Update dependency kubernetes to v27

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
kubernetes	`==11.0.0` -> `==27.2.0`

Release Notes

kubernetes-client/python (kubernetes)

### [`v27.2.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2720a1) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v26.1.0...v27.2.0) Kubernetes API Version: v1.27.2 ##### API Change - Added error handling for seccomp localhost configurations that do not properly set a localhostProfile ([kubernetes/kubernetes#117020](https://togithub.com/kubernetes/kubernetes/pull/117020), [@cji](https://togithub.com/cji)) \[SIG API Machinery and Node] - Fixed an issue where kubelet does not set case-insensitive headers for http probes. ([#117182](https://togithub.com/kubernetes-client/python/issues/117182), [@dddddai](https://togithub.com/dddddai)) ([kubernetes/kubernetes#117324](https://togithub.com/kubernetes/kubernetes/pull/117324), [@dddddai](https://togithub.com/dddddai)) \[SIG API Machinery, Apps and Node] - Revised the comment about the feature-gate level for PodFailurePolicy from alpha to beta ([kubernetes/kubernetes#117815](https://togithub.com/kubernetes/kubernetes/pull/117815), [@kerthcet](https://togithub.com/kerthcet)) \[SIG Apps] - A fix in the `resource.k8s.io/v1alpha1/ResourceClaim` API avoids harmless (?) ".status.reservedFor: element 0: associative list without keys has an element that's a map type" errors in the apiserver. Validation now rejects the incorrect reuse of the same UID in different entries. ([kubernetes/kubernetes#115354](https://togithub.com/kubernetes/kubernetes/pull/115354), [@pohly](https://togithub.com/pohly)) - A terminating pod on a node that is not caused by preemption no longer prevents `kube-scheduler` from preempting pods on that node - Rename `PreemptionByKubeScheduler` to `PreemptionByScheduler` ([kubernetes/kubernetes#114623](https://togithub.com/kubernetes/kubernetes/pull/114623), [@Huang-Wei](https://togithub.com/Huang-Wei)) - API: resource.k8s.io/v1alpha1.PodScheduling was renamed to resource.k8s.io/v1alpha2.PodSchedulingContext. ([kubernetes/kubernetes#116556](https://togithub.com/kubernetes/kubernetes/pull/116556), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery, Apps, Auth, CLI, Node, Scheduling and Testing] - Added CEL runtime cost calculation into ValidatingAdmissionPolicy, matching the evaluation cost restrictions that already apply to CustomResourceDefinition. If rule evaluation uses more compute than the limit, the API server aborts the evaluation and the admission check that was being performed is aborted; the `failurePolicy` for the ValidatingAdmissionPolicy determines the outcome. ([kubernetes/kubernetes#115747](https://togithub.com/kubernetes/kubernetes/pull/115747), [@cici37](https://togithub.com/cici37)) - Added `auditAnnotations` to `ValidatingAdmissionPolicy`, enabling CEL to be used to add audit annotations to request audit events. Added `validationActions` to `ValidatingAdmissionPolicyBinding`, enabling validation failures to be handled by any combination of the warn, audit and deny enforcement actions. ([kubernetes/kubernetes#115973](https://togithub.com/kubernetes/kubernetes/pull/115973), [@jpbetz](https://togithub.com/jpbetz)) - Added `messageExpression` field to `ValidationRule`. ([kubernetes/kubernetes#115969](https://togithub.com/kubernetes/kubernetes/pull/115969), [@DangerOnTheRanger](https://togithub.com/DangerOnTheRanger)) - Added `messageExpression` to `ValidatingAdmissionPolicy`, to set custom failure message via CEL expression. ([kubernetes/kubernetes#116397](https://togithub.com/kubernetes/kubernetes/pull/116397), [@jiahuif](https://togithub.com/jiahuif)) \[SIG API Machinery] - Added a new IPAddress object kind - Added a new ClusterIP allocator. The new allocator removes previous Service CIDR block size limitations for IPv4, and limits IPv6 size to a /64 ([kubernetes/kubernetes#115075](https://togithub.com/kubernetes/kubernetes/pull/115075), [@aojea](https://togithub.com/aojea)) \[SIG API Machinery, Apps, Auth, CLI, Cluster Lifecycle, Network and Testing] - Added a new alpha API: ClusterTrustBundle (`certificates.k8s.io/v1alpha1`). A ClusterTrustBundle may be used to distribute [X.509](https://www.itu.int/rec/T-REC-X.509) trust anchors to workloads within the cluster. ([kubernetes/kubernetes#113218](https://togithub.com/kubernetes/kubernetes/pull/113218), [@ahmedtd](https://togithub.com/ahmedtd)) \[SIG API Machinery, Auth and Testing] - Added authorization check support to the CEL expressions of ValidatingAdmissionPolicy via a `authorizer` variable with expressions. The new variable provides a builder that allows expressions such `authorizer.group('').resource('pods').check('create').allowed()`. ([kubernetes/kubernetes#116054](https://togithub.com/kubernetes/kubernetes/pull/116054), [@jpbetz](https://togithub.com/jpbetz)) \[SIG API Machinery and Testing] - Added matchConditions field to ValidatingAdmissionPolicy and enabled support for CEL based custom match criteria. ([kubernetes/kubernetes#116350](https://togithub.com/kubernetes/kubernetes/pull/116350), [@maxsmythe](https://togithub.com/maxsmythe)) - Added new option to the `InterPodAffinity` scheduler plugin to ignore existing pods`preferred inter-pod affinities if the incoming pod has no preferred inter-pod affinities. This option can be used as an optimization for higher scheduling throughput (at the cost of an occasional pod being scheduled non-optimally/violating existing pods preferred inter-pod affinities). To enable this scheduler option, set the`InterPodAffinity`scheduler plugin arg`ignorePreferredTermsOfExistingPods: true\` ([kubernetes/kubernetes#114393](https://togithub.com/kubernetes/kubernetes/pull/114393), [@danielvegamyhre](https://togithub.com/danielvegamyhre)) - Added the `MatchConditions` field to `ValidatingWebhookConfiguration` and `MutatingWebhookConfiguration` for the v1beta and v1 apis. The `AdmissionWebhookMatchConditions` featuregate is now in Alpha ([kubernetes/kubernetes#116261](https://togithub.com/kubernetes/kubernetes/pull/116261), [@ivelichkovich](https://togithub.com/ivelichkovich)) \[SIG API Machinery and Testing] - Added validation to ensure that if `service.kubernetes.io/topology-aware-hints` and `service.kubernetes.io/topology-mode` annotations are both set, they are set to the same value.Also Added deprecation warning if `service.kubernetes.io/topology-aware-hints` annotation is used. ([kubernetes/kubernetes#116612](https://togithub.com/kubernetes/kubernetes/pull/116612), [@robscott](https://togithub.com/robscott)) - Added warnings about workload resources (Pods, ReplicaSets, Deployments, Jobs, CronJobs, or ReplicationControllers) whose names are not valid DNS labels. ([kubernetes/kubernetes#114412](https://togithub.com/kubernetes/kubernetes/pull/114412), [@thockin](https://togithub.com/thockin)) - Adds feature gate `NodeLogQuery` which provides cluster administrators with a streaming view of logs using kubectl without them having to implement a client side reader or logging into the node. ([kubernetes/kubernetes#96120](https://togithub.com/kubernetes/kubernetes/pull/96120), [@LorbusChris](https://togithub.com/LorbusChris)) - Api: validation of a `PodSpec` now rejects invalid `ResourceClaim` and `ResourceClaimTemplate` names. For a pod, the name generated for the `ResourceClaim` when using a template also must be valid. ([kubernetes/kubernetes#116576](https://togithub.com/kubernetes/kubernetes/pull/116576), [@pohly](https://togithub.com/pohly)) - Bump default API QPS limits for Kubelet. ([kubernetes/kubernetes#116121](https://togithub.com/kubernetes/kubernetes/pull/116121), [@wojtek-t](https://togithub.com/wojtek-t)) - Enabled the `StatefulSetStartOrdinal` feature gate in beta ([kubernetes/kubernetes#115260](https://togithub.com/kubernetes/kubernetes/pull/115260), [@pwschuurman](https://togithub.com/pwschuurman)) - Enabled usage of `kube-proxy`, `kube-scheduler` and `kubelet` HTTP APIs for changing the logging verbosity at runtime for JSON output. ([kubernetes/kubernetes#114609](https://togithub.com/kubernetes/kubernetes/pull/114609), [@pohly](https://togithub.com/pohly)) - Encryption of API Server at rest configuration now allows the use of wildcards in the list of resources. For example, *.* can be used to encrypt all resources, including all current and future custom resources. ([kubernetes/kubernetes#115149](https://togithub.com/kubernetes/kubernetes/pull/115149), [@nilekhc](https://togithub.com/nilekhc)) - Extended the kubelet's PodResources API to include resources allocated in `ResourceClaims` via `DynamicResourceAllocation`. Additionally, added a new `Get()` method to query a specific pod for its resources. ([kubernetes/kubernetes#115847](https://togithub.com/kubernetes/kubernetes/pull/115847), [@moshe010](https://togithub.com/moshe010)) \[SIG Node] - Forbid to set matchLabelKeys when labelSelector is not set in topologySpreadConstraints ([kubernetes/kubernetes#116535](https://togithub.com/kubernetes/kubernetes/pull/116535), [@denkensk](https://togithub.com/denkensk)) - GCE does not support LoadBalancer Services with ports with different protocols (TCP and UDP) ([kubernetes/kubernetes#115966](https://togithub.com/kubernetes/kubernetes/pull/115966), [@aojea](https://togithub.com/aojea)) \[SIG Apps and Cloud Provider] - GRPC probes are now a GA feature. `GRPCContainerProbe` feature gate was locked to default value and will be removed in v1.29. If you were setting this feature gate explicitly, please remove it now. ([kubernetes/kubernetes#116233](https://togithub.com/kubernetes/kubernetes/pull/116233), [@SergeyKanzhelev](https://togithub.com/SergeyKanzhelev)) - Graduated `Kubelet Topology Manager` to GA. ([kubernetes/kubernetes#116093](https://togithub.com/kubernetes/kubernetes/pull/116093), [@swatisehgal](https://togithub.com/swatisehgal)) - Graduated `KubeletTracing` to beta, which means that the feature gate is now enabled by default. ([kubernetes/kubernetes#115750](https://togithub.com/kubernetes/kubernetes/pull/115750), [@saschagrunert](https://togithub.com/saschagrunert)) - Graduated seccomp profile defaulting to GA. Set the kubelet `--seccomp-default` flag or `seccompDefault` kubelet configuration field to `true` to make pods on that node default to using the `RuntimeDefault` seccomp profile. Enabling seccomp for your workload can have a negative performance impact depending on the kernel and container runtime version in use. Guidance for identifying and mitigating those issues is outlined in the Kubernetes [seccomp tutorial](https://k8s.io/docs/tutorials/security/seccomp). ([kubernetes/kubernetes#115719](https://togithub.com/kubernetes/kubernetes/pull/115719), [@saschagrunert](https://togithub.com/saschagrunert)) \[SIG API Machinery, Node, Storage and Testing] - Graduated the container resource metrics feature on `HPA` to beta. ([kubernetes/kubernetes#116046](https://togithub.com/kubernetes/kubernetes/pull/116046), [@sanposhiho](https://togithub.com/sanposhiho)) - Implemented API streaming for the `watch-cache` When `sendInitialEvents` `ListOption` is set together with `watch=true`, it begins the watch stream with synthetic init events followed by a synthetic "Bookmark" after which the server continues streaming events. ([kubernetes/kubernetes#110960](https://togithub.com/kubernetes/kubernetes/pull/110960), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) - Introduced API for streaming. Added `SendInitialEvents` field to the `ListOptions`. When the new option is set together with `watch=true`, it begins the watch stream with synthetic init events followed by a synthetic "Bookmark" after which the server continues streaming events. ([kubernetes/kubernetes#115402](https://togithub.com/kubernetes/kubernetes/pull/115402), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) - Introduced a breaking change to the `resource.k8s.io` API in its `AllocationResult` struct. This change allows a kubelet plugin for the `DynamicResourceAllocation` feature to service allocations from multiple resource driver controllers. ([kubernetes/kubernetes#116332](https://togithub.com/kubernetes/kubernetes/pull/116332), [@klueska](https://togithub.com/klueska)) - Introduces new alpha functionality to the reflector, allowing user to enable API streaming. To activate this feature, users can set the `ENABLE_CLIENT_GO_WATCH_LIST_ALPHA` environmental variable. It is important to note that the server must support streaming for this feature to function properly. If streaming is not supported by the server, the reflector will revert to the previous method of obtaining data through LIST/WATCH semantics. ([kubernetes/kubernetes#110772](https://togithub.com/kubernetes/kubernetes/pull/110772), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) \[SIG API Machinery] - K8s.io/client-go/tools/record.EventBroadcaster: after Shutdown() is called, the broadcaster now gives up immediately after a failure to write an event to a sink. Previously it tried multiple times for 12 seconds in a goroutine. ([kubernetes/kubernetes#115514](https://togithub.com/kubernetes/kubernetes/pull/115514), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery] - K8s.io/component-base/logs: usage of the pflag values in a normal Go flag set led to panics when printing the help message ([kubernetes/kubernetes#114680](https://togithub.com/kubernetes/kubernetes/pull/114680), [@pohly](https://togithub.com/pohly)) \[SIG Instrumentation] - Kubeadm: explicitly set `priority` for static pods with `priorityClassName: system-node-critical` ([kubernetes/kubernetes#114338](https://togithub.com/kubernetes/kubernetes/pull/114338), [@champtar](https://togithub.com/champtar)) \[SIG Cluster Lifecycle] - Kubelet: a "maxParallelImagePulls" field can now be specified in the kubelet configuration file to control how many image pulls the kubelet can perform in parallel. ([kubernetes/kubernetes#115220](https://togithub.com/kubernetes/kubernetes/pull/115220), [@ruiwen-zhao](https://togithub.com/ruiwen-zhao)) \[SIG API Machinery, Node and Scalability] - Kubelet: changed `MemoryThrottlingFactor` default value to `0.9` and formulas to calculate `memory.high` ([kubernetes/kubernetes#115371](https://togithub.com/kubernetes/kubernetes/pull/115371), [@pacoxu](https://togithub.com/pacoxu)) - Kubernetes components that perform leader election now only support using `Leases` for this. ([kubernetes/kubernetes#114055](https://togithub.com/kubernetes/kubernetes/pull/114055), [@aimuz](https://togithub.com/aimuz)) - Migrated the `DaemonSet` controller (within `kube-controller-manager`) to use [contextual logging](https://k8s.io/docs/concepts/cluster-administration/system-logs/#contextual-logging) ([kubernetes/kubernetes#113622](https://togithub.com/kubernetes/kubernetes/pull/113622), [@249043822](https://togithub.com/249043822)) - New `service.kubernetes.io/topology-mode` annotation has been introduced as a replacement for the `service.kubernetes.io/topology-aware-hints` annotation. - `service.kubernetes.io/topology-aware-hints` annotation has been deprecated. - kube-proxy now accepts any value that is not "disabled" for these annotations, enabling custom implementation-specific and/or future built-in heuristics to be used. ([kubernetes/kubernetes#116522](https://togithub.com/kubernetes/kubernetes/pull/116522), [@robscott](https://togithub.com/robscott)) \[SIG Apps, Network and Testing] - Pods owned by a Job now uses the labels `batch.kubernetes.io/job-name` and `batch.kubernetes.io/controller-uid`. The legacy labels `job-name` and `controller-uid` are still added for compatibility. ([kubernetes/kubernetes#114930](https://togithub.com/kubernetes/kubernetes/pull/114930), [@kannon92](https://togithub.com/kannon92)) - Promoted `CronJobTimeZone` feature to GA ([kubernetes/kubernetes#115904](https://togithub.com/kubernetes/kubernetes/pull/115904), [@soltysh](https://togithub.com/soltysh)) - Promoted `SelfSubjectReview` to Beta ([kubernetes/kubernetes#116274](https://togithub.com/kubernetes/kubernetes/pull/116274), [@nabokihms](https://togithub.com/nabokihms)) \[SIG API Machinery, Auth, CLI and Testing] - Relaxed API validation to allow pod node selector to be mutable for gated pods (additions only, no deletions or mutations). ([kubernetes/kubernetes#116161](https://togithub.com/kubernetes/kubernetes/pull/116161), [@danielvegamyhre](https://togithub.com/danielvegamyhre)) - Remove `kubernetes.io/grpc` standard appProtocol ([kubernetes/kubernetes#116866](https://togithub.com/kubernetes/kubernetes/pull/116866), [@LiorLieberman](https://togithub.com/LiorLieberman)) \[SIG API Machinery and Apps] - Remove deprecated `--enable-taint-manager` and `--pod-eviction-timeout` CLI ([kubernetes/kubernetes#115840](https://togithub.com/kubernetes/kubernetes/pull/115840), [@atosatto](https://togithub.com/atosatto)) - Removed support for the `v1alpha1` kubeletplugin API of `DynamicResourceManagement`. All plugins must be updated to `v1alpha2` in order to function properly. ([kubernetes/kubernetes#116558](https://togithub.com/kubernetes/kubernetes/pull/116558), [@klueska](https://togithub.com/klueska)) - The API server now re-uses data encryption keys while the kms v2 plugin key ID is stable. Data encryption keys are still randomly generated on server start but an atomic counter is used to prevent nonce collisions. ([kubernetes/kubernetes#116155](https://togithub.com/kubernetes/kubernetes/pull/116155), [@enj](https://togithub.com/enj)) - The PodDisruptionBudget `spec.unhealthyPodEvictionPolicy` field has graduated to beta and is enabled by default. On servers with the feature enabled, this field may be set to `AlwaysAllow` to always allow unhealthy pods covered by the PodDisruptionBudget to be evicted. ([kubernetes/kubernetes#115363](https://togithub.com/kubernetes/kubernetes/pull/115363), [@ravisantoshgudimetla](https://togithub.com/ravisantoshgudimetla)) \[SIG Apps, Auth and Node] - The `DownwardAPIHugePages` kubelet feature graduated to stable / GA. ([kubernetes/kubernetes#115721](https://togithub.com/kubernetes/kubernetes/pull/115721), [@saschagrunert](https://togithub.com/saschagrunert)) \[SIG Apps and Node] - The following feature gates for volume expansion GA features have now been removed and must no longer be referenced in `--feature-gates` flags: `ExpandCSIVolumes`, `ExpandInUsePersistentVolumes`, `ExpandPersistentVolumes` ([kubernetes/kubernetes#113942](https://togithub.com/kubernetes/kubernetes/pull/113942), [@mengjiao-liu](https://togithub.com/mengjiao-liu)) - The list-type of the alpha `resourceClaims` field introduced to `Pods` in `1.26.0` was modified from `set` to `map`, resolving an incompatibility with use of this schema in `CustomResourceDefinitions` and with server-side apply. ([kubernetes/kubernetes#114585](https://togithub.com/kubernetes/kubernetes/pull/114585), [@JoelSpeed](https://togithub.com/JoelSpeed)) - Updated API reference for Requests, specifying they must not exceed limits ([kubernetes/kubernetes#115434](https://togithub.com/kubernetes/kubernetes/pull/115434), [@ehashman](https://togithub.com/ehashman)) - Updated `KMSv2` to beta ([kubernetes/kubernetes#115123](https://togithub.com/kubernetes/kubernetes/pull/115123), [@aramase](https://togithub.com/aramase)) - Updated: Redefine AppProtocol field description and add new standard values ([kubernetes/kubernetes#115433](https://togithub.com/kubernetes/kubernetes/pull/115433), [@LiorLieberman](https://togithub.com/LiorLieberman)) \[SIG API Machinery, Apps and Network] - `/metrics/slis` is now available for control plane components allowing you to scrape health check metrics. ([kubernetes/kubernetes#114997](https://togithub.com/kubernetes/kubernetes/pull/114997), [@Richabanker](https://togithub.com/Richabanker)) - `APIServerTracing` feature gate is now enabled by default. Tracing in the API Server is still disabled by default, and requires a config file to enable. ([kubernetes/kubernetes#116144](https://togithub.com/kubernetes/kubernetes/pull/116144), [@dashpole](https://togithub.com/dashpole)) - `NodeResourceFit` and `NodeResourcesBalancedAllocation` implement the `PreScore` extension point for a more performant calculation. ([kubernetes/kubernetes#115655](https://togithub.com/kubernetes/kubernetes/pull/115655), [@tangwz](https://togithub.com/tangwz)) - `PodSchedulingReadiness` is graduated to beta. ([kubernetes/kubernetes#115815](https://togithub.com/kubernetes/kubernetes/pull/115815), [@Huang-Wei](https://togithub.com/Huang-Wei)) - `PodSpec.Container.Resources` became mutable for CPU and memory resource types. - `PodSpec.Container.ResizePolicy` (new object) gives users control over how their containers are resized. - `PodStatus.Resize` status describes the state of a requested Pod resize. - `PodStatus.ResourcesAllocated` describes node resources allocated to Pod. - `PodStatus.Resources` describes node resources applied to running containers by CRI. - `UpdateContainerResources` CRI API now supports both Linux and Windows. ([kubernetes/kubernetes#102884](https://togithub.com/kubernetes/kubernetes/pull/102884), [@vinaykul](https://togithub.com/vinaykul)) - `SELinuxMountReadWriteOncePod` graduated to Beta. ([kubernetes/kubernetes#116425](https://togithub.com/kubernetes/kubernetes/pull/116425), [@jsafrane](https://togithub.com/jsafrane)) - `StatefulSetAutoDeletePVC` feature gate promoted to beta. ([kubernetes/kubernetes#116501](https://togithub.com/kubernetes/kubernetes/pull/116501), [@mattcary](https://togithub.com/mattcary)) - `StatefulSet` names must be DNS labels, rather than subdomains. Any `StatefulSet` which took advantage of subdomain validation (by having dots in the name) can't possibly have worked, because we eventually set `pod.spec.hostname` from the `StatefulSetName`, and that is validated as a DNS label. ([kubernetes/kubernetes#114172](https://togithub.com/kubernetes/kubernetes/pull/114172), [@thockin](https://togithub.com/thockin)) - `ValidatingAdmissionPolicy` now provides a status field that contains results of type checking the validation expression. The type checking is fully informational, and the behavior of the policy is unchanged. ([kubernetes/kubernetes#115668](https://togithub.com/kubernetes/kubernetes/pull/115668), [@jiahuif](https://togithub.com/jiahuif)) - `cacheSize` field in `EncryptionConfiguration` is not supported for KMSv2 provider ([kubernetes/kubernetes#113121](https://togithub.com/kubernetes/kubernetes/pull/113121), [@aramase](https://togithub.com/aramase)) - `k8s.io/component-base/logs` now also supports adding command line flags to a `flag.FlagSet`. ([kubernetes/kubernetes#114731](https://togithub.com/kubernetes/kubernetes/pull/114731), [@pohly](https://togithub.com/pohly)) - `kubelet`: migrated `--container-runtime-endpoint` and `--image-service-endpoint` to kubelet config ([kubernetes/kubernetes#112136](https://togithub.com/kubernetes/kubernetes/pull/112136), [@pacoxu](https://togithub.com/pacoxu)) - `resource.k8s.io/v1alpha1` was replaced with `resource.k8s.io/v1alpha2`. Before upgrading a cluster, all objects in resource.k8s.io/v1alpha1 (ResourceClaim, ResourceClaimTemplate, ResourceClass, PodScheduling) must be deleted. The changes are internal, so YAML files which create pods and resource claims don't need changes except for the newer `apiVersion`. ([kubernetes/kubernetes#116299](https://togithub.com/kubernetes/kubernetes/pull/116299), [@pohly](https://togithub.com/pohly)) - `volumes`: `resource.claims` is now cleared for PVC specs during create or update of a pod spec with inline PVC template or of a PVC because it has no effect. ([kubernetes/kubernetes#115928](https://togithub.com/kubernetes/kubernetes/pull/115928), [@pohly](https://togithub.com/pohly)) - Added a new alpha API: ClusterTrustBundle (`certificates.k8s.io/v1alpha1`). A ClusterTrustBundle may be used to distribute [X.509](https://www.itu.int/rec/T-REC-X.509) trust anchors to workloads within the cluster. ([kubernetes/kubernetes#113218](https://togithub.com/kubernetes/kubernetes/pull/113218), [@ahmedtd](https://togithub.com/ahmedtd)) \[SIG API Machinery, Auth and Testing] - Remove `kubernetes.io/grpc` standard appProtocol ([kubernetes/kubernetes#116866](https://togithub.com/kubernetes/kubernetes/pull/116866), [@LiorLieberman](https://togithub.com/LiorLieberman)) \[SIG API Machinery and Apps] - API: resource.k8s.io/v1alpha1.PodScheduling was renamed to resource.k8s.io/v1alpha2.PodSchedulingContext. ([kubernetes/kubernetes#116556](https://togithub.com/kubernetes/kubernetes/pull/116556), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery, Apps, Auth, CLI, Node, Scheduling and Testing] - APIServerTracing feature gate is now enabled by default. Tracing in the API Server is still disabled by default, and requires a config file to enable. ([kubernetes/kubernetes#116144](https://togithub.com/kubernetes/kubernetes/pull/116144), [@dashpole](https://togithub.com/dashpole)) \[SIG API Machinery and Testing] - Added CEL runtime cost calculation into ValidatingAdmissionPolicy, matching the evaluation cost restrictions that already apply to CustomResourceDefinition. If rule evaluation uses more compute than the limit, the API server aborts the evaluation and the admission check that was being performed is aborted; the `failurePolicy` for the ValidatingAdmissionPolicy determines the outcome. ([kubernetes/kubernetes#115747](https://togithub.com/kubernetes/kubernetes/pull/115747), [@cici37](https://togithub.com/cici37)) \[SIG API Machinery] - Added `messageExpression` to `ValidatingAdmissionPolicy`, to set custom failure message via CEL expression. ([kubernetes/kubernetes#116397](https://togithub.com/kubernetes/kubernetes/pull/116397), [@jiahuif](https://togithub.com/jiahuif)) \[SIG API Machinery] - Added a new IPAddress object kind - Added a new ClusterIP allocator. The new allocator removes previous Service CIDR block size limitations for IPv4, and limits IPv6 size to a /64 ([kubernetes/kubernetes#115075](https://togithub.com/kubernetes/kubernetes/pull/115075), [@aojea](https://togithub.com/aojea)) \[SIG API Machinery, Apps, Auth, CLI, Cluster Lifecycle, Network and Testing] - Added a new alpha API: ClusterTrustBundle (`certificates.k8s.io/v1alpha1`). A ClusterTrustBundle may be used to distribute [X.509](https://www.itu.int/rec/T-REC-X.509) trust anchors to workloads within the cluster. ([kubernetes/kubernetes#113218](https://togithub.com/kubernetes/kubernetes/pull/113218), [@ahmedtd](https://togithub.com/ahmedtd)) \[SIG API Machinery, Auth and Testing] - Added authorization check support to the CEL expressions of ValidatingAdmissionPolicy via a `authorizer` variable with expressions. The new variable provides a builder that allows expressions such `authorizer.group('').resource('pods').check('create').allowed()`. ([kubernetes/kubernetes#116054](https://togithub.com/kubernetes/kubernetes/pull/116054), [@jpbetz](https://togithub.com/jpbetz)) \[SIG API Machinery and Testing] - Added matchConditions field to ValidatingAdmissionPolicy, enabled support for CEL based custom match criteria. ([kubernetes/kubernetes#116350](https://togithub.com/kubernetes/kubernetes/pull/116350), [@maxsmythe](https://togithub.com/maxsmythe)) \[SIG API Machinery and Testing] - Added messageExpression field to ValidationRule. ([#115969](https://togithub.com/kubernetes-client/python/issues/115969), [@DangerOnTheRanger](https://togithub.com/DangerOnTheRanger)) ([kubernetes/kubernetes#115969](https://togithub.com/kubernetes/kubernetes/pull/115969), [@DangerOnTheRanger](https://togithub.com/DangerOnTheRanger)) \[SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Instrumentation, Node and Testing] - Added the `MatchConditions` field to `ValidatingWebhookConfiguration` and `MutatingWebhookConfiguration` for the v1beta and v1 apis. The `AdmissionWebhookMatchConditions` featuregate is now in Alpha ([kubernetes/kubernetes#116261](https://togithub.com/kubernetes/kubernetes/pull/116261), [@ivelichkovich](https://togithub.com/ivelichkovich)) \[SIG API Machinery and Testing] - Added validation to ensure that if `service.kubernetes.io/topology-aware-hints` and `service.kubernetes.io/topology-mode` annotations are both set, they are set to the same value. - Added deprecation warning if `service.kubernetes.io/topology-aware-hints` annotation is used. ([kubernetes/kubernetes#116612](https://togithub.com/kubernetes/kubernetes/pull/116612), [@robscott](https://togithub.com/robscott)) \[SIG Apps, Network and Testing] - Adds auditAnnotations to ValidatingAdmissionPolicy, enabling CEL to be used to add audit annotations to request audit events. Adds validationActions to ValidatingAdmissionPolicyBinding, enabling validation failures to be handled by any combination of the warn, audit and deny enforcement actions. ([kubernetes/kubernetes#115973](https://togithub.com/kubernetes/kubernetes/pull/115973), [@jpbetz](https://togithub.com/jpbetz)) \[SIG API Machinery and Testing] - Adds feature gate `NodeLogQuery` which provides cluster administrators with a streaming view of logs using kubectl without them having to implement a client side reader or logging into the node. ([kubernetes/kubernetes#96120](https://togithub.com/kubernetes/kubernetes/pull/96120), [@LorbusChris](https://togithub.com/LorbusChris)) \[SIG API Machinery, Apps, CLI, Node, Testing and Windows] - Api: validation of a PodSpec now rejects invalid ResourceClaim and ResourceClaimTemplate names. For a pod, the name generated for the ResourceClaim when using a template also must be valid. ([kubernetes/kubernetes#116576](https://togithub.com/kubernetes/kubernetes/pull/116576), [@pohly](https://togithub.com/pohly)) \[SIG Apps] - Bump default API QPS limits for Kubelet. ([kubernetes/kubernetes#116121](https://togithub.com/kubernetes/kubernetes/pull/116121), [@wojtek-t](https://togithub.com/wojtek-t)) \[SIG API Machinery and Node] - Enable the "StatefulSetStartOrdinal" feature gate in beta ([kubernetes/kubernetes#115260](https://togithub.com/kubernetes/kubernetes/pull/115260), [@pwschuurman](https://togithub.com/pwschuurman)) \[SIG API Machinery and Apps] - Extended the kubelet's PodResources API to include resources allocated in `ResourceClaims` via `DynamicResourceAllocation`. Additionally, added a new `Get()` method to query a specific pod for its resources. ([kubernetes/kubernetes#115847](https://togithub.com/kubernetes/kubernetes/pull/115847), [@moshe010](https://togithub.com/moshe010)) \[SIG Node] - Forbid to set matchLabelKeys when labelSelector isn’t set in topologySpreadConstraints ([kubernetes/kubernetes#116535](https://togithub.com/kubernetes/kubernetes/pull/116535), [@denkensk](https://togithub.com/denkensk)) \[SIG API Machinery, Apps and Scheduling] - GCE does not support LoadBalancer Services with ports with different protocols (TCP and UDP) ([kubernetes/kubernetes#115966](https://togithub.com/kubernetes/kubernetes/pull/115966), [@aojea](https://togithub.com/aojea)) \[SIG Apps and Cloud Provider] - GRPC probes are now a GA feature. GRPCContainerProbe feature gate was locked to default value and will be removed in v1.29. If you were setting this feature gate explicitly, please remove it now. ([kubernetes/kubernetes#116233](https://togithub.com/kubernetes/kubernetes/pull/116233), [@SergeyKanzhelev](https://togithub.com/SergeyKanzhelev)) \[SIG API Machinery, Apps and Node] - Graduate Kubelet Topology Manager to GA. ([kubernetes/kubernetes#116093](https://togithub.com/kubernetes/kubernetes/pull/116093), [@swatisehgal](https://togithub.com/swatisehgal)) \[SIG API Machinery, Node and Testing] - Graduate `KubeletTracing` to beta, which means that the feature gate is now enabled by default. ([kubernetes/kubernetes#115750](https://togithub.com/kubernetes/kubernetes/pull/115750), [@saschagrunert](https://togithub.com/saschagrunert)) \[SIG Instrumentation and Node] - Graduate the container resource metrics feature on HPA to beta. ([kubernetes/kubernetes#116046](https://togithub.com/kubernetes/kubernetes/pull/116046), [@sanposhiho](https://togithub.com/sanposhiho)) \[SIG Autoscaling] - Introduced a breaking change to the `resource.k8s.io` API in its `AllocationResult` struct. This change allows a kubelet plugin for the `DynamicResourceAllocation` feature to service allocations from multiple resource driver controllers. ([kubernetes/kubernetes#116332](https://togithub.com/kubernetes/kubernetes/pull/116332), [@klueska](https://togithub.com/klueska)) \[SIG API Machinery, Apps, CLI, Node, Scheduling and Testing] - Introduces new alpha functionality to the reflector, allowing user to enable API streaming. To activate this feature, users can set the `ENABLE_CLIENT_GO_WATCH_LIST_ALPHA` environmental variable. It is important to note that the server must support streaming for this feature to function properly. If streaming is not supported by the server, the reflector will revert to the previous method of obtaining data through LIST/WATCH semantics. ([kubernetes/kubernetes#110772](https://togithub.com/kubernetes/kubernetes/pull/110772), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) \[SIG API Machinery] - Kubelet: change MemoryThrottlingFactor default value to 0.9 and formulas to calculate memory.high ([kubernetes/kubernetes#115371](https://togithub.com/kubernetes/kubernetes/pull/115371), [@pacoxu](https://togithub.com/pacoxu)) \[SIG API Machinery, Apps and Node] - Migrated the DaemonSet controller (within \`kube-controller-manager) to use [contextual logging](https://k8s.io/docs/concepts/cluster-administration/system-logs/#contextual-logging) ([kubernetes/kubernetes#113622](https://togithub.com/kubernetes/kubernetes/pull/113622), [@249043822](https://togithub.com/249043822)) \[SIG API Machinery, Apps, Instrumentation and Testing] - New `service.kubernetes.io/topology-mode` annotation has been introduced as a replacement for the `service.kubernetes.io/topology-aware-hints` annotation. - `service.kubernetes.io/topology-aware-hints` annotation has been deprecated. - kube-proxy now accepts any value that is not "disabled" for these annotations, enabling custom implementation-specific and/or future built-in heuristics to be used. ([kubernetes/kubernetes#116522](https://togithub.com/kubernetes/kubernetes/pull/116522), [@robscott](https://togithub.com/robscott)) \[SIG Apps, Network and Testing] - NodeResourceFit and NodeResourcesBalancedAllocation implement the PreScore extension point for a more performant calculation. ([kubernetes/kubernetes#115655](https://togithub.com/kubernetes/kubernetes/pull/115655), [@tangwz](https://togithub.com/tangwz)) \[SIG Scheduling] - Pods owned by a Job will now use the labels `batch.kubernetes.io/job-name` and `batch.kubernetes.io/controller-uid`. The legacy labels `job-name` and `controller-uid` are still added for compatibility. ([kubernetes/kubernetes#114930](https://togithub.com/kubernetes/kubernetes/pull/114930), [@kannon92](https://togithub.com/kannon92)) \[SIG Apps] - Promote CronJobTimeZone feature to GA ([kubernetes/kubernetes#115904](https://togithub.com/kubernetes/kubernetes/pull/115904), [@soltysh](https://togithub.com/soltysh)) \[SIG API Machinery and Apps] - Promoted `SelfSubjectReview` to Beta ([kubernetes/kubernetes#116274](https://togithub.com/kubernetes/kubernetes/pull/116274), [@nabokihms](https://togithub.com/nabokihms)) \[SIG API Machinery, Auth, CLI and Testing] - Relax API validation to allow pod node selector to be mutable for gated pods (additions only, no deletions or mutations). ([kubernetes/kubernetes#116161](https://togithub.com/kubernetes/kubernetes/pull/116161), [@danielvegamyhre](https://togithub.com/danielvegamyhre)) \[SIG Apps, Scheduling and Testing] - Remove deprecated `--enable-taint-manager` and `--pod-eviction-timeout` CLI flags ([kubernetes/kubernetes#115840](https://togithub.com/kubernetes/kubernetes/pull/115840), [@atosatto](https://togithub.com/atosatto)) \[SIG API Machinery, Apps, Node and Testing] - Resource.k8s.io/v1alpha1 was replaced with resource.k8s.io/v1alpha2. Before upgrading a cluster, all objects in resource.k8s.io/v1alpha1 (ResourceClaim, ResourceClaimTemplate, ResourceClass, PodScheduling) must be deleted. The changes will be internal, so YAML files which create pods and resource claims don't need changes except for the newer `apiVersion`. ([kubernetes/kubernetes#116299](https://togithub.com/kubernetes/kubernetes/pull/116299), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery, Apps, CLI, Node, Scheduling and Testing] - SELinuxMountReadWriteOncePod graduated to Beta. ([kubernetes/kubernetes#116425](https://togithub.com/kubernetes/kubernetes/pull/116425), [@jsafrane](https://togithub.com/jsafrane)) \[SIG Storage and Testing] - StatefulSetAutoDeletePVC feature gate promoted to beta. ([kubernetes/kubernetes#116501](https://togithub.com/kubernetes/kubernetes/pull/116501), [@mattcary](https://togithub.com/mattcary)) \[SIG Apps, Auth and Testing] - The API server now re-uses data encryption keys while the kms v2 plugin's key ID is stable. Data encryption keys are still randomly generated on server start but an atomic counter is used to prevent nonce collisions. ([kubernetes/kubernetes#116155](https://togithub.com/kubernetes/kubernetes/pull/116155), [@enj](https://togithub.com/enj)) \[SIG API Machinery, Auth and Testing] - The API server's encryption at rest configuration now allows the use of wildcards in the list of resources. For example, '*.*' can be used to encrypt all resources, including all current and future custom resources. ([kubernetes/kubernetes#115149](https://togithub.com/kubernetes/kubernetes/pull/115149), [@nilekhc](https://togithub.com/nilekhc)) \[SIG API Machinery, Auth and Testing] - Update KMSv2 to beta ([kubernetes/kubernetes#115123](https://togithub.com/kubernetes/kubernetes/pull/115123), [@aramase](https://togithub.com/aramase)) \[SIG API Machinery, Auth and Testing] - Updated: Redefine AppProtocol field description and add new standard values ([kubernetes/kubernetes#115433](https://togithub.com/kubernetes/kubernetes/pull/115433), [@LiorLieberman](https://togithub.com/LiorLieberman)) \[SIG API Machinery, Apps and Network] - ValidatingAdmissionPolicy now provides a status field that contains results of type checking the validation expression. The type checking is fully informational, and the behavior of the policy is unchanged. ([kubernetes/kubernetes#115668](https://togithub.com/kubernetes/kubernetes/pull/115668), [@jiahuif](https://togithub.com/jiahuif)) \[SIG API Machinery, Auth, Cloud Provider and Testing] - We have removed support for the v1alpha1 kubeletplugin API of DynamicResourceManagement. All plugins must update to v1alpha2 in order to function properly going forward. ([kubernetes/kubernetes#116558](https://togithub.com/kubernetes/kubernetes/pull/116558), [@klueska](https://togithub.com/klueska)) \[SIG API Machinery, Apps, CLI, Node, Scheduling and Testing] - Graduated seccomp profile defaulting to GA. Set the kubelet `--seccomp-default` flag or `seccompDefault` kubelet configuration field to `true` to make pods on that node default to using the `RuntimeDefault` seccomp profile. Enabling seccomp for your workload can have a negative performance impact depending on the kernel and container runtime version in use. Guidance for identifying and mitigating those issues is outlined in the Kubernetes [seccomp tutorial](https://k8s.io/docs/tutorials/security/seccomp). ([kubernetes/kubernetes#115719](https://togithub.com/kubernetes/kubernetes/pull/115719), [@saschagrunert](https://togithub.com/saschagrunert)) \[SIG API Machinery, Node, Storage and Testing] - Implements API for streaming for the watch-cache When sendInitialEvents ListOption is set together with watch=true, it begins the watch stream with synthetic init events followed by a synthetic "Bookmark" after which the server continues streaming events. ([kubernetes/kubernetes#110960](https://togithub.com/kubernetes/kubernetes/pull/110960), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) \[SIG API Machinery] - Introduce API for streaming. Add SendInitialEvents field to the ListOptions. When the new option is set together with watch=true, it begins the watch stream with synthetic init events followed by a synthetic "Bookmark" after which the server continues streaming events. ([kubernetes/kubernetes#115402](https://togithub.com/kubernetes/kubernetes/pull/115402), [@p0lyn0mial](https://togithub.com/p0lyn0mial)) \[SIG API Machinery] - Kubelet: a "maxParallelImagePulls" field can now be specified in the kubelet configuration file to control how many image pulls the kubelet can perform in parallel. ([kubernetes/kubernetes#115220](https://togithub.com/kubernetes/kubernetes/pull/115220), [@ruiwen-zhao](https://togithub.com/ruiwen-zhao)) \[SIG API Machinery, Node and Scalability] - PodSchedulingReadiness is graduated to beta. ([kubernetes/kubernetes#115815](https://togithub.com/kubernetes/kubernetes/pull/115815), [@Huang-Wei](https://togithub.com/Huang-Wei)) \[SIG API Machinery, Apps, Scheduling and Testing] - In-place resize feature for Kubernetes Pods - Changed the Pod API so that the `resources` defined for containers are mutable for `cpu` and `memory` resource types. - Added `resizePolicy` for containers in a pod to allow users control over how their containers are resized. - Added `allocatedResources` field to container status in pod status that describes the node resources allocated to a pod. - Added `resources` field to container status that reports actual resources applied to running containers. - Added `resize` field to pod status that describes the state of a requested pod resize. For details, see KEPs below. ([kubernetes/kubernetes#102884](https://togithub.com/kubernetes/kubernetes/pull/102884), [@vinaykul](https://togithub.com/vinaykul)) \[SIG API Machinery, Apps, Instrumentation, Node, Scheduling and Testing] - The PodDisruptionBudget `spec.unhealthyPodEvictionPolicy` field has graduated to beta and is enabled by default. On servers with the feature enabled, this field may be set to `AlwaysAllow` to always allow unhealthy pods covered by the PodDisruptionBudget to be evicted. ([kubernetes/kubernetes#115363](https://togithub.com/kubernetes/kubernetes/pull/115363), [@ravisantoshgudimetla](https://togithub.com/ravisantoshgudimetla)) \[SIG Apps, Auth and Node] - The `DownwardAPIHugePages` kubelet feature graduated to stable / GA. ([kubernetes/kubernetes#115721](https://togithub.com/kubernetes/kubernetes/pull/115721), [@saschagrunert](https://togithub.com/saschagrunert)) \[SIG Apps and Node] - Volumes: `resource.claims` gets cleared for PVC specs during create or update of a pod spec with inline PVC template or of a PVC because it has no effect. ([kubernetes/kubernetes#115928](https://togithub.com/kubernetes/kubernetes/pull/115928), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery, Apps and Storage] - A fix in the resource.k8s.io/v1alpha1/ResourceClaim API avoids harmless (?) ".status.reservedFor: element 0: associative list without keys has an element that's a map type" errors in the apiserver. Validation now rejects the incorrect reuse of the same UID in different entries. ([kubernetes/kubernetes#115354](https://togithub.com/kubernetes/kubernetes/pull/115354), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery] - CacheSize field in EncryptionConfiguration is not supported for KMSv2 provider ([kubernetes/kubernetes#113121](https://togithub.com/kubernetes/kubernetes/pull/113121), [@aramase](https://togithub.com/aramase)) \[SIG API Machinery, Auth and Testing] - K8s.io/client-go/tools/record.EventBroadcaster: after Shutdown() is called, the broadcaster now gives up immediately after a failure to write an event to a sink. Previously it tried multiple times for 12 seconds in a goroutine. ([kubernetes/kubernetes#115514](https://togithub.com/kubernetes/kubernetes/pull/115514), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery] - K8s.io/component-base/logs now also supports adding command line flags to a flag.FlagSet. ([kubernetes/kubernetes#114731](https://togithub.com/kubernetes/kubernetes/pull/114731), [@pohly](https://togithub.com/pohly)) \[SIG Architecture] - Update API reference for Requests, specifying they must not exceed limits ([kubernetes/kubernetes#115434](https://togithub.com/kubernetes/kubernetes/pull/115434), [@ehashman](https://togithub.com/ehashman)) \[SIG Architecture, Docs and Node] - `/metrics/slis` is made available for control plane components allowing you to scrape health check metrics. ([kubernetes/kubernetes#114997](https://togithub.com/kubernetes/kubernetes/pull/114997), [@Richabanker](https://togithub.com/Richabanker)) \[SIG API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing] - A terminating pod on a node that is not caused by preemption won't prevent kube-scheduler from preempting pods on that node - Rename 'PreemptionByKubeScheduler' to 'PreemptionByScheduler' ([kubernetes/kubernetes#114623](https://togithub.com/kubernetes/kubernetes/pull/114623), [@Huang-Wei](https://togithub.com/Huang-Wei)) \[SIG Scheduling] - Added new option to the InterPodAffinity scheduler plugin to ignore existing pods\` preferred inter-pod affinities if the incoming pod has no preferred inter-pod affinities. This option can be used as an optimization for higher scheduling throughput (at the cost of an occasional pod being scheduled non-optimally/violating existing pods' preferred inter-pod affinities). To enable this scheduler option, set the InterPodAffinity scheduler plugin arg "ignorePreferredTermsOfExistingPods: true". ([kubernetes/kubernetes#114393](https://togithub.com/kubernetes/kubernetes/pull/114393), [@danielvegamyhre](https://togithub.com/danielvegamyhre)) \[SIG API Machinery and Scheduling] - Added warnings about workload resources (Pods, ReplicaSets, Deployments, Jobs, CronJobs, or ReplicationControllers) whose names are not valid DNS labels. ([kubernetes/kubernetes#114412](https://togithub.com/kubernetes/kubernetes/pull/114412), [@thockin](https://togithub.com/thockin)) \[SIG API Machinery and Apps] - K8s.io/component-base/logs: usage of the pflag values in a normal Go flag set led to panics when printing the help message ([kubernetes/kubernetes#114680](https://togithub.com/kubernetes/kubernetes/pull/114680), [@pohly](https://togithub.com/pohly)) \[SIG Instrumentation] - Kube-proxy, kube-scheduler and kubelet have HTTP APIs for changing the logging verbosity at runtime. This now also works for JSON output. ([kubernetes/kubernetes#114609](https://togithub.com/kubernetes/kubernetes/pull/114609), [@pohly](https://togithub.com/pohly)) \[SIG API Machinery, Architecture, Cloud Provider, Instrumentation and Testing] - Kubeadm: explicitly set `priority` for static pods with `priorityClassName: system-node-critical` ([kubernetes/kubernetes#114338](https://togithub.com/kubernetes/kubernetes/pull/114338), [@champtar](https://togithub.com/champtar)) \[SIG Cluster Lifecycle] - Kubelet: migrate "--container-runtime-endpoint" and "--image-service-endpoint" to kubelet config ([kubernetes/kubernetes#112136](https://togithub.com/kubernetes/kubernetes/pull/112136), [@pacoxu](https://togithub.com/pacoxu)) \[SIG API Machinery, Node and Scalability] - Kubernetes components that perform leader election now only support using Leases for this. ([kubernetes/kubernetes#114055](https://togithub.com/kubernetes/kubernetes/pull/114055), [@aimuz](https://togithub.com/aimuz)) \[SIG API Machinery, Cloud Provider and Scheduling] - StatefulSet names must be DNS labels, rather than subdomains. Any StatefulSet which took advantage of subdomain validation (by having dots in the name) can't possibly have worked, because we eventually set `pod.spec.hostname` from the StatefulSetName, and that is validated as a DNS label. ([kubernetes/kubernetes#114172](https://togithub.com/kubernetes/kubernetes/pull/114172), [@thockin](https://togithub.com/thockin)) \[SIG Apps] - The following feature gates for volume expansion GA features have been removed and must no longer be referenced in `--feature-gates` flags: ExpandCSIVolumes, ExpandInUsePersistentVolumes, ExpandPersistentVolumes ([kubernetes/kubernetes#113942](https://togithub.com/kubernetes/kubernetes/pull/113942), [@mengjiao-liu](https://togithub.com/mengjiao-liu)) \[SIG API Machinery, Apps and Testing] - The list-type of the alpha resourceClaims field introduced to Pods in 1.26.0 was modified from "set" to "map", resolving an incompatibility with use of this schema in CustomResourceDefinitions and with server-side apply. ([kubernetes/kubernetes#114585](https://togithub.com/kubernetes/kubernetes/pull/114585), [@JoelSpeed](https://togithub.com/JoelSpeed)) \[SIG API Machinery] ### [`v26.1.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2610) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v25.3.0...v26.1.0) Kubernetes API Version: v1.26.1 ##### Bug or Regression - The timeout unit of the WSClient update method is now always seconds for both poll and select functions. ([#1976](https://togithub.com/kubernetes-client/python/issues/1976), [@t-yrka](https://togithub.com/t-yrka)) ##### Feature - Adds support for loading CA certificates from a file using the `idp-certificate-authority` key for the oidc plugin. ([#1916](https://togithub.com/kubernetes-client/python/issues/1916), [@vgupta3](https://togithub.com/vgupta3)) ### [`v25.3.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2530) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v24.2.0...v25.3.0) Kubernetes API Version: v1.25.3 ##### Feature - Adds support for loading CA certificates from a file using the `idp-certificate-authority` key for the oidc plugin. ([#1916](https://togithub.com/kubernetes-client/python/issues/1916), [@vgupta3](https://togithub.com/vgupta3)) ### [`v24.2.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2420) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v23.6.0...v24.2.0) Kubernetes API Version: v1.24.2 ##### Uncategorized - The dynamic client now support the `_request_timeout` parameter to configure connection and request timeouts. ([#1732](https://togithub.com/kubernetes-client/python/issues/1732), [@philipp-sontag-by](https://togithub.com/philipp-sontag-by)) ### [`v23.6.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2360) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v23.3.0...v23.6.0) Kubernetes API Version: v1.23.6 ##### API Change - Omits alpha-level enums from the static openapi file captured in api/openapi-spec ([kubernetes/kubernetes#109179](https://togithub.com/kubernetes/kubernetes/pull/109179), [@liggitt](https://togithub.com/liggitt)) \[SIG Apps and Auth] - Fixes a regression in v1beta1 PodDisruptionBudget handling of "strategic merge patch"-type API requests for the `selector` field. Prior to 1.21, these requests would merge `matchLabels` content and replace `matchExpressions` content. In 1.21, patch requests touching the `selector` field started replacing the entire selector. This is consistent with server-side apply and the v1 PodDisruptionBudget behavior, but should not have been changed for v1beta1. ([kubernetes/kubernetes#108139](https://togithub.com/kubernetes/kubernetes/pull/108139), [@liggitt](https://togithub.com/liggitt)) \[SIG Auth and Testing] ### [`v23.3.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2330) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v22.6.0...v23.3.0) Kubernetes API Version: v1.23.4 ### [`v22.6.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2260) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v21.7.0...v22.6.0) Kubernetes API Version: v1.22.6 ##### Bug or Regression - Notable feature additions for async creation of Custom resources using dynamic Client ([#1697](https://togithub.com/kubernetes-client/python/issues/1697), [@venukarnati92](https://togithub.com/venukarnati92)) ##### Feature - Add `utils.create_from_directory` for creating all yaml files in a directory ([#1683](https://togithub.com/kubernetes-client/python/issues/1683), [@dingyiyi0226](https://togithub.com/dingyiyi0226)) ### [`v21.7.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v2170) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v20.13.0...v21.7.0) Kubernetes API Version: v1.21.7 ##### Bug or Regression - Fixed [#741](https://togithub.com/kubernetes-client/python/issues/741), an issue which prevented Kubernetes cluster api-tokens from exec-plugin auth providers from being refreshed after expiry. ([#250](https://togithub.com/kubernetes-client/python/issues/250), [@emenendez](https://togithub.com/emenendez)) - Use select.poll() for exec on linux/darwin to improve scalability of WSClient ([#268](https://togithub.com/kubernetes-client/python/issues/268), [@jsun-splunk](https://togithub.com/jsun-splunk)) ### [`v20.13.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v20130) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v19.15.0...v20.13.0) Kubernetes API Version: v1.20.13 ### [`v19.15.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v19150) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v18.20.0...v19.15.0) Kubernetes API Version: v1.19.15 ##### Feature - The new parameter 'no_proxy' has been added to configuration for the REST and websocket client. ([kubernetes-client/python#1579](https://togithub.com/kubernetes-client/python/pull/1579), [@itaru2622](https://togithub.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622))//github.com/itaru2622)) ### [`v18.20.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v18200) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v17.17.0...v18.20.0) Kubernetes API Version: 1.18.20 ##### Feature - Support for the dryRun parameter has been added to the dynamic client. ([kubernetes-client/python-base#247](https://togithub.com/kubernetes-client/python-base/pull/247), [@gravesm](https://togithub.com/gravesm)) - The `python2` support will be removed in 18.0.0 beta release. All the tests will use `python3` versions. ([kubernetes-client/python-base#238](https://togithub.com/kubernetes-client/python-base/pull/238), [@Priyankasaggu11929](https://togithub.com/Priyankasaggu11929)) - The dynamic client now supports customizing http "Accept" header through the `header_params` parameter, which can be used to customizing API server response, e.g. retrieving object metadata only. ([kubernetes-client/python-base#236](https://togithub.com/kubernetes-client/python-base/pull/236), [@Yashks1994](https://togithub.com/Yashks1994)) ### [`v17.17.0`](https://togithub.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v17170) [Compare Source](https://togithub.com/kubernetes-client/python/compare/v12.0.1...v17.17.0) Kubernetes API Version: 1.17.17 Changelog since v17.17.0b1: ##### Bug or Regression - Fix watch stream non-chunked response handling ([kubernetes-client/python-base#231](https://togithub.com/kubernetes-client/python-base/pull/231), [@dhague](https://togithub.com/dhague)) - Fixed a decoding error for BOOTMARK watch events ([kubernetes-client/python-base#234](https://togithub.com/kubernetes-client/python-base/pull/234), [@yliaog](https://togithub.com/yliaog)) ##### Feature - Load_kube_config_from_dict() support define custom temp files path ([kubernetes-client/python-base#233](https://togithub.com/kubernetes-client/python-base/pull/233), [@onecer](https://togithub.com/onecer)) - The dynamic client now supports customizing http "Accept" header through the `header_params` parameter, which can be used to customizing API server response, e.g. retrieving object metadata only. ([kubernetes-client/python-base#236](https://togithub.com/kubernetes-client/python-base/pull/236), [@Yashks1994](https://togithub.com/Yashks1994)) ### [`v12.0.1`](https://togithub.com/kubernetes-c

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

edina / nbexchange

Update dependency kubernetes to v27 #136

Release Notes

Configuration

Codecov Report

Renovate Ignore Notification