Commit Graph

3856 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
7a3a6cf4be Merge pull request #136725 from pravk03/native-dra-2
Introduce support of DRA for Native Resources
2026-03-19 03:36:38 +05:30
Praveen Krishna
6b83eef7a2 Add pod Status and ResourceSlice API validation 2026-03-18 19:20:10 +00:00
Joe Betz
15ad8cbb69 Add status field wiping to ServiceCIDR with opt-out FG
# Conflicts:
#	test/compatibility_lifecycle/reference/feature_list.md
#	test/compatibility_lifecycle/reference/versioned_feature_list.yaml
2026-03-18 10:59:54 -04:00
Bartosz
d9da8c7c4a Add scheduling constraints to v1alpha2 pod group api
Add plugin to generate placements based on scheduling constraints

Co-authored-by: Antoni Zawodny <zawodny@google.com>
2026-03-17 13:27:46 +00:00
Kubernetes Prow Robot
9cf54337e4 Merge pull request #137689 from jpbetz/fix-reset-fields-and-test
Test that field wiping and field resetting is applied consistently across API
2026-03-17 07:27:43 +05:30
Kubernetes Prow Robot
8cfc85428a Merge pull request #137678 from aaron-prindle/flowcontrol-discriminator-and-member-dv-migration
feat: flowcontrol LimitResponse and PriorityLevelConfigurationSpec discriminator and member dv migration
2026-03-16 09:15:37 +05:30
Aaron Prindle
ccaab0cfd1 feat: add LimitResponse declarative validation discriminator tags 2026-03-13 13:41:03 -07:00
Aaron Prindle
595da7826c feat: add PriorityLevelConfigurationSpec declarative validation discriminator tags 2026-03-13 13:41:03 -07:00
Aaron Prindle
865ef0ca3e chore: wire up declarative validation for flowcontrol PriorityLevelConfiguration 2026-03-13 13:41:03 -07:00
Kubernetes Prow Robot
2bd6c7fe3c Merge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcut
cri streaming option a hardcut - add new staging repositories `streaming` and `cri-streaming`
2026-03-13 17:23:36 +05:30
Joe Betz
67a23785ee Update reset fields to match current field wiping behavior 2026-03-12 20:49:15 -04:00
Kubernetes Prow Robot
8cca7a629e Merge pull request #137679 from jpbetz/fix-and-test-wiping-reset-consistency
Fix and test wiping reset consistency
2026-03-13 05:15:34 +05:30
Joe Betz
a5a0327d6d Fix test reset fields of servicecidr 2026-03-12 17:43:36 -04:00
Kubernetes Prow Robot
4e2bbc78bf Merge pull request #137170 from pohly/dra-device-taints-beta
DRA device taints: graduate to beta
2026-03-13 00:13:38 +05:30
Patrick Ohly
566dc7f3f3 DRA device taints: graduate to beta
The fields become beta, enabled by default. DeviceTaintRule gets
added to the v1beta2 API, but support for it must remain off by default
because that API group is also off by default.

The v1beta1 API is left unchanged. No-one should be using it
anymore (deprecated in 1.33, could be removed now if it wasn't for
reading old objects and version emulation).

To achieve consistent validation, declarative validation must be enabled also
for v1alpha3 (was already enabled for other versions). Otherwise,
TestVersionedValidationByFuzzing fails:

    --- FAIL: TestVersionedValidationByFuzzing (0.09s)
        --- FAIL: TestVersionedValidationByFuzzing/resource.k8s.io/v1beta2,_Kind=DeviceTaintRule (0.00s)
            validation_test.go:109: different error count (0 vs. 1)
                resource.k8s.io/v1alpha3: <no errors>
                resource.k8s.io/v1beta2: "spec.taint.effect: Unsupported value: \"幤HxÒQP¹¬永唂ȳ垞ş]嘨鶊\": supported values: \"NoExecute\", \"NoSchedule\", \"None\""
            ...
2026-03-12 18:26:02 +01:00
Davanum Srinivas
1ee1ff97fb staging: extract CRI streaming modules with client-go compatibility
Extract streaming code into dedicated staging modules while keeping stable
compatibility APIs for external client-go consumers.

This commit:
- adds `k8s.io/cri-streaming` for CRI exec/attach/portforward server code
- adds `k8s.io/streaming` as the canonical home for shared transport
  primitives (`httpstream`, `spdy`, `wsstream`, runtime helpers)
- switches in-tree transport consumers to `k8s.io/streaming`
- removes in-tree kubelet CRI streaming package
- preserves NO_PROXY/no_proxy CIDR handling in extracted SPDY proxier logic
- adds deprecated `k8s.io/apimachinery/pkg/util/httpstream` compatibility
  wrappers (`httpstream`, `spdy`, `wsstream`) backed by `k8s.io/streaming`
- restores exported client-go SPDY/portforward API signatures to
  apimachinery `httpstream` types for downstream compatibility
- adds streaming-native client-go adapters/constructors so in-tree callers
  can use `k8s.io/streaming` without changing external compatibility APIs
- deduplicates SPDY-over-websocket dial negotiation shared by compat and
  streaming tunneling dialers
- logs dropped unknown stream types in `RemoveStreams` adapter fallbacks to
  improve compatibility-path debuggability
- adds integration coverage for the streaming-upgrader-to-client-go-compat
  adapter path against a real cri-streaming exec endpoint
- clarifies kubectl streaming import aliasing to avoid `httpstream` package
  ambiguity
- updates tests, import restrictions, publishing metadata, and vendor/module
  metadata for the new staging modules

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-03-12 09:59:55 -04:00
Anish Ramasekar
fad6f8df9f Block .static.k8s.io suffix in REST API
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2026-03-11 23:47:55 -07:00
Sean Sullivan
392b5e5c82 Updated proxy handler in kubelet 2026-03-11 16:31:13 +00:00
Kubernetes Prow Robot
d47f3f253b Merge pull request #137343 from gnufied/prevent-podscheduling-optin
Add API changes to prevent pod scheduling via CSIDriver object
2026-03-11 03:53:17 +05:30
Antoni Zawodny
3f094dc228 Create Workload API v1alpha2 (#136976)
* Drop WorkloadRef field and introduce SchedulingGroup field in Pod API

* Introduce v1alpha2 Workload and PodGroup APIs, drop v1alpha1 Workload API

Co-authored-by: yongruilin <yongrlin@outlook.com>

* Run hack/update-codegen.sh

* Adjust kube-scheduler code and integration tests to v1alpha2 API

* Drop v1alpha1 scheduling API group and run make update

---------

Co-authored-by: yongruilin <yongrlin@outlook.com>
2026-03-10 07:59:10 +05:30
Hemant Kumar
e64d62c2ee Update validation tests and add defaulting 2026-03-09 12:55:17 -04:00
Hemant Kumar
e9396eee48 Add a new field in CSIDriver to prevent pod scheduing 2026-03-09 12:55:17 -04:00
Kubernetes Prow Robot
5edd1a9741 Merge pull request #136585 from zhzhuang-zju/job-validation
Improve error message for immutable job.status.startTime
2026-03-06 22:22:19 +05:30
Rita Zhang
c4f88de33e Move DRAAdminAccess feature to GA (#137373)
* Move DRAAdminAccess feature to GA

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

* address comments

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>

---------

Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2026-03-05 23:42:21 +05:30
Kubernetes Prow Robot
8275484dcf Merge pull request #137297 from atombrella/feature/pkg_forvar_modernize
Remove redundant variable re-assignment in for-loops under pkg
2026-03-05 00:28:20 +05:30
zhzhuang-zju
8cd55303b1 fix the misleading error msg when updating job.status.startTime
Signed-off-by: zhzhuang-zju <m17799853869@163.com>
2026-03-04 10:52:59 +08:00
Kubernetes Prow Robot
e08e598df0 Merge pull request #137291 from everettraven/upstream/dv/maxLength-fixup
[Declarative Validation] Bring `k8s:maxLength` tag in line with OpenAPI `maxLength` validation semantics
2026-03-04 05:20:27 +05:30
Kubernetes Prow Robot
13010f06b2 Merge pull request #137167 from pohly/dra-device-taints-update-timestamp
DRA device taints: automatically bump TimeAdded when changing effect
2026-03-03 22:07:37 +05:30
Kubernetes Prow Robot
5941fed3d6 Merge pull request #136912 from dfajmon/selinux-ga
Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA
2026-03-03 22:07:29 +05:30
Bryce Palmer
82d8b65bf0 validation: align handwritten and declarative validations
for the InterfaceName and HardwareAddress fields
and add tests to ensure that if either are changed
to use character-based length counting that a difference
in the validation expectations will be found

Signed-off-by: Bryce Palmer <bpalmer@redhat.com>
2026-03-02 09:48:15 -05:00
Mads Jensen
f11bb48738 Remove redundant re-assignment in for-loops under pkg
This the forvar rule from modernize. The semantics of the for-loop
changed from Go 1.22 to make this pattern obsolete.
2026-03-02 08:47:43 +01:00
Eddie
41bb4b6a8b Promote sig-storage feature MutableCSINodeAllocatableCount to GA (#136230)
* Promote MutableCSINodeAllocatableCount to GA

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Lock MutableCSINodeAllocatableCount feature gate to default

Signed-off-by: Eddie Torres <torredil@amazon.com>

---------

Signed-off-by: Eddie Torres <torredil@amazon.com>
2026-02-28 06:03:30 +05:30
Patrick Ohly
f28dc41392 DRA device taints: automatically bump TimeAdded when changing effect
In practice, TimeAdded is managed by the API server. When admins used
DeviceTaintRule to simulate eviction, then change the effect to really evict,
it is useful to calculate tolerations based on the time when that second
update happened. Therefore the TimeAdded field gets bumped automatically
when changing the effect.
2026-02-27 21:15:27 +01:00
Daniel Fajmon
b0919d81a0 Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA 2026-02-27 14:58:14 +01:00
Kubernetes Prow Robot
887929bb95 Merge pull request #137147 from haojiwu/haoji/fix-issue-136288
Fix RepairIPAddress controller startup failure when namespace informer is not yet synced
2026-02-27 04:13:55 +05:30
Your Name
701db6b6a6 validation-gen: Fix all stable api violations by prefixing +k8s:alpha(since:"1.36") and exclude output_tests from linting 2026-02-25 00:50:31 +00:00
Your Name
7d08854616 Fix lint errors 2026-02-25 00:06:19 +00:00
Kubernetes Prow Robot
87257b7e44 Merge pull request #136630 from lalitc375/dv-testing-utils
validation: add FromImperative field to track source of validation errors
2026-02-25 05:03:33 +05:30
Kubernetes Prow Robot
6457593fdf Merge pull request #136215 from darthsuburbus/dec-validation-ipaddress
ipaddress: migrate parentref validation to DV
2026-02-25 03:05:35 +05:30
Your Name
3b5298f0a4 Fix resource claim DV 2026-02-24 18:36:47 +00:00
Kubernetes Prow Robot
4179ebc3d6 Merge pull request #136822 from itzPranshul/storage-class
Validationo-gen: Migrate handwritten validation to declarative validation in StorageClass
2026-02-24 11:05:34 +05:30
pranshul gupta
c58755863c applying feedback 2026-02-24 09:49:11 +05:30
Abhishek Srivastava
ed083ab6b7 add declarative validation tests for ipaddress 2026-02-22 06:53:56 -08:00
haojiwu
d2b3483523 Update repairip_test.go 2026-02-20 15:56:07 -08:00
haojiwu
73ce1b3a16 Retry RepairIPAddress runOnce() for Forbidden error 2026-02-18 21:40:47 -08:00
Abhishek Srivastava
bc5a776669 add an empty dec validation test for ipaddress 2026-02-18 21:20:40 -08:00
Lalit Chauhan
b7c4f21d41 promote MutatingAdmissionPolicy to v1: api wiring and validation
- Register v1 MutatingAdmissionPolicy and Binding in apiserver storage.
- Add defaults and validation for v1 types.
- Update storage version hash data.
- Add API testdata.
2026-02-18 17:51:43 +00:00
Kubernetes Prow Robot
f067ad1e8f Merge pull request #135715 from darshansreenivas/dtumkur-pr-network-tag-cidr
networkpolicy: migrate ipBlock.cidr validation to DV
2026-02-16 07:01:58 +05:30
darshansreenivas
bc17031d19 network: migrate CIDR validation to DV
Co-authored-by: Abhishek Srivastava <abhishek@asrivas.me>
2026-02-15 16:00:41 -08:00
Kubernetes Prow Robot
574b3aad0f Merge pull request #136998 from yongruilin/master-vg_hpa-ifenable
Migrate HPA MinReplicas to Declarative Validation with Feature Gate Support
2026-02-14 06:59:58 +05:30