Itamar Holder
2c15d3b8e1
Add field wiping and validation logic
...
Signed-off-by: Itamar Holder <iholder@redhat.com>
2025-11-18 14:14:41 +02:00
ndixita
5ac2ffcc1e
Enabling NodeDeclaredFeatures in unit tests
...
Signed-off-by: ndixita <ndixita@google.com>
2025-11-12 08:26:15 +00:00
ndixita
84776abaff
Modifying validation logic and pod strategy for PodResize to accommodate for Pod Level Resources resize
2025-11-11 18:15:22 +00:00
ndixita
69c1fd72aa
API changes for Pod Level IPPR related PodStatus fields
2025-11-11 18:15:17 +00:00
Kubernetes Prow Robot
462ee14a36
Merge pull request #134345 from yuanwang04/restart-pod
...
Implement RestartAllContainers
2025-11-11 07:18:56 -08:00
Heba
aceb89debc
KEP-5471: Extend tolerations operators ( #134665 )
...
* Add numeric operations to tolerations
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
* code review feedback
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
* add default feature gate
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
* Add integration tests
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
* Add toleration value validation
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
* Add validate options for new operators
Signed-off-by: helayoty <heelayot@microsoft.com>
* Remove log
Signed-off-by: helayoty <heelayot@microsoft.com>
* Update feature gate check
Signed-off-by: helayoty <heelayot@microsoft.com>
* emove IsValidNumericString func
Signed-off-by: helayoty <heelayot@microsoft.com>
* Implement IsDecimalInteger
Signed-off-by: helayoty <heelayot@microsoft.com>
* code review feedback
Signed-off-by: helayoty <heelayot@microsoft.com>
* Add logs to v1/toleration
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
Signed-off-by: helayoty <heelayot@microsoft.com>
* Update integration tests and address code review feedback
Signed-off-by: helayoty <heelayot@microsoft.com>
* Add feature gate to the scheduler framework
Signed-off-by: helayoty <heelayot@microsoft.com>
* Remove extra test
Signed-off-by: helayoty <heelayot@microsoft.com>
* Fix integration test
Signed-off-by: helayoty <heelayot@microsoft.com>
* pass feature gate via TolerationsTolerateTaint
Signed-off-by: helayoty <heelayot@microsoft.com>
---------
Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
Signed-off-by: helayoty <heelayot@microsoft.com>
2025-11-10 12:42:54 -08:00
Yuan Wang
aac951d902
Add dependency for NodeDeclaredFeatures
2025-11-10 09:41:02 +00:00
Yuan Wang
97c3f575b9
Refactor validation
2025-11-10 09:41:02 +00:00
Yuan Wang
83c5cd5526
Implement restartPod action
2025-11-10 09:41:02 +00:00
Kubernetes Prow Robot
171d2dacd2
Merge pull request #134893 from HirazawaUi/kep-5607
...
KEP-5607: Allow hostNetwork pods to use user namespace
2025-11-06 12:43:15 -08:00
HirazawaUi
e986000e6a
KEP-5607: Allow hostNetwork pods to use user namespaces
2025-11-06 22:45:36 +08:00
Maciej Skoczeń
9677ac4c0b
api: Add WorkloadReference to Pod spec
2025-11-06 09:36:42 +00:00
Shingo Omura
120bcee057
KE-3619: fix emulation version in unit tests
2025-11-05 09:28:10 +09:00
Shingo Omura
b3aeead3e2
KEP-3617: Graduate SupplementalGroupsPolicy feature gate to GA and lock to default
2025-11-04 16:44:57 +09:00
Kubernetes Prow Robot
a13ad97048
Merge pull request #134949 from natasha41575/ippr-ga
...
Promote InPlacePodVerticalScaling to GA
2025-10-30 20:06:01 -07:00
Natasha Sarkar
1d9c646892
fix unit tests for ippr ga
2025-10-30 17:28:42 +00:00
Natasha Sarkar
4a991bbbd9
fix unit tests for pod gen GA
2025-10-29 16:34:18 +00:00
Patrick Ohly
8b6f98b06e
DRA: lock to default-on
...
The core functionality was enabled by default in 1.34 without any issues that
would have suggested turning it off, so now we can lock it to on-by-default.
Tests which cover disabling the feature must use version emulation.
2025-10-24 20:04:20 +02:00
Tim Allclair
debe026b21
Fix unit tests to work with explicit depndencies
2025-10-15 15:04:26 -07:00
Tim Allclair
4986abe0b8
Automated refactoring to use SetFeatureGatesDuringTest
2025-10-01 21:10:53 -07:00
yliao
34a64db2c7
extended resource backed by DRA: implementation
2025-07-29 18:55:21 +00:00
Rodrigo Campos
5f7e611f73
validation: Return error if hostUsers=false && volumeDevices
...
Now if a pod tries to use user namespaces (hostUsers: false) and a
volume device, it will see this error:
$ kubectl apply -f pod.yaml
...
* spec.ephemeralContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
* spec.initContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
* spec.containers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
Note that if a pod is already created with volumeDevices and userns,
then we allow modifications to that object.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Yuan Wang
af595a44ae
Add container restart rules to API
2025-07-24 16:49:52 +00:00
HirazawaUi
c35e4ad2b2
add codes for drop disabled pod fields
2025-07-23 22:57:12 +08:00
Bing Hongtao
6f3b6b91f0
KEP-3721: Support for env files ( #132626 )
...
* Add FileKeyRef field and struct to the Pod API
* Add the implementation code in the kubelet.
* Add validation code
* Add basic functionality e2e tests
* add codes for drop disabled pod fields
* update go.mod
2025-07-22 13:40:42 -07:00
Kubernetes Prow Robot
cc674e7470
Merge pull request #128010 from ahmedtd/pod-certificates-types
...
Pod Certificates: Preliminary implementation of KEP-4317
2025-07-21 19:26:30 -07:00
Taahir Ahmed
4624cb9bb9
Pod Certificates: Basic implementation
...
* Define feature gate
* Define and serve PodCertificateRequest
* Implement Kubelet projected volume source
* kube-controller-manager GCs PodCertificateRequests
* Add agnhost subcommand that implements a toy signer for testing
Change-Id: Id7ed030d449806410a4fa28aab0f2ce4e01d3b10
2025-07-21 21:49:57 +00:00
Kubernetes Prow Robot
e0f20a38ed
Merge pull request #132912 from natasha41575/obsgen-beta
...
Graduate PodObservedGenerationTracking to beta
2025-07-21 14:14:40 -07:00
Natasha Sarkar
8996e81fc8
fix unit tests
2025-07-21 16:46:07 +00:00
Kubernetes Prow Robot
ade9b7746a
Merge pull request #132595 from AxeZhan/ga3960
...
Graduate PodLifecycleSleepAction to GA
2025-07-19 13:22:39 -07:00
sreeram-venkitesh
00bf3b37a7
Graduate PodLifecycleSleepActionAllowZero to GA
2025-07-18 21:35:58 +05:30
Tim Allclair
5f829195e6
Only warn when AppArmor annotation doesn't match pod field
2025-07-17 14:46:47 -07:00
Tim Allclair
e417232f92
Warn when using AppArmor annotations with a pod field
2025-07-17 14:07:35 -07:00
Tim Allclair
3ecb3d230f
Remove unused appArmor*InUse functions
2025-07-17 14:07:35 -07:00
ylink-lfs
995a7872c5
chore: remove utilpointer usage in pkg/api/pod
2025-07-06 11:34:27 +08:00
AxeZhan
dcbed2fbdc
Graduate PodLifecycleSleepAction to GA
2025-07-02 09:37:14 +08:00
sreeram-venkitesh
f9a5aec318
Added unit tests
2025-06-25 23:59:44 +05:30
sreeram-venkitesh
5390f75360
Added podutil.HasAPIObjectReference to deny admission for static pods referencing API objects
2025-06-25 23:59:26 +05:30
Keita Mochizuki
a3097010fa
Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity ( #129874 )
...
* Change the implementation design of matchLabelKeys in PodTopologySpread to be aligned with PodAffinity
* fix1
2025-05-07 13:01:15 -07:00
Tim Allclair
5928fc0e60
Add ContainerIter utility for ranging over pod containers
2025-04-11 13:36:37 -07:00
Sreeram
0380f2c41c
Validation
2025-03-25 01:58:04 +05:30
Kubernetes Prow Robot
2546557012
Merge pull request #130621 from sreeram-venkitesh/4818-sleep-action-zero-value-beta-graduation
...
KEP 4818: PodLifecycleSleepActionAllowZero to Beta
2025-03-20 13:08:39 -07:00
Kubernetes Prow Robot
451d032915
Merge pull request #130210 from everpeace/KEP-3619-promote-SupplementalGroupsPolicy-to-Beta
...
KEP-3619: Promote SupplementalGroupsPolicy feature to Beta
2025-03-20 11:24:37 -07:00
Sreeram
3043fbc3da
Added feature gate to unit test
2025-03-20 19:36:10 +05:30
Sreeram
c0a1489bc8
Fix unit tests
2025-03-20 19:36:10 +05:30
kerthcet
1a34095f75
KEP-3094 Promote NodeInclusionPolicyInPodTopologySpread to Stable
...
Signed-off-by: kerthcet <kerthcet@gmail.com>
2025-03-20 14:54:42 +08:00
Shingo Omura
eda274ed7e
KEP-3619: merge SupplementalGroupsPolicy dedicated validation tests into standard ones
2025-03-20 13:45:22 +09:00
Tim Allclair
aba588cd14
Deprecate IPPVSAllocatedStatus: always set allocatedResources with InPlacePodVerticalScaling
2025-03-19 16:00:02 -07:00
Kubernetes Prow Robot
f1c634f93e
Merge pull request #130463 from sanposhiho/ga-mlk
...
feat: graduate MatchLabelKeysInPodAffinity to GA
2025-03-19 09:06:31 -07:00
Kensei Nakada
10c6a4258f
feat: graduate MatchLabelKeysInPodAffinity to GA
2025-03-19 23:06:04 +09:00