Created
June 4, 2021 10:58
-
-
Save inductor/5dc5c02e8a00e393d60fc5e4c66f6cc7 to your computer and use it in GitHub Desktop.
git diff origin/release-1.18 origin/release-1.19 <file>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/content/en/docs/reference/command-line-tools-reference/feature-gates.md b/content/en/docs/reference/command-line-tools-reference/feature-gates.md | |
| index 6d6d87026..13368bcc7 100644 | |
| --- a/content/en/docs/reference/command-line-tools-reference/feature-gates.md | |
| +++ b/content/en/docs/reference/command-line-tools-reference/feature-gates.md | |
| @@ -67,7 +67,8 @@ different Kubernetes components. | |
| | `CSIMigrationAWS` | `false` | Alpha | 1.14 | | | |
| | `CSIMigrationAWS` | `false` | Beta | 1.17 | | | |
| | `CSIMigrationAWSComplete` | `false` | Alpha | 1.17 | | | |
| -| `CSIMigrationAzureDisk` | `false` | Alpha | 1.15 | | | |
| +| `CSIMigrationAzureDisk` | `false` | Alpha | 1.15 | 1.18 | | |
| +| `CSIMigrationAzureDisk` | `false` | Beta | 1.19 | | | |
| | `CSIMigrationAzureDiskComplete` | `false` | Alpha | 1.17 | | | |
| | `CSIMigrationAzureFile` | `false` | Alpha | 1.15 | | | |
| | `CSIMigrationAzureFileComplete` | `false` | Alpha | 1.17 | | | |
| @@ -76,21 +77,25 @@ different Kubernetes components. | |
| | `CSIMigrationGCEComplete` | `false` | Alpha | 1.17 | | | |
| | `CSIMigrationOpenStack` | `false` | Alpha | 1.14 | | | |
| | `CSIMigrationOpenStackComplete` | `false` | Alpha | 1.17 | | | |
| +| `CSIMigrationvSphere` | `false` | Beta | 1.19 | | | |
| +| `CSIMigrationvSphereComplete` | `false` | Beta | 1.19 | | | |
| +| `CSIStorageCapacity` | `false` | Alpha | 1.19 | | | |
| +| `CSIVolumeFSGroupPolicy` | `false` | Alpha | 1.19 | | | |
| | `ConfigurableFSGroupPolicy` | `false` | Alpha | 1.18 | | | |
| | `CustomCPUCFSQuotaPeriod` | `false` | Alpha | 1.12 | | | |
| -| `CustomResourceDefaulting` | `false` | Alpha| 1.15 | 1.15 | | |
| -| `CustomResourceDefaulting` | `true` | Beta | 1.16 | | | |
| +| `DefaultPodTopologySpread` | `false` | Alpha | 1.19 | | | |
| | `DevicePlugins` | `false` | Alpha | 1.8 | 1.9 | | |
| | `DevicePlugins` | `true` | Beta | 1.10 | | | |
| +| `DisableAcceleratorUsageMetrics` | `false` | Alpha | 1.19 | 1.20 | | |
| | `DryRun` | `false` | Alpha | 1.12 | 1.12 | | |
| | `DryRun` | `true` | Beta | 1.13 | | | |
| -| `DynamicAuditing` | `false` | Alpha | 1.13 | | | |
| | `DynamicKubeletConfig` | `false` | Alpha | 1.4 | 1.10 | | |
| | `DynamicKubeletConfig` | `true` | Beta | 1.11 | | | |
| | `EndpointSlice` | `false` | Alpha | 1.16 | 1.16 | | |
| | `EndpointSlice` | `false` | Beta | 1.17 | | | |
| | `EndpointSlice` | `true` | Beta | 1.18 | | | |
| -| `EndpointSliceProxying` | `false` | Alpha | 1.18 | | | |
| +| `EndpointSliceProxying` | `false` | Alpha | 1.18 | 1.18 | | |
| +| `EndpointSliceProxying` | `true` | Beta | 1.19 | | | |
| | `EphemeralContainers` | `false` | Alpha | 1.16 | | | |
| | `ExpandCSIVolumes` | `false` | Alpha | 1.14 | 1.15 | | |
| | `ExpandCSIVolumes` | `true` | Beta | 1.16 | | | |
| @@ -99,12 +104,13 @@ different Kubernetes components. | |
| | `ExpandPersistentVolumes` | `false` | Alpha | 1.8 | 1.10 | | |
| | `ExpandPersistentVolumes` | `true` | Beta | 1.11 | | | |
| | `ExperimentalHostUserNamespaceDefaulting` | `false` | Beta | 1.5 | | | |
| -| `EvenPodsSpread` | `false` | Alpha | 1.16 | 1.17 | | |
| -| `EvenPodsSpread` | `true` | Beta | 1.18 | | | |
| +| `GenericEphemeralVolume` | `false` | Alpha | 1.19 | | | |
| | `HPAScaleToZero` | `false` | Alpha | 1.16 | | | |
| -| `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | | | |
| +| `HugePageStorageMediumSize` | `false` | Alpha | 1.18 | 1.18 | | |
| +| `HugePageStorageMediumSize` | `true` | Beta | 1.19 | | | |
| | `HyperVContainer` | `false` | Alpha | 1.10 | | | |
| -| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | | | |
| +| `ImmutableEphemeralVolumes` | `false` | Alpha | 1.18 | 1.18 | | |
| +| `ImmutableEphemeralVolumes` | `true` | Beta | 1.19 | | | |
| | `IPv6DualStack` | `false` | Alpha | 1.16 | | | |
| | `KubeletPodResources` | `false` | Alpha | 1.13 | 1.14 | | |
| | `KubeletPodResources` | `true` | Beta | 1.15 | | | |
| @@ -113,34 +119,36 @@ different Kubernetes components. | |
| | `LocalStorageCapacityIsolation` | `true` | Beta | 1.10 | | | |
| | `LocalStorageCapacityIsolationFSQuotaMonitoring` | `false` | Alpha | 1.15 | | | |
| | `MountContainers` | `false` | Alpha | 1.9 | | | |
| -| `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | | | |
| -| `NonPreemptingPriority` | `false` | Alpha | 1.15 | | | |
| +| `NodeDisruptionExclusion` | `false` | Alpha | 1.16 | 1.18 | | |
| +| `NodeDisruptionExclusion` | `true` | Beta | 1.19 | | | |
| +| `NonPreemptingPriority` | `false` | Alpha | 1.15 | 1.18 | | |
| +| `NonPreemptingPriority` | `true` | Beta | 1.19 | | | |
| | `PodDisruptionBudget` | `false` | Alpha | 1.3 | 1.4 | | |
| | `PodDisruptionBudget` | `true` | Beta | 1.5 | | | |
| | `PodOverhead` | `false` | Alpha | 1.16 | - | | |
| | `ProcMountType` | `false` | Alpha | 1.12 | | | |
| | `QOSReserved` | `false` | Alpha | 1.11 | | | |
| | `RemainingItemCount` | `false` | Alpha | 1.15 | | | |
| -| `ResourceLimitsPriorityFunction` | `false` | Alpha | 1.9 | | | |
| -| `RotateKubeletClientCertificate` | `true` | Beta | 1.8 | | | |
| | `RotateKubeletServerCertificate` | `false` | Alpha | 1.7 | 1.11 | | |
| | `RotateKubeletServerCertificate` | `true` | Beta | 1.12 | | | |
| | `RunAsGroup` | `true` | Beta | 1.14 | | | |
| | `RuntimeClass` | `false` | Alpha | 1.12 | 1.13 | | |
| | `RuntimeClass` | `true` | Beta | 1.14 | | | |
| -| `SCTPSupport` | `false` | Alpha | 1.12 | | | |
| +| `SCTPSupport` | `false` | Alpha | 1.12 | 1.18 | | |
| +| `SCTPSupport` | `true` | Beta | 1.19 | | | |
| | `ServerSideApply` | `false` | Alpha | 1.14 | 1.15 | | |
| | `ServerSideApply` | `true` | Beta | 1.16 | | | |
| | `ServiceAccountIssuerDiscovery` | `false` | Alpha | 1.18 | | | |
| -| `ServiceAppProtocol` | `false` | Alpha | 1.18 | | | |
| -| `ServiceNodeExclusion` | `false` | Alpha | 1.8 | | | |
| +| `ServiceAppProtocol` | `false` | Alpha | 1.18 | 1.18 | | |
| +| `ServiceAppProtocol` | `true` | Beta | 1.19 | | | |
| +| `ServiceNodeExclusion` | `false` | Alpha | 1.8 | 1.18 | | |
| +| `ServiceNodeExclusion` | `true` | Beta | 1.19 | | | |
| | `ServiceTopology` | `false` | Alpha | 1.17 | | | |
| +| `SetHostnameAsFQDN` | `false` | Alpha | 1.19 | | | |
| | `StartupProbe` | `false` | Alpha | 1.16 | 1.17 | | |
| | `StartupProbe` | `true` | Beta | 1.18 | | | |
| | `StorageVersionHash` | `false` | Alpha | 1.14 | 1.14 | | |
| | `StorageVersionHash` | `true` | Beta | 1.15 | | | |
| -| `StreamingProxyRedirects` | `false` | Beta | 1.5 | 1.5 | | |
| -| `StreamingProxyRedirects` | `true` | Beta | 1.6 | | | |
| | `SupportNodePidsLimit` | `false` | Alpha | 1.14 | 1.14 | | |
| | `SupportNodePidsLimit` | `true` | Beta | 1.15 | | | |
| | `SupportPodPidsLimit` | `false` | Alpha | 1.10 | 1.13 | | |
| @@ -156,6 +164,7 @@ different Kubernetes components. | |
| | `ValidateProxyRedirects` | `true` | Beta | 1.14 | | | |
| | `VolumeSnapshotDataSource` | `false` | Alpha | 1.12 | 1.16 | | |
| | `VolumeSnapshotDataSource` | `true` | Beta | 1.17 | - | | |
| +| `WindowsEndpointSliceProxying` | `false` | Alpha | 1.19 | | | |
| | `WindowsGMSA` | `false` | Alpha | 1.14 | | | |
| | `WindowsGMSA` | `true` | Beta | 1.16 | | | |
| | `WinDSR` | `false` | Alpha | 1.14 | | | |
| @@ -198,6 +207,9 @@ different Kubernetes components. | |
| | `CustomPodDNS` | `false` | Alpha | 1.9 | 1.9 | | |
| | `CustomPodDNS` | `true` | Beta| 1.10 | 1.13 | | |
| | `CustomPodDNS` | `true` | GA | 1.14 | - | | |
| +| `CustomResourceDefaulting` | `false` | Alpha| 1.15 | 1.15 | | |
| +| `CustomResourceDefaulting` | `true` | Beta | 1.16 | 1.16 | | |
| +| `CustomResourceDefaulting` | `true` | GA | 1.17 | - | | |
| | `CustomResourcePublishOpenAPI` | `false` | Alpha| 1.14 | 1.14 | | |
| | `CustomResourcePublishOpenAPI` | `true` | Beta| 1.15 | 1.15 | | |
| | `CustomResourcePublishOpenAPI` | `true` | GA | 1.16 | - | | |
| @@ -210,6 +222,8 @@ different Kubernetes components. | |
| | `CustomResourceWebhookConversion` | `false` | Alpha | 1.13 | 1.14 | | |
| | `CustomResourceWebhookConversion` | `true` | Beta | 1.15 | 1.15 | | |
| | `CustomResourceWebhookConversion` | `true` | GA | 1.16 | - | | |
| +| `DynamicAuditing` | `false` | Alpha | 1.13 | 1.18 | | |
| +| `DynamicAuditing` | - | Deprecated | 1.19 | - | | |
| | `DynamicProvisioningScheduling` | `false` | Alpha | 1.11 | 1.11 | | |
| | `DynamicProvisioningScheduling` | - | Deprecated| 1.12 | - | | |
| | `DynamicVolumeProvisioning` | `true` | Alpha | 1.3 | 1.7 | | |
| @@ -218,6 +232,9 @@ different Kubernetes components. | |
| | `EnableEquivalenceClassCache` | - | Deprecated | 1.15 | - | | |
| | `ExperimentalCriticalPodAnnotation` | `false` | Alpha | 1.5 | 1.12 | | |
| | `ExperimentalCriticalPodAnnotation` | `false` | Deprecated | 1.13 | - | | |
| +| `EvenPodsSpread` | `false` | Alpha | 1.16 | 1.17 | | |
| +| `EvenPodsSpread` | `true` | Beta | 1.18 | 1.18 | | |
| +| `EvenPodsSpread` | `true` | GA | 1.19 | - | | |
| | `GCERegionalPersistentDisk` | `true` | Beta | 1.10 | 1.12 | | |
| | `GCERegionalPersistentDisk` | `true` | GA | 1.13 | - | | |
| | `HugePages` | `false` | Alpha | 1.8 | 1.9 | | |
| @@ -251,9 +268,13 @@ different Kubernetes components. | |
| | `PVCProtection` | `false` | Alpha | 1.9 | 1.9 | | |
| | `PVCProtection` | - | Deprecated | 1.10 | - | | |
| | `RequestManagement` | `false` | Alpha | 1.15 | 1.16 | | |
| +| `ResourceLimitsPriorityFunction` | `false` | Alpha | 1.9 | 1.18 | | |
| +| `ResourceLimitsPriorityFunction` | - | Deprecated | 1.19 | - | | |
| | `ResourceQuotaScopeSelectors` | `false` | Alpha | 1.11 | 1.11 | | |
| | `ResourceQuotaScopeSelectors` | `true` | Beta | 1.12 | 1.16 | | |
| | `ResourceQuotaScopeSelectors` | `true` | GA | 1.17 | - | | |
| +| `RotateKubeletClientCertificate` | `true` | Beta | 1.8 | 1.18 | | |
| +| `RotateKubeletClientCertificate` | `true` | GA | 1.19 | - | | |
| | `ScheduleDaemonSetPods` | `false` | Alpha | 1.11 | 1.11 | | |
| | `ScheduleDaemonSetPods` | `true` | Beta | 1.12 | 1.16 | | |
| | `ScheduleDaemonSetPods` | `true` | GA | 1.17 | - | | |
| @@ -262,6 +283,9 @@ different Kubernetes components. | |
| | `ServiceLoadBalancerFinalizer` | `true` | GA | 1.17 | - | | |
| | `StorageObjectInUseProtection` | `true` | Beta | 1.10 | 1.10 | | |
| | `StorageObjectInUseProtection` | `true` | GA | 1.11 | - | | |
| +| `StreamingProxyRedirects` | `false` | Beta | 1.5 | 1.5 | | |
| +| `StreamingProxyRedirects` | `true` | Beta | 1.6 | 1.18 | | |
| +| `StreamingProxyRedirects` | - | Deprecated| 1.19 | - | | |
| | `SupportIPVSProxyMode` | `false` | Alpha | 1.8 | 1.8 | | |
| | `SupportIPVSProxyMode` | `false` | Beta | 1.9 | 1.9 | | |
| | `SupportIPVSProxyMode` | `true` | Beta | 1.10 | 1.10 | | |
| @@ -357,8 +381,10 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| See [Raw Block Volume Support](/docs/concepts/storage/persistent-volumes/#raw-block-volume-support) | |
| for more details. | |
| - `BoundServiceAccountTokenVolume`: Migrate ServiceAccount volumes to use a projected volume consisting of a | |
| - ServiceAccountTokenVolumeProjection. | |
| - Check [Service Account Token Volumes](https://git.k8s.io/community/contributors/design-proposals/storage/svcacct-token-volume-source.md) | |
| + ServiceAccountTokenVolumeProjection. Cluster admins can use metric `serviceaccount_stale_tokens_total` to | |
| + monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off | |
| + extended tokens by starting `kube-apiserver` with flag `--service-account-extend-token-expiration=false`. | |
| + Check [Bound Service Account Tokens](https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md) | |
| for more details. | |
| - `ConfigurableFSGroupPolicy`: Allows user to configure volume permission change policy for fsGroups when mounting a volume in a Pod. See [Configure volume permission and ownership change policy for Pods](/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods) for more details. | |
| - `CPUManager`: Enable container level CPU affinity support, see [CPU Management Policies](/docs/tasks/administer-cluster/cpu-management-policies/). | |
| @@ -377,11 +403,15 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| - `CSIMigrationGCEComplete`: Stops registering the GCE-PD in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the GCE-PD in-tree plugin to PD CSI plugin. Requires CSIMigration and CSIMigrationGCE feature flags enabled and PD CSI plugin installed and configured on all nodes in the cluster. | |
| - `CSIMigrationOpenStack`: Enables shims and translation logic to route volume operations from the Cinder in-tree plugin to Cinder CSI plugin. Supports falling back to in-tree Cinder plugin if a node does not have Cinder CSI plugin installed and configured. Requires CSIMigration feature flag enabled. | |
| - `CSIMigrationOpenStackComplete`: Stops registering the Cinder in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the Cinder in-tree plugin to Cinder CSI plugin. Requires CSIMigration and CSIMigrationOpenStack feature flags enabled and Cinder CSI plugin installed and configured on all nodes in the cluster. | |
| +- `CSIMigrationvSphere`: Enables shims and translation logic to route volume operations from the vSphere in-tree plugin to vSphere CSI plugin. Supports falling back to in-tree vSphere plugin if a node does not have vSphere CSI plugin installed and configured. Requires CSIMigration feature flag enabled. | |
| +- `CSIMigrationvSphereComplete`: Stops registering the vSphere in-tree plugin in kubelet and volume controllers and enables shims and translation logic to route volume operations from the vSphere in-tree plugin to vSphere CSI plugin. Requires CSIMigration and CSIMigrationvSphere feature flags enabled and vSphere CSI plugin installed and configured on all nodes in the cluster. | |
| - `CSINodeInfo`: Enable all logic related to the CSINodeInfo API object in csi.storage.k8s.io. | |
| - `CSIPersistentVolume`: Enable discovering and mounting volumes provisioned through a | |
| [CSI (Container Storage Interface)](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md) | |
| compatible volume plugin. | |
| +- `CSIStorageCapacity`: Enables CSI drivers to publish storage capacity information and the Kubernetes scheduler to use that information when scheduling pods. See [Storage Capacity](/docs/concepts/storage/storage-capacity/). | |
| Check the [`csi` volume type](/docs/concepts/storage/volumes/#csi) documentation for more details. | |
| +- `CSIVolumeFSGroupPolicy`: Allows CSIDrivers to use the `fsGroupPolicy` field. This field controls whether volumes created by a CSIDriver support volume ownership and permission modifications when these volumes are mounted. | |
| - `CustomCPUCFSQuotaPeriod`: Enable nodes to change CPUCFSQuotaPeriod. | |
| - `CustomPodDNS`: Enable customizing the DNS settings for a Pod using its `dnsConfig` property. | |
| Check [Pod's DNS Config](/docs/concepts/services-networking/dns-pod-service/#pods-dns-config) | |
| @@ -395,11 +425,14 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| - `CustomResourceWebhookConversion`: Enable webhook-based conversion | |
| on resources created from [CustomResourceDefinition](/docs/concepts/extend-kubernetes/api-extension/custom-resources/). | |
| troubleshoot a running Pod. | |
| +- `DisableAcceleratorUsageMetrics`: [Disable accelerator metrics collected by the kubelet](/docs/concepts/cluster-administration/system-metrics/). | |
| - `DevicePlugins`: Enable the [device-plugins](/docs/concepts/cluster-administration/device-plugins/) | |
| based resource provisioning on nodes. | |
| +- `DefaultPodTopologySpread`: Enables the use of `PodTopologySpread` scheduling plugin to do | |
| + [default spreading](/docs/concepts/workloads/pods/pod-topology-spread-constraints/#internal-default-constraints). | |
| - `DryRun`: Enable server-side [dry run](/docs/reference/using-api/api-concepts/#dry-run) requests | |
| so that validation, merging, and mutation can be tested without committing. | |
| -- `DynamicAuditing`: Enable [dynamic auditing](/docs/tasks/debug-application-cluster/audit/#dynamic-backend) | |
| +- `DynamicAuditing`(*deprecated*): Used to enable dynamic auditing before v1.19. | |
| - `DynamicKubeletConfig`: Enable the dynamic configuration of kubelet. See [Reconfigure kubelet](/docs/tasks/administer-cluster/reconfigure-kubelet/). | |
| - `DynamicProvisioningScheduling`: Extend the default scheduler to be aware of volume topology and handle PV provisioning. | |
| This feature is superseded by the `VolumeScheduling` feature completely in v1.12. | |
| @@ -420,10 +453,16 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| if user namespace remapping is enabled in the Docker daemon. | |
| - `EndpointSlice`: Enables Endpoint Slices for more scalable and extensible | |
| network endpoints. See [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/). | |
| -- `EndpointSliceProxying`: When this feature gate is enabled, kube-proxy will | |
| - use EndpointSlices as the primary data source instead of Endpoints, enabling | |
| - scalability and performance improvements. See [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/). | |
| +- `EndpointSliceProxying`: When this feature gate is enabled, kube-proxy running | |
| + on Linux will use EndpointSlices as the primary data source instead of | |
| + Endpoints, enabling scalability and performance improvements. See | |
| + [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/). | |
| +- `WindowsEndpointSliceProxying`: When this feature gate is enabled, kube-proxy | |
| + running on Windows will use EndpointSlices as the primary data source instead | |
| + of Endpoints, enabling scalability and performance improvements. See | |
| + [Enabling Endpoint Slices](/docs/tasks/administer-cluster/enabling-endpointslices/). | |
| - `GCERegionalPersistentDisk`: Enable the regional PD feature on GCE. | |
| +- `GenericEphemeralVolume`: Enables ephemeral, inline volumes that support all features of normal volumes (can be provided by third-party storage vendors, storage capacity tracking, restore from snapshot, etc.). See [Ephemeral Volumes](/docs/concepts/storage/ephemeral-volumes/). | |
| - `HugePages`: Enable the allocation and consumption of pre-allocated [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/). | |
| - `HugePageStorageMediumSize`: Enable support for multiple sizes pre-allocated [huge pages](/docs/tasks/manage-hugepages/scheduling-hugepages/). | |
| - `HyperVContainer`: Enable [Hyper-V isolation](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/hyperv-container) for Windows containers. | |
| @@ -435,12 +474,9 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| to discover plugins such as [CSI volume drivers](/docs/concepts/storage/volumes/#csi). | |
| - `KubeletPodResources`: Enable the kubelet's pod resources grpc endpoint. | |
| See [Support Device Monitoring](https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/compute-device-assignment.md) for more details. | |
| -- `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the feature-specific labels. | |
| +- `LegacyNodeRoleBehavior`: When disabled, legacy behavior in service load balancers and node disruption will ignore the `node-role.kubernetes.io/master` label in favor of the feature-specific labels provided by `NodeDisruptionExclusion` and `ServiceNodeExclusion`. | |
| - `LocalStorageCapacityIsolation`: Enable the consumption of [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and also the `sizeLimit` property of an [emptyDir volume](/docs/concepts/storage/volumes/#emptydir). | |
| -- `LocalStorageCapacityIsolationFSQuotaMonitoring`: When `LocalStorageCapacityIsolation` is enabled for | |
| - [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and the backing filesystem for | |
| - [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir) supports project quotas and they are enabled, use project quotas to monitor | |
| - [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than filesystem walk for better performance and accuracy. | |
| +- `LocalStorageCapacityIsolationFSQuotaMonitoring`: When `LocalStorageCapacityIsolation` is enabled for [local ephemeral storage](/docs/concepts/configuration/manage-resources-containers/) and the backing filesystem for [emptyDir volumes](/docs/concepts/storage/volumes/#emptydir) supports project quotas and they are enabled, use project quotas to monitor [emptyDir volume](/docs/concepts/storage/volumes/#emptydir) storage consumption rather than filesystem walk for better performance and accuracy. | |
| - `MountContainers`: Enable using utility containers on host as the volume mounter. | |
| - `MountPropagation`: Enable sharing volume mounted by one container to other containers or pods. | |
| For more details, please see [mount propagation](/docs/concepts/storage/volumes/#mount-propagation). | |
| @@ -450,7 +486,7 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| - `PersistentLocalVolumes`: Enable the usage of `local` volume type in Pods. | |
| Pod affinity has to be specified if requesting a `local` volume. | |
| - `PodDisruptionBudget`: Enable the [PodDisruptionBudget](/docs/tasks/run-application/configure-pdb/) feature. | |
| -- `PodOverhead`: Enable the [PodOverhead](/docs/concepts/configuration/pod-overhead/) feature to account for pod overheads. | |
| +- `PodOverhead`: Enable the [PodOverhead](/docs/concepts/scheduling-eviction/pod-overhead/) feature to account for pod overheads. | |
| - `PodPriority`: Enable the descheduling and preemption of Pods based on their [priorities](/docs/concepts/configuration/pod-priority-preemption/). | |
| - `PodReadinessGates`: Enable the setting of `PodReadinessGate` field for extending | |
| Pod readiness evaluation. See [Pod readiness gate](/docs/concepts/workloads/pods/pod-lifecycle/#pod-readiness-gate) | |
| @@ -463,7 +499,7 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| being deleted when it is still used by any Pod. | |
| - `QOSReserved`: Allows resource reservations at the QoS level preventing pods at lower QoS levels from | |
| bursting into resources requested at higher QoS levels (memory only for now). | |
| -- `ResourceLimitsPriorityFunction`: Enable a scheduler priority function that | |
| +- `ResourceLimitsPriorityFunction` (*deprecated*): Enable a scheduler priority function that | |
| assigns a lowest possible score of 1 to a node that satisfies at least one of | |
| the input Pod's cpu and memory limits. The intent is to break ties between | |
| nodes with same scores. | |
| @@ -475,14 +511,15 @@ Each feature gate is designed for enabling/disabling a specific feature: | |
| - `RunAsGroup`: Enable control over the primary group ID set on the init processes of containers. | |
| - `RuntimeClass`: Enable the [RuntimeClass](/docs/concepts/containers/runtime-class/) feature for selecting container runtime configurations. | |
| - `ScheduleDaemonSetPods`: Enable DaemonSet Pods to be scheduled by the default scheduler instead of the DaemonSet controller. | |
| -- `SCTPSupport`: Enables the usage of SCTP as `protocol` value in `Service`, `Endpoint`, `NetworkPolicy` and `Pod` definitions | |
| -- `ServerSideApply`: Enables the [Sever Side Apply (SSA)](/docs/reference/using-api/api-concepts/#server-side-apply) path at the API Server. | |
| +- `SCTPSupport`: Enables the _SCTP_ `protocol` value in Pod, Service, Endpoints, EndpointSlice, and NetworkPolicy definitions. | |
| +- `ServerSideApply`: Enables the [Sever Side Apply (SSA)](/docs/reference/using-api/server-side-apply/) path at the API Server. | |
| - `ServiceAccountIssuerDiscovery`: Enable OIDC discovery endpoints (issuer and JWKS URLs) for the service account issuer in the API server. See [Configure Service Accounts for Pods](/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery) for more details. | |
| - `ServiceAppProtocol`: Enables the `AppProtocol` field on Services and Endpoints. | |
| - `ServiceLoadBalancerFinalizer`: Enable finalizer protection for Service load balancers. | |
| - `ServiceNodeExclusion`: Enable the exclusion of nodes from load balancers created by a cloud provider. | |
| A node is eligible for exclusion if labelled with "`alpha.service-controller.kubernetes.io/exclude-balancer`" key or `node.kubernetes.io/exclude-from-external-load-balancers`. | |
| - `ServiceTopology`: Enable service to route traffic based upon the Node topology of the cluster. See [ServiceTopology](/docs/concepts/services-networking/service-topology/) for more details. | |
| +- `SetHostnameAsFQDN`: Enable the ability of setting Fully Qualified Domain Name(FQDN) as hostname of pod. See [Pod's `setHostnameAsFQDN` field](/docs/concepts/services-networking/dns-pod-service/#pod-sethostnameasfqdn-field). | |
| - `StartupProbe`: Enable the [startup](/docs/concepts/workloads/pods/pod-lifecycle/#when-should-you-use-a-startup-probe) probe in the kubelet. | |
| - `StorageObjectInUseProtection`: Postpone the deletion of PersistentVolume or | |
| PersistentVolumeClaim objects if they are still being used. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment