Commit graph

2131 commits

Author SHA1 Message Date
Kubernetes Prow Robot
ec2c7739bc
Merge pull request #135808 from tico88612/cleanup/SeparateCacheWatchRPC
SeparateCacheWatchRPC LockToDefault set true
2026-02-13 08:53:59 +05:30
Kubernetes Prow Robot
1132395d4a
Merge pull request #136793 from yongruilin/master_vg-strategy-alpha
KEP-5073:  Declarative Validation Lifecycle Update
2026-02-13 07:16:00 +05:30
yongruilin
0c679cea68 Introduce DeclarativeValidationBeta and deprecate Takeover gate
This change introduces the DeclarativeValidationBeta feature gate in v1.36
as the global safety switch for Beta-stage validation rules and marks
DeclarativeValidationTakeover as deprecated.

Following KEP-5073.
2026-02-13 00:54:11 +00:00
Kubernetes Prow Robot
7f13600dad
Merge pull request #136400 from vinayakankugoyal/gitrepo
KEP:5040 Lock gitRepo Volume Driver to disabled.
2026-02-13 03:58:10 +05:30
Francesco Romani
5a2578ce09 kubelet: promote the CustomCPUCFSQuotaPeriod to GA
Promote the CustomCPUCFSQuotaPeriod gate to GA, turning it enabled by
default. Short history of this feature so far:

As far as git and github history allows to reconstruct, this
feature was introduced without KEP/design doc process (kubernetes 1.12).
It was a double-opt-in feature: users set to first enable a FG to make
the kubelet honor a setting, then change a specific tunable to change
the behavior This is more like a “safeguard” FG
(Other noteworthy examples: `UnauthenticatedHTTP2DOSMitigation` or
`DisableCPUQuotaWithExclusiveCPUs`) rather than a KEP-driven feature gate

Major past events:
- introduced in: https://github.com/kubernetes/kubernetes/pull/63437
- Discussion about adding a FG: https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-387828654
- The change was initially accepted as straightforward, but it was
  later discovered systemd had gaps, and the change was downgraded
  as experimental: https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-391740566
- FG re-introduced because systemd acknowledged and fixed the gap,
  but the systemd rollout would take quite some time:
  https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-407950436

There's a  gap, still relevant in 2026: missing e2e tests to move past alpha:
https://github.com/kubernetes/kubernetes/pull/63437#issuecomment-417674790

Other noteworthy work related to this feature:
- https://github.com/kubernetes/kubernetes/pull/94687
- https://github.com/kubernetes/kubernetes/pull/111520
- https://github.com/kubernetes/kubernetes/pull/129726
- https://github.com/kubernetes/kubernetes/pull/133845

Fix and modernize the related unit tests.

Signed-off-by: Francesco Romani <fromani@redhat.com>

fixup
2026-02-09 08:27:21 +01:00
Francesco Romani
ccb70a6577 kubelet: deprecate DisableCPUQuotaWithExclusiveCPUs
We missed the proper process initially, it should have
been set to deprecated from the beginning, to convey
this is a safety FG for a delicate, long needed fix
rather than a FG for a proper feature

Signed-off-by: Francesco Romani <fromani@redhat.com>
2026-02-09 08:25:56 +01:00
Kubernetes Prow Robot
d863fbe80b
Merge pull request #135335 from carlory/cleanup
[1.36] Remove feature gate HonorPVReclaimPolicy
2026-02-07 06:30:28 +05:30
carlory
4bc5464553
Remove feature gate HonorPVReclaimPolicy
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-02-06 13:31:16 +08:00
Kubernetes Prow Robot
5dd7be6b4f
Merge pull request #136118 from HarshalNeelkamal/ga-external-jwt
Make ExternalServiceAccountTokenSigner GA
2026-02-06 03:16:29 +05:30
HirazawaUi
9703ce508f Lock the DisableNodeKubeProxyVersion feature gate to be enabled by default. 2026-02-04 21:45:15 +08:00
Harshal Neelkamal
754c108b96 Make ExternalServiceAccountTokenSigner GA 2026-02-03 23:47:33 +00:00
Kubernetes Prow Robot
3760cdc64a
Merge pull request #136482 from aaron-prindle/dv-feature-gate-ga
Graduate DeclarativeValidation feature gate to GA
2026-01-30 03:07:48 +05:30
Aaron Prindle
0cab277183 Graduate DeclarativeValidation feature gate to GA
This change graduates the 'DeclarativeValidation' feature gate to GA in v1.36.
The feature gate is now locked to 'true' by default.

Changes:
- Updated 'DeclarativeValidation' feature gate to GA in 'pkg/features/kube_features.go' and 'staging/src/k8s.io/apiserver/pkg/features/kube_features.go'.
- Updated feature gate documentation and versioned lists via 'hack/update-featuregates.sh'.
- Added feature gate emulation versioning to tests that explicitly disable 'DeclarativeValidation' to prevent panics now that the gate is locked to default.
2026-01-29 05:38:20 +00:00
Anish Ramasekar
d6d215821a
Mark CSIServiceAccountTokenSecrets feature gate as GA
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2026-01-28 14:41:34 -06:00
Kubernetes Prow Robot
3dd404d7cd
Merge pull request #136544 from aramase/aramase/c/rm_structured_authz_fg
Drop StructuredAuthorizationConfiguration feature gate
2026-01-27 21:43:52 +05:30
Kubernetes Prow Robot
028015267e
Merge pull request #136116 from vinayakankugoyal/ga
KEP:2862 Graduate to STABLE.
2026-01-27 05:09:49 +05:30
Anish Ramasekar
a1478c7730
Drop StructuredAuthorizationConfiguration feature gate
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2026-01-26 11:35:39 -06:00
Kubernetes Prow Robot
30607b55b4
Merge pull request #136389 from adrianmoisey/promote-kep-5311-to-beta
Promote KEP-5311 (Relaxed validation for Services names) to beta
2026-01-22 18:11:28 +05:30
Vinayak Goyal
cfd7b49484 KEP:5040 Lock gitRepo Volume Driver to disabled. 2026-01-21 21:16:52 -05:00
Kubernetes Prow Robot
97df11dfd1
Merge pull request #136381 from ffromani/remove-memmgr-fg
remove the MemoryManager FG
2026-01-22 04:15:34 +05:30
Adrian Moisey
1b338eec1c
Promote KEP-5311 (Relaxed validation for Services names) to beta 2026-01-21 15:44:21 +02:00
Francesco Romani
078c7dfd90 features: lock TopologyManagerOptions
TopologyManagerOptions went to GA but were not LockedToDefaults
unlike other GA features. Fix that.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2026-01-21 10:56:19 +01:00
Francesco Romani
401a73ceb1 remove the MemoryManager FG
MemoryManager went GA and LockedToDefault in 1.32,
but it seems we forgot to mark the FG for removal.
Enough time (1.36 cycle beginning at time of writing)
has passed, we can remove it.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2026-01-21 10:32:29 +01:00
carlory
c8fc0a1b98 remove CSIMigrationPortworx and InTreePluginPortworxUnregister feature gates
Signed-off-by: carlory <baofa.fan@daocloud.io>
2026-01-19 11:35:29 +08:00
Dan Winship
f278b47ecd Drop TopologyAwareHints and ServiceTraficDistribution feature gates 2026-01-09 12:42:34 -05:00
Vinayak Goyal
28b98aa91d KEP:2862 Graduate to STABLE. 2026-01-08 20:33:18 -05:00
Marek Siarkowicz
fd2083450a Cleanup WatchFromStorageWithoutResourceVersion feature gate 2026-01-07 13:57:11 +01:00
Kubernetes Prow Robot
21f7c3ff68
Merge pull request #135777 from serathius/init-hook-default
Enable WatchCacheInitializationPostStartHook by default
2026-01-07 17:31:46 +05:30
Maciej Skoczeń
4954c5e3b0 Disable SchedulerAsyncAPICalls in v1.35 due to performance issues 2025-12-23 12:34:47 +00:00
ChengHao Yang
23a46c2a3d
SeparateCacheWatchRPC LockToDefault set true
Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2025-12-20 11:43:51 +08:00
Marek Siarkowicz
8b0cdec46b Enable genericfeatures.WatchCacheInitializationPostStartHook as default
Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
2025-12-19 13:48:48 +01:00
carlory
f8e8e55f1d
locked the feature-gate VolumeAttributesClass to default (true) and switch storage version from v1beta1 to v1
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-12-18 15:59:33 +08:00
Kubernetes Prow Robot
53b29512ec
Merge pull request #135515 from dims/add-explicit-type-to-feature-gate-const-declarations
Add explicit type to feature gate const declarations
2025-12-17 22:36:59 -08:00
Kubernetes Prow Robot
e14cdadc5a
Merge pull request #132807 from iholder101/feature/ImageVolumeWithDigest
[KEP-5365] Implement Image Volume with Digest
2025-12-17 16:25:17 -08:00
Davanum Srinivas
594ed6392b
Add explicit type to feature gate const declarations
Two feature gate constants were missing the explicit `featuregate.Feature`
type annotation, making them inconsistent with the rest of the file:
- ChangeContainerStatusOnKubeletRestart
- StatefulSetSemanticRevisionComparison

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-11-29 21:22:23 -05:00
Adrian Moisey
dae1dbc1ff KEP-5311 - Revert RelaxedServiceNameValidation promote to beta 2025-11-27 20:52:35 +09:00
Itamar Holder
277de617bb add the ImageVolumeWithDigest feature gate
Signed-off-by: Itamar Holder <iholder@redhat.com>
2025-11-18 14:14:40 +02:00
bwsalmon
854e67bb51
KEP 5598: Opportunistic Batching (#135231)
* First version of batching w/out signatures.

* First version of pod signatures.

* Integrate batching with signatures.

* Fix merge conflicts.

* Fixes from self-review.

* Test fixes.

* Fix a bug that limited batches to size 2
Also add some new high-level logging and
simplify the pod affinity signature.

* Re-enable batching on perf tests for now.

* fwk.NewStatus(fwk.Success)

* Review feedback.

* Review feedback.

* Comment fix.

* Two plugin specific unit tests.:

* Add cycle state to the sign call, apply to topo spread.
Also add unit tests for several plugi signature
calls.

* Review feedback.

* Switch to distinct stats for hint and store calls.

* Switch signature from string to []byte

* Revert cyclestate in signs. Update node affinity.
Node affinity now sorts all of the various
nested arrays in the structure. CycleState no
longer in signature; revert to signing fewer
cases for pod spread.

* hack/update-vendor.sh

* Disable signatures when extenders are configured.

* Update pkg/scheduler/framework/runtime/batch.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Update staging/src/k8s.io/kube-scheduler/framework/interface.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Review feedback.

* Disable node resource signatures when extended DRA enabled.

* Review feedback.

* Update pkg/scheduler/framework/plugins/imagelocality/image_locality.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Update pkg/scheduler/framework/interface.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Update pkg/scheduler/framework/plugins/nodedeclaredfeatures/nodedeclaredfeatures.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Update pkg/scheduler/framework/runtime/batch.go

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>

* Review feedback.

* Fixes for review suggestions.

* Add integration tests.

* Linter fixes, test fix.

* Whitespace fix.

* Remove broken test.

* Unschedulable test.

* Remove go.mod changes.

---------

Co-authored-by: Maciej Skoczeń <87243939+macsko@users.noreply.github.com>
2025-11-12 21:51:37 -08:00
Kubernetes Prow Robot
9673a7fbf1
Merge pull request #132919 from ndixita/pod-level-in-place-pod-resize
Pod level in place pod resize - alpha
2025-11-12 07:59:41 -08:00
Praveen Krishna
0e883083bf
Add InPlacePodLevelResourcesVerticalScaling declared feature. 2025-11-12 07:22:51 +00:00
ndixita
6d30134256
Adding InPlacePodLevelResourcesVerticalScaling feature gate 2025-11-11 18:12:33 +00:00
Stanislav Láznička
d26b44540e
move Ensure Secret-Pulled Images feature to beta
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-11-11 11:48:35 -05:00
Kubernetes Prow Robot
462ee14a36
Merge pull request #134345 from yuanwang04/restart-pod
Implement RestartAllContainers
2025-11-11 07:18:56 -08:00
Heba
aceb89debc
KEP-5471: Extend tolerations operators (#134665)
* Add numeric operations to tolerations

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>

* code review feedback

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>

* add default feature gate

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>

* Add integration tests

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>

* Add toleration value validation

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>

* Add validate options for new operators

Signed-off-by: helayoty <heelayot@microsoft.com>

* Remove log

Signed-off-by: helayoty <heelayot@microsoft.com>

* Update feature gate check

Signed-off-by: helayoty <heelayot@microsoft.com>

* emove IsValidNumericString func

Signed-off-by: helayoty <heelayot@microsoft.com>

* Implement IsDecimalInteger

Signed-off-by: helayoty <heelayot@microsoft.com>

* code review feedback

Signed-off-by: helayoty <heelayot@microsoft.com>

* Add logs to v1/toleration

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
Signed-off-by: helayoty <heelayot@microsoft.com>

* Update integration tests and address code review feedback

Signed-off-by: helayoty <heelayot@microsoft.com>

* Add feature gate to the scheduler framework

Signed-off-by: helayoty <heelayot@microsoft.com>

* Remove extra test

Signed-off-by: helayoty <heelayot@microsoft.com>

* Fix integration test

Signed-off-by: helayoty <heelayot@microsoft.com>

* pass feature gate via TolerationsTolerateTaint

Signed-off-by: helayoty <heelayot@microsoft.com>

---------

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
Signed-off-by: helayoty <heelayot@microsoft.com>
2025-11-10 12:42:54 -08:00
Yuan Wang
aac951d902 Add dependency for NodeDeclaredFeatures 2025-11-10 09:41:02 +00:00
Yuan Wang
2eb1eeeabf add disruptive tests 2025-11-10 09:41:02 +00:00
Yuan Wang
83c5cd5526 Implement restartPod action 2025-11-10 09:41:02 +00:00
Kubernetes Prow Robot
d777de7741
Merge pull request #135195 from haircommander/image-volume
KEP 4639: Move ImageVolume to on by default beta
2025-11-09 18:34:53 -08:00
Kubernetes Prow Robot
609e2e57da
Merge pull request #135103 from ania-borowiec/nnn_flag
KEP-5278 Promote NominatedNodeNameForExpectation and ClearingNominatedNodeNameAfterBinding feature gates to beta
2025-11-07 07:41:00 -08:00
Ania Borowiec
e6d95a7b38
Promote NominatedNodeNameForExpectation and ClearingNominatedNodeNameAfterBinding feature gates to beta 2025-11-06 22:04:03 +00:00