Enhancement name: add ProcMount option
Enhancement status (alpha/beta/stable): beta
SIG: Node
k/enhancements repo issue #:
https://github.com/kubernetes/enhancements/issues/4265 PR #’s:
https://github.com/kubernetes/kubernetes/pull/123520 Additional time needed (in days): 4
Reason this enhancement is critical for this milestone: Useful along side user namespaces, which just went beta as well
Risks from adding code late: (to k8s stability, testing, etc.) not really any, it's behavior is gated and also relies on enabling user namespaces
Risks from cutting enhancement: (partial implementation, critical customer usecase, etc.) The use case of running containers inside kubernetes pods is limited without an unmasked proc mount, which is a useful case for user namespaces
--
Peter Hunt, RHCE
They/Them or He/Him
Senior Software Engineer, Openshift
Red Hat