Week Ending October 13, 2024

Developer News

VM images built with Kubernetes Image Builder older than v0.1.37 have a security hole that may allow remote login. This includes Proxmox, Nutanix, OVA, QEMU, and raw providers. Upgrade to v0.1.38 or later, and rebuild your VM images.

SIG-Release is planning to phase out artifacts for some architectures by 1.33. In 1.32, the updated cross-build images for ppc64le and s390x will not be released, because of broken dependencies.

Release Schedule

Next Deadline: Docs placeholder PRs deadline, October 24

The enhancements freeze was last week and we have a total of 60 KEPs tracked for v1.32. 9 enhancements did not make the cut for the enhancements freeze and 9 were deferred. Coming up next is the deadline for getting your docs placeholder PRs open, on 24th of October. If your KEP is tracked for v1.32 and if you have updates to the docs, don’t forget to open your PRs in time!

The patch releases planned for October have been moved to Tuesday, October 22, 2024.

Featured PRs

#127878 [scheduler] calculate pod requests resources with sidecar containers

This PR updates the scheduler scoring process to consider the resource requests of existing sidecar containers when scheduling Pods. As per the sidecar containers KEP, resources calculations for scheduling pods with sidecars is supposed to be: Max(Max( each InitContainerUse ), Sum(Sidecar Containers) + Sum(Containers)), but existing scheduler logic was using Max(RegularContainers, InitContainers) to calculate resources instead. This PR updates this logic.

KEP of the Week

KEP 3104: Introduce kuberc

This KEP proposes to introduce a new kuberc file that can be used to separate cluster credentials and server configuration from user preferences. This new and entirely opt-in kuberc file would allow users to configure aliases and default flags and also aims to deprecate the kubeconfig Preferences field. While in alpha, this feature can be enabled by setting the KUBECTL_KUBERC environment variable to true. The file will default to being located in ~/.kube/kuberc. A flag will allow overriding this default location with a path i.e. kubectl –kuberc /var/kube/rc.

This KEP is tracked for alpha release in the ongoing v1.32 cycle.

Other Merges

Fix for misleading kubeadm init output
NestedNumberAsFloat64 accuracy test is now architecture-neutral
Fix for spacing in kubectl –validate flag description
Version transition information in kube_features.go removed
kube-apiserver --tracing-config-file file is now validated strictly
kubelet: the --image-credential-provider-config file is now loaded with strict deserialization
CRI client to use default timeout for ImageFsInfo RPC
scheduler_perf test case for AssignedPodAdd event handling added
hcsshim library replaced with new hnslib library
Strict validation enabled for ResourceQuotaConfiguration
e2e node tests to use shared context in regular container tests
Getters for the field name and typeDescription of the Reflector struct renamed
EgressSelectorConfiguration now uses strict validation
etcd3 store decode functions extracted into an interface
Integration tests for TaintToleration in requeueing scenarios
Fix for data race in kubelet/volumemanager
Scheduler to start considering the resource requests of sidecar containers
Shorthand for kubectl explain –output
WaitForJobComplete and WaitForJobFailed functions to fail fast in e2e tests
CRI proxy for node e2e tests added
More e2e tests for sidecar containers
Fix for bug where kubelet restarts from missing cpuset cgroup
In-place Pod resize feature now adds extended Resources field to ContainerStatuses struct
Behavior of per request read/write handler with net/http server documented

Promotions

WatchList to beta
LoadBalancerIPMode to GA

Deprecated

kube-proxy command line flags --healthz-port and --metrics-port removed

Version Updates

Last Week In Kubernetes Development (LWKD) is a product of multiple contributors participating in Kubernetes SIG Contributor Experience. All original content is licensed Creative Commons Share-Alike, although linked content and images may be differently licensed. LWKD does collect some information on readers, see our privacy notice for details.

You may contribute to LWKD by submitting pull requests or issues on the LWKD github repo.