Update API resource reference for v1.34

Author: tengqm

content/en/docs/reference/kubernetes-api/authentication-resources/pod-certificate-request-v1alpha1.md

@@ -85,8 +85,6 @@ SelfSubjectAccessReviewSpec is a description of the access request.  Exactly one
   - **resourceAttributes.fieldSelector** (FieldSelectorAttributes)
 
     fieldSelector describes the limitation on access based on field.  It can only limit access, not broaden it.
-    
-    This field  is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).
 
     <a name="FieldSelectorAttributes"></a>
     *FieldSelectorAttributes indicates a field limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.*
@@ -125,8 +123,6 @@ SelfSubjectAccessReviewSpec is a description of the access request.  Exactly one
   - **resourceAttributes.labelSelector** (LabelSelectorAttributes)
 
     labelSelector describes the limitation on access based on labels.  It can only limit access, not broaden it.
-    
-    This field  is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).
 
     <a name="LabelSelectorAttributes"></a>
     *LabelSelectorAttributes indicates a label limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.*

content/en/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1.md

@@ -95,8 +95,6 @@ SubjectAccessReviewSpec is a description of the access request.  Exactly one of
   - **resourceAttributes.fieldSelector** (FieldSelectorAttributes)
 
     fieldSelector describes the limitation on access based on field.  It can only limit access, not broaden it.
-    
-    This field  is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).
 
     <a name="FieldSelectorAttributes"></a>
     *FieldSelectorAttributes indicates a field limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.*
@@ -135,8 +133,6 @@ SubjectAccessReviewSpec is a description of the access request.  Exactly one of
   - **resourceAttributes.labelSelector** (LabelSelectorAttributes)
 
     labelSelector describes the limitation on access based on labels.  It can only limit access, not broaden it.
-    
-    This field  is alpha-level. To use this field, you must enable the `AuthorizeWithSelectors` feature gate (disabled by default).
 
     <a name="LabelSelectorAttributes"></a>
     *LabelSelectorAttributes indicates a label limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.*

content/en/docs/reference/kubernetes-api/authorization-resources/subject-access-review-v1.md

@@ -131,7 +131,7 @@ NodeSpec describes the attributes that a node is created with.
 
   - **taints.timeAdded** (Time)
 
-    TimeAdded represents the time at which the taint was added. It is only written for NoExecute taints.
+    TimeAdded represents the time at which the taint was added.
 
     <a name="Time"></a>
     *Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON.  Wrappers are provided for many of the factory methods that the time package offers.*

content/en/docs/reference/kubernetes-api/cluster-resources/node-v1.md

@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: ""
 title: "Common Parameters"
-weight: 10
+weight: 11
 auto_generated: true
 ---
 

content/en/docs/reference/kubernetes-api/common-parameters/common-parameters.md

@@ -58,7 +58,7 @@ CSIDriverSpec is the specification of a CSIDriver.
 
 - **attachRequired** (boolean)
 
-  attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the CSIDriverRegistry feature gate is enabled and the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.
+  attachRequired indicates this CSI volume driver requires an attach operation (because it implements the CSI ControllerPublishVolume() method), and that the Kubernetes attach detach controller should call the attach volume interface which checks the volumeattachment status and waits until the volume is attached before proceeding to mounting. The CSI external-attacher coordinates with CSI volume driver and updates the volumeattachment status when the attach operation is complete. If the value is specified to false, the attach operation will be skipped. Otherwise the attach operation will be called.
 
   This field is immutable.
 
@@ -74,7 +74,7 @@ CSIDriverSpec is the specification of a CSIDriver.
 
   nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.
 
-  This is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.
+  This is a beta feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.
 
   This field is mutable.
 

content/en/docs/reference/kubernetes-api/config-and-storage-resources/csi-driver-v1.md

@@ -138,7 +138,7 @@ PersistentVolumeClaimSpec describes the common attributes of storage devices and
 
 - **volumeAttributesClassName** (string)
 
-  volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default).
+  volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/
 
 
 
@@ -248,11 +248,11 @@ PersistentVolumeClaimStatus is the current status of a persistent volume claim.
 
 - **currentVolumeAttributesClassName** (string)
 
-  currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim This is a beta field and requires enabling VolumeAttributesClass feature (off by default).
+  currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass applied to this PersistentVolumeClaim
 
 - **modifyVolumeStatus** (ModifyVolumeStatus)
 
-  ModifyVolumeStatus represents the status object of ControllerModifyVolume operation. When this is unset, there is no ModifyVolume operation being attempted. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).
+  ModifyVolumeStatus represents the status object of ControllerModifyVolume operation. When this is unset, there is no ModifyVolume operation being attempted.
 
   <a name="ModifyVolumeStatus"></a>
   *ModifyVolumeStatus represents the status object of ControllerModifyVolume operation*

content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-claim-v1.md

@@ -125,7 +125,7 @@ PersistentVolumeSpec is the specification of a persistent volume.
 
 - **volumeAttributesClassName** (string)
 
-  Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not allowed. When this field is not set, it indicates that this volume does not belong to any VolumeAttributesClass. This field is mutable and can be changed by the CSI driver after a volume has been updated successfully to a new class. For an unbound PersistentVolume, the volumeAttributesClassName will be matched with unbound PersistentVolumeClaims during the binding process. This is a beta field and requires enabling VolumeAttributesClass feature (off by default).
+  Name of VolumeAttributesClass to which this persistent volume belongs. Empty value is not allowed. When this field is not set, it indicates that this volume does not belong to any VolumeAttributesClass. This field is mutable and can be changed by the CSI driver after a volume has been updated successfully to a new class. For an unbound PersistentVolume, the volumeAttributesClassName will be matched with unbound PersistentVolumeClaims during the binding process.
 
 - **volumeMode** (string)
 

content/en/docs/reference/kubernetes-api/config-and-storage-resources/persistent-volume-v1.md

@@ -110,7 +110,7 @@ VolumeAttachmentStatus is the status of a VolumeAttachment request.
 
     errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.
 
-    This is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.
+    This is an optional, beta field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.
 
   - **attachError.message** (string)
 
@@ -138,7 +138,7 @@ VolumeAttachmentStatus is the status of a VolumeAttachment request.
 
     errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.
 
-    This is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.
+    This is an optional, beta field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.
 
   - **detachError.message** (string)