@@ -1318,6 +1318,24 @@ spec:
13181318 description : Kubelet's generated CSRs will be addressed
13191319 to this signer.
13201320 type : string
1321+ userAnnotations :
1322+ additionalProperties :
1323+ type : string
1324+ description : |-
1325+ userAnnotations allow pod authors to pass additional information to
1326+ the signer implementation. Kubernetes does not restrict or validate this
1327+ metadata in any way.
1328+
1329+ These values are copied verbatim into the `spec.unverifiedUserAnnotations` field of
1330+ the PodCertificateRequest objects that Kubelet creates.
1331+
1332+ Entries are subject to the same validation as object metadata annotations,
1333+ with the addition that all keys must be domain-prefixed. No restrictions
1334+ are placed on values, except an overall size limitation on the entire field.
1335+
1336+ Signers should document the keys and values they support. Signers should
1337+ deny requests that contain keys they do not recognize.
1338+ type : object
13211339 required :
13221340 - keyType
13231341 - signerName
@@ -1595,7 +1613,7 @@ spec:
15951613 resources :
15961614 description : |-
15971615 resources represents the minimum resources the volume should have.
1598- If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements
1616+ Users are allowed to specify resource requirements
15991617 that are lower than previous value but must still be higher than capacity recorded in the
16001618 status field of the claim.
16011619 More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
@@ -2283,6 +2301,24 @@ spec:
22832301 description : Kubelet's generated CSRs will be addressed
22842302 to this signer.
22852303 type : string
2304+ userAnnotations :
2305+ additionalProperties :
2306+ type : string
2307+ description : |-
2308+ userAnnotations allow pod authors to pass additional information to
2309+ the signer implementation. Kubernetes does not restrict or validate this
2310+ metadata in any way.
2311+
2312+ These values are copied verbatim into the `spec.unverifiedUserAnnotations` field of
2313+ the PodCertificateRequest objects that Kubelet creates.
2314+
2315+ Entries are subject to the same validation as object metadata annotations,
2316+ with the addition that all keys must be domain-prefixed. No restrictions
2317+ are placed on values, except an overall size limitation on the entire field.
2318+
2319+ Signers should document the keys and values they support. Signers should
2320+ deny requests that contain keys they do not recognize.
2321+ type : object
22862322 required :
22872323 - keyType
22882324 - signerName
@@ -2767,9 +2803,10 @@ spec:
27672803 operator :
27682804 description : |-
27692805 Operator represents a key's relationship to the value.
2770- Valid operators are Exists and Equal . Defaults to Equal.
2806+ Valid operators are Exists, Equal, Lt, and Gt . Defaults to Equal.
27712807 Exists is equivalent to wildcard for value, so that a pod can
27722808 tolerate all taints of a particular category.
2809+ Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators).
27732810 type : string
27742811 tolerationSeconds :
27752812 description : |-
0 commit comments