-03-22 16:19:19 +00:00
Rob Scott
9e571c0424 Adding validation for topology annotations 
Change-Id: I50b3b05b859c69e98daca7c8fca0d3a76024eb80
 2023-03-15 18:37:02 +00:00
Kubernetes Prow Robot
9053b5dc2c Merge pull request #116119 from vinaykul/restart-free-pod-vertical-scaling-fixes 
Restructure resize policy naming and set default resize policy values
 2023-03-14 19:26:42 -07:00
Kubernetes Prow Robot
f315a4669a Merge pull request #116576 from pohly/dra-core-validation 
api: extend validation of dynamic resource allocation fields in PodSpec
 2023-03-14 16:34:48 -07:00
Alex Wang
8a1f9f43e6 feat: validate matchLabelKeys when labelSelector isn't set 
Signed-off-by: Alex Wang <wangqingcan1990@gmail.com>
 2023-03-14 22:36:41 +08:00
Patrick Ohly
e97531b349 api: extend validation of dynamic resource allocation fields in PodSpec 
The generated ResourceClaim name and the names of the ResourceClaimTemplate and
ResourceClaim referenced by a pod must be valid according to the resource API,
otherwise the pod cannot start.

Checking this was removed from the original implementation out of concerns
about validating fields in core against limitations imposed by a separate,
alpha API.  But as this was pointed out again in
https://github.com/kubernetes/kubernetes/pull/116254#discussion_r1134010324
it gets added back.

The same strings that worked before still work now. In particular, the
constraints for a spec.resourceClaim.name are still the same (DNS label).
 2023-03-14 11:58:41 +01:00
vinay kulkarni
9a805db010 Set default resize policy only for specified resource types, rename RestartNotRequired -> NotRequired 2023-03-12 23:46:40 +00:00
vinay kulkarni
8b23497ae7 Restructure naming of resource resize restart policy 2023-03-12 23:11:32 +00:00
Daniel Vega-Myhre
86f41dc012 mutable pod scheduling directives 2023-03-10 18:30:09 +00:00
Kubernetes Prow Robot
b4305fcf63 Merge pull request #115391 from haoruan/bugfix/allow-pv-nodeaffinity-to-be-mutable 
allow to mutate pv nodeaffinity label key
 2023-03-06 21:56:17 -08:00
Hao Ruan
c8d10dcaeb allow to mutate pv nodeaffinity label key 2023-03-07 11:16:10 +08:00
Vinay Kulkarni
76962b0fa7 In-place Pod Vertical Scaling - API changes 
1. Define ContainerResizePolicy and add it to Container struct.
 2. Add ResourcesAllocated and Resources fields to ContainerStatus struct.
 3. Define ResourcesResizeStatus and add it to PodStatus struct.
 4. Add InPlacePodVerticalScaling feature gate and drop disabled fields.
 5. ResizePolicy validation & defaulting and Resources mutability for CPU/Memory.
 6. Various fixes from code review feedback (originally committed on Apr 12, 2022)
KEP: /enhancements/keps/sig-node/1287-in-place-update-pod-resources
 2023-02-24 17:18:04 +00:00
Sascha Grunert
0c2136ab54 Graduate DownwardAPIHugePages feature to stable / GA 
This update updates the feature documentation for its GA graduation.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-02-20 09:52:39 +01:00
lianghao208
f09eeaf104 Validating the scheduling gate naming format 2023-02-16 14:56:41 +08:00
Wei Huang
feed8c683d Enforce nodeName cannot be set along with non empty schedulingGates 2023-02-07 13:53:28 -08:00
Kubernetes Prow Robot
7913e135a5 Merge pull request #112925 from SergeyKanzhelev/addValueOfLimitToErr 
added limit value to the pod validation error to simplify debugging
 2023-01-19 11:52:15 -08:00
Kubernetes Prow Robot
bdaa6bb617 Merge pull request #114776 from jsafrane/pv-secret-validation 
Allow SecretReference.Name in PVs to have 253 characters
 2023-01-18 10:54:34 -08:00
Kubernetes Prow Robot
696701b9fd Merge pull request #114086 from xmcqueen/113935 
block ephemeral container addition to static pods
 2023-01-13 07:36:28 -08:00
Kubernetes Prow Robot
ac889a0251 Merge pull request #113581 from aimuz/verify-tls-secret 
Verify that the key matches the cert
 2023-01-04 14:29:58 -08:00
Jan Safranek
e743a6d14d Allow SecretReference.Name in PVs to have 253 characters 
PV.Spec.CSI.*SecretReference.Name should be allowed to have up to be
limited to 253 characters (DNS1123Subdomain) and not to 63 characters
(DNS1123Label), so all possible Secrets names can be used as secrets in a
PV.

This is continuation of
https://github.com/kubernetes/kubernetes/pull/108331 / Kubernetes 1.25,
which allowed updating PVs with long secret names, if the previous PV had
long secret name too. This makes sure downgrade from 1.27 to 1.26 works well
and allows PVs created in 1.27 to be updated in 1.26.

Now the long secret names are accepted during PV creation too.
 2023-01-03 14:35:35 +01:00
Kubernetes Prow Robot
cb03415326 Merge pull request #111802 from maaoBit/fix-labelSelectorValidate-missing 
Validate labelSelector in topologySpreadConstraints
 2022-12-12 18:47:44 -08:00
aimuz
4a7ab7fd75 Verify that the key matches the cert 
Signed-off-by: aimuz <mr.imuz@gmail.com>
 2022-12-13 10:43:58 +08:00
Tim Hockin
d0e2b06850 ServiceExternalTrafficPolicyType: s/Type// 
Rename ServiceExternalTrafficPolicyType => ServiceExternalTrafficPolicy
 2022-12-11 13:48:27 -08:00
Brian McQueen
25e990f738 added validation check to block adding an ephemeral container to a static pod and test cases 2022-12-02 15:39:11 -08:00
maao
a796707396 Validate labelSelector in topologySpreadConstraints 
Signed-off-by: maao <maao420691301@gmail.com>
 2022-11-28 09:46:46 +08:00
Patrick Ohly
7d11b422e3 api: add resource claims to core API 
The resource.k8s.io/ClaimTemplate only gets referenced by name, therefore the
changes to the core API are limited.
 2022-11-10 20:08:24 +01:00
Takafumi Takahashi
87c1ca88d4 Add API and validation for CrossNamespaceVolumeDataSource 2022-11-09 20:58:25 +00:00
Jordan Liggitt
fc69084bf1 Update workload selector validation 2022-11-07 20:52:02 -05:00
Manjusaka
0843c4dfca Add extra value validation for matchExpression field in LabelSelector 2022-11-07 20:48:21 -05:00
Kubernetes Prow Robot
8c77820759 Merge pull request #113274 from Huang-Wei/kep-3521-A 
[KEP-3521] Part 1: New Pod API .spec.schedulingGates
 2022-11-03 21:24:25 -07:00
Wei Huang
7b6293b6b6 APIs, Validation and condition enforcements 
- New API field .spec.schedulingGates
- Validation and drop disabled fields
- Disallow binding a Pod carrying non-nil schedulingGates
- Disallow creating a Pod with non-nil nodeName and non-nil schedulingGates
- Adds a {type:PodScheduled, reason:WaitingForGates} condition if necessary
- New literal SchedulingGated in the STATUS column of `k get pod`
 2022-11-03 14:32:34 -07:00
Andy Voltz
29f4862ed8 Promote ServiceInternalTrafficPolicy to GA 2022-11-03 13:17:03 -04:00
Mark Rossetti
498d065cc5 Promoting WindowsHostProcessContainers to stable 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-01 14:06:25 -07:00
Kubernetes Prow Robot
525280d285 Merge pull request #112643 from SergeyKanzhelev/removeDynamicKubeletConfig 
remove DynamicKubeletConfig feature gate from the code
 2022-10-12 01:33:00 -07:00
Sergey Kanzhelev
3f3bb7fd94 added limit value to the pod validation error to simplify debugging 2022-10-07 20:38:08 +00:00
Sergey Kanzhelev
39e49a91d7 remove DynamicKubeletConfig feature gate from the code 2022-09-23 23:14:19 +00:00
Humble Chirammal
6621db7dd1 fix typos in pkg/validation and test/cmd 
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2022-09-20 19:12:17 +05:30
Kubernetes Prow Robot
4b6134b6dc Merge pull request #111090 from kinvolk/rata/userns-support-2022 
Add support for user namespaces phase 1 (KEP 127)
 2022-08-03 13:05:47 -07:00
Rodrigo Campos
cf8164bccf apis: add validation for HostUsers 
This commit just adds a validation according to KEP-127. We check that
only the supported volumes for phase 1 of the KEP are accepted.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
9e9b23fd3c pkg/apis, staging: add HostUsers to pod spec 
It is used to request that a pod runs in a unique user namespace.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
Co-authored-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2022-08-02 23:47:58 +02:00
Roman Bednar
f051cc7e0e allow pvc spec StorageClass name mutation if the feature is enabled 2022-08-02 20:52:04 +02:00