Skip to content

Commit d32a130

Browse files
committed
[zh] Add four feature gates
1 parent cd1f21e commit d32a130

File tree

4 files changed

+103
-0
lines changed

4 files changed

+103
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
---
2+
title: DeclarativeValidation
3+
content_type: feature_gate
4+
_build:
5+
list: never
6+
render: false
7+
8+
stages:
9+
- stage: beta
10+
defaultValue: true
11+
fromVersion: "1.33"
12+
---
13+
14+
<!--
15+
Enables declarative validation of in-tree Kubernetes APIs. When enabled, APIs with declarative validation rules
16+
(defined using IDL tags in the Go code) will have both the generated declarative validation code and the original
17+
hand-written validation code executed. The results are compared, and any discrepancies are reported via the
18+
`declarative_validation_mismatch_total` metric. Only the hand-written validation result is returned to the user
19+
(eg: actually validates in the request path). The original hand-written validation are still the authoritative
20+
validations when this is enabled but this can be changed if the
21+
[DeclarativeValidationTakeover feature gate](/docs/reference/command-line-tools-reference/feature-gates/DeclarativeValidationTakeover.md)
22+
is enabled in addition to this gate. This feature gate only operates on the kube-apiserver.
23+
-->
24+
启用 树内 Kubernetes API 的声明式验证。启用后,具有声明式验证规则(使用 Go 代码中的 IDL 标签定义)的
25+
API 将同时执行生成的声明式验证代码和原始的手动验证代码。两者的结果将进行比较,任何不一致都会通过
26+
`declarative_validation_mismatch_total` 指标进行报告。
27+
返回给用户的仅是手动验证的结果(例如:实际在请求路径中进行验证)。
28+
在启用此特性门控时,原始的手动验证仍然是权威的验证方式,但如果同时启用了
29+
[DeclarativeValidationTakeover 特性门控](/zh-cn/docs/reference/command-line-tools-reference/feature-gates/DeclarativeValidationTakeover)
30+
将发生变化。此特性门控仅作用于 kube-apiserver。
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
---
2+
title: DeclarativeValidationTakeover
3+
content_type: feature_gate
4+
_build:
5+
list: never
6+
render: false
7+
8+
stages:
9+
- stage: beta
10+
defaultValue: false
11+
fromVersion: "1.33"
12+
---
13+
14+
<!--
15+
When enabled, along with the
16+
[DeclarativeValidation](/docs/reference/command-line-tools-reference/feature-gates/DeclarativeValidation.md)
17+
feature gate, declarative validation errors are returned directly to the caller, replacing hand-written validation
18+
errors for rules that have declarative implementations. When disabled (and `DeclarativeValidation` is enabled),
19+
hand-written validation errors are always returned, effectively putting declarative validation in a
20+
__mismatch validation mode__ that monitors but does not affect API responses.
21+
This __mismatch validation mode__ allows for the monitoring of the `declarative_validation_mismatch_total`
22+
and `declarative_validation_panic_total` metrics which are implementation details for a safer rollout,
23+
average user shouldn't need to interact with it directly. This feature gate only operates on the kube-apiserver.
24+
Note: Although declarative validation aims for functional equivalence with hand-written validation,
25+
the exact description of error messages may differ between the two approaches.
26+
-->
27+
启用此特性门控后,若同时启用了
28+
[DeclarativeValidation](/zh-cn/docs/reference/command-line-tools-reference/feature-gates/DeclarativeValidation)
29+
特性门控,具有声明式实现的验证规则将直接返回声明式验证错误,替代手动验证错误。
30+
若此特性门控被禁用(但启用了 `DeclarativeValidation`),则始终返回手动验证错误,
31+
这实际上将声明式验证置于一种**不匹配验证模式(mismatch validation mode)**,此模式仅用于监控,不影响 API 响应。
32+
这种**不匹配验证模式**允许监控 `declarative_validation_mismatch_total``declarative_validation_panic_total`
33+
指标,这是为了实现更安全的特性上线所做的实现细节,普通用户通常无需直接与之交互。此特性门控仅作用于 kube-apiserver。
34+
35+
注意:尽管声明式验证旨在实现与手动验证等价的功能,但两者返回的错误消息的确切描述在细节上可能有所不同。
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
title: DeploymentReplicaSetTerminatingReplicas
3+
content_type: feature_gate
4+
_build:
5+
list: never
6+
render: false
7+
8+
stages:
9+
- stage: alpha
10+
defaultValue: false
11+
fromVersion: "1.33"
12+
---
13+
14+
<!--
15+
Enables a new status field `.status.terminatingReplicas` in Deployments and ReplicaSets to allow tracking of terminating pods.
16+
-->
17+
在 Deployment 和 ReplicaSet 中启用新的状态字段 `.status.terminatingReplicas`
18+
允许跟踪正在终止的 Pod。
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
title: KubeletEnsureSecretPulledImages
3+
content_type: feature_gate
4+
_build:
5+
list: never
6+
render: false
7+
8+
stages:
9+
- stage: alpha
10+
defaultValue: false
11+
fromVersion: "1.33"
12+
---
13+
14+
<!--
15+
Ensure that pods requesting an image are authorized to access the image
16+
with the provided credentials when the image is already present on the node.
17+
See [Ensure Image Pull Credential Verification](/docs/concepts/containers/images#ensureimagepullcredentialverification).
18+
-->
19+
确保请求某镜像的 Pod 在节点上已有此镜像的情况下,能够使用所提供的凭据授权访问此镜像。
20+
参见[确保镜像拉取凭据验证](/zh-cn/docs/concepts/containers/images#ensureimagepullcredentialverification)

0 commit comments

Comments
 (0)