Exception Request: "Kubelet-in-UserNS, aka Rootless mode" for release 1.22

[Akihiro Suda]

I'd like to request an exception to add "Kubelet-in-UserNS, aka Rootless mode" to the v1.22 milestone.

This exception request was discussed in the #sig-node Slack today.

The enhancement will be gated by `KubeletInUsernamespace` feature gate, and has no risk of introducing any regression.


- Enhancement name: "Kubelet-in-UserNS, aka Rootless mode"

- Enhancement status: alpha

- SIG: Node

- k/enhancements repo issue #: https://github.com/kubernetes/enhancements/issues/2033

- PR #’s: https://github.com/kubernetes/enhancements/pull/1371

- Additional time needed (in days): 2 days

- Reason this enhancement is critical for this milestone: Mostly because the communities such as the `kind` community and the minikube community are seeking for running Kubernetes within a rootless environment such as Rootless Docker or Rootless Podman.
  - https://github.com/kubernetes-sigs/kind/issues/1797
  - https://github.com/kubernetes/minikube/issues/10836
  - https://github.com/kubernetes/minikube/issues/8719

- Risks from adding code late: None

- Risks from cutting enhancement: Cutting this enhancement will result in non-robust dirty hack for faking files under `/proc/sys`.
  `kind` already has this dirty hack for supporting rootless, but this hack should be removed after the enhancement gets merged into the upstream: https://github.com/kubernetes-sigs/kind/blob/b6bc112522651d98c81823df56b7afa511459a3b/images/base/files/usr/local/bin/entrypoint#L104

[Savitha Raghunathan]

Hi Akihiro Suda,

Thanks for creating this exception request. Since we have all the required approvals and this KEP has minimal to no risk, we are APPROVING this request. Please make sure to merge any pending PRs by May 25th. If you have any questions, please feel free to reach out to us in the #sig-release slack channel.

Have a great day!

Regards,

Savitha,

1.22 Release Team Lead

--
To unsubscribe from this group and stop receiving emails from it, send an email to release-team...@kubernetes.io.