Merge branch 'kubernetes:main' into main

kubernetes · Jan 13, 2023 · c1e62a7 · c1e62a7
2 parents cfe2913 + 8d326ad
commit c1e62a7
Show file tree

Hide file tree

Showing 127 changed files with 1,424 additions and 2,642 deletions.
diff --git a/OWNERS b/OWNERS
@@ -11,6 +11,7 @@ emeritus_approvers:
 # - chenopis, commented out to disable PR assignments
 # - irvifa, commented out to disable PR assignments
 # - jaredbhatti, commented out to disable PR assignments
+# - jimangel, commented out to disable PR assignments
 # - kbarnard10, commented out to disable PR assignments
 # - steveperry-53, commented out to disable PR assignments
 - stewart-yu

diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
@@ -31,7 +31,6 @@ aliases:
     - annajung
     - bradtopol
     - divya-mohan0209
-    - jimangel
     - kbhawkey
     - krol3
     - natalisucks
@@ -43,7 +42,6 @@ aliases:
   sig-docs-en-reviews: # PR reviews for English content
     - bradtopol
     - divya-mohan0209
-    - jimangel
     - kbhawkey
     - mehabhalodiya
     - natalisucks
@@ -54,39 +52,23 @@ aliases:
     - shannonxtreme
     - tengqm
   sig-docs-es-owners: # Admins for Spanish content
-    - raelga
     - electrocucaracha
-  sig-docs-es-reviews: # PR reviews for Spanish content
     - raelga
+  sig-docs-es-reviews: # PR reviews for Spanish content
     - electrocucaracha
+    - raelga
   sig-docs-fr-owners: # Admins for French content
-    - remyleone
-    - perriea
-    - rekcah78
-    - yastij
-    - smana
-    - rbenzair
-    - abuisine
-    - erickhun
-    - jygastaud
     - awkif
-    - oussemos
-    - anthonydahanne
     - feloy
-  sig-docs-fr-reviews: # PR reviews for French content
-    - remyleone
     - perriea
     - rekcah78
-    - yastij
-    - smana
-    - rbenzair
-    - abuisine
-    - erickhun
-    - jygastaud
+    - remyleone
+  sig-docs-fr-reviews: # PR reviews for French content
     - awkif
-    - oussemos
-    - anthonydahanne
     - feloy
+    - perriea
+    - rekcah78
+    - remyleone
   sig-docs-hi-owners: # Admins for Hindi content
     - anubha-v-ardhan
     - divya-mohan0209
@@ -102,25 +84,19 @@ aliases:
     - danninov
     - girikuncoro
     - habibrosyad
-    - phanama
-    - wahyuoi
   sig-docs-id-reviews: # PR reviews for Indonesian content
     - ariscahyadi
     - danninov
     - girikuncoro
     - habibrosyad
-    - phanama
-    - wahyuoi
   sig-docs-it-owners: # Admins for Italian content
     - fabriziopandini
     - Fale
     - mattiaperi
-    - micheleberardi
   sig-docs-it-reviews: # PR reviews for Italian content
     - fabriziopandini
     - Fale
     - mattiaperi
-    - micheleberardi
   sig-docs-ja-owners: # Admins for Japanese content
     - inductor
     - nasa9084
@@ -145,13 +121,11 @@ aliases:
     - ianychoi
     - jihoon-seo
     - jmyung
-    - pjhwa
     - seokho-son
     - yoonian
     - ysyukr
   sig-docs-leads: # Website chairs and tech leads
     - divya-mohan0209
-    - jimangel
     - kbhawkey
     - natalisucks
     - onlydole
@@ -183,63 +157,51 @@ aliases:
     - xichengliudui
     - ydFu
   sig-docs-pt-owners: # Admins for Portuguese content
+    - devlware
     - edsoncelio
     - femrtnz
     - jailton
     - jcjesus
-    - devlware
     - jhonmike
     - rikatz
     - stormqueen1990
     - yagonobre
   sig-docs-pt-reviews: # PR reviews for Portugese content
+    - devlware
     - edsoncelio
     - femrtnz
     - jailton
     - jcjesus
-    - devlware
     - jhonmike
     - rikatz
     - stormqueen1990
     - yagonobre
   sig-docs-vi-owners: # Admins for Vietnamese content
     - huynguyennovem
-    - ngtuna
     - truongnh1992
   sig-docs-vi-reviews: # PR reviews for Vietnamese content
     - huynguyennovem
-    - ngtuna
     - truongnh1992
   sig-docs-ru-owners: # Admins for Russian content
     - Arhell
-    - msheldyakov
-    - aisonaku
-    - potapy4
-    - dianaabv
     - shurup
   sig-docs-ru-reviews: # PR reviews for Russian content
     - Arhell
-    - msheldyakov
-    - aisonaku
-    - potapy4
-    - dianaabv
     - shurup
   sig-docs-pl-owners: # Admins for Polish content
     - mfilocha
     - nvtkaszpir
   sig-docs-pl-reviews: # PR reviews for Polish content
+    - kpucynski
     - mfilocha
     - nvtkaszpir
-    - kpucynski
   sig-docs-uk-owners: # Admins for Ukrainian content
     - anastyakulyk
     - Arhell
     - butuzov
     - MaxymVlasov
   sig-docs-uk-reviews: # PR reviews for Ukrainian content
-    - anastyakulyk
     - Arhell
-    - butuzov
     - idvoretskyi
     - MaxymVlasov
     - Potapy4

diff --git a/README-ja.md b/README-ja.md
@@ -16,7 +16,7 @@ Hugo(Extended version)を使用してWebサイトをローカルで実行する
 このリポジトリを使用するには、以下をローカルにインストールする必要があります。
 
 - [npm](https://www.npmjs.com/)
-- [Go](https://golang.org/)
+- [Go](https://go.dev/)
 - [Hugo(Extended version)](https://gohugo.io/)
 - [Docker](https://www.docker.com/)などのコンテナランタイム
 

diff --git a/README-ru.md b/README-ru.md
@@ -13,7 +13,7 @@
 Чтобы работать с этим репозиторием, понадобятся следующие компоненты, установленные локально:
 
 - [npm](https://www.npmjs.com/)
-- [Go](https://golang.org/)
+- [Go](https://go.dev/)
 - [Hugo (Extended version)](https://gohugo.io/)
 - Исполняемая среда для контейнеров вроде [Docker](https://www.docker.com/)
 

diff --git a/content/en/blog/_posts/2022-12-13-host-process-containers-ga/index.md b/content/en/blog/_posts/2022-12-13-host-process-containers-ga/index.md
@@ -54,7 +54,7 @@ closed and the storage will be unmounted.
 
 HostProcess and Linux privileged containers enable similar scenarios but differ
 greatly in their implementation (hence the naming difference). HostProcess containers
-have their own [PodSecurityContext](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.25/#windowssecuritycontextoptions-v1-core) fields.
+have their own [PodSecurityContext](/docs/reference/generated/kubernetes-api/v1.25/#windowssecuritycontextoptions-v1-core) fields.
 Those used to configure Linux privileged containers **do not** apply. Enabling privileged access to a Windows host is a
 fundamentally different process than with Linux so the configuration and
 capabilities of each differ significantly. Below is a diagram detailing the
@@ -110,7 +110,7 @@ Please note that within a Pod, you can't mix HostProcess containers with normal
 
 - Work through [Create a Windows HostProcess Pod](/docs/tasks/configure-pod-container/create-hostprocess-pod/)
 
-- Read about Kubernetes [Pod Security Standards](/docs/concepts/security/pod-security-standards/) and [Pod Security Admission](docs/concepts/security/pod-security-admission/)
+- Read about Kubernetes [Pod Security Standards](/docs/concepts/security/pod-security-standards/) and [Pod Security Admission](/docs/concepts/security/pod-security-admission/)
 
 - Read the enhancement proposal [Windows Privileged Containers and Host Networking Mode](https://github.com/kubernetes/enhancements/tree/master/keps/sig-windows/1981-windows-privileged-container-support) (KEP-1981)
 

diff --git a/content/en/blog/_posts/2022-12-20-validating-admission-policies-alpha/index.md b/content/en/blog/_posts/2022-12-20-validating-admission-policies-alpha/index.md
@@ -60,12 +60,14 @@ kind: ValidatingAdmissionPolicyBinding
 metadata:
   name: "demo-binding-test.example.com"
 spec:
-  policy: "demo-policy.example.com"
+  policyName: "demo-policy.example.com"
   matchResources:
     namespaceSelector:
-    - key: environment,
-      operator: In,
-      values: ["test"]
+      matchExpressions:
+      - key: environment
+        operator: In
+        values:
+        - test
 ```
 
 This `ValidatingAdmissionPolicyBinding` resource binds the above policy only to
@@ -115,14 +117,16 @@ kind: ValidatingAdmissionPolicyBinding
 metadata:
   name: "demo-binding-production.example.com"
 spec:
-  policy: "demo-policy.example.com"
-  paramsRef:
+  policyName: "demo-policy.example.com"
+  paramRef:
     name: "demo-params-production.example.com"
   matchResources:
     namespaceSelector:
-    - key: environment,
-      operator: In,
-      values: ["production"]
+      matchExpressions:
+      - key: environment
+        operator: In
+        values:
+        - production
 ```
 
 ```yaml

diff --git a/content/en/blog/_posts/2023-01-06-unhealthy-pod-eviction-policy-for-pdb.md b/content/en/blog/_posts/2023-01-06-unhealthy-pod-eviction-policy-for-pdb.md
@@ -98,7 +98,7 @@ spec:
 
 - Read the KEP: [Unhealthy Pod Eviction Policy for PDBs](https://github.com/kubernetes/enhancements/tree/master/keps/sig-apps/3017-pod-healthy-policy-for-pdb)
 - Read the documentation: [Unhealthy Pod Eviction Policy](/docs/tasks/run-application/configure-pdb/#unhealthy-pod-eviction-policy) for PodDisruptionBudgets
-- Review the Kubernetes documentation for [PodDisruptionBudgets](docs/concepts/workloads/pods/disruptions/#pod-disruption-budgets), [draining of Nodes](docs/tasks/administer-cluster/safely-drain-node/) and [evictions](docs/concepts/scheduling-eviction/api-eviction/)
+- Review the Kubernetes documentation for [PodDisruptionBudgets](/docs/concepts/workloads/pods/disruptions/#pod-disruption-budgets), [draining of Nodes](/docs/tasks/administer-cluster/safely-drain-node/) and [evictions](/docs/concepts/scheduling-eviction/api-eviction/)
 
 
 ## How do I get involved?

diff --git a/content/en/docs/concepts/overview/working-with-objects/namespaces.md b/content/en/docs/concepts/overview/working-with-objects/namespaces.md
@@ -147,7 +147,7 @@ kubectl api-resources --namespaced=false
 
 ## Automatic labelling
 
-{{< feature-state state="beta" for_k8s_version="1.21" >}}
+{{< feature-state for_k8s_version="1.22" state="stable" >}}
 
 The Kubernetes control plane sets an immutable {{< glossary_tooltip text="label" term_id="label" >}}
 `kubernetes.io/metadata.name` on all namespaces, provided that the `NamespaceDefaultLabelName`

diff --git a/content/en/docs/concepts/scheduling-eviction/pod-scheduling-readiness.md b/content/en/docs/concepts/scheduling-eviction/pod-scheduling-readiness.md
@@ -26,22 +26,7 @@ criteria that Pod should be satisfied before considered schedulable. This field
 only when a Pod is created (either by the client, or mutated during admission). After creation,
 each schedulingGate can be removed in arbitrary order, but addition of a new scheduling gate is disallowed.
 
-{{<mermaid>}}
-stateDiagram-v2
-    s1: pod created
-    s2: pod scheduling gated
-    s3: pod scheduling ready
-    s4: pod running
-    if: empty scheduling gates?
-    [*] --> s1
-    s1 --> if
-    s2 --> if: scheduling gate removed
-    if --> s2: no
-    if --> s3: yes  
-    s3 --> s4
-    s4 --> [*]
-{{< /mermaid >}}
-
+{{< figure src="/docs/images/podSchedulingGates.svg" alt="pod-scheduling-gates-diagram" caption="Figure. Pod SchedulingGates" class="diagram-large" link="https://mermaid.live/edit#pako:eNplkktTwyAUhf8KgzuHWpukaYszutGlK3caFxQuCVMCGSDVTKf_XfKyPlhxz4HDB9wT5lYAptgHFuBRsdKxenFMClMYFIdfUdRYgbiD6ItJTEbR8wpEq5UpUfnDTf-5cbPoJjcbXdcaE61RVJIiqJvQ_Y30D-OCt-t3tFjcR5wZayiVnIGmkv4NiEfX9jijKTmmRH5jf0sRugOP0HyHUc1m6KGMFP27cM28fwSJDluPpNKaXqVJzmFNfHD2APRKSjnNFx9KhIpmzSfhVls3eHdTRrwG8QnxKfEZUUNeYTDBNbiaKRF_5dSfX-BQQQ0FpnEqQLJWhwIX5hyXsjbYl85wTINrgeC2EZd_xFQy7b_VJ6GCdd-itkxALE84dE3fAqXyIUZya6Qqe711OspVCI2ny2Vv35QqVO3-htt66ZWomAvVcZcv8yTfsiSFfJOydZoKvl_ttjLJVlJsblcJw-czwQ0zr9ZeqGDgeR77b2jD8xdtjtDn" >}}
 ## Usage example
 
 To mark a Pod not-ready for scheduling, you can create it with one or more scheduling gates like this:

diff --git a/content/en/docs/contribute/advanced.md b/content/en/docs/contribute/advanced.md
@@ -190,3 +190,7 @@ When you're ready to start the recording, click Record to Cloud.
 When you're ready to stop recording, click Stop.
 
 The video uploads automatically to YouTube.
+
+### Offboarding a SIG Co-chair (Emeritus)
+
+See: [k/community/sig-docs/offboarding.md](https://github.com/kubernetes/community/blob/master/sig-docs/offboarding.md)