Updates since 2022-03-04
<PR ID>: (activity this week / total activity) summary
There was 1 Prioritized New pull request:
-
1053: (64/64) agent-installer: Add agent-based installer concept (zaneb)
priority/important-soon
The agent-based installer is an installation method that will use a bootable, ephemeral installer image running on the hosts that are to become part of the cluster. The user will generate the image using a command-line tool. The image itself will contain components (such as assisted-service and assisted-agent) of the Assisted and Multi-Cluster Engine (MCE) installation methods. The installer will be usable in both a fully-automated workflow, where configuration is provided upfront, and an interactive workflow where the user can interact with a GUI similar to the hosted Assisted installation service.
<PR ID>: (activity this week / total activity) summary
There was 1 Other Merged pull request:
- 1055: (7/7) worker-latency-profile: updated the flag values with the corresponding format (sairameshv)
<PR ID>: (activity this week / total activity) summary
There were 4 Other New pull requests:
-
1056: (25/25) cluster-scope-secret-volumes: BUILD-406: shared resource validating admission EP (gabemontero)
This Enhancement Proposal details improvements to existing validations currently performed, as well as the introduction of new validations to be performed, on artifacts related to the Shared Resource CSI Driver and Operator component introduced as Tech Preview in 4.10. As a quick reminder, the associated API for "Shared Resources", namely SharedSecrets and SharedConfigMaps, are cluster scoped objects whose referenced namespace scoped Secrets and Configmaps are mounted into Pod Spec'able objects via use of the associated Shared Resource CSI Driver.
With the introduction of the Shared Resources API in 4.10, any restrictions around use of the new CRDs or the declaring of Volumes using the new Driver in Pods, was done at the CSI Driver level. That is often not the most efficient location to enforce such restrictions, as the entire Kubelet provisioning path for the Pod must be exercised for the error to be caught. Also, the user does not learn of the error upon creation of the Pod Spec'able object. Instead, the user must inspect Pod status and Events to learn of the problem.
This proposal intends to improve on the usability around error discovery by employing validations called during API object creation and modification.
-
1057: (10/10) installer: Enhancement for enabling 4-node cluster deployments as a day0 operation (flaper87)
This enhancement proposes to allow for deploying a 4-nodes cluster as a day 0 operation, where the infrastructure workload can be deployed with HA enabled. The 4-nodes cluster would be composed by 3 schedulable master nodes and a single worker, which provide users with a highly available cluster.
- 1051: (40/40) api-review: Update enhancement proposal to support update of user-defined AWS tags (TrilokGeer)
- 1054: (4/4) ingress: NE-585 Update enhancement after implementation (candita)
<PR ID>: (activity this week / total activity) summary
There were 17 Other Active pull requests:
- 1041: (79/127) single-node: Enhancement for enabling single-node-openshift with workers (omertuc)
- 1034: (57/91) testing: Ephemeral Agent Installer e2e Tests (lranjbar)
- 1014: (48/351) multi-arch: Heterogeneous architecture clusters (Prashanth684)
- 1035: (38/103) network: Pods Egress DSCP QoS proposal (oribon)
- 1032: (35/48) general: OpenShift CoreOS Layering (provisional) (cgwalters)
- 1037: (24/159) insights: WIP New Insights config API proposal (tremes)
- 1036: (16/132) insights: Insights Operator Prometheus Alerts for Insights Recommendations (natiiix)
- 1008: (14/199) machine-api: [OCPCLOUD-1248] Add initial iteration of ControlPlaneMachineSet operator enhancement (JoelSpeed)
- 1048: (7/20) network: Dual Stack VIPs for on-prem deployments (cybertron)
- 980: (5/87) authentication: enhancements/authentication: detect invalid certificates (s-urbaniak)
- 811: (2/73) network: Enhancement proposal for OVN secondary networks (maiqueb)
- 1019: (2/22) node-tuning: Enhancement for improving image pull via shortname security (umohnani8)
- 1005: (2/105) general: Non-disruptive upgrades in DPU clusters (danwinship)
- 943: (2/112) etcd: [OCPCLOUD-1244] Add proposal for etcd protection mechanism during control plane scaling (JoelSpeed)
- 981: (1/151) general: Added proposal for HyperShift monitoring. (bwplotka)
- 1039: (1/3) ingress: Add tunable-router-kubelet-probes (Miciah)
- 1028: (1/12) cluster-logging: flow-control-api spec (pmoogi-redhat)
<PR ID>: (activity this week / total activity) summary
There were 3 Other Closed pull requests:
- 992: (2/20) authentication: auth: add enhancement for direct kube-apiserver oidc config (stlaz)
- 1052: (3/3) ingress: NE-585 Expose HealthCheck Interval (candita)
- 1003: (2/6) authentication: add log level, stage and request uri mask (ibihim)
<PR ID>: (activity this week / total activity) summary
There was 1 Revived (closed more than 7 days ago, but with new comments) pull request:
- 1013: (0/6) cluster-logging: LOG-1043 Flow control API enhancements. (alanconway)
<PR ID>: (activity this week / total activity) summary
There were 11 Idle (no comments for at least 7 days) pull requests:
- 745: (0/133) security: Security Profiles Operator integration in OpenShift (JAORMX)
- 929: (0/237) api-review: [OCPNODE-747] New CRD ImageDigestMirrorSet and ImageTagMirrorSet to support AllowMirrByTags (QiWang19)
- 987: (0/104) dns: Add the DNS-over-TLS enhancement initial draft (brandisher)
- 995: (0/231) machine-api: Add enhancement for AWS Placement Groups in Machine API (JoelSpeed)
- 1002: (0/96) ingress: CFE-10: Add host-network-bind-options (Elbehery)
- 1009: (0/81) general: OpenStack Cloud Provider Config Upgrade (stephenfin)
- 1010: (0/70) authentication: add enhancement on PSa autolabeling (stlaz)
- 1023: (0/20) ingress: Add route-subdomain enhancement (Miciah)
- 1030: (0/30) monitoring: enhancements/monitoring: User-Defined Alerting and Relabeling Rules (bison)
- 1047: (0/3) authentication: AUTH-125 Cert Manager enhancement document (slaskawi)
- 1046: (0/2) ingress: transition-ingress-from-beta-to-stable status → implemented (Miciah)
<PR ID>: (activity this week / total activity) summary
There were 7 With lifecycle/stale or lifecycle/rotten pull requests:
- 918: (0/94) installer: vsphere: add multiple datacenter and clusters (jcpowermac)
- 937: (6/138) monitoring: support configuration of alerting notifications by application owners (simonpasquier)
- 958: (1/109) monitoring: enhancements/monitoring: User-defined alerting rules proposal (bison)
- 994: (1/9) authentication: auth: add enhancement about pinning SCCs to pods (stlaz)
- 1006: (1/5) storage: CSI Inline Ephemeral Volume Security (adambkaplan)
- 1025: (1/48) kube-apiserver: Introduce detection of stale clusteroperator conditions (mfojtik)
- 1027: (1/3) general: Enable ProjectRequestLimit on OpenShift 4.x (josefkarasek)