Skip to content

Conversation

@everpeace
Copy link
Contributor

@everpeace everpeace commented Jul 17, 2024

What type of PR is this?

/kind feature

What this PR does / why we need it:

Add an implementation of RuntimeStatus.features.supplemental_groups_policy to CRI-O so that Kubernetes users can recognize if the CRI implementation supports SupplementalGroupsPolicy.

This also helps CI tests can gracefully skip if the CRI implementation does not support SupplementalGroupsPolicy.

Related to:

For:

Depends on:

Depended by:

Which issue(s) this PR fixes:

None

Special notes for your reviewer:

I'm aiming to alpha-release this feature in Kubernetes 1.31 (expected release date is 13th August 2024). Thank you, in advance 🙇🙇

Does this PR introduce a user-facing change?

Add RuntimeStatus.features.supplemental_groups_policy field (KEP-3619)

@everpeace everpeace requested a review from mrunalp as a code owner July 17, 2024 03:49
@openshift-ci-robot
Copy link

@everpeace: No Jira issue with key KEP-3619 exists in the tracker at https://issues.redhat.com/.
Once a valid jira issue is referenced in the title of this pull request, request a refresh with /jira refresh.

In response to this:

For:

Depends on:

Depended by:

What type of PR is this?

/kind feature

What this PR does / why we need it:

This PR implements RuntimeStatus.features.supplemental_groups_policy in CRI so that kubernetes users can recognize if the CRI implementation does support SupplementalGroupsPolicy. This also helps CI tests can gracefully skip if the CRI implementation does not support SupplementalGroupsPolicy.

Which issue(s) this PR fixes:

Special notes for your reviewer:

I'm aiming to alpha-release this feature in Kubernetes 1.31(expected release date is 13th August 2024). Thank you, in advance🙇🙇

Does this PR introduce a user-facing change?

Add RuntimeStatus.features.supplemental_groups_policy field (KEP-3619)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. release-note Denotes a PR that will be considered when it comes time to generate release notes. kind/feature Categorizes issue or PR as related to a new feature. dco-signoff: yes Indicates the PR's author has DCO signed all their commits. labels Jul 17, 2024
@openshift-ci openshift-ci bot requested review from klihub and littlejawa July 17, 2024 03:49
@openshift-ci openshift-ci bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jul 17, 2024
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jul 17, 2024

Hi @everpeace. Thanks for your PR.

I'm waiting for a cri-o member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci-robot
Copy link

@everpeace: No Jira issue with key KEP-3619 exists in the tracker at https://issues.redhat.com/.
Once a valid jira issue is referenced in the title of this pull request, request a refresh with /jira refresh.

In response to this:

For:

Depends on:

Depended by:

What type of PR is this?

/kind feature

What this PR does / why we need it:

This PR is related to #8268. This PR also implements RuntimeStatus.features.supplemental_groups_policy in CRI so that kubernetes users can recognize if the CRI implementation does support SupplementalGroupsPolicy. This also helps CI tests can gracefully skip if the CRI implementation does not support SupplementalGroupsPolicy.

Which issue(s) this PR fixes:

Special notes for your reviewer:

I'm aiming to alpha-release this feature in Kubernetes 1.31(expected release date is 13th August 2024). Thank you, in advance🙇🙇

Does this PR introduce a user-facing change?

Add RuntimeStatus.features.supplemental_groups_policy field (KEP-3619)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@kwilczynski
Copy link
Contributor

/ok-to-test

@openshift-ci openshift-ci bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jul 17, 2024
@codecov
Copy link

codecov bot commented Jul 17, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 49.53%. Comparing base (6232eaa) to head (c2c0bae).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8386      +/-   ##
==========================================
+ Coverage   49.51%   49.53%   +0.02%     
==========================================
  Files         153      153              
  Lines       17085    17088       +3     
==========================================
+ Hits         8460     8465       +5     
+ Misses       7560     7559       -1     
+ Partials     1065     1064       -1     

@everpeace everpeace changed the title WIP: KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy Jul 17, 2024
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 17, 2024
Copy link
Contributor Author

@everpeace everpeace left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mrunalp and cri-o reviwers

could you help review??

And, I would be glad if you help retrying failing jobs. I believe those failure is not related to this PR.

@openshift-ci-robot
Copy link

@everpeace: No Jira issue with key KEP-3619 exists in the tracker at https://issues.redhat.com/.
Once a valid jira issue is referenced in the title of this pull request, request a refresh with /jira refresh.

In response to this:

What type of PR is this?

/kind feature

What this PR does / why we need it:

Add an implementation of RuntimeStatus.features.supplemental_groups_policy to CRI-O so that Kubernetes users can recognize if the CRI implementation supports SupplementalGroupsPolicy.

This also helps CI tests can gracefully skip if the CRI implementation does not support SupplementalGroupsPolicy.

Related to:

For:

Depends on:

Depended by:

Which issue(s) this PR fixes:

None

Special notes for your reviewer:

I'm aiming to alpha-release this feature in Kubernetes 1.31 (expected release date is 13th August 2024). Thank you, in advance 🙇🙇

Does this PR introduce a user-facing change?

Add RuntimeStatus.features.supplemental_groups_policy field (KEP-3619)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@kwilczynski
Copy link
Contributor

@cri-o/cri-o-maintainers, please have a look. Thank you!

k8s.io/apimachinery v0.31.0-alpha.3
k8s.io/client-go v0.31.0-alpha.3
k8s.io/cri-api v0.31.0-alpha.3
k8s.io/cri-api v0.31.0-beta.0.0.20240716205706-865479a3e1b3
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
k8s.io/cri-api v0.31.0-beta.0.0.20240716205706-865479a3e1b3
k8s.io/cri-api v0.31.0-beta.0

Copy link
Contributor Author

@everpeace everpeace Jul 17, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@saschagrunert Sorry, unfortunately my k/k PR missed v1.31.0-beta.0😿 So, I need the latest version.

This is a required commit in cri-api repo: (merge commit: kubernetes/cri-api@865479a, the actual commit: kubernetes/cri-api@b8256fa). This is not included in the v0.31.0-beta.0 tag.

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jul 17, 2024
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jul 17, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: everpeace, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 17, 2024
@openshift-merge-bot openshift-merge-bot bot merged commit 043cae7 into cri-o:main Jul 17, 2024
@everpeace everpeace deleted the kep-3619-runtimestatus-features-supplemental_groups_policy branch July 17, 2024 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has DCO signed all their commits. kind/feature Categorizes issue or PR as related to a new feature. lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note Denotes a PR that will be considered when it comes time to generate release notes.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants