LWKD: Week Ending June 25, 2023
Developer News
KOps has notified users of a high-risk security issue on GCP (CVE-2023-1943); upgrade KOps and/or disable Gossip mode in GCP.
If you are a SIG Chair or TL, or a Subproject Lead, please fill out a poll for a second, Asia-friendly, time for the monthly Leads Meeting.
The Kubernetes-VMWare User Group is shutting down. We thank everyone involved for all their work in our community.
If you're reading this, you almost certainly use Etcd. Please fill out the CNCF Etcd Usage Survey to help the Etcd team work out direction and priorities for the future.
Release Schedule
Next Deadline: Exceptions Due, July 10th
Folks should be finishing up all the requirements for their Enhancements now, fixing bugs, and writing docs.
The Release Team is discontinuing the weekly CI report as it is no longer needed.
Featured PR
#115813: Introduce controller aliases for KCM and CCM
Individual controllers hosted inside kube-controller-manager and cloud-controller-manager make up much of the functionality of Kubernetes. As they have built up over time, loose standards emerged for naming them, but to preserve compatibility we've always left the old, strange names. Until now! This PR fully regularizes the naming for controllers following the something-something-controller pattern. But to maintain compat, there's a new alias system so that existing command lines involving --controllers or similar will work as expected. That said, compatibility is a tricky beast at times, if you were doing things like log analysis then you may want to update to the newer names or use any of the rich data available with the newer log output formats added over the past few releases. Overall this hopefully simplifies things across the community and gives us an enforceable standard moving forward!
Other Merges
- ClusterEventWithHint feature allows custom scheduler plugins to queue events intelligently, but requires all plugin devs to make changes for 1.28
- Make sure that rejected pods actually get deleted, even during Kubelet restart
- Conditions that call
wait.PollUntilContextTimeoutwill be executed at least once - Don't count queue failing time towards
pod_scheduling_duration_seconds
Deprecated
- Ingress-NGINX plans to deprecate AJP protocol support
- The AdvancedAuditing feature gate is gone, it's been GA since 1.12
Version Updates
- cAdvisor to v0.47.2 in 1.27 and 1.28, and to v0.46.1 in 1.25