2021-12-10.md

This Week in Enhancements - 2021-12-10

Enhancements for Release Priorities

Prioritized Active Changes

<PR ID>: (activity this week / total activity) summary

There was 1 Prioritized Active pull request:

• 838: (1/147) local-storage: KNIP-1770: Add proposal for exporting local storage device health metrics (rohantmp)

  lifecycle/rotten, priority/important-soon

  This enhancement proposes that we export health metrics for each local device on each node.

Other Enhancements

Other Merged Changes

<PR ID>: (activity this week / total activity) summary

There were 9 Other Merged pull requests:

• 791: (16/99) baremetal: Support RAID and BIOS configuration for baremetal IPI deployments (hs0210)

  This enhancement proposes to add the support of RAID and BIOS configuration for baremetal IPI deployments.

• 921: (1/105) general: Enhancement proposal for Network Observability (stleerh)

  Network Observability introduces a new category in OpenShift that provides networking information for a single cluster. It gives insight into what's on the network, when and what types of traffic and traffic flows are being made, and by whom. It gathers data to help design, plan, and answer questions about the network and provides a visual representation to help understand, diagnose, and troubleshoot networking issues.

• 940: (2/40) cluster-logging: [LOG-1815] Enhancement proposal: Add alerts and rules for operator-managed LokiStack (ronensc)

  This enhancement adds observability capabilities to Loki operator in the form of Prometheus rules and alerts. These rules and alerts are used to identify abnormal conditions and update operators.

Other Merged Pull Requests Modifying Existing Documents

• 965: (7/7) general: CONVENTIONS: Include 33% option for DaemonSet maxUnavailable (wking)
• 968: (6/15) authentication: add audit spec for password authenticator flow (ibihim)
• 974: (4/4) dev-guide: dev-guide/cluster-version-operator/dev: Doc TechPreview feature gate annotations (wking)
• 975: (3/3) kubelet: Move NodeSwap to TechPreviewNoUpgrade feature set (ehashman)
• 979: (4/4) dns: typo in externaldns-operator (dbaker-rh)
• 982: (4/4) dev-guide: dev-guide/cluster-version-operator/dev/clusterversion: Drop version from 'group' (wking)

Other New Changes

<PR ID>: (activity this week / total activity) summary

There were 4 Other New pull requests:

• 977: (3/3) worker-latency-profile: Add WorkerLatencyProfile enhancement (harche)

  To make sure the Openshift cluster keeps running optimally where network latency between the control plane and the worker nodes may not always be at its best (e.g. Edge cases), we can tweak the frequency of the status updates done by the Kubelet and the corresponding reaction times of the Kube Controller Manager and Kube API Server.

• 980: (21/21) authentication: enhancements/authentication: detect invalid certificates (s-urbaniak)

  OpenShift 4.10 is going to be rebased against Kubernetes 1.23. This requires using Go 1.17. However, starting with Go 1.17 support for legacy invalid is going to be removed, see https://go.dev/doc/go1.17. More formally, the temporary GODEBUG=x509ignoreCN=0 flag has been removed. This implies that starting from OpenShift 4.10 invalid certificates will not be trusted any more as they will fail verification.

  This enhancement suggests a solution to prevent broken workloads from OpenShift 4.9 to OpenShift 4.10 if invalid certificates are detected.

  This enhancment therefore proposes:

  • a way to detect invalid certificates in kube-apiserver and oauth-server
  • a way to prevent upgrades from OpenShift 4.9 to OpenShift 4.10 in the face of invalid certificates

• 981: (60/60) general: Added proposal for HyperShift monitoring. (bwplotka)

  We propose to extract metric storage, alerting and querying to a separate service that can be scaled, deployed and managed in a decoupled mode. This will allow robust multi-cluster, fleet monitoring with best experience possible for cluster admins. This means SD org, running managed HyperShift will use RHOBS managed by Observability Group and AppSRE.

Other New Pull Requests Modifying Existing Documents

• 978: (7/7) general: CONVENTIONS: additional HA considerations regarding storage (jan--f)

Other Active Changes

<PR ID>: (activity this week / total activity) summary

There were 14 Other Active pull requests:

• 962: (209/339) windows-containers: WINC-505: Windows containerd runtime enablement (selansen)
• 971: (48/51) insights: WIP Insights Operator pulling and updating pull-secret (transferring uncl… (tremes)
• 929: (38/162) api-review: [OCPNODE-747] New CRD ImageSourceDigestPolicy and ImageSourceTagPolicy to support AllowMirrByTags (QiWang19)
• 937: (12/103) monitoring: support configuration of alerting notifications by application owners (simonpasquier)
• 958: (8/94) monitoring: enhancements/monitoring: User-defined alerting rules proposal (bison)
• 955: (6/105) authentication: Enhancement for OAuth2 Authorization Grant Login for oc (arjunrn)
• 922: (6/391) installer: Allow installer to include/exclude capabilities based on user selections (bparees)
• 736: (4/188) installer: Add enhancement - IBM Cloud provider for Power Virtual Server platform (jaypoulz)
• 924: (3/159) oc: CLI Manager (deejross)
• 949: (2/57) general: HELM-258: add enhancement for new namespace-scoped helm repo crd (zonggen)
• 837: (2/134) insights: Conditional Data Gathering for Insights Operator (Sergey1011010)
• 811: (2/67) network: Enhancement proposal for OVN secondary networks (maiqueb)
• 745: (2/129) security: Security Profiles Operator integration in OpenShift (JAORMX)

Other Active Pull Requests Modifying Existing Documents

• 967: (8/20) console: CONSOLE-3005: Provide alias for dynamic plugin's proxy (jhadvig)

Other Closed Changes

<PR ID>: (activity this week / total activity) summary

There were 3 Other Closed pull requests:

• 907: (2/19) console: CONSOLE-2894: Multi-cluster console (spadgett)
• 920: (2/113) etcd: ETCD-236: etcd: scaling etcd with raft learners (hexfusion)
• 925: (2/222) node-latency-profile: [OCPNODE-716] Kubelet<->Controller Manager communication Profiles (harche)

Idle (no comments for at least 7 days) Changes

<PR ID>: (activity this week / total activity) summary

There were 10 Idle (no comments for at least 7 days) pull requests:

• 722: (0/19) multi-arch: Add "Build OKD for ppc64le" proposal (mjturek)
• 725: (0/45) distributed-tracing: Allow/Expose options to enable distributed tracing in components as features are added upstream (sallyom)
• 812: (0/52) node: Add proposal about Node Operator (saschagrunert)
• 913: (0/138) machine-api: Add cluster-api integration enhancement (alexander-demichev)
• 918: (0/77) installer: vsphere: add multiple datacenter and clusters (jcpowermac)
• 943: (0/28) etcd: [OCPCLOUD-1244] Add proposal for etcd protection mechanism during control plane scaling (JoelSpeed)
• 972: (0/2) general: Upstream Repository Resync EP (josefkarasek)

Idle (no comments for at least 7 days) Pull Requests Modifying Existing Documents

• 919: (0/18) cluster-logging: Multi-Container-Structured-Logging (alanconway)
• 961: (0/6) storage: Update KEP for vsphere CSI driver operator (gnufied)
• 964: (0/1) dev-guide: Host port registry: Add loopback metrics port for OVN-K (martinkennelly)

Other lifecycle/stale or lifecycle/rotten Changes

<PR ID>: (activity this week / total activity) summary

There were 5 Other lifecycle/stale or lifecycle/rotten pull requests:

• 912: (1/25) installer: Enhancement proposal for OpenShift IPI on Nutanix AOS with AHV (vnephologist)
• 931: (0/45) dns: NE-367: Add logLevel and operatorLogLevel APIs for DNS (miheer)
• 952: (2/4) ingress: NE-585 Expose HealthCheck Interval (candita)

Other lifecycle/stale or lifecycle/rotten Pull Requests Modifying Existing Documents

• 923: (8/20) windows-containers: [docs] remove invalid web links (selansen)
• 948: (1/4) monitoring: Update alerting-consistency.md (ronensc)