2022-01-21.md

This Week in Enhancements - 2022-01-21

Updates since 2022-01-14

Enhancements

Merged Changes

<PR ID>: (activity this week / total activity) summary

There were 6 Merged pull requests:

• 736: (10/248) installer: Add enhancement - IBM Cloud provider for Power Virtual Server platform (jaypoulz)

  This document describes how the [IBM Cloud][ibm-cloud-website] can be leveraged to provide infrastructure to deploy OpenShift on the [Power Virtual Server][power-vs-website] offering. Power Virtual Server, or Power VS, is an IBM Cloud offering that aims to provide customers interested in running secure and flexible workloads on IBM Power (ppc64le) hardware without having to develop and maintain on-premise datacenters. The goal of this enhancement would be to leverage the IBM Cloud APIs to deploy an OpenShift cluster on this cloud instance hardware. In addition, the APIs would be leveraged for cluster resizing operations post-installation.

• 913: (10/157) machine-api: Add cluster-api integration enhancement (alexander-demichev)

  This enhancement describes the process of integrating the upstream Cluster API project into OpenShift standalone clusters.

• 989: (13/160) machine-api: [OCPCLOUD-1373] Add AWS EFA Networking enhancement (JoelSpeed)

  AWS Elastic Fabric Adapter (EFA) is a feature within EC2 that allows for network adapters that provide high throughput for HPC applications communicating via MPI to be attached to certain instance types. With the presence of these network adapters and some additional drivers, workloads can take advantage of greatly improved network performance between nodes within the same AWS availability zone.

Merged Pull Requests Modifying Existing Documents

• 964: (12/13) dev-guide: Host port registry: Add metrics ports for OVN-K (martinkennelly)
• 988: (4/7) general: CONVENTIONS: Update CPU query sum_irate (wking)
• 1012: (4/4) guidelines: Clarify how to use the reviewers section of the template (bparees)

New Changes

<PR ID>: (activity this week / total activity) summary

There were 5 New pull requests:

• 1008: (76/76) machine-api: [OCPCLOUD-1248] Add initial iteration of ControlPlaneSet operator enhancement (JoelSpeed)

  To enable automated management of vertical scaling and replacement of Control Plane Machines, this proposal introduces a new resource and controller that will manage Control Plane Machine instances.

• 1009: (2/2) general: OpenStack Cloud Provider Config Upgrade (stephenfin)

  do-not-merge/work-in-progress

  In 4.11, we wish to switch OpenStack clusters from the legacy cloud provider to the external Cloud Controller Manager (CCM). The legacy cloud provider configuration is in a user-managed ConfigMap in the openshift-config namespace. The configuration for the two cloud providers are similar but not identical. This enhancement will describe how we can ensure correct configuration is passed to the cloud provider in use.

• 1010: (2/2) authentication: add enhancement on PSa autolabeling (stlaz)

  This enhancement expands the "PodSecurity admission in OpenShift". It introduces an opt-in mechanism that allows users to to keep their workloads running when Pod Security Admission plugin gets turned on.

• 1013: (4/4) cluster-logging: LOG-1043 Flow control API enhancements. (alanconway)

  If the log collector cannot keep up with the rate that logs are written, some logging data will be lost. Lack of flow control these problems:

  • Hard to predict and impossible to control the volume of logs.
  • No control over which logs get lost.
  • During an outage, log buffers build up without user control. This can cause long recovery times and very high latency when the connection is restored.

  This proposal defines an API to let cluster administrators to limit logging rates, or ignore some logs entirely. Logs may still be lost if the collector cannot keep up, but administrators have more control over what is lost, and more predictability of log rates.

• 1014: (14/14) multi-arch: Heterogenous architecture clusters (Prashanth684)

  This enhancement describes the [plan][OCPPLAN-4577] to support provisioning and upgrades of heterogenous architecture clusters. A heterogenous cluster is a cluster with nodes running on different architectures. The node pools within the cluster are homogenous. The cluster would be one with a homogenous control plane with worker node pools, supporting any combination of architectures (eg: x86 control plane + ARM worker nodes). This document describes the support needed for heterogenous architecture clusters in phases. There will be three major phases with basic support through phase 1 which is targeted for 4.11 and other features are targeted beyond release 4.11. The targeted platforms in the initial phases are mainly AWS and Azure with support for disconnected installs as well. The architectures that will be supported and can be used in these initial phases are x86 and ARM. Support for other architectures will be included beyond the 4.11 time frame.

  

Active Changes

<PR ID>: (activity this week / total activity) summary

There were 14 Active pull requests:

• 995: (78/112) machine-api: Add enhancement for AWS Placement Groups in Machine API (JoelSpeed)
• 996: (59/100) single-node: Enhancement for enabling single-node-openshift with workers (omertuc)
• 943: (38/89) etcd: [OCPCLOUD-1244] Add proposal for etcd protection mechanism during control plane scaling (JoelSpeed)
• 1005: (25/46) update: Synchronized upgrades in DPU clusters (danwinship)
• 929: (22/223) api-review: [OCPNODE-747] New CRD ImageDigestMirrorSet and ImageTagMirrorSet to support AllowMirrByTags (QiWang19)
• 987: (10/38) dns: Add the DNS-over-TLS enhancement initial draft (brandisher)
• 1002: (7/55) ingress: CFE-10: Add host-network-bind-options (Elbehery)
• 958: (6/104) monitoring: enhancements/monitoring: User-defined alerting rules proposal (bison)
• 981: (5/128) general: Added proposal for HyperShift monitoring. (bwplotka)
• 937: (2/129) monitoring: support configuration of alerting notifications by application owners (simonpasquier)
• 745: (1/131) security: Security Profiles Operator integration in OpenShift (JAORMX)

Active Pull Requests Modifying Existing Documents

• 978: (13/49) general: CONVENTIONS: additional HA considerations regarding storage (jan--f)
• 1000: (11/78) api-review: Update enhancement proposal to support update of user-defined AWS tags (TrilokGeer)
• 985: (1/4) dev-guide: Host port registry: Add host port for SDN controller metrics (martinkennelly)

Closed Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Closed pull request:

• 343: (2/57) authentication: cluster-wide oauth-proxy settings (deads2k)

Revived (closed more than 7 days ago, but with new comments) Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Revived (closed more than 7 days ago, but with new comments) pull request:

• 660: (3/28) cluster-logging: Flow control API enhancements, first draft. (alanconway)

Idle (no comments for at least 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 11 Idle (no comments for at least 7 days) pull requests:

• 811: (0/69) network: Enhancement proposal for OVN secondary networks (maiqueb)
• 812: (0/56) node: Add proposal about Node Operator (saschagrunert)
• 918: (0/79) installer: vsphere: add multiple datacenter and clusters (jcpowermac)
• 924: (0/214) oc: CLI Manager (deejross)
• 955: (0/118) authentication: Enhancement for OAuth2 Authorization Grant Login for oc (arjunrn)
• 977: (0/42) worker-latency-profile: Add WorkerLatencyProfile enhancement (harche)
• 980: (0/71) authentication: enhancements/authentication: detect invalid certificates (s-urbaniak)
• 986: (0/4) windows-containers: WIP WINC-712: Windows CSI Storage Enablement (alinaryan)
• 994: (0/5) authentication: auth: add enhancement about pinning SCCs to pods (stlaz)
• 1006: (0/3) storage: WIP - CSI Inline Ephemeral Volume Security (adambkaplan)

Idle (no comments for at least 7 days) Pull Requests Modifying Existing Documents

• 1003: (0/2) authentication: add log level, stage and request uri mask (ibihim)

With lifecycle/stale or lifecycle/rotten Changes

<PR ID>: (activity this week / total activity) summary

There were 6 With lifecycle/stale or lifecycle/rotten pull requests:

• 201: (5/112) general: bootimages: Downloading and updating bootimages via release image (cgwalters)
• 243: (6/182) general: Enable ProjectRequestLimit on OpenShift 4.x (tkashem)
• 919: (4/26) cluster-logging: Multi-Container-Structured-Logging (alanconway)
• 931: (1/67) dns: NE-367: Add logLevel and operatorLogLevel APIs for DNS (miheer)
• 952: (1/24) ingress: NE-585 Expose HealthCheck Interval (candita)
• 992: (7/15) authentication: auth: add enhancement for direct kube-apiserver oidc config (stlaz)