You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Extend docs for 1.30 and allow Kubernetes client creation
* -----------------Maintain feature gates----------------
* Added feature gates.
./hack/compare-k8s-feature-gates.sh 1.29 1.30
Feature gates added in 1.30 compared to 1.29:
APIServingWithRoutine
AppArmorFields
CustomResourceFieldSelectors
JobManagedBy
JobSuccessPolicy
PortForwardWebsockets
RecursiveReadOnlyMounts
RelaxedEnvironmentVariableValidation
RetryGenerateName
SELinuxMount
ServiceTrafficDistribution
StorageNamespaceIndex
StorageVersionMigrator
* Remove feature gates
./hack/compare-k8s-feature-gates.sh 1.29 1.30
Feature gates removed in 1.30 compared to 1.29:
APISelfSubjectReview
CSIMigrationAzureFile
ExpandedDNSConfig
ExperimentalHostUserNamespaceDefaulting
IPTablesOwnershipCleanup
KubeletPodResources
KubeletPodResourcesGetAllocatable
LegacyServiceAccountTokenTracking
MinimizeIPTablesRestore
ProxyTerminatingEndpoints
RemoveSelfLink
SecurityContextDeny
* Locked to default
❯ ./hack/compare-k8s-feature-gates.sh 1.29 1.30
Feature gates locked to default in 1.30 compared to 1.29:
AdmissionWebhookMatchConditions Default: true
AggregatedDiscoveryEndpoint Default: true
CloudDualStackNodeIPs Default: true
ConsistentHTTPGetHandlers Default: true
HPAContainerMetrics Default: true
LegacyServiceAccountTokenCleanUp Default: true
MinDomainsInPodTopologySpread Default: true
NewVolumeManagerReconstruction Default: true
PodHostIPs Default: true
PodSchedulingReadiness Default: true
StableLoadBalancerNodeSet Default: true
ValidatingAdmissionPolicy Default: true
ZeroLimitedNominalConcurrencyShares Default: true
* Some rearrangements for consistency
* -----------------Maintain feature gates----------------
* Maintain admission plugins
./hack/compare-k8s-admission-plugins.sh 1.29 1.30
Admission plugins added in 1.30 compared to 1.29:
Admission plugins removed in 1.30 compared to 1.29:
SecurityContextDeny
* Maintain apigroups
❯ ./hack/compare-k8s-api-groups.sh 1.29 1.30
Kubernetes API group versions added in 1.30 compared to 1.29:
storagemigration.k8s.io/v1alpha1
Kubernetes API GVRs added in 1.30 compared to 1.29:
admissionregistration.k8s.io/v1/validatingadmissionpolicies
admissionregistration.k8s.io/v1/validatingadmissionpolicybindings
resource.k8s.io/v1alpha2/resourceclaimparameters
resource.k8s.io/v1alpha2/resourceclassparameters
resource.k8s.io/v1alpha2/resourceslices
storagemigration.k8s.io/v1alpha1/storageversionmigrations
Kubernetes API group versions removed in 1.30 compared to 1.29:
Kubernetes API GVRs removed in 1.30 compared to 1.29:
* Update k8s version in local cloudprofile
* Fix the `compute-k8s-controllers.sh` script
* Maintain controllers
kube-controller-manager controllers added in 1.30 compared to 1.29:
Added Controllers for API Group [admissionregistration/v1]: validatingadmissionpolicy-status-controller
Added Controllers for API Group [storagemigration/v1alpha1]: storage-version-migrator-controller
kube-controller-manager controllers removed in 1.30 compared to 1.29:
Removed Controllers for API Group [admissionregistration/v1beta1]: validatingadmissionpolicy-status-controller
Removed Controllers for API Group [v1]: garbage-collector-controller
* Fix serviceaccount names for older versions
The `validatingadmissionpolicy-status-controller` is still present in 1.29 and above, just that the script doesn't detect it since they replaced the string with a constant
* Add `ConstraintK8sGreaterEqual130` constraint
* Maintain KCM serviceAccount names
* Maintain copies of the DaemonSet controller's scheduling logic
* Add `NoSwap` option for swap behavior for k8s >= 1.30
See https://kubernetes.io/docs/concepts/architecture/nodes/ and the Gardener issue description for more details.
* Enable `redundant-import-alias` linter in revive
* Address PR review feedback
* Address PR review feedback
0 commit comments