github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-22 01:23:18 +00:00
Code Issues Projects Releases Wiki Activity
133,071 Commits 42 Branches 9,765 Tags
db63a581ca301281a28fca757dcd37fd4c8cf8bf
Commit Graph

1530 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
db63a581ca Merge pull request #134366 from tallclair/feature-gates-test 
Set multiple feature gates simultaneously in test
 2025-10-13 13:11:33 -07:00
Aaron Prindle
dfd7b230b4 feat: make it so that all ShortCircuit validators are run for short circuiting check 2025-10-07 22:47:42 +00:00
Tim Allclair
4986abe0b8 Automated refactoring to use SetFeatureGatesDuringTest 2025-10-01 21:10:53 -07:00
yongruilin
51f02aa58a fix: Update error origin in ValidateDNS1123Label to use k8s-short-name format 2025-10-01 21:10:07 +00:00
yongruilin
6b11e6433c run update-codegen to for ReplicationController 2025-10-01 20:42:23 +00:00
Tim Hockin
2d48dae391 Eliminate public ValidateReplicationControllerName 
Everyone who referenced it now uses the underlying function.  Clearer
and frees me up to change objectMeta validation without impacting anyone
else.
 2025-10-01 19:45:37 +00:00
Tim Hockin
229c6b13ca Validate ReplicationController.metadata.name 
This relies on `+k8s:subfield` and validation cohorts.  The
`k8s:optional` ensures that we don't run the name validation if name is
empty, because core apimachinery will already flag it as Required().

This demonstrates some of the DV value - docs and clients are now (in
theory) able to see what RC's name format is.

Co-Authored-by: Yongrui Lin <yongrlin@outlook.com>
 2025-10-01 19:45:37 +00:00
Tim Hockin
5d067af5e1 Prefactor: Fix some bad tests 2025-10-01 19:00:30 +00:00
Aaron Prindle
5119b86966 refactor(DRA validation): Add granular controls to ValidateCSIDriverName for declarative validation migration 2025-09-26 01:42:33 +00:00
Tim Hockin
b6fdbe4a6a Emit ratchet check for fields with a type func 
This could go inside the type func but then we end up with a double
ratchet sometimes.

Co-Authored-By: Yongrui Lin <yongrlin@outlook.com>
 2025-09-09 21:58:55 +00:00
yongruilin
8130cf82b5 run "hack/update-codegen.sh valid" 2025-09-09 16:54:46 +00:00
杨军10092085
62cadde688 Fix incorrect description of feature PodObservedGenerationTracking 2025-09-05 16:22:32 +08:00
Kubernetes Prow Robot
7284237ac4 Merge pull request #133229 from SergeyKanzhelev/fixupTypes 
fix up types for 1.34 release - remove GA feature gates
 2025-09-02 17:49:19 -07:00
PatrickLaabs
62dcfe3bc0 Added WithOrigin within apis/core/validation with adjusted tests 2025-08-01 19:26:20 +02:00
yliao
34a64db2c7 extended resource backed by DRA: implementation 2025-07-29 18:55:21 +00:00
yliao
3068b60b83 extended resource backed by DRA: codegen 2025-07-29 17:17:20 +00:00
yliao
1f2fd18ac8 extended resource backed by DRA: API types.go 2025-07-29 17:17:19 +00:00
Kubernetes Prow Robot
fd3c879a5b Merge pull request #132443 from utam0k/clearn-nnn-bind-api 
Clear pod.Status.NominatedNodeName when pod is bound
 2025-07-29 10:12:26 -07:00
utam0k
60fa65db88 Clear pod.Status.NominatedNodeName when pod is bound 
Signed-off-by: utam0k <k0ma@utam0k.jp>
 2025-07-29 23:48:11 +09:00
Rodrigo Campos
48f8458c41 validation: Fix user-namespaces test case name 
hostPath is a supported volume since Kubernetes 1.28. Let's update it.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-07-28 16:54:08 +02:00
Rodrigo Campos
50a7a8af4d validation: Align usage of hostUsers in error messages 
Other validation errors, like using hostNetwork, don't put
pod.spec.HostNetwork in the error message.

Let's remove align with that.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-07-28 16:54:08 +02:00
Rodrigo Campos
5f7e611f73 validation: Return error if hostUsers=false && volumeDevices 
Now if a pod tries to use user namespaces (hostUsers: false) and a
volume device, it will see this error:
	$ kubectl apply -f pod.yaml
	...
	* spec.ephemeralContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.initContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.containers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false

Note that if a pod is already created with volumeDevices and userns,
then we allow modifications to that object.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-07-28 16:54:08 +02:00
Sergey Kanzhelev
cd4771d737 fix up types for 1.34 release - remove GA feature gates 2025-07-26 00:02:20 +00:00
Kubernetes Prow Robot
b93bcbfba1 Merge pull request #133195 from nojnhuh/dra-ga-comment 
Update DRA Pod spec comments
 2025-07-25 00:32:35 -07:00
Kubernetes Prow Robot
3fd1251165 Merge pull request #131089 from KevinTMtz/pod-level-hugepage-cgroups 
[PodLevelResources] Propagate Pod level hugepage cgroup to containers
 2025-07-24 19:08:26 -07:00
Jon Huhn
f1737db166 Update DRA Pod spec comments 2025-07-24 18:58:24 -05:00
Kubernetes Prow Robot
26045b2fab Merge pull request #132642 from yuanwang04/restart-rules 
Implement container restart policy rules
 2025-07-24 16:44:51 -07:00
Kubernetes Prow Robot
7912e5fd67 Merge pull request #131549 from carlory/KEP-3751-GA 
[Kep-3751] Promote VolumeAttributesClass to GA
 2025-07-24 16:44:27 -07:00
Kevin Torres
9f5b09eb7b Unit test pod level hugepage Default and Validation logic 2025-07-24 21:29:04 +00:00
Kevin Torres
845e94d370 Validation logic and Defaulting update for pod level hugepages 
The hugepage aggregated container limits cannot be greater than pod-level limits.

This was already enforced with the defaulted requests from the specfied
limits, however it did not make it clear about both hugepage requests and limits.
 2025-07-24 21:29:01 +00:00
carlory
94bf8fc8a9 Promoted API VolumeAttributesClass and VolumeAttributesClassList to storage.k8s.io/v1. 
Promoted feature-gate `VolumeAttributesClass` to GA (on by default)

Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-07-25 01:53:59 +08:00
Kevin Torres
52b457421a Pod level hugepage cgroup when unset in container 2025-07-24 17:13:39 +00:00
Yuan Wang
af595a44ae Add container restart rules to API 2025-07-24 16:49:52 +00:00
Kubernetes Prow Robot
9adc49ffd4 Merge pull request #133046 from toVersus/reject-windows-in-api-server 
[PodLevelResources] Add validation for Windows OS
 2025-07-23 19:56:33 -07:00
Kubernetes Prow Robot
6ef2215eb7 Merge pull request #132558 from HirazawaUi/Implement-4762 
KEP-4762: Allows setting any FQDN as the pod's hostname
 2025-07-23 16:26:27 -07:00
Kubernetes Prow Robot
041974709c Merge pull request #132106 from AndrewSirenko/vac-valid 
[KEP-3751] Allow PVC VACName to go from non-nil to nil
 2025-07-23 12:52:30 -07:00
Drew Sirenko
f7109ed281 [KEP-3751] Allow PVC VACName to update to nil or empty when status.currentVAC is nil 2025-07-23 10:59:18 -04:00
HirazawaUi
88b7621434 Add validation for the HostnameOverride field. 2025-07-23 22:57:08 +08:00
HirazawaUi
8b3814c4ab Add the HostnameOverride field to the Pod API 2025-07-23 20:28:12 +08:00
Tsubasa Nagasawa
88af8b6060 Add PodLevelResources to the Windows OS limitations in the API doc 2025-07-23 07:08:21 +09:00
Anna Song
e2c308aff9 Check OS for PodLevelResources in API server 
Reject Pod with PodLevelResources in spec if Pod targets Windows OS.
 2025-07-23 07:08:14 +09:00
Bing Hongtao
6f3b6b91f0 KEP-3721: Support for env files (#132626) 
* Add FileKeyRef field and struct to the Pod API

* Add the implementation code in the kubelet.

* Add validation code

* Add basic functionality e2e tests

* add codes for drop disabled pod fields

* update go.mod
 2025-07-22 13:40:42 -07:00
Taahir Ahmed
6d4000f844 Pod Certificates: make update 
Change-Id: Ib258c1f3bf238f41cfa1d6de8e8d0de5b8379a06
 2025-07-21 21:49:57 +00:00
Taahir Ahmed
4624cb9bb9 Pod Certificates: Basic implementation 
* Define feature gate
* Define and serve PodCertificateRequest
* Implement Kubelet projected volume source
* kube-controller-manager GCs PodCertificateRequests
* Add agnhost subcommand that implements a toy signer for testing

Change-Id: Id7ed030d449806410a4fa28aab0f2ce4e01d3b10
 2025-07-21 21:49:57 +00:00
Kubernetes Prow Robot
4a80270b30 Merge pull request #133012 from tallclair/mem-lim-decrease 
[FG:InPlacePodVerticalScaling] Support reducing memory limits
 2025-07-17 17:10:39 -07:00
Kubernetes Prow Robot
99f55ae4ef Merge pull request #132662 from gnufied/bump-recovery-feature-ga 
Bump recovery feature ga
 2025-07-17 17:10:25 -07:00
Tim Allclair
c7a78185c2 Remove the restriction on memory limit decrease 2025-07-17 13:17:35 -07:00
Sunny Song
1745094c40 Update VolumeAttributesClass API Description 2025-07-17 18:40:01 +00:00
Kubernetes Prow Robot
190b3cca2b Merge pull request #132212 from astraw99/fix-sts-validation 
Add validation of `volumeClaimTemplates` in StatefulSet
 2025-07-16 11:04:23 -07:00
astraw99
6e93244532 Add validation of volumeClaimTemplates in StatefulSet 2025-07-16 12:24:35 +08:00