Skip to content

Latest commit

 

History

History
265 lines (177 loc) · 18.5 KB

2021-07-23.md

File metadata and controls

265 lines (177 loc) · 18.5 KB

This Week in Enhancements - 2021-07-23

Enhancements for Release Priorities

Prioritized Merged Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Prioritized Merged pull request:

Prioritized Merged Pull Requests Modifying Existing Documents

  • 800: (6/16) update: updates: capture offline discussion on eus-upgrades-mvp (dhellmann)

Prioritized New Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Prioritized New pull request:

  • 838: (45/45) local-storage: STOR-505: Add proposal for exporting local storage device health metrics (rohantmp)

    priority/important-soon

    This enhancement proposes that we export health metrics for each local device on each node.

Prioritized Active Changes

<PR ID>: (activity this week / total activity) summary

There were 4 Prioritized Active pull requests:

  • 830: (130/148) disaster-recovery: WIP Add enhancement for automated cluster backups (marun)

    do-not-merge/work-in-progress, priority/important-soon

    Enable the configuration of automated backup of etcd and the static pod content that underpin an OpenShift 4.x self-hosted cluster.

  • 828: (66/160) update: Add admin ack upgrade gate (jottofar)

    priority/critical-urgent

    CVO currently blocks minor level upgrades when overrides are set, a resource deletion is pending, or an operator has set its upgradeable condition to false. This enhancement adds a generic upgrade blocking mechanism for blocking minor level upgrades. This generic upgrade blocker can consist of one or more items each of which will block a minor level upgrade. Each generic upgrade blocker item will be associated with some well-defined task to be completed by an administrator. Once the task has been completed the administrator will acknowledge completion and its associated item will no longer block minor level upgrades.

  • 593: (1/136) general: Add proposal for hiding container mountpoints from systemd (lack)

    priority/important-soon

    The current implementation of Kubelet and CRI-O both use the top-level namespace for all container and Kubelet mountpoints. However, moving these container-specific mountpoints into a private namespace reduced systemd overhead with no difference in functionality.

Prioritized Active Pull Requests Modifying Existing Documents

  • 832: (16/28) general: handling kube-apiserver disruption (deads2k)

Prioritized Closed Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Prioritized Closed pull request:

  • 643: (2/68) update: Add Reduced Reboots enhancement (sdodson)

Other Enhancements

Other Merged Changes

<PR ID>: (activity this week / total activity) summary

There were 6 Other Merged pull requests:

  • 460: (3/22) ingress: Add empty-requests-policy enhancement (Miciah)

    This enhancement extends the IngressController API to allow the user to configure IngressControllers to log or ignore "empty requests", meaning incoming connections on which the IngressController receives no requests.

  • 749: (2/184) ingress: NE-310 Enhancement proposal for HSTS route admission plugin (candita)

    NE-310 enhancement proposal supersedes previous NE-310 enhancement proposal: https://github.com/openshift/enhancements/blob/master/enhancements/ingress/global-options-enable-hsts.md

  • 816: (17/39) ingress: Ingress: Add API for configuring ingress connection timeouts (rfredette)

    This document proposes the addition of several API fields into the ingress controller API, allowing the cluster admin to adjust how long routers will hold open connections under various circumstances.

  • 833: (12/34) kube-apiserver: Fallback on Failing Revisions of Static Pods (sttts)

    Static pods operators use a revisioned pod manifest and revisioned configmap and secret manifests to roll out and start a new configuration of the operand in an atomic way.

    Configuration can be bad in different ways. In HA OpenShift, the static pod operator will wait for operands on one node to start up and to become healthy and ready. The operator will stop rolling out bad revisions further.

    In SNO, there is no other pod to ensure availability when a roll-out of a new revision happens. Hence, a bad revision can be fatal for the cluster, especially for the kube-apiserver and etcd.

    This enhancement is describing a fallback mechanism that will make the operand to revert to the last healthy revision when the new revision fails, and how the operator will notice this event and how it will react.

    The fallback mechanism is opt-in by the operator, and kube-apiserver and etcd operators (and potentially kcm and ks) have to consult the deployment topology in the infrastructure resource to decide. Most of the text here is generic, but we will focus mainly on the cluster-kube-apiserver-operator use-case first.

Other Merged Pull Requests Modifying Existing Documents

  • 827: (4/24) machine-api: Backport the pause feature for MachineHealthChecks (slintes)
  • 840: (4/4) housekeeping: Add mandre to OWNERS (stbenjam)

Other New Changes

<PR ID>: (activity this week / total activity) summary

There were 4 Other New pull requests:

  • 841: (18/18) builds: Remove Jenkins from the OCP Payload (adambkaplan)

    This proposal aims to remove Jenkins images from the OCP payload and replace them with images delivered via CPaaS.

  • 843: (22/22) general: Node Healthcheck Operator (rgolangh)

    Enable opt in for automated node health checking and create objects for unhealthy nodes, to be handled later by external controllers that comply with the existing [api].

  • 844: (1/1) network: host-port-registry: add 9446 port (andfasano)

    (no '## Summary' section found in enhancements/network/host-port-registry.md)

Other New Pull Requests Modifying Existing Documents

  • 842: (7/7) cluster-logging: Restore tenant configuration for Loki forwarder. (alanconway)

Other Active Changes

<PR ID>: (activity this week / total activity) summary

There were 16 Other Active pull requests:

  • 751: (36/85) builds: Disable Jenkins Pipeline Build Strategy by Default (adambkaplan)
  • 831: (34/38) single-node: aos-sno-pair enhancement (mshitrit)
  • 683: (18/72) insights: Insights Operator pulling and exposing data from the OCM API (tremes)
  • 826: (12/50) cluster-logging: Creating initial skeleton of eo v2 api proposal (ewolinetz)
  • 834: (11/82) machine-api: Propose new controller for pausing MHC during cluster upgrades (slintes)
  • 821: (10/80) update: enhancements/update/targeted-update-edge-blocking: Propose a new enhancement (wking)
  • 817: (10/161) network: Baremetal IPI Network Configuration for Day-1 (cybertron)
  • 837: (9/10) insights: Conditional Data Gathering for Insights Operator (Sergey1011010)
  • 836: (4/16) etcd: ETCD-58: WIP Add enhancement for automated defragmentation (hexfusion)
  • 676: (3/8) kube-apiserver: api compatibility (sanchezl)
  • 682: (1/33) alerting: alerting as a feature (dofinn)
  • 661: (1/120) operator-framework-api: New OpenshiftCatalogueValidator (camilamacedo86)
  • 626: (1/40) machine-config: enhancements/machine-config: securing MCS (crawford)
  • 302: (1/31) kube-apiserver: [thought-experiment] single-node cluster static pod creation (deads2k)

Other Active Pull Requests Modifying Existing Documents

  • 815: (8/47) console: CONSOLE-2425: Support localization of dynamic plugins (jhadvig)
  • 538: (1/17) machine-api: update machine-api-usage-telemetry (elmiko)

Other Closed Changes

<PR ID>: (activity this week / total activity) summary

There were 3 Other Closed pull requests:

  • 346: (2/87) installer: Installer pre-flight validations (mandre)
  • 475: (2/33) general: enhancements/update/update-blocker-lifecycle: Propose a new enhancement (wking)
  • 520: (2/17) network: Static IP Addresses from DHCP (cybertron)

Old (labeled as stale, but discussion in last 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 4 Old (labeled as stale, but discussion in last 7 days) pull requests:

  • 687: (4/112) storage: Add AWS EFS CSI driver operator (jsafrane)
  • 722: (1/8) multi-arch: Add "Build OKD for ppc64le" proposal (mjturek)
  • 748: (1/5) cluster-logging: New proposal: Forwarder output parameter templates (alanconway)

Old (labeled as stale, but discussion in last 7 days) Pull Requests Modifying Existing Documents

  • 522: (1/41) olm: Update OLM managed operator metrics enhancement (awgreene)

Other lifecycle/stale Changes

<PR ID>: (activity this week / total activity) summary

There were 6 Other lifecycle/stale pull requests:

  • 137: (0/302) general: CLI in-cluster management (sallyom)
  • 613: (0/19) network: NetworkPolicies for System Namespaces (danwinship)
  • 673: (0/54) machine-api: short-circuiting-backoff (mshitrit)
  • 730: (0/9) network: mtu: ability to change running cluster's mtu setting (msherif1234)

Other lifecycle/stale Pull Requests Modifying Existing Documents

  • 618: (0/16) network: Add more details about host port ownership (danwinship)
  • 711: (0/4) olm: add "fail open" risk/mitigation (njhale)

Idle (no comments for at least 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 50 Idle (no comments for at least 7 days) pull requests:

  • 146: (0/215) installer: openstack: Add Baremetal Compute Nodes RFE (pierreprinetti)
  • 201: (0/95) general: bootimages: Downloading and updating bootimages via release image (cgwalters)
  • 292: (0/203) machine-api: Add Managing Control Plane machines proposal (enxebre)
  • 341: (0/80) maintenance: Machine-maintenance operator proposal (dofinn)
  • 343: (0/43) authentication: cluster-wide oauth-proxy settings (deads2k)
  • 363: (0/201) cvo: Enhancement for adding upgrade preflight checks for operators (LalatenduMohanty)
  • 371: (0/22) ingress: Add forwarded-header-policy enhancement (Miciah)
  • 427: (0/54) update: enhancements/update/phased-rollouts: Propose a new enhancement (wking)
  • 461: (0/9) ingress: Add aws-elb-idle-timeout enhancement (Miciah)
  • 468: (0/54) machine-api: Add dedicated instances proposal (alexander-demichev)
  • 562: (0/152) security: Enhancing SCC to Gate Runtime Classes (haircommander)
  • 567: (0/110) machine-api: Added proposal for remediation history (slintes)
  • 571: (0/233) network: Cloud API component for egress IP (alexanderConstantinescu)
  • 575: (0/76) installer: Installer Enhacement Proposal: Manifests from STDIN (oglok)
  • 624: (0/21) update: Add: upgrade-blocker-operator (michaelgugino)
  • 652: (0/4) node: Enable cgroup v2 support (harche)
  • 654: (0/20) dns: ARO private DNS zone resource removal (jim-minter)
  • 660: (0/21) cluster-logging: Flow control API enhancements, first draft. (alanconway)
  • 695: (0/27) cluster-version-operator: move CVO upgrades doc to enhancements (deads2k)
  • 706: (0/154) api-review: apply user defined tags to all resources (gregsheremeta)
  • 707: (0/28) installer: Add Enhancement for Installing to Alibaba Cloud (lemondlut)
  • 725: (0/12) distributed-tracing: distributed tracing (sallyom)
  • 732: (0/147) network: Add Smart NIC OVN offload enhancement (zshi-redhat)
  • 736: (0/104) installer: Add enhancement - IBM Cloud provider for Power Virtual Server platform (jaypoulz)
  • 738: (0/103) network: Installing OCP on ARM-Based Smart NICs (danwinship)
  • 745: (0/99) security: Security Profiles Operator integration in OpenShift (JAORMX)
  • 747: (0/60) network: Enable Kubernetes NMstate by default for selected platforms (yboaron)
  • 753: (0/136) workload-partitioning: add plan for configuration and enablement ownership (dhellmann)
  • 758: (0/20) security: Security Context Constraints for CSI Volumes (adambkaplan)
  • 771: (0/12) update: add eus MCO enhancement (rphillips)
  • 773: (0/40) installer: Enhancement proposal for OpenShift IPI on IBM Cloud (jeffnowicki)
  • 775: (0/9) network: Drop Node Hostname Resolution (cybertron)
  • 781: (0/67) installer: CORS-1650: RHEL 8 Server Worker/Infra Node Support (mtnbikenc)
  • 784: (0/44) installer: Allow installer to include/exclude components based on user select install solution (bparees)
  • 787: (0/8) update: Add no drain upgrade filter (michaelgugino)
  • 791: (0/29) baremetal: Support RAID and BIOS configuration for baremetal IPI deployments (hs0210)
  • 802: (0/37) workload-partitioning: WIP Workload partitioning API enhancement (MarSik)
  • 804: (0/28) workload-partitioning: PAO render initial draft (MarSik)
  • 806: (0/1) ingress: Ingress: Add ingress operator and operand logging level API (sgreene570)
  • 811: (0/2) network: Enhancement proposal for OVN secondary networks (maiqueb)
  • 812: (0/45) node: Add proposal about Node Operator (saschagrunert)

Idle (no comments for at least 7 days) Pull Requests Modifying Existing Documents

  • 666: (0/27) kube-apiserver: adding new userequest audit policy (EmilyM1)
  • 693: (0/29) general: CONVENTIONS: Add section on limits (smarterclayton)
  • 742: (0/93) cluster-scope-secret-volumes: Update projected resource CSI driver proposal (adambkaplan)
  • 774: (0/6) network: Remove OpenShift-SDN requirement for Bare Metal Load Balancer (markdgray)
  • 779: (0/1) general: Update High Availability Conventions (ravisantoshgudimetla)
  • 797: (0/19) ingress: custom routes: set up an explicit trust to the oauth-server (stlaz)
  • 805: (0/3) general: CONVENTIONS.md: add runlevel documentation (mcoops)
  • 810: (0/2) general: tools: update make dependency to build lint image (dhellmann)
  • 835: (0/4) cluster-logging: Explicitly state that JSON log feature applies to all log types. (alanconway)