mirror of https://github.com/k3s-io/k3s
305 lines
12 KiB
Go
305 lines
12 KiB
Go
|
/*
|
||
|
|
Copyright 2017 The Kubernetes Authors.
|
||
|
|
|
||
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
you may not use this file except in compliance with the License.
|
||
|
|
You may obtain a copy of the License at
|
||
|
|
|
||
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
|
||
|
|
Unless required by applicable law or agreed to in writing, software
|
||
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
See the License for the specific language governing permissions and
|
||
|
|
limitations under the License.
|
||
|
|
*/
|
||
|
|
|
||
|
|
package features
|
||
|
|
|
||
|
|
import (
|
||
|
|
apiextensionsfeatures "k8s.io/apiextensions-apiserver/pkg/features"
|
||
|
|
genericfeatures "k8s.io/apiserver/pkg/features"
|
||
|
|
utilfeature "k8s.io/apiserver/pkg/util/feature"
|
||
|
|
)
|
||
|
|
|
||
|
|
const (
|
||
|
|
// Every feature gate should add method here following this template:
|
||
|
|
//
|
||
|
|
// // owner: @username
|
||
|
|
// // alpha: v1.X
|
||
|
|
// MyFeature utilfeature.Feature = "MyFeature"
|
||
|
|
|
||
|
|
// owner: @tallclair
|
||
|
|
// beta: v1.4
|
||
|
|
AppArmor utilfeature.Feature = "AppArmor"
|
||
|
|
|
||
|
|
// owner: @mtaufen
|
||
|
|
// alpha: v1.4
|
||
|
|
// beta: v1.11
|
||
|
|
DynamicKubeletConfig utilfeature.Feature = "DynamicKubeletConfig"
|
||
|
|
|
||
|
|
// owner: @pweil-
|
||
|
|
// alpha: v1.5
|
||
|
|
//
|
||
|
|
// Default userns=host for containers that are using other host namespaces, host mounts, the pod
|
||
|
|
// contains a privileged container, or specific non-namespaced capabilities (MKNOD, SYS_MODULE,
|
||
|
|
// SYS_TIME). This should only be enabled if user namespace remapping is enabled in the docker daemon.
|
||
|
|
ExperimentalHostUserNamespaceDefaultingGate utilfeature.Feature = "ExperimentalHostUserNamespaceDefaulting"
|
||
|
|
|
||
|
|
// owner: @jiayingz
|
||
|
|
// beta: v1.10
|
||
|
|
//
|
||
|
|
// Enables support for Device Plugins
|
||
|
|
DevicePlugins utilfeature.Feature = "DevicePlugins"
|
||
|
|
|
||
|
|
// owner: @Huang-Wei
|
||
|
|
// beta: v1.13
|
||
|
|
//
|
||
|
|
// Changes the logic behind evicting Pods from not ready Nodes
|
||
|
|
// to take advantage of NoExecute Taints and Tolerations.
|
||
|
|
TaintBasedEvictions utilfeature.Feature = "TaintBasedEvictions"
|
||
|
|
|
||
|
|
// owner: @mikedanese
|
||
|
|
// alpha: v1.7
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Gets a server certificate for the kubelet from the Certificate Signing
|
||
|
|
// Request API instead of generating one self signed and auto rotates the
|
||
|
|
// certificate as expiration approaches.
|
||
|
|
RotateKubeletServerCertificate utilfeature.Feature = "RotateKubeletServerCertificate"
|
||
|
|
|
||
|
|
// owner: @mikedanese
|
||
|
|
// beta: v1.8
|
||
|
|
//
|
||
|
|
// Automatically renews the client certificate used for communicating with
|
||
|
|
// the API server as the certificate approaches expiration.
|
||
|
|
RotateKubeletClientCertificate utilfeature.Feature = "RotateKubeletClientCertificate"
|
||
|
|
|
||
|
|
// owner: @msau42
|
||
|
|
// alpha: v1.7
|
||
|
|
//
|
||
|
|
// A new volume type that supports local disks on a node.
|
||
|
|
PersistentLocalVolumes utilfeature.Feature = "PersistentLocalVolumes"
|
||
|
|
|
||
|
|
// owner: @jinxu
|
||
|
|
// beta: v1.10
|
||
|
|
//
|
||
|
|
// New local storage types to support local storage capacity isolation
|
||
|
|
LocalStorageCapacityIsolation utilfeature.Feature = "LocalStorageCapacityIsolation"
|
||
|
|
|
||
|
|
// owner: @gnufied
|
||
|
|
// beta: v1.11
|
||
|
|
// Ability to Expand persistent volumes
|
||
|
|
ExpandPersistentVolumes utilfeature.Feature = "ExpandPersistentVolumes"
|
||
|
|
|
||
|
|
// owner: @verb
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Allows all containers in a pod to share a process namespace.
|
||
|
|
PodShareProcessNamespace utilfeature.Feature = "PodShareProcessNamespace"
|
||
|
|
|
||
|
|
// owner: @bsalamat
|
||
|
|
// alpha: v1.8
|
||
|
|
//
|
||
|
|
// Add priority to pods. Priority affects scheduling and preemption of pods.
|
||
|
|
PodPriority utilfeature.Feature = "PodPriority"
|
||
|
|
|
||
|
|
// owner: @k82cn
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Taint nodes based on their condition status for 'NetworkUnavailable',
|
||
|
|
// 'MemoryPressure', 'OutOfDisk' and 'DiskPressure'.
|
||
|
|
TaintNodesByCondition utilfeature.Feature = "TaintNodesByCondition"
|
||
|
|
|
||
|
|
// owner: @jsafrane
|
||
|
|
// GA: v1.12
|
||
|
|
//
|
||
|
|
// Note: This feature gate is unconditionally enabled in v1.13 and will be removed in v1.14.
|
||
|
|
// Enable mount propagation of volumes.
|
||
|
|
MountPropagation utilfeature.Feature = "MountPropagation"
|
||
|
|
|
||
|
|
// owner: @ConnorDoyle
|
||
|
|
// alpha: v1.8
|
||
|
|
//
|
||
|
|
// Alternative container-level CPU affinity policies.
|
||
|
|
CPUManager utilfeature.Feature = "CPUManager"
|
||
|
|
|
||
|
|
// owner: @derekwaynecarr
|
||
|
|
// beta: v1.10
|
||
|
|
//
|
||
|
|
// Enable pods to consume pre-allocated huge pages of varying page sizes
|
||
|
|
HugePages utilfeature.Feature = "HugePages"
|
||
|
|
|
||
|
|
// owner: @sjenning
|
||
|
|
// beta: v1.11
|
||
|
|
//
|
||
|
|
// Enable pods to set sysctls on a pod
|
||
|
|
Sysctls utilfeature.Feature = "Sysctls"
|
||
|
|
|
||
|
|
// owner: @msau42
|
||
|
|
// GA: v1.13
|
||
|
|
//
|
||
|
|
// Extend the default scheduler to be aware of PV topology and handle PV binding
|
||
|
|
VolumeScheduling utilfeature.Feature = "VolumeScheduling"
|
||
|
|
|
||
|
|
// owner: @vladimirvivien
|
||
|
|
// GA: v1.13
|
||
|
|
//
|
||
|
|
// Enable mount/attachment of Container Storage Interface (CSI) backed PVs
|
||
|
|
CSIPersistentVolume utilfeature.Feature = "CSIPersistentVolume"
|
||
|
|
|
||
|
|
// owner @MrHohn
|
||
|
|
// beta: v1.10
|
||
|
|
//
|
||
|
|
// Support configurable pod DNS parameters.
|
||
|
|
CustomPodDNS utilfeature.Feature = "CustomPodDNS"
|
||
|
|
|
||
|
|
// owner: @screeley44
|
||
|
|
// alpha: v1.9
|
||
|
|
// beta: v1.13
|
||
|
|
//
|
||
|
|
// Enable Block volume support in containers.
|
||
|
|
BlockVolume utilfeature.Feature = "BlockVolume"
|
||
|
|
|
||
|
|
// owner: @pospispa
|
||
|
|
// GA: v1.11
|
||
|
|
//
|
||
|
|
// Postpone deletion of a PV or a PVC when they are being used
|
||
|
|
StorageObjectInUseProtection utilfeature.Feature = "StorageObjectInUseProtection"
|
||
|
|
|
||
|
|
// owner: @m1093782566
|
||
|
|
// GA: v1.11
|
||
|
|
//
|
||
|
|
// Implement IPVS-based in-cluster service load balancing
|
||
|
|
SupportIPVSProxyMode utilfeature.Feature = "SupportIPVSProxyMode"
|
||
|
|
|
||
|
|
// owner: @k82cn
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Schedule DaemonSet Pods by default scheduler instead of DaemonSet controller
|
||
|
|
ScheduleDaemonSetPods utilfeature.Feature = "ScheduleDaemonSetPods"
|
||
|
|
|
||
|
|
// owner: @mikedanese
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Implement TokenRequest endpoint on service account resources.
|
||
|
|
TokenRequest utilfeature.Feature = "TokenRequest"
|
||
|
|
|
||
|
|
// owner: @mikedanese
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
// Enable ServiceAccountTokenVolumeProjection support in ProjectedVolumes.
|
||
|
|
TokenRequestProjection utilfeature.Feature = "TokenRequestProjection"
|
||
|
|
|
||
|
|
// owner: @Random-Liu
|
||
|
|
// beta: v1.11
|
||
|
|
//
|
||
|
|
// Enable container log rotation for cri container runtime
|
||
|
|
CRIContainerLogRotation utilfeature.Feature = "CRIContainerLogRotation"
|
||
|
|
|
||
|
|
// owner: @verult
|
||
|
|
// GA: v1.13
|
||
|
|
//
|
||
|
|
// Enables the regional PD feature on GCE.
|
||
|
|
GCERegionalPersistentDisk utilfeature.Feature = "GCERegionalPersistentDisk"
|
||
|
|
|
||
|
|
// owner: @krmayankk
|
||
|
|
// alpha: v1.10
|
||
|
|
//
|
||
|
|
// Enables control over the primary group ID of containers' init processes.
|
||
|
|
RunAsGroup utilfeature.Feature = "RunAsGroup"
|
||
|
|
|
||
|
|
// owner: @saad-ali
|
||
|
|
// ga
|
||
|
|
//
|
||
|
|
// Allow mounting a subpath of a volume in a container
|
||
|
|
// Do not remove this feature gate even though it's GA
|
||
|
|
VolumeSubpath utilfeature.Feature = "VolumeSubpath"
|
||
|
|
|
||
|
|
// owner: @gnufied
|
||
|
|
// beta : v1.12
|
||
|
|
//
|
||
|
|
// Add support for volume plugins to report node specific
|
||
|
|
// volume limits
|
||
|
|
AttachVolumeLimit utilfeature.Feature = "AttachVolumeLimit"
|
||
|
|
|
||
|
|
// owner @freehan
|
||
|
|
// beta: v1.11
|
||
|
|
//
|
||
|
|
// Support Pod Ready++
|
||
|
|
PodReadinessGates utilfeature.Feature = "PodReadinessGates"
|
||
|
|
|
||
|
|
// owner: @vikaschoudhary16
|
||
|
|
// GA: v1.13
|
||
|
|
//
|
||
|
|
//
|
||
|
|
// Enable probe based plugin watcher utility for discovering Kubelet plugins
|
||
|
|
KubeletPluginsWatcher utilfeature.Feature = "KubeletPluginsWatcher"
|
||
|
|
|
||
|
|
// owner: @vikaschoudhary16
|
||
|
|
// beta: v1.12
|
||
|
|
//
|
||
|
|
//
|
||
|
|
// Enable resource quota scope selectors
|
||
|
|
ResourceQuotaScopeSelectors utilfeature.Feature = "ResourceQuotaScopeSelectors"
|
||
|
|
)
|
||
|
|
|
||
|
|
func init() {
|
||
|
|
utilfeature.DefaultFeatureGate.Add(defaultKubernetesFeatureGates)
|
||
|
|
}
|
||
|
|
|
||
|
|
// defaultKubernetesFeatureGates consists of all known Kubernetes-specific feature keys.
|
||
|
|
// To add a new feature, define a key for it above and add it here. The features will be
|
||
|
|
// available throughout Kubernetes binaries.
|
||
|
|
var defaultKubernetesFeatureGates = map[utilfeature.Feature]utilfeature.FeatureSpec{
|
||
|
|
AppArmor: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
DynamicKubeletConfig: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
ExperimentalHostUserNamespaceDefaultingGate: {Default: false, PreRelease: utilfeature.Beta},
|
||
|
|
DevicePlugins: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
TaintBasedEvictions: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
RotateKubeletServerCertificate: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
RotateKubeletClientCertificate: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
PersistentLocalVolumes: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
LocalStorageCapacityIsolation: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
HugePages: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
Sysctls: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
PodShareProcessNamespace: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
PodPriority: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
TaintNodesByCondition: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
MountPropagation: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
ExpandPersistentVolumes: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
AttachVolumeLimit: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
CPUManager: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
VolumeScheduling: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
CSIPersistentVolume: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
CustomPodDNS: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
BlockVolume: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
StorageObjectInUseProtection: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
SupportIPVSProxyMode: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
ScheduleDaemonSetPods: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
TokenRequest: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
TokenRequestProjection: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
CRIContainerLogRotation: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
GCERegionalPersistentDisk: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
RunAsGroup: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
VolumeSubpath: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
PodReadinessGates: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
KubeletPluginsWatcher: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
ResourceQuotaScopeSelectors: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
|
||
|
|
// inherited features from generic apiserver, relisted here to get a conflict if it is changed
|
||
|
|
// unintentionally on either side:
|
||
|
|
genericfeatures.StreamingProxyRedirects: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
genericfeatures.AdvancedAuditing: {Default: true, PreRelease: utilfeature.GA},
|
||
|
|
genericfeatures.APIListChunking: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
genericfeatures.DryRun: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
|
||
|
|
// inherited features from apiextensions-apiserver, relisted here to get a conflict if it is changed
|
||
|
|
// unintentionally on either side:
|
||
|
|
apiextensionsfeatures.CustomResourceValidation: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
apiextensionsfeatures.CustomResourceSubresources: {Default: true, PreRelease: utilfeature.Beta},
|
||
|
|
|
||
|
|
// features that enable backwards compatibility but are scheduled to be removed
|
||
|
|
// ...
|
||
|
|
}
|