KEP-5936 (Kubernetes Enhancement Proposal)
As the sole author and implementer, I have added several file user ownership (UID) fields to ConfigMap, Secret, DownwardAPI and Projected volumes.
This feature allows users to define the owner of mounted volume files without resorting to insecure workarounds.
- An ingress2gateway feature to convert Ingress rules with named ports to GatewayAPI.
- A
system:monitoringrole enhancement to allow access to kubelet metrics APIs. - A dozen other enhancements, bug fixes, and technical improvements.
- runtime/rand: Sped up cheaprand64 by 1.74x and cheaprand by 1.11x.
- x/tool: A refactor inliner enhancement to preserve package aliases.
--hosts-fileflag to customize/etc/hostsfile of pods and containers.- Fixed a network alias incompatibility with Docker Compose.
- New seccomp_profile setting to override seccomp profile per runtime.
container_processesmetric and two HugeTLB page metrics.
- Azure service discovery: An enhancement to resolve public IP addresses of machines.
- Node exporter: Added watchdog module and XFRM module.
- Sealed Secrets: A feature to create immutable secrets.
- containerd: Added HugeTLB allocation failure metric for cgroup v2.
- OCI: Fixed a cgroup v2 HugeTLB metrics collection bug when rsvd control files exist.
- Envoy Gateway: Improved validations of several resource types.