Feature blog 1.30: user namespaces #45354

rata · 2024-02-26T19:50:00Z

Blog post about user namespace migrating to beta in 1.30.

netlify · 2024-02-26T19:50:17Z

👷 Deploy Preview for kubernetes-io-vnext-staging processing.

Name	Link
🔨 Latest commit	`33ef483`
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-io-vnext-staging/deploys/661678398cbb460008479991

windsonsea · 2024-02-27T01:42:00Z

You can mark it as a draft for clarity.

Checksumz · 2024-03-12T11:48:58Z

howdy @rata, I am your assigned 1.30 Release comms shadow and was hoping to help you along with deadlines for this blog. It looks like it is currently a work in progress.
The Ready for Review deadline is March 22, 2024. As we have few blog reviewers, we want to make sure you have ample time to get your content together. Please let me know how we can help!

rata · 2024-03-12T16:46:33Z

@Checksumz thanks! This is ready for review

content/en/blog/_posts/2024-03-15-userns-beta/index.md

rata · 2024-04-10T11:30:42Z

@nate-double-u @Checksumz thanks, applied all the suggestions. PTAL! :)

Checksumz · 2024-04-10T23:56:39Z

@nate-double-u @Checksumz thanks, applied all the suggestions. PTAL! :)

Thank you @rata.
@nate-double-u the changes you recommended have been applied, please can you review and approve if everything looks good.

reylejano · 2024-04-11T18:57:44Z

If this blog PR is to be merged after the 1.30 release, this should target the main branch as the dev-1.30 branch would be merged into main on the 1.30 release day. Any updates to the dev-1.30 branch post 1.30 release won't be sync'd with main

rata · 2024-04-11T20:00:14Z

@reylejano thanks for catching that, this is based on (and against) main now.

rata · 2024-04-11T20:01:37Z

It's 9pm here and I'm about to leave, if more changes are needed I hope @giuseppe or @saschagrunert can do them while I'm away in the next few days.

netlify · 2024-04-11T20:01:50Z

✅ Pull request preview available for checking

Built without sensitive environment variables

Name	Link
🔨 Latest commit	`052cf7e`
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-io-main-staging/deploys/661f683689da3c0008b4e944
😎 Deploy Preview	https://deploy-preview-45354--kubernetes-io-main-staging.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Gauravpadam · 2024-04-14T06:24:39Z

I have some bandwidth today, I'll be reviewing

Checksumz · 2024-04-15T12:54:36Z

/lgtm
@mrbobbytables please can you review and approve this PR

k8s-ci-robot · 2024-04-15T12:54:43Z

LGTM label has been added.

Git tree hash: dd88c5ff781a7332470cb5701d20141ce13ac565

sftim

/approve

🛑 Do not merge until Kubernetes v1.30 is released 🛑

sftim · 2024-04-16T08:10:48Z

content/en/blog/_posts/2024-04-22-userns-beta/index.md

+the exploit, which works without user namespaces, **is mitigated when user
+namespaces are in use.**
+
+{{< youtube id="07y5bl5UDdA" title="Mitigation of CVE-2024-21626 on Kubernetes by enabling User Namespace">}}


This is a bit large, and title title is slightly off

Suggested change

{{< youtube id="07y5bl5UDdA" title="Mitigation of CVE-2024-21626 on Kubernetes by enabling User Namespace">}}

{{< youtube id="07y5bl5UDdA" title="Mitigation of CVE-2024-21626 on Kubernetes by enabling User Namespace support" class="youtube-quote-sm" >}}

What I recommend: leave this as-is until the release day, then once this has merged (even before publication), send in a follow-up PR.

This is a bit large, and title title is slightly off

What I recommend: leave this as-is until the release day, then once this has merged (even before publication), send in a follow-up PR.

Hi @giuseppe & @saschagrunert, since @rata is on holidays will you be able to address this suggestion ?

Applied the suggestion. 👍

k8s-ci-robot · 2024-04-16T08:12:44Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: matthyx, mrunalp, saschagrunert, sftim

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~content/en/blog/OWNERS~~ [sftim]
~~static/images/blog/OWNERS~~ [sftim]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com> Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

sftim · 2024-04-17T10:54:13Z

/lgtm

k8s-ci-robot · 2024-04-17T10:54:18Z

LGTM label has been added.

Git tree hash: 023983989293b510eadbd89edf49d3d3b395dca5

kcmartin · 2024-04-20T01:50:06Z

/unhold

k8s-ci-robot requested review from natalisucks and windsonsea February 26, 2024 19:50

k8s-ci-robot added language/en Issues or PRs related to English language cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. sig/docs Categorizes an issue or PR as relevant to SIG Docs. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Feb 26, 2024

rata mentioned this pull request Feb 26, 2024

Support User Namespaces in pods kubernetes/enhancements#127

Open

26 tasks

rata force-pushed the rata/blog-userns-1.30 branch from 1e42da9 to 09e6d96 Compare February 26, 2024 19:56

k8s-ci-robot added the area/blog Issues or PRs related to the Kubernetes Blog subproject label Feb 26, 2024

rata marked this pull request as draft February 27, 2024 14:31

k8s-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Feb 27, 2024

rata force-pushed the rata/blog-userns-1.30 branch from 09e6d96 to 964fb6f Compare March 12, 2024 13:20

k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Mar 12, 2024

rata force-pushed the rata/blog-userns-1.30 branch from 964fb6f to 6f577c4 Compare March 12, 2024 16:29

rata marked this pull request as ready for review March 12, 2024 16:45

k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Mar 12, 2024

k8s-ci-robot requested review from Gauravpadam and nate-double-u March 12, 2024 16:45

rata commented Mar 12, 2024

View reviewed changes

content/en/blog/_posts/2024-03-15-userns-beta/index.md Outdated Show resolved Hide resolved

rata force-pushed the rata/blog-userns-1.30 branch from 6f577c4 to c78ea29 Compare March 12, 2024 16:49

rata commented Mar 12, 2024

View reviewed changes

content/en/blog/_posts/2024-03-15-userns-beta/index.md Outdated Show resolved Hide resolved

rata force-pushed the rata/blog-userns-1.30 branch from c78ea29 to 7df68a6 Compare March 12, 2024 16:51

rata commented Mar 12, 2024

View reviewed changes

content/en/blog/_posts/2024-03-15-userns-beta/index.md Outdated Show resolved Hide resolved

rata force-pushed the rata/blog-userns-1.30 branch 2 times, most recently from b11e77c to 0931de4 Compare March 12, 2024 17:02

rata force-pushed the rata/blog-userns-1.30 branch from 46d9f43 to 33ef483 Compare April 10, 2024 11:30

rata changed the base branch from dev-1.30 to main April 11, 2024 19:56

rata force-pushed the rata/blog-userns-1.30 branch from 33ef483 to a88eefb Compare April 11, 2024 19:58

k8s-ci-robot assigned Checksumz Apr 15, 2024

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 15, 2024

sftim reviewed Apr 16, 2024

View reviewed changes

k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 16, 2024

blog: Add userns feature post for 1.30

052cf7e

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com> Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

saschagrunert force-pushed the rata/blog-userns-1.30 branch from a88eefb to 052cf7e Compare April 17, 2024 06:12

k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 17, 2024

k8s-ci-robot requested review from Checksumz and sftim April 17, 2024 06:12

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 17, 2024

k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Apr 20, 2024

k8s-ci-robot merged commit 08c5377 into kubernetes:main Apr 20, 2024
6 checks passed

sftim mentioned this pull request Apr 22, 2024

Convert blog image to vector from Beta Support For Pods With User Namespaces #45963

Closed

rata deleted the rata/blog-userns-1.30 branch April 29, 2024 09:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Feature blog 1.30: user namespaces #45354

Feature blog 1.30: user namespaces #45354

rata commented Feb 26, 2024 •

edited

Loading

netlify bot commented Feb 26, 2024 •

edited

Loading

windsonsea commented Feb 27, 2024

Checksumz commented Mar 12, 2024 •

edited

Loading

rata commented Mar 12, 2024 •

edited

Loading

rata commented Apr 10, 2024

Checksumz commented Apr 10, 2024 •

edited

Loading

reylejano commented Apr 11, 2024

rata commented Apr 11, 2024

rata commented Apr 11, 2024

netlify bot commented Apr 11, 2024 •

edited

Loading

Gauravpadam commented Apr 14, 2024

Checksumz commented Apr 15, 2024

k8s-ci-robot commented Apr 15, 2024

sftim left a comment

sftim Apr 16, 2024

Checksumz Apr 17, 2024

saschagrunert Apr 17, 2024

k8s-ci-robot commented Apr 16, 2024

sftim commented Apr 17, 2024

k8s-ci-robot commented Apr 17, 2024

kcmartin commented Apr 20, 2024

	{{< youtube id="07y5bl5UDdA" title="Mitigation of CVE-2024-21626 on Kubernetes by enabling User Namespace">}}
	{{< youtube id="07y5bl5UDdA" title="Mitigation of CVE-2024-21626 on Kubernetes by enabling User Namespace support" class="youtube-quote-sm" >}}

Feature blog 1.30: user namespaces #45354

Feature blog 1.30: user namespaces #45354

Conversation

rata commented Feb 26, 2024 • edited Loading

netlify bot commented Feb 26, 2024 • edited Loading

👷 Deploy Preview for kubernetes-io-vnext-staging processing.

windsonsea commented Feb 27, 2024

Checksumz commented Mar 12, 2024 • edited Loading

rata commented Mar 12, 2024 • edited Loading

rata commented Apr 10, 2024

Checksumz commented Apr 10, 2024 • edited Loading

reylejano commented Apr 11, 2024

rata commented Apr 11, 2024

rata commented Apr 11, 2024

netlify bot commented Apr 11, 2024 • edited Loading

✅ Pull request preview available for checking

Gauravpadam commented Apr 14, 2024

Checksumz commented Apr 15, 2024

k8s-ci-robot commented Apr 15, 2024

sftim left a comment

Choose a reason for hiding this comment

sftim Apr 16, 2024

Choose a reason for hiding this comment

Checksumz Apr 17, 2024

Choose a reason for hiding this comment

saschagrunert Apr 17, 2024

Choose a reason for hiding this comment

k8s-ci-robot commented Apr 16, 2024

sftim commented Apr 17, 2024

k8s-ci-robot commented Apr 17, 2024

kcmartin commented Apr 20, 2024

rata commented Feb 26, 2024 •

edited

Loading

netlify bot commented Feb 26, 2024 •

edited

Loading

Checksumz commented Mar 12, 2024 •

edited

Loading

rata commented Mar 12, 2024 •

edited

Loading

Checksumz commented Apr 10, 2024 •

edited

Loading

netlify bot commented Apr 11, 2024 •

edited

Loading