-
Notifications
You must be signed in to change notification settings - Fork 1.6k
[KEP-4639] Graduate image volumes to GA #5450
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
saschagrunert
commented
Jul 15, 2025
- One-line PR description: Graduate the image volume feature as GA for 1.35.
- Issue link: VolumeSource: OCI Artifact and/or Image #4639
So readonlysupport will be a separate KEP? |
Read write support will be a separate KEP, yes. |
I see we have a PR opened for kube-scheduler (kubernetes/kubernetes#130231) that changes the scoring based on this feature. However, I don't see it mentioned in the KEP. Is that change expected? If yes, it should be in this KEP. |
9370d1a
to
dd71921
Compare
I don't think we should put that in scope of this KEP, but I don't see why other features should not rely on it once GA. |
@kubernetes/sig-node-proposals PTAL |
cc @mikebrow |
dd71921
to
2665bde
Compare
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: saschagrunert The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm overall, re-reading the whole KEP some notes:
-
Non-goals still mention "alpha":
That could be delegated to the consumer or perhaps to some hooks and is out of scope for alpha.
-
Testing section needs to be updated for containerd:
When containerd adds support for the feature, then the e2e tests will become available for that runtime as well.
-
As part of implementation, let's get rid of a separate test lane (https://testgrid.k8s.io/sig-node-cri-o#pr-crio-cgrpv2-imagevolume-e2e) for the feature and mark it as NodeConformance. The feature doesn't have any special node configurations needed. Also remove the
Feature
tag. It may be too late to replace withFeatureGate
since it was GA'd. Maybe for the case of emulated version testing only.
@@ -881,8 +884,6 @@ in back-to-back releases. | |||
- Multiple examples of real world uses |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
GA criteria typically has a requirement to imlpement a Conformance test. Can we include it please. It was a recent contention point with DRA and we need to follow the best practices here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added the test graduation to conformance.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I mean real conformance, not only node conformance.
Conformance tests should cover all APIs. In this case we may have a simple conformance test that will create image-backed volume and produces it's content as an output.
@@ -781,6 +782,8 @@ We expect no non-infra related flakes in the last month as a GA graduation crite | |||
- [sig-node] ImageVolume [NodeFeature:ImageVolume] should succeed with multiple pods and same image on the same node | |||
- [sig-node] ImageVolume [NodeFeature:ImageVolume] should succeed with pod and multiple volumes | |||
- [sig-node] ImageVolume [NodeFeature:ImageVolume] should succeed with pod and pull policy of Always | |||
- [sig-node] ImageVolume [NodeFeature:ImageVolume] subPath should succeed when using a valid subPath | |||
- [sig-node] ImageVolume [NodeFeature:ImageVolume] subPath should fail if subPath in volume is not existing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
beside the first "should fail" test, is there any tests needed for crashloop backoff?
Signed-off-by: Sascha Grunert <[email protected]>
2665bde
to
1a4174f
Compare
I updated the KEP. I also see that containerd/containerd#11578 is not being backported to containerd 2.1 yet. Is this a blocker @mikebrow ? |