- Enhancement name: Recursive Read-only (RRO) mounts
- Enhancement status (alpha/beta/stable): alpha
- SIG: Node
- k/enhancements repo issue #:
https://github.com/kubernetes/enhancements/pull/3857- PR #’s:
https://github.com/kubernetes/kubernetes/pull/123180 The feature implementation is complete with a good amount of unit tests and E2E tests,
but this still needs a trivial fix for feature-gating the output of `k get nodes`.
- Additional time needed (in days): 3
- Reason this enhancement is critical for this milestone: The feature is already implemented by containerd and critest, so Kubernetes releases should be synced with them.
- Risks from adding code late: low, as this feature-gated and disabled by default
- Risks from cutting enhancement: users will have to continue using insecure mounts if the enhancement is going to be cut