Enhancements: Support for Windows privileged containers

[ambguo]

Enhancement Description

• One-line enhancement description (can be used as a release note): Windows privileged container support and host networking support.
• Kubernetes Enhancement Proposal: proposal (will be converted to md file under Kubernetes enhancements)
• Primary contact (assignee): @ambguo
• Responsible SIGs: sig-windows, sig-node
• Enhancement target (which target equals to which milestone):
  
  
  
  • Alpha release target (1.20)
  
  
  • Beta release target (1.21)
  
  
  • Stable release target (1.22 or later)
  
  

[ambguo]

/sig windows

[ambguo]

/sig node

[ambguo]

/kind feature

[ambguo]

/stage alpha
/milestone v1.20

[k8s-ci-robot]

@ambguo: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/stage alpha
/milestone v1.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[immuzz]

/stage alpha
/milestone v1.20

[k8s-ci-robot]

@immuzz: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/stage alpha
/milestone v1.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[immuzz]

cc: @marosset @michmike @ddebroy @jsturtevant

[kikisdeliveryservice]

Hi all,

Enhancements Lead here. Will just update the milestone for you :smile:

Best,
Kirsten

[kikisdeliveryservice]

Just as a note when you convert your KEP don't forget to also include the kep.yaml

Both templates that you will need can be found here:
https://github.com/kubernetes/enhancements/tree/master/keps/NNNN-kep-template

Please also update the description when you make the PR and please link any other PRs so that this enhancement can be tracked to the milestone.

Hope that helps.

Best,
Kirsten

[kinarashah]

Hi @ambguo,

Enhancement shadow for 1.20 release here 👋.

Just wanted to check if you had a chance to convert KEP according to the template posted above (https://github.com/kubernetes/enhancements/tree/master/keps/NNNN-kep-template).

Please note that the Enhancement freeze deadline for KEPs to be included in 1.20 milestone is Tuesday, October 6.

Your proposal looks great 😄, could you please include the following when you make the KEP PR:

• Add test plans
• Update graduation criteria (you've already mentioned those, but if you could update/confirm it for 1.20, that'd be great!)
• Update state to implementable

Thank you!

[kinarashah]

Thank you @ambguo for actively working on the KEP PR!

Here's the status update based on the freeze requirements:

Requirement | Status | Comments
-------- | ------ | ------
Test Plan | ❗ | missing test plans for alpha
Graduation Criteria | ❗ | confirm milestone to 1.20 for alpha here. Beta's set to 1.20+.
Implementable State | ❗ | add KEP yaml with state implementable as mentioned here. If you're looking for an example, hopefully this recently merged sig node kep yaml gives you an idea.
Merged | ❗ |

Just a friendly reminder that we'd need all of them with ✅ status to be included in 1.20 milestone by Enhancement Freeze deadline Tuesday, October 6.

Ping me anytime on slack (kinarashah) or here if you have any questions 😄.

Thank you!!

[kinarashah]

/milestone v1.21

[k8s-ci-robot]

@kinarashah: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/milestone v1.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[kinarashah]

Spoke with @marosset and @ambguo, this will be tracked alpha for 1.21 milestone and KEP PR would be merged in provisional status for now.

[michmike]

@marosset i thought we are doing privileged containers as alpha for v1.20, not 1.21

[ambguo]

@michmike from our discussion on Tuesday, we are looking into ways to address the pod networking issues mentioned. We are still investigating ways to address the challenges, so will not be able to pursue the alpha release in 1.20 since APIs may require changes depending on the solution.

[craiglpeters]

@ambguo can you please update the description on this issue to point to the KEP, rather than the draft in Gdocs?