LWKD: Week Ending October 13, 2024
Week: 2024-10-13
Developer News
VM images built with Kubernetes Image Builder older than v0.1.37 have a security hole that may allow remote login. This includes Proxmox, Nutanix, OVA, QEMU, and raw providers. Upgrade to v0.1.38 or later, and rebuild your VM images.
SIG-Release is planning to phase out artifacts for some architectures by 1.33. In 1.32, the updated cross-build images for ppc64le and s390x will not be released, because of broken dependencies.
Release Schedule
Next Deadline: Docs placeholder PRs deadline, October 24
The enhancements freeze was last week and we have a total of 60 KEPs tracked for v1.32. 9 enhancements did not make the cut for the enhancements freeze and 9 were deferred. Coming up next is the deadline for getting your docs placeholder PRs open, on 24th of October. If your KEP is tracked for v1.32 and if you have updates to the docs, don’t forget to open your PRs in time!
The patch releases planned for October have been moved to Tuesday, October 22, 2024.
Featured PRs
#127878 [scheduler] calculate pod requests resources with sidecar containers
This PR updates the scheduler scoring process to consider the resource requests of existing sidecar containers when scheduling Pods. As per the sidecar containers KEP, resources calculations for scheduling pods with sidecars is supposed to be: Max(Max( each InitContainerUse ), Sum(Sidecar Containers) + Sum(Containers)), but existing scheduler logic was using Max(RegularContainers, InitContainers) to calculate resources instead. This PR updates this logic.
KEP of the Week
KEP 3104: Introduce kuberc
This KEP proposes to introduce a new kuberc file that can be used to separate cluster credentials and server configuration from user preferences. This new and entirely opt-in kuberc file would allow users to configure aliases and default flags and also aims to deprecate the kubeconfig Preferences field. While in alpha, this feature can be enabled by setting the KUBECTL_KUBERC environment variable to true. The file will default to being located in ~/.kube/kuberc. A flag will allow overriding this default location with a path i.e. kubectl –kuberc /var/kube/rc.
This KEP is tracked for alpha release in the ongoing v1.32 cycle.
Other Merges
Fix for misleading kubeadm init output
NestedNumberAsFloat64 accuracy test is now architecture-neutral
Fix for spacing in kubectl –validate flag description
Version transition information in kube_features.go removed
kube-apiserver
--tracing-config-filefile is now validated strictlykubelet: the
--image-credential-provider-configfile is now loaded with strict deserializationCRI client to use default timeout for
ImageFsInfoRPCscheduler_perf test case for AssignedPodAdd event handling added
hcsshim library replaced with new hnslib library
Strict validation enabled for ResourceQuotaConfiguration
e2e node tests to use shared context in regular container tests
Getters for the field name and typeDescription of the Reflector struct renamed
EgressSelectorConfiguration now uses strict validation
etcd3 store decode functions extracted into an interface
Integration tests for TaintToleration in requeueing scenarios
Scheduler to start considering the resource requests of sidecar containers
Shorthand for kubectl explain –output
WaitForJobComplete and WaitForJobFailed functions to fail fast in e2e tests
More e2e tests for sidecar containers
Fix for bug where kubelet restarts from missing cpuset cgroup
In-place Pod resize feature now adds extended Resources field to ContainerStatuses struct
Behavior of per request read/write handler with net/http server documented
Promotions
WatchList to beta
LoadBalancerIPMode to GA
Deprecated
kube-proxy command line flags
--healthz-portand--metrics-portremoved
Version Updates
vendor: system-validators to v1.9.0
Bump to several golang.org/x packages