Commit graph

4331 commits

Author SHA1 Message Date
darshansreenivas
cbde2bfb67 Enable DV for flowcontrol FlowSchema User.Name 2026-05-10 08:17:43 -07:00
Yongrui Lin
3577cbda2f pkg/api/testing: record observed rules during DV equivalence tests
VerifyValidationEquivalence's all-rules-enforced subtest now extracts
the GVK from the request context and forwards each error to
coverage.RecordObservedRules so AssertDeclarativeCoverage (in the
generated TestMain) can confirm every declared rule fired.
2026-05-09 18:59:16 +00:00
Lalit Chauhan
a1a5b10127 Address comments 2026-05-02 00:09:59 +00:00
Lalit Chauhan
68ad19102c Fix testing utils 2026-05-02 00:09:59 +00:00
Joe Betz
1fafa91da4
Consolidate DeclarativeValidationStrategy interface 2026-04-27 19:26:25 -04:00
Joe Betz
30c76c1879
Make declarative validation part of strategies 2026-04-24 12:00:41 -04:00
Kubernetes Prow Robot
b36864202b
Merge pull request #137755 from HirazawaUi/remove-SidecarContainers-feature-gate
Remove SidecarContainers feature gate
2026-04-23 08:16:45 +05:30
Junya Okabe
d371af5657
Fix ImageVolume validation for empty reference in Pod templates (#135989)
* fix validation

* fix(validation): use ratcheting validation for empty image volume reference
2026-04-23 03:19:30 +05:30
Kubernetes Prow Robot
cbd6fe51c9
Merge pull request #135336 from carlory/clean-AnyVolumeDataSource
[1.37] Remove feature gate AnyVolumeDataSource
2026-04-23 03:18:57 +05:30
Antoni Zawodny
59c9f75133 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
Co-authored-by: Omar Sayed <omarsayed@google.com>
2026-03-24 09:03:50 +01:00
carlory
9a1b8cbe49 Remove feature gate AnyVolumeDataSource
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-03-23 16:38:07 +08:00
Nour
29601b8628
Add ResourcePoolStatusRequest API types and generated code
Introduce the ResourcePoolStatusRequest resource type in the
resource.k8s.io/v1alpha3 API group, gated behind the
DRAResourcePoolStatus feature gate. This includes external and internal
type definitions, protobuf/OpenAPI generated code, client-go typed
clients, informers, listers, apply configurations, deepcopy, defaults,
conversion, fuzzer, declarative validation tags, and API discovery
metadata.
2026-03-19 16:49:56 +02:00
HirazawaUi
964d79dd6e Remove SidecarContainers feature gate 2026-03-19 15:56:47 +08:00
Praveen Krishna
6b83eef7a2 Add pod Status and ResourceSlice API validation 2026-03-18 19:20:10 +00:00
Kubernetes Prow Robot
a1293fe6b1
Merge pull request #137836 from BenTheElder/fix-api
Fix API serialization compatibility regression in VolumeMountStatus
2026-03-18 08:23:46 +05:30
Benjamin Elder
f6d42d302b make VolumeMountStatus.VolumeStatus a pointer to preserve serialization compatibility 2026-03-17 17:37:23 -07:00
Kubernetes Prow Robot
547b17cc13
Merge pull request #137293 from adrianmoisey/adrian-kep-5707
KEP-5707: Deprecate Service.spec.externalIPs
2026-03-18 05:19:54 +05:30
Kubernetes Prow Robot
5f94c5bb7d
Merge pull request #137458 from natasha41575/tighten-initctr-validation
[InPlacePodVerticalScaling] validate initContainer restart policy against container resize policy
2026-03-18 00:47:39 +05:30
Natasha Sarkar
926e9fc8b2 validate container restart policy against container resize policy 2026-03-17 18:22:43 +00:00
Kubernetes Prow Robot
41451cb954
Merge pull request #137735 from tosi3k/drop-scheduling-v1alpha1
Remove v1alpha1 scheduling API from the API defaulting test
2026-03-16 22:23:54 +05:30
Antoni Zawodny
d879ee4761 Remove v1alpha1 scheduling API from the API defaulting test 2026-03-14 08:46:57 +01:00
Peter Hunt
539352eddd feature: promote ProcMountType to GA
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2026-03-13 12:27:16 -04:00
Kubernetes Prow Robot
4e2bbc78bf
Merge pull request #137170 from pohly/dra-device-taints-beta
DRA device taints: graduate to beta
2026-03-13 00:13:38 +05:30
Patrick Ohly
566dc7f3f3 DRA device taints: graduate to beta
The fields become beta, enabled by default. DeviceTaintRule gets
added to the v1beta2 API, but support for it must remain off by default
because that API group is also off by default.

The v1beta1 API is left unchanged. No-one should be using it
anymore (deprecated in 1.33, could be removed now if it wasn't for
reading old objects and version emulation).

To achieve consistent validation, declarative validation must be enabled also
for v1alpha3 (was already enabled for other versions). Otherwise,
TestVersionedValidationByFuzzing fails:

    --- FAIL: TestVersionedValidationByFuzzing (0.09s)
        --- FAIL: TestVersionedValidationByFuzzing/resource.k8s.io/v1beta2,_Kind=DeviceTaintRule (0.00s)
            validation_test.go:109: different error count (0 vs. 1)
                resource.k8s.io/v1alpha3: <no errors>
                resource.k8s.io/v1beta2: "spec.taint.effect: Unsupported value: \"幤HxÒQP¹¬永唂ȳ垞ş]嘨鶊\": supported values: \"NoExecute\", \"NoSchedule\", \"None\""
            ...
2026-03-12 18:26:02 +01:00
Kubernetes Prow Robot
f7f694e5e0
Merge pull request #136792 from rata/userns-goes-ga
feature: Migrate UserNamespacesSupport to GA
2026-03-12 21:57:36 +05:30
Rodrigo Campos
527aa66124 feature: Move UserNamespacesSupport to GA
Signed-off-by: Rodrigo Campos <rodrigo@amutable.com>
2026-03-12 15:20:02 +01:00
Kubernetes Prow Robot
d729528df4
Merge pull request #136711 from saschagrunert/graduate-image-volume-ga
[KEP-4639]: Graduate ImageVolume to GA
2026-03-12 00:45:43 +05:30
Yuan Wang
99f9875dd2 Add unit test for immutable restart policy rules 2026-03-10 20:46:09 +00:00
Antoni Zawodny
3f094dc228
Create Workload API v1alpha2 (#136976)
* Drop WorkloadRef field and introduce SchedulingGroup field in Pod API

* Introduce v1alpha2 Workload and PodGroup APIs, drop v1alpha1 Workload API

Co-authored-by: yongruilin <yongrlin@outlook.com>

* Run hack/update-codegen.sh

* Adjust kube-scheduler code and integration tests to v1alpha2 API

* Drop v1alpha1 scheduling API group and run make update

---------

Co-authored-by: yongruilin <yongrlin@outlook.com>
2026-03-10 07:59:10 +05:30
Kubernetes Prow Robot
8275484dcf
Merge pull request #137297 from atombrella/feature/pkg_forvar_modernize
Remove redundant variable re-assignment in for-loops under pkg
2026-03-05 00:28:20 +05:30
Kubernetes Prow Robot
4dd6454b02
Merge pull request #137275 from yongruilin/vg_emulation-version-test
Add WithMinEmulationVersion option to DV validation test suit
2026-03-04 00:11:32 +05:30
Kubernetes Prow Robot
be6162afb8
Merge pull request #135196 from harche/i133202
KEP-4680: Add message field support to DRA device health reporting
2026-03-04 00:11:24 +05:30
Kubernetes Prow Robot
5941fed3d6
Merge pull request #136912 from dfajmon/selinux-ga
Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA
2026-03-03 22:07:29 +05:30
Carlos Eduardo Arango Gutierrez
ad6c155449 KEP-4680: Add message field support to DRA device health reporting
Author: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
Co-Authored-By: Harshal Patil <12152047+harche@users.noreply.github.com>

Signed-off-by: Harshal Patil <12152047+harche@users.noreply.github.com>
2026-03-02 11:58:43 -05:00
Mads Jensen
f11bb48738 Remove redundant re-assignment in for-loops under pkg
This the forvar rule from modernize. The semantics of the for-loop
changed from Go 1.22 to make this pattern obsolete.
2026-03-02 08:47:43 +01:00
Adrian Moisey
80c6507cce
KEP-5707: Deprecate Service.spec.externalIPs 2026-03-01 11:49:27 +02:00
Kubernetes Prow Robot
d63c9049c3
Merge pull request #137053 from danwinship/kep-4858-beta
KEP-4858: update StrictIPCIDRValidation to Beta
2026-02-28 00:49:30 +05:30
Daniel Fajmon
b0919d81a0 Promote SELinuxChangePolicy & SELinuxMountReadWriteOncePod to GA 2026-02-27 14:58:14 +01:00
yongruilin
9454a3069b Add WithMinEmulationVersion option to skip hand-written validation sub-test
When a test enables a feature gate introduced after 1.35, the "hand
written validation" sub-test fails because SetFeatureGateEmulationVersionDuringTest
cannot downgrade to 1.35 for features that did not exist at that version.
This adds a WithMinEmulationVersion option so callers can declare the
minimum supported emulation version and skip the sub-test when incompatible.
2026-02-26 21:36:40 +00:00
Your Name
3b5298f0a4 Fix resource claim DV 2026-02-24 18:36:47 +00:00
Your Name
12a6d300c6 Change strategy.go utils to mark handwritten validation errors properly 2026-02-24 18:33:14 +00:00
Lalit Chauhan
b7c4f21d41 promote MutatingAdmissionPolicy to v1: api wiring and validation
- Register v1 MutatingAdmissionPolicy and Binding in apiserver storage.
- Add defaults and validation for v1 types.
- Update storage version hash data.
- Add API testdata.
2026-02-18 17:51:43 +00:00
Dan Winship
08ee348b47 Update the text of the StrictIPCIDRValidation warnings
(It's the future now!)

(These warnings will still be displayed if you update an object that
already contained invalid IPs which you didn't fix.)
2026-02-16 11:04:35 -05:00
Kubernetes Prow Robot
1132395d4a
Merge pull request #136793 from yongruilin/master_vg-strategy-alpha
KEP-5073:  Declarative Validation Lifecycle Update
2026-02-13 07:16:00 +05:30
yongruilin
33dec2246f address feedback: refactor declarative validation migration checks
- Extract HV error filtering into filterHandwrittenErrors for readability.
- Simplify errOutputMatcherByStability initialization in testing helpers.
2026-02-13 00:54:18 +00:00
yongruilin
93b901d177 Enhance validation testing: add support for all declarative rules enforcement 2026-02-13 00:54:18 +00:00
yongruilin
4f56a298cc Enforce zero mismatches in validation equivalence testing 2026-02-13 00:54:18 +00:00
yongruilin
2ef358870a Update validation equivalence testing for lifecycle enforcement
- Test scenarios: Beta Enabled, Beta Disabled, and Legacy (emulated 1.35).
- Remove deprecated Takeover gate references and redundant coverage checks.
- Add TODO to remove legacy emulation in 1.39.
- Update documentation to match the new Validation Lifecycle strategy.
2026-02-13 00:54:18 +00:00
Kubernetes Prow Robot
7f13600dad
Merge pull request #136400 from vinayakankugoyal/gitrepo
KEP:5040 Lock gitRepo Volume Driver to disabled.
2026-02-13 03:58:10 +05:30
Davanum Srinivas
550cc8645b
Move dump package from apimachinery to k8s.io/utils
Replace all imports of k8s.io/apimachinery/pkg/util/dump with
k8s.io/utils/dump across the repo. The apimachinery dump package
now contains deprecated wrapper functions that delegate to
k8s.io/utils/dump for backwards compatibility.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-02-12 07:34:19 -05:00