Week: 2024-10-13

Developer News

VM images built with Kubernetes Image Builder older than v0.1.37 have a security hole that may allow remote login. This includes Proxmox, Nutanix, OVA, QEMU, and raw providers. Upgrade to v0.1.38 or later, and rebuild your VM images.

SIG-Release is planning to phase out artifacts for some architectures by 1.33. In 1.32, the updated cross-build images for ppc64le and s390x will not be released, because of broken dependencies.

Release Schedule

Next Deadline: Docs placeholder PRs deadline, October 24

The enhancements freeze was last week and we have a total of 60 KEPs tracked for v1.32. 9 enhancements did not make the cut for the enhancements freeze and 9 were deferred. Coming up next is the deadline for getting your docs placeholder PRs open, on 24th of October. If your KEP is tracked for v1.32 and if you have updates to the docs, don’t forget to open your PRs in time!

The patch releases planned for October have been moved to Tuesday, October 22, 2024.

Featured PRs

#127878 [scheduler] calculate pod requests resources with sidecar containers

This PR updates the scheduler scoring process to consider the resource requests of existing sidecar containers when scheduling Pods. As per the sidecar containers KEP, resources calculations for scheduling pods with sidecars is supposed to be: Max(Max( each InitContainerUse ), Sum(Sidecar Containers) + Sum(Containers)), but existing scheduler logic was using Max(RegularContainers, InitContainers) to calculate resources instead. This PR updates this logic.

KEP of the Week

KEP 3104: Introduce kuberc

This KEP proposes to introduce a new kuberc file that can be used to separate cluster credentials and server configuration from user preferences. This new and entirely opt-in kuberc file would allow users to configure aliases and default flags and also aims to deprecate the kubeconfig Preferences field. While in alpha, this feature can be enabled by setting the KUBECTL_KUBERC environment variable to true. The file will default to being located in ~/.kube/kuberc. A flag will allow overriding this default location with a path i.e. kubectl –kuberc /var/kube/rc.

This KEP is tracked for alpha release in the ongoing v1.32 cycle.

Other Merges

• Fix for misleading kubeadm init output

• NestedNumberAsFloat64 accuracy test is now architecture-neutral

• Fix for spacing in kubectl –validate flag description

• Version transition information in kube_features.go removed

• kube-apiserver --tracing-config-file file is now validated strictly

• kubelet: the --image-credential-provider-config file is now loaded with strict deserialization

• CRI client to use default timeout for ImageFsInfo RPC

• scheduler_perf test case for AssignedPodAdd event handling added

• hcsshim library replaced with new hnslib library

• Strict validation enabled for ResourceQuotaConfiguration

• e2e node tests to use shared context in regular container tests

• Getters for the field name and typeDescription of the Reflector struct renamed

• EgressSelectorConfiguration now uses strict validation

• etcd3 store decode functions extracted into an interface

• Integration tests for TaintToleration in requeueing scenarios

• Fix for data race in kubelet/volumemanager

• Scheduler to start considering the resource requests of sidecar containers

• Shorthand for kubectl explain –output

• WaitForJobComplete and WaitForJobFailed functions to fail fast in e2e tests

• CRI proxy for node e2e tests added

• More e2e tests for sidecar containers

• Fix for bug where kubelet restarts from missing cpuset cgroup

• In-place Pod resize feature now adds extended Resources field to ContainerStatuses struct

• Behavior of per request read/write handler with net/http server documented

Promotions

• WatchList to beta

• LoadBalancerIPMode to GA

Deprecated

• kube-proxy command line flags --healthz-port and --metrics-port removed

Version Updates

• Kubernetes is now built with go 1.23.2

• vendor: system-validators to v1.9.0

• Bump to several golang.org/x packages