Skip to content

Commit 85b5727

Browse files
tengqmtengqm
committed
Update resource docs for v1.35
1 parent 79c15bf commit 85b5727

29 files changed

+1251
-219
lines changed

‎content/en/docs/reference/kubernetes-api/authentication-resources/certificate-signing-request-v1.md‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -67,8 +67,6 @@ CertificateSigningRequestSpec contains the certificate request.
6767

6868
- **request** ([]byte), required
6969

70-
*Atomic: will be replaced during a merge*
71-
7270
request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
7371

7472
- **signerName** (string), required
@@ -159,8 +157,6 @@ CertificateSigningRequestStatus contains conditions used to indicate approved/de
159157

160158
- **certificate** ([]byte)
161159

162-
*Atomic: will be replaced during a merge*
163-
164160
certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
165161

166162
If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty.

content/en/docs/reference/kubernetes-api/authentication-resources/pod-certificate-request-v1alpha1.md renamed to content/en/docs/reference/kubernetes-api/authentication-resources/pod-certificate-request-v1beta1.md

Lines changed: 47 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
api_metadata:
3-
apiVersion: "certificates.k8s.io/v1alpha1"
4-
import: "k8s.io/api/certificates/v1alpha1"
3+
apiVersion: "certificates.k8s.io/v1beta1"
4+
import: "k8s.io/api/certificates/v1beta1"
55
kind: "PodCertificateRequest"
66
content_type: "api_reference"
77
description: "PodCertificateRequest encodes a pod requesting a certificate from a given signer."
8-
title: "PodCertificateRequest v1alpha1"
8+
title: "PodCertificateRequest v1beta1"
99
weight: 7
1010
auto_generated: true
1111
---
@@ -21,9 +21,9 @@ guide. You can file document formatting bugs against the
2121
[reference-docs](https://github.com/kubernetes-sigs/reference-docs/) project.
2222
-->
2323

24-
`apiVersion: certificates.k8s.io/v1alpha1`
24+
`apiVersion: certificates.k8s.io/v1beta1`
2525

26-
`import "k8s.io/api/certificates/v1alpha1"`
26+
`import "k8s.io/api/certificates/v1beta1"`
2727

2828

2929
## PodCertificateRequest {#PodCertificateRequest}
@@ -34,7 +34,7 @@ Kubelets use this API to implement podCertificate projected volumes
3434

3535
<hr>
3636

37-
- **apiVersion**: certificates.k8s.io/v1alpha1
37+
- **apiVersion**: certificates.k8s.io/v1beta1
3838

3939

4040
- **kind**: PodCertificateRequest
@@ -44,11 +44,11 @@ Kubelets use this API to implement podCertificate projected volumes
4444

4545
metadata contains the object metadata.
4646

47-
- **spec** (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequestSpec" >}}">PodCertificateRequestSpec</a>), required
47+
- **spec** (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequestSpec" >}}">PodCertificateRequestSpec</a>), required
4848

4949
spec contains the details about the certificate being requested.
5050

51-
- **status** (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequestStatus" >}}">PodCertificateRequestStatus</a>)
51+
- **status** (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequestStatus" >}}">PodCertificateRequestStatus</a>)
5252

5353
status contains the issued certificate, and a standard set of conditions.
5454

@@ -122,6 +122,14 @@ PodCertificateRequestSpec describes the certificate request. All fields are imm
122122

123123
The signer implementation is then free to issue a certificate with any lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver. `kubernetes.io` signers will never issue certificates with a lifetime longer than 24 hours.
124124

125+
- **unverifiedUserAnnotations** (map[string]string)
126+
127+
unverifiedUserAnnotations allow pod authors to pass additional information to the signer implementation. Kubernetes does not restrict or validate this metadata in any way.
128+
129+
Entries are subject to the same validation as object metadata annotations, with the addition that all keys must be domain-prefixed. No restrictions are placed on values, except an overall size limitation on the entire field.
130+
131+
Signers should document the keys and values they support. Signers should deny requests that contain keys they do not recognize.
132+
125133

126134

127135

@@ -220,7 +228,7 @@ PodCertificateRequestList is a collection of PodCertificateRequest objects
220228

221229
<hr>
222230

223-
- **apiVersion**: certificates.k8s.io/v1alpha1
231+
- **apiVersion**: certificates.k8s.io/v1beta1
224232

225233

226234
- **kind**: PodCertificateRequestList
@@ -230,7 +238,7 @@ PodCertificateRequestList is a collection of PodCertificateRequest objects
230238

231239
metadata contains the list metadata.
232240

233-
- **items** ([]<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>), required
241+
- **items** ([]<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>), required
234242

235243
items is a collection of PodCertificateRequest objects
236244

@@ -253,7 +261,7 @@ PodCertificateRequestList is a collection of PodCertificateRequest objects
253261

254262
#### HTTP Request
255263

256-
GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}
264+
GET /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}
257265

258266
#### Parameters
259267

@@ -277,7 +285,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
277285
#### Response
278286

279287

280-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
288+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
281289

282290
401: Unauthorized
283291

@@ -286,7 +294,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
286294

287295
#### HTTP Request
288296

289-
GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}/status
297+
GET /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}/status
290298

291299
#### Parameters
292300

@@ -310,7 +318,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
310318
#### Response
311319

312320

313-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
321+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
314322

315323
401: Unauthorized
316324

@@ -319,7 +327,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
319327

320328
#### HTTP Request
321329

322-
GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests
330+
GET /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests
323331

324332
#### Parameters
325333

@@ -388,7 +396,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
388396
#### Response
389397

390398

391-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequestList" >}}">PodCertificateRequestList</a>): OK
399+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequestList" >}}">PodCertificateRequestList</a>): OK
392400

393401
401: Unauthorized
394402

@@ -397,7 +405,7 @@ GET /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
397405

398406
#### HTTP Request
399407

400-
GET /apis/certificates.k8s.io/v1alpha1/podcertificaterequests
408+
GET /apis/certificates.k8s.io/v1beta1/podcertificaterequests
401409

402410
#### Parameters
403411

@@ -461,7 +469,7 @@ GET /apis/certificates.k8s.io/v1alpha1/podcertificaterequests
461469
#### Response
462470

463471

464-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequestList" >}}">PodCertificateRequestList</a>): OK
472+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequestList" >}}">PodCertificateRequestList</a>): OK
465473

466474
401: Unauthorized
467475

@@ -470,7 +478,7 @@ GET /apis/certificates.k8s.io/v1alpha1/podcertificaterequests
470478

471479
#### HTTP Request
472480

473-
POST /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests
481+
POST /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests
474482

475483
#### Parameters
476484

@@ -480,7 +488,7 @@ POST /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatereq
480488
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
481489

482490

483-
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
491+
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
484492

485493

486494

@@ -509,11 +517,11 @@ POST /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatereq
509517
#### Response
510518

511519

512-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
520+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
513521

514-
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
522+
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
515523

516-
202 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Accepted
524+
202 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Accepted
517525

518526
401: Unauthorized
519527

@@ -522,7 +530,7 @@ POST /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatereq
522530

523531
#### HTTP Request
524532

525-
PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}
533+
PUT /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}
526534

527535
#### Parameters
528536

@@ -537,7 +545,7 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
537545
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
538546

539547

540-
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
548+
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
541549

542550

543551

@@ -566,9 +574,9 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
566574
#### Response
567575

568576

569-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
577+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
570578

571-
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
579+
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
572580

573581
401: Unauthorized
574582

@@ -577,7 +585,7 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
577585

578586
#### HTTP Request
579587

580-
PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}/status
588+
PUT /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}/status
581589

582590
#### Parameters
583591

@@ -592,7 +600,7 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
592600
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
593601

594602

595-
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
603+
- **body**: <a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>, required
596604

597605

598606

@@ -621,9 +629,9 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
621629
#### Response
622630

623631

624-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
632+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
625633

626-
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
634+
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
627635

628636
401: Unauthorized
629637

@@ -632,7 +640,7 @@ PUT /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequ
632640

633641
#### HTTP Request
634642

635-
PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}
643+
PATCH /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}
636644

637645
#### Parameters
638646

@@ -681,9 +689,9 @@ PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatere
681689
#### Response
682690

683691

684-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
692+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
685693

686-
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
694+
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
687695

688696
401: Unauthorized
689697

@@ -692,7 +700,7 @@ PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatere
692700

693701
#### HTTP Request
694702

695-
PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}/status
703+
PATCH /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}/status
696704

697705
#### Parameters
698706

@@ -741,9 +749,9 @@ PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatere
741749
#### Response
742750

743751

744-
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
752+
200 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): OK
745753

746-
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1alpha1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
754+
201 (<a href="{{< ref "../authentication-resources/pod-certificate-request-v1beta1#PodCertificateRequest" >}}">PodCertificateRequest</a>): Created
747755

748756
401: Unauthorized
749757

@@ -752,7 +760,7 @@ PATCH /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificatere
752760

753761
#### HTTP Request
754762

755-
DELETE /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}
763+
DELETE /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}
756764

757765
#### Parameters
758766

@@ -812,7 +820,7 @@ DELETE /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificater
812820

813821
#### HTTP Request
814822

815-
DELETE /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests
823+
DELETE /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests
816824

817825
#### Parameters
818826

‎content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -358,6 +358,12 @@ NodeStatus is information about the current status of a node.
358358

359359
Port number of the given endpoint.
360360

361+
- **declaredFeatures** ([]string)
362+
363+
*Atomic: will be replaced during a merge*
364+
365+
DeclaredFeatures represents the features related to feature gates that are declared by the node.
366+
361367
- **features** (NodeFeatures)
362368

363369
Features describes the set of features implemented by the CRI implementation.

‎content/en/docs/reference/kubernetes-api/cluster-resources/runtime-class-v1.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,11 +84,13 @@ RuntimeClass defines a class of container runtime supported in the cluster. The
8484

8585
- **scheduling.tolerations.operator** (string)
8686

87-
Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category.
87+
Operator represents a key's relationship to the value. Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
8888

8989
Possible enum values:
9090
- `"Equal"`
9191
- `"Exists"`
92+
- `"Gt"`
93+
- `"Lt"`
9294

9395
- **scheduling.tolerations.value** (string)
9496

‎content/en/docs/reference/kubernetes-api/common-definitions/status.md‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,8 +40,6 @@ Status is a return value for calls that don't return other objects.
4040

4141
- **details** (StatusDetails)
4242

43-
*Atomic: will be replaced during a merge*
44-
4543
Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.
4644

4745
<a name="StatusDetails"></a>

‎content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,18 @@ CSIDriverSpec is the specification of a CSIDriver.
107107

108108
Default is "false".
109109

110+
- **serviceAccountTokenInSecrets** (boolean)
111+
112+
serviceAccountTokenInSecrets is an opt-in for CSI drivers to indicate that service account tokens should be passed via the Secrets field in NodePublishVolumeRequest instead of the VolumeContext field. The CSI specification provides a dedicated Secrets field for sensitive information like tokens, which is the appropriate mechanism for handling credentials. This addresses security concerns where sensitive tokens were being logged as part of volume context.
113+
114+
When "true", kubelet will pass the tokens only in the Secrets field with the key "csi.storage.k8s.io/serviceAccount.tokens". The CSI driver must be updated to read tokens from the Secrets field instead of VolumeContext.
115+
116+
When "false" or not set, kubelet will pass the tokens in VolumeContext with the key "csi.storage.k8s.io/serviceAccount.tokens" (existing behavior). This maintains backward compatibility with existing CSI drivers.
117+
118+
This field can only be set when TokenRequests is configured. The API server will reject CSIDriver specs that set this field without TokenRequests.
119+
120+
Default behavior if unset is to pass tokens in the VolumeContext field.
121+
110122
- **storageCapacity** (boolean)
111123

112124
storageCapacity indicates that the CSI volume driver wants pod scheduling to consider the storage capacity that the driver deployment will report by creating CSIStorageCapacity objects with capacity information, if set to true.

0 commit comments

Comments
 (0)