github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-19 07:25:19 +00:00
Code Issues Projects Releases Wiki Activity
135,864 Commits 42 Branches 9,765 Tags
d8f2c00a488aa54939d1fc45ed55f96bc38fa244
Commit Graph

479 Commits

Author SHA1 Message Date
Your Name
dc4b3beeb0 Move storageversionhashdata variables to instance_test.go 
This addresses a PR review comment to clean up storageversionhashdata which is only used in tests by moving its contents directly into the test file where they are used and making them private.
 2026-02-23 22:20:44 +00:00
Jordan Liggitt
2c9ccde2d0 Make quota evaluators in admission conditional on enabled resources 2026-02-20 11:34:33 -05:00
Jordan Liggitt
a64caab38f Make API group enablement accurate for generic API server 2026-02-20 11:34:33 -05:00
Kubernetes Prow Robot
855ee92e19 Merge pull request #133407 from richabanker/mvp-egress-dialer 
Add egress dialer to proxyClientConfig for Mixed Version Proxy
 2026-02-20 01:45:43 +05:30
Richa Banker
50d2f0fce1 Add egress dialer to proxyClientConfig for Mixed Version Prpxy 2026-02-19 10:10:24 -08:00
Lalit Chauhan
b7c4f21d41 promote MutatingAdmissionPolicy to v1: api wiring and validation 
- Register v1 MutatingAdmissionPolicy and Binding in apiserver storage.
- Add defaults and validation for v1 types.
- Update storage version hash data.
- Add API testdata.
 2026-02-18 17:51:43 +00:00
Kubernetes Prow Robot
5b63a8c68e Merge pull request #136921 from dims/dump-from-utils 
Move dump package from apimachinery to k8s.io/utils
 2026-02-12 22:28:10 +05:30
Davanum Srinivas
550cc8645b Move dump package from apimachinery to k8s.io/utils 
Replace all imports of k8s.io/apimachinery/pkg/util/dump with
k8s.io/utils/dump across the repo. The apimachinery dump package
now contains deprecated wrapper functions that delegate to
k8s.io/utils/dump for backwards compatibility.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-02-12 07:34:19 -05:00
Kubernetes Prow Robot
46ac9df8c8 Merge pull request #135675 from richabanker/merged-discovery 
Peer-aggregated discovery: add GV Exclusion Manager
 2026-02-11 06:12:07 +05:30
Richa Banker
f4882eeaa6 Use AddAfter for GV reaping instead of periodic ticker 2026-02-09 19:20:38 -08:00
Richa Banker
d03e9c8708 Use single worker for ActiveGVTracker and Refliter workqueues 2026-02-08 21:30:35 -08:00
Kubernetes Prow Robot
5dd7be6b4f Merge pull request #136118 from HarshalNeelkamal/ga-external-jwt 
Make ExternalServiceAccountTokenSigner GA
 2026-02-06 03:16:29 +05:30
Kubernetes Prow Robot
c4f5cea36b Merge pull request #135746 from richabanker/move-flagz 
Move apiserver's flagz installation to genericapiserver alongside statusz
 2026-02-04 05:32:27 +05:30
Harshal Neelkamal
754c108b96 Make ExternalServiceAccountTokenSigner GA 2026-02-03 23:47:33 +00:00
Bryce Palmer
79aaabb40f bugfix: add loopback certificate expiration health check 
so that configured liveness probes will fail
if the loopback certificate has expired,
forcing a restart.

Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
 2026-02-03 12:31:20 -05:00
Richa Banker
4e47bea7b0 Move flagz installation together with statusz's 2026-01-30 11:25:19 -08:00
Richa Banker
aaed7525dd Consolidate delete handler, reaper logic into same sync loop using the same worker - activeGVQueue 2026-01-21 16:53:28 -08:00
Richa Banker
1713b6d8f2 Wire GVExclusionManager 2026-01-21 15:22:29 -08:00
Kubernetes Prow Robot
f2143d70db Merge pull request #135597 from alvaroaleman/plumb-context 
Service account controller: Wire through context
 2026-01-13 02:15:00 +05:30
Kubernetes Prow Robot
b9d491f56e Merge pull request #134556 from carlory/fix-133160 
lock the feature-gate VolumeAttributesClass to default (true)
 2025-12-18 15:13:17 -08:00
carlory
f8e8e55f1d locked the feature-gate VolumeAttributesClass to default (true) and switch storage version from v1beta1 to v1 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-12-18 15:59:33 +08:00
Kubernetes Prow Robot
508074f023 Merge pull request #135615 from soltysh/drop_autoscaling_v2betaX 
Drop autoscaling v2beta1 and v2beta2
 2025-12-17 23:28:25 -08:00
yliao
3e34de29c4 fixed the loophole that allows user to get around resource quota set by system admin 2025-12-18 00:56:20 +00:00
Maciej Szulik
e347aa994b React to removing autoscaling v2beta1 and v2beta2 
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
 2025-12-05 11:59:30 +01:00
Alvaro Aleman
3d6a5d471f Service account controller: Wire through context 
This change enables structured logging and cancellation in the service
account controller by replacing the usage of context.TODO with an actual
context.
 2025-12-04 19:30:55 -05:00
Richa Banker
8f2c0a9a60 kube-apiserver: Enable peer proxy and peer-aggregated discovery 
Wire up peer proxy infrastructure in kube-apiserver:
- Add UnknownVersionInteroperabilityProxy feature gate
- Configure peer proxy with identity lease selectors
- Register CRD and APIService informers with exclusion filters
- Start peer discovery sync and GV cleanup workers

Includes extractors for CRDs and APIServices to identify which
GroupVersions should be excluded from peer discovery.

Part of KEP-4020: Unknown Version Interoperability Proxy
 2025-11-06 12:48:19 -08:00
Maciej Skoczeń
9639274676 api: Create Workload API 2025-11-06 09:36:43 +00:00
Kubernetes Prow Robot
b869afe68d Merge pull request #133389 from pravk03/node-capabilities 
Introduce node declared features framework
 2025-11-06 01:32:54 -08:00
Praveen Krishna
e7a42e8e8e feat(admission): Add NodeDeclaredFeatures admission plugin 2025-11-06 01:21:17 +00:00
yliao
870062df4f adjusts DRA extended resource quota to include devices usages from regular resource claims 2025-11-05 23:24:24 +00:00
yongruilin
2422bc0bb8 feat: Implement structured /flagz endpoint 2025-11-04 19:45:30 +00:00
Siyuan Zhang
67143028e7 Add --min-compatibility flag. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2025-10-30 13:36:38 -05:00
Kubernetes Prow Robot
3ec2d82da5 Merge pull request #134784 from michaelasp/svm_beta2 
SVM: bump the API to beta, remove unused fields
 2025-10-29 13:56:02 -07:00
Michael Aspinwall
3b72759d1b Update SVM to Beta 
Co-authored-by: Stanislav Láznička <stlaz.devel@proton.me>
 2025-10-29 19:36:11 +00:00
Kubernetes Prow Robot
dab7e3eb06 Merge pull request #134514 from richabanker/preshutdownhook-apiserver-identity 
Improve lifecycle and cleanup for the identity lease controller
 2025-10-28 10:28:10 -07:00
Richa Banker
491f7f9ba8 Add a preshutdownhook to cleanup apisever identity lease 2025-10-23 18:59:52 -07:00
Jordan Liggitt
339dba881f Add synthetic create authz check to pods/exec, pods/attach, pods/portforward 2025-10-21 18:26:06 +00:00
Tim Allclair
36e3a8f269 Record and require all kube-feature dependencies 2025-10-15 10:29:15 -07:00
Kubernetes Prow Robot
3a53784ecb Merge pull request #133876 from kei01234kei/make_v1_version_fist_priotiry_inresource 
make v1 resource version first priority in resource
 2025-10-07 08:55:02 -07:00
Kubernetes Prow Robot
bded66365e Merge pull request #134258 from mayank-agrwl/apiserver-lease-gc 
Make APIServerLeaseGC controller context-aware
 2025-10-01 03:34:17 -07:00
Mayank Agrawal
b0460eedba Make legacytokentracking controller context aware 2025-09-29 21:41:47 -07:00
Mayank Agrawal
2ffc06e09a Make APIServerLeaseGC controller context-aware 2025-09-24 23:11:26 -07:00
Aditi Gupta
f44279647b refactor: Use WaitForNamedCacheSyncWithContext in core components 
Signed-off-by: Aditi Gupta <aditigpta@google.com>
 2025-09-18 11:34:28 -07:00
Jordan Liggitt
55419eca7a Plumb effective version into admission initializer 2025-09-17 15:23:31 -04:00
Kubernetes Prow Robot
26b246ae66 Merge pull request #133191 from Jefftree/rev 
Add jefftree to OWNERS
 2025-09-11 07:06:11 -07:00
Keisuke Ishigami
587f67052d modify api version hash 2025-09-10 09:48:21 +09:00
Marek Siarkowicz
683a76dd15 Enforce that all resources set resourcePrefix 2025-09-04 00:11:15 +02:00
Jefftree
70794c4568 Add newline to fix owners fmt 2025-08-04 19:12:56 +00:00
Jefftree
7242ddd937 Add jefftree to OWNERS 2025-08-04 19:12:13 +00:00
Antonio Ojea
81e680e6d9 defaultservicecidr controller no shutdown eventbroadcaster on start 
The defaultservicecidr controller runs as an apiserver PostStartHook
hence can not block the startup.
The logic of the controller was copied from the common boilerplate and
was assuming the controller blocked on start, hence defering the
shutdown of the eventbroadcaster.

Only shutdown the eventbroadcaster when the context is done.

Change-Id: I70426d5550afe3b12ab5ea68746238dd96f7db52
 2025-07-31 10:58:40 +00:00