@@ -1259,6 +1259,24 @@ spec:
12591259 signerName :
12601260 description : Kubelet's generated CSRs will be addressed to this signer.
12611261 type : string
1262+ userAnnotations :
1263+ additionalProperties :
1264+ type : string
1265+ description : |-
1266+ userAnnotations allow pod authors to pass additional information to
1267+ the signer implementation. Kubernetes does not restrict or validate this
1268+ metadata in any way.
1269+
1270+ These values are copied verbatim into the `spec.unverifiedUserAnnotations` field of
1271+ the PodCertificateRequest objects that Kubelet creates.
1272+
1273+ Entries are subject to the same validation as object metadata annotations,
1274+ with the addition that all keys must be domain-prefixed. No restrictions
1275+ are placed on values, except an overall size limitation on the entire field.
1276+
1277+ Signers should document the keys and values they support. Signers should
1278+ deny requests that contain keys they do not recognize.
1279+ type : object
12621280 required :
12631281 - keyType
12641282 - signerName
@@ -1530,7 +1548,7 @@ spec:
15301548 resources :
15311549 description : |-
15321550 resources represents the minimum resources the volume should have.
1533- If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements
1551+ Users are allowed to specify resource requirements
15341552 that are lower than previous value but must still be higher than capacity recorded in the
15351553 status field of the claim.
15361554 More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
@@ -2175,6 +2193,24 @@ spec:
21752193 signerName :
21762194 description : Kubelet's generated CSRs will be addressed to this signer.
21772195 type : string
2196+ userAnnotations :
2197+ additionalProperties :
2198+ type : string
2199+ description : |-
2200+ userAnnotations allow pod authors to pass additional information to
2201+ the signer implementation. Kubernetes does not restrict or validate this
2202+ metadata in any way.
2203+
2204+ These values are copied verbatim into the `spec.unverifiedUserAnnotations` field of
2205+ the PodCertificateRequest objects that Kubelet creates.
2206+
2207+ Entries are subject to the same validation as object metadata annotations,
2208+ with the addition that all keys must be domain-prefixed. No restrictions
2209+ are placed on values, except an overall size limitation on the entire field.
2210+
2211+ Signers should document the keys and values they support. Signers should
2212+ deny requests that contain keys they do not recognize.
2213+ type : object
21782214 required :
21792215 - keyType
21802216 - signerName
@@ -2642,9 +2678,10 @@ spec:
26422678 operator :
26432679 description : |-
26442680 Operator represents a key's relationship to the value.
2645- Valid operators are Exists and Equal . Defaults to Equal.
2681+ Valid operators are Exists, Equal, Lt, and Gt . Defaults to Equal.
26462682 Exists is equivalent to wildcard for value, so that a pod can
26472683 tolerate all taints of a particular category.
2684+ Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
26482685 type : string
26492686 tolerationSeconds :
26502687 description : |-
0 commit comments