2021-05-07.md

This Week in Enhancements - 2021-05-07

Enhancements for Release Priorities

Prioritized Merged Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Prioritized Merged pull request:

Prioritized Merged Pull Requests Modifying Existing Documents

• 769: (4/4) general: workload-partitioning: fix typo in crio config example (dhellmann)

Prioritized Active Changes

<PR ID>: (activity this week / total activity) summary

There were 2 Prioritized Active pull requests:

• 753: (20/24) workload-partitioning: add plan for configuration and enablement ownership (dhellmann)

  The initial iteration of workload partitioning focused on a short path to a minimum viable implementation. This enhancement describes the loose ends for preparing the feature for GA at a high level, and explains the set of other design documents that need to be written separately during the next iteration.

• 744: (12/62) general: External control plane topology (csrwng)

  External control plane support was introduced in OCP 4 with the support for the IBM Cloud Managed service (ROKS). At the time, this was the only platform that was run with an external control plane. It was sufficient to use a platform type of IBMCloud to distinguish it from other OCP installations with traditional control plane topology.

  More recently, an orthogonal field was added to the Infrastructure resource to indicate the type of control plane topology. Current supported values for the controlPlaneTopology field are HighlyAvailable and SingleReplica.

  This enhancement proposes adding a third possible value to the control plane topology field: External. A value of External in this field indicates that control plane components such as Etcd, Kube API server, Kube Controller Manager, and Kube Scheduler are running outside the cluster and are not visible as pods inside the cluster.

Other Enhancements

Other Merged Changes

<PR ID>: (activity this week / total activity) summary

There were 6 Other Merged pull requests:

• 647: (2/65) windows-containers: WINC-544: Enhancement proposal for monitoring Windows Nodes (VaishnaviHire)

  The intent of this enhancement is to enable performance monitoring on Windows nodes created by Windows Machine Config Operator(WMCO) in OpenShift cluster.

• 712: (5/174) cluster-logging: [cluster-logging] Add proposal for loki as an alternative log store (periklis)

  The purpose of this is to provide an alternative low-retention log store based on Loki for the cluster logging stack. This aims to provide a cloud-native first solution specialized in storing logs and in turn lessen the operational cost running cluster logging.

• 764: (2/22) kube-apiserver: removed api notifications (deads2k)

  Notify customers that an API that will be removed in the next release is in use.

Other Merged Pull Requests Modifying Existing Documents

• 762: (15/41) update: eus-upgrades-mvp: don't enforce skew check in MCO (crawford)
• 763: (6/13) general: Introduce priority class conventions (ravisantoshgudimetla)
• 767: (3/3) scheduling: Update Scheduler Profiles enhancement to 'implemented' (damemi)

Other New Changes

<PR ID>: (activity this week / total activity) summary

There were 7 Other New pull requests:

• 771: (4/4) update: add eus MCO enhancement (rphillips)

  This enhancement outlines the Machine Config Operator (MCO) behavior when propogating Kubernetes Events in EUS upgrade scenarios. The MCO will emit events that are user readable and be clear enough that a user can take an action.

  Related to Enhancement 762.

• 775: (1/1) network: Drop Node Hostname Resolution (cybertron)

  When the initial baremetal IPI implementation was done, there was a requirement for node hostnames to be resolvable from other nodes. Since that time there have been changes in how bootstrapping happens (among other things) that seem to have removed this requirement. In order to provide node name resolution, baremetal IPI runs an independent coredns pod on each node that retrieves a list of nodes and provides DNS records for them. Some deployments, particularly resource-limited edge environments, do not want this additional service running on their nodes. We are proposing to remove the requirement for node hostnames to be resolvable so we can remove this service.

Other New Pull Requests Modifying Existing Documents

• 768: (7/7) scheduling: Update Descheduler profiles enhancement to 'implemented' (damemi)
• 770: (2/2) guidelines: update template to explain about keeping all sections (dhellmann)
• 772: (20/20) network: metallb: Update operator, CRD, and BGP stack plans (russellb)
• 773: (2/2) installer: Enhancement proposal for OpenShift IPI on IBM Cloud (jeffnowicki)
• 774: (2/2) network: Remove OpenShift-SDN requirement for Bare Metal Load Balancer (markdgray)

Other Active Changes

<PR ID>: (activity this week / total activity) summary

There were 15 Other Active pull requests:

• 749: (69/153) ingress: NE-310 Enhancement proposal for HSTS route admission plugin (candita)
• 736: (30/70) installer: Add enhancement - IBM Cloud provider for Power Virtual Server platform (jaypoulz)
• 733: (21/103) builds: build: Support Mounted Resource Volumes (adambkaplan)
• 737: (5/6) general: enhancements/update/targeted-update-edge-blocking: Client-side platform parameter (wking)
• 732: (4/101) network: Add Smart NIC OVN offload enhancement (zshi-redhat)
• 426: (4/136) general: enhancements/update/targeted-update-edge-blocking: Propose a new enhancement (wking)
• 357: (3/232) accelerators: Supporting out-of-tree drivers on OpenShift (zvonkok)
• 468: (2/54) machine-api: Add dedicated instances proposal (alexander-demichev)
• 747: (2/19) network: Enable Kubernetes NMstate by default for selected platforms (yboaron)
• 486: (1/73) local-storage: Adds proposal for auto partitioning in LSO (rohan47)
• 706: (1/136) api-review: apply user defined tags to all resources (gregsheremeta)
• 361: (1/111) baremetal: Minimise Baremetal footprint, live-iso bootstrap (hardys)
• 255: (1/110) monitoring: add restart metrics enhancement (rphillips)
• 201: (1/93) general: bootimages: Downloading and updating bootimages via release image (cgwalters)

Other Active Pull Requests Modifying Existing Documents

• 666: (3/18) kube-apiserver: adding new userequest audit policy (EmilyM1)

Other Closed Changes

<PR ID>: (activity this week / total activity) summary

There were 3 Other Closed pull requests:

• 265: (2/141) installer: Signal cluster deletion (abutcher)
• 566: (1/46) general: Separating provider-specific code in the installer (janoszen)

Other Closed Pull Requests Modifying Existing Documents

• 721: (7/22) network: metallb: Use CNO as the integration point (russellb)

Old (labeled as stale, but discussion in last 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 2 Old (labeled as stale, but discussion in last 7 days) pull requests:

Old (labeled as stale, but discussion in last 7 days) Pull Requests Modifying Existing Documents

• 406: (1/17) kube-apiserver: Add preliminary data section to network check enhancement. (sanchezl)
• 623: (1/2) storage: Confirm Azure Disk names (huffmanca)

Other lifecycle/stale Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Other lifecycle/stale pull request:

• 400: (0/19) installer: OpenStack AZ Support (iamemilio)

Idle (no comments for at least 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 62 Idle (no comments for at least 7 days) pull requests:

• 124: (0/75) update: enhancements/update/automatic-updates: Propose a new enhancement (wking)
• 137: (0/299) general: CLI in-cluster management (sallyom)
• 146: (0/213) installer: openstack: Add Baremetal Compute Nodes RFE (pierreprinetti)
• 292: (0/203) machine-api: Add Managing Control Plane machines proposal (enxebre)
• 302: (0/29) kube-apiserver: [thought-experiment] single-node cluster static pod creation (deads2k)
• 341: (0/80) maintenance: Machine-maintenance operator proposal (dofinn)
• 343: (0/43) authentication: cluster-wide oauth-proxy settings (deads2k)
• 346: (0/83) installer: Installer pre-flight validations (mandre)
• 363: (0/201) cvo: Enhancement for adding upgrade preflight checks for operators (LalatenduMohanty)
• 371: (0/15) ingress: Add forwarded-header-policy enhancement (Miciah)
• 427: (0/54) update: enhancements/update/phased-rollouts: Propose a new enhancement (wking)
• 462: (0/56) ingress: Add client-tls enhancement (Miciah)
• 463: (0/601) machine-api: Describing steps to support out-of-tree providers (Danil-Grigorev)
• 475: (0/22) general: enhancements/update/update-blocker-lifecycle: Propose a new enhancement (wking)
• 477: (0/43) update: enhancements/update/manifest-install-levels: Propose a new enhancement (wking)
• 492: (0/48) rhcos: add rhcos-inject enhancement (crawford)
• 520: (0/13) network: Static IP Addresses from DHCP (cybertron)
• 547: (0/38) baremetal: Propose BMC-less remediation enhancement (AKA poison pill) (n1r1)
• 562: (0/149) security: Enhancing SCC to Gate Runtime Classes (haircommander)
• 564: (0/18) cluster-logging: Allowing users to specify a delete policy based on amount of storage used within the ES cluster (ewolinetz)
• 567: (0/106) machine-api: Added proposal for remediation history (slintes)
• 571: (0/231) network: Cloud API component for egress IP (alexanderConstantinescu)
• 575: (0/74) installer: Installer Enhacement Proposal: Manifests from STDIN (oglok)
• 593: (0/131) general: Add proposal for hiding container mountpoints from systemd (lack)
• 613: (0/18) network: NetworkPolicies for System Namespaces (danwinship)
• 624: (0/19) update: Add: upgrade-blocker-operator (michaelgugino)
• 626: (0/38) machine-config: enhancements/machine-config: securing MCS (crawford)
• 642: (0/48) kubelet: Auto Node Sizing (harche)
• 643: (0/65) update: Add Reduced Reboots enhancement (sdodson)
• 652: (0/1) node: Enable cgroup v2 support (harche)
• 654: (0/10) dns: ARO private DNS zone resource removal (jim-minter)
• 660: (0/19) cluster-logging: Flow control API enhancements, first draft. (alanconway)
• 661: (0/118) operator-framework-api: New OpenshiftCatalogueValidator (camilamacedo86)
• 673: (0/42) machine-api: short-circuiting-backoff (mshitrit)
• 676: (0/1) kube-apiserver: api compatibility (sanchezl)
• 682: (0/31) alerting: alerting as a feature (dofinn)
• 683: (0/36) insights: Insights Operator pulling and exposing data from the OCM API (tremes)
• 687: (0/82) storage: Add AWS EFS CSI driver operator (jsafrane)
• 690: (0/3) api-review: Add mirror-by-digest-only to ImageContentSourcePolicy (QiWang19)
• 691: (0/2) installer: OpenStack root volume AZs (Fedosin)
• 695: (0/25) cluster-version-operator: move CVO upgrades doc to enhancements (deads2k)
• 701: (0/43) monitoring: metrics scraping with local authentication and authorization (deads2k)
• 707: (0/12) installer: Add Enhancement for Installing to Alibaba Cloud (lemondlut)
• 709: (0/80) installer: Add proposal for credentials management outside the openshift cluster for new platforms (akhil-rane)
• 722: (0/7) multi-arch: Add "Build OKD for ppc64le" proposal (mjturek)
• 725: (0/2) distributed-tracing: WIP distributed tracing doc (sallyom)
• 730: (0/7) network: mtu: ability to change running cluster's mtu setting (msherif1234)
• 738: (0/97) network: Installing OCP on ARM-Based Smart NICs (danwinship)
• 745: (0/65) security: Security Profiles Operator integration in OpenShift (JAORMX)
• 748: (0/4) cluster-logging: New proposal: Forwarder output parameter templates (alanconway)
• 751: (0/50) builds: WIP - Disable Jenkins Pipeline Build Strategy (adambkaplan)
• 758: (0/20) security: Security Context Constraints for CSI Volumes (adambkaplan)

Idle (no comments for at least 7 days) Pull Requests Modifying Existing Documents

• 403: (0/16) authentication: webhook authentication: kubeconfig auth specification, 0-ttl cache (stlaz)
• 522: (0/40) olm: Update OLM managed operator metrics enhancement (awgreene)
• 538: (0/14) machine-api: update machine-api-usage-telemetry (elmiko)
• 554: (0/9) general: conventions: Clarify when workload disruption is allowed (smarterclayton)
• 618: (0/15) network: Add more details about host port ownership (danwinship)
• 650: (0/39) general: Add ClusterOperator Scheduling (michaelgugino)
• 693: (0/26) general: CONVENTIONS: Add section on limits (smarterclayton)
• 711: (0/3) olm: add "fail open" risk/mitigation (njhale)
• 742: (0/51) cluster-scope-secret-volumes: Update projected resource CSI driver proposal (adambkaplan)
• 759: (0/2) 100 enhancements: workload-partitioning: reorganize (dhellmann)