diff --git a/go.mod b/go.mod index 6aaf8da58..baf5ca31d 100644 --- a/go.mod +++ b/go.mod @@ -42,7 +42,7 @@ require ( k8s.io/api v0.0.0-20221003194454-3cedfadbe658 k8s.io/apimachinery v0.0.0-20220929193440-66e26ac34f07 k8s.io/client-go v0.0.0-20221003194729-f24bd6967c44 - k8s.io/component-base v0.0.0-20220930234846-815a25776f41 + k8s.io/component-base v0.0.0-20221005195346-15b7f35f77a5 k8s.io/klog/v2 v2.80.1 k8s.io/kms v0.0.0-20220927064431-aef5f8fcd82d k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1 @@ -119,9 +119,9 @@ require ( ) replace ( - k8s.io/api => k8s.io/api v0.0.0-20221003194454-3cedfadbe658 + k8s.io/api => k8s.io/api v0.0.0-20221003191214-669318b25bc7 k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20220929193440-66e26ac34f07 k8s.io/client-go => k8s.io/client-go v0.0.0-20221003194729-f24bd6967c44 - k8s.io/component-base => k8s.io/component-base v0.0.0-20220930234846-815a25776f41 + k8s.io/component-base => k8s.io/component-base v0.0.0-20221005195346-15b7f35f77a5 k8s.io/kms => k8s.io/kms v0.0.0-20220927064431-aef5f8fcd82d ) diff --git a/go.sum b/go.sum index d4b7ba858..d7ebe4b1e 100644 --- a/go.sum +++ b/go.sum @@ -976,14 +976,14 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg= honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= -k8s.io/api v0.0.0-20221003194454-3cedfadbe658 h1:0xWYwVNLchx3hp1Y16uO8/UacSN04D5n7y3/mRWMv+Q= -k8s.io/api v0.0.0-20221003194454-3cedfadbe658/go.mod h1:55a/w41XyLRGlOX8Myq7ywr3hPPuPMvA3EzNcy7Xq3w= +k8s.io/api v0.0.0-20221003191214-669318b25bc7 h1:s0YX63Tnr9pY2nY6P6hGuuQs5OOmXPojLQITLR29SzA= +k8s.io/api v0.0.0-20221003191214-669318b25bc7/go.mod h1:55a/w41XyLRGlOX8Myq7ywr3hPPuPMvA3EzNcy7Xq3w= k8s.io/apimachinery v0.0.0-20220929193440-66e26ac34f07 h1:AvRAbH6TxNfcKjK4Fs4celvuGprlNrafnWm651nHHdc= k8s.io/apimachinery v0.0.0-20220929193440-66e26ac34f07/go.mod h1:zdDPkAEkslrVOG1IzqRpqLwHlA/W9IhQ6nE1h5IJ7ME= k8s.io/client-go v0.0.0-20221003194729-f24bd6967c44 h1:7QcyPPeWqMzvUb48tUKFdfa4EQRBM7ejPASNuq41IOg= k8s.io/client-go v0.0.0-20221003194729-f24bd6967c44/go.mod h1:L8bGeaYpjNdKbWOEKSpYJz92KWxN9pe2ZDmx7yJ0/lM= -k8s.io/component-base v0.0.0-20220930234846-815a25776f41 h1:XFeMqZOIXqOSMqUTYwVhASgeqxazuquZPn+dDwAU6Ww= -k8s.io/component-base v0.0.0-20220930234846-815a25776f41/go.mod h1:egwjwf+X9WyTBARCdV9R9B//zOsdCui/5972ysTANp0= +k8s.io/component-base v0.0.0-20221005195346-15b7f35f77a5 h1:RK2POcLCS3rQmGEJefNNySUs1+vGjWaMpSzwFhwZMkg= +k8s.io/component-base v0.0.0-20221005195346-15b7f35f77a5/go.mod h1:BEgS7UMi0/ra2EieIAd8zKD5oeRZEotNs4plwovSWJE= k8s.io/klog/v2 v2.80.1 h1:atnLQ121W371wYYFawwYx1aEY2eUfs4l3J72wtgAwV4= k8s.io/klog/v2 v2.80.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= k8s.io/kms v0.0.0-20220927064431-aef5f8fcd82d h1:l7VUaBHD3i5eEYPEalQmceGJRxFLeqcd1guFh64XbTk= diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go index 5383666b1..8a57165c3 100644 --- a/pkg/features/kube_features.go +++ b/pkg/features/kube_features.go @@ -88,6 +88,13 @@ const ( // audited. AdvancedAuditing featuregate.Feature = "AdvancedAuditing" + // owner: @cici37 @jpbetz + // kep: http://kep.k8s.io/3488 + // alpha: v1.26 + // + // Enables expression validation in Admission Control + CELValidatingAdmission featuregate.Feature = "CELValidatingAdmission" + // owner: @cici37 // kep: https://kep.k8s.io/2876 // alpha: v1.23 @@ -215,6 +222,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS AdvancedAuditing: {Default: true, PreRelease: featuregate.GA}, + CELValidatingAdmission: {Default: false, PreRelease: featuregate.Alpha}, + CustomResourceValidationExpressions: {Default: true, PreRelease: featuregate.Beta}, DryRun: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // remove in 1.28