Enhancement name: EmptyDir Volume Permission Mode
Enhancement status: alpha
SIG: sig-storage
k/enhancements repo issue #:
https://github.com/kubernetes/enhancements/issues/5502PR #'s:
https://github.com/kubernetes/enhancements/pull/6200Additional time needed (in calendar days): 2 (AoE Time)
Reason this enhancement is critical for this milestone: The KEP adds a single optional Mode *int32 field to EmptyDirVolumeSource, closing a long-standing gap - emptyDir is the only volume type without permission control. The delay resulted from an API design change (from boolean stickyBit to mode *int32) and the original KEP author's unresponsiveness.
Risks from adding code late: Low. The change is a single new optional field. It touches only the emptyDir volume plugin. No changes to CRI, container runtimes, or other subsystems.
Risks from cutting enhancement: The feature has been requested since a long time (
https://github.com/kubernetes/kubernetes/issues/110835). Cutting it means users will continue to rely on init containers with chmod or ephemeral volumes as workarounds.
Thanks,
Nispriha