$ the-wire · showcase
SIG Storage co-chair transition, PodSchedulingReadiness gate removed
By RepoJournal · Filed · About Kubernetes
Kubernetes removed the PodSchedulingReadiness feature gate and rotated SIG Storage leadership while CI hardening shipped in the release repo.
The PodSchedulingReadiness feature gate is now removed [1], making the scheduling-readiness feature unconditional. The e2e auth projected podcertificate test now binds an unprivileged port instead of 443 [2], fixing a failure in environments enforcing net.ipv4.ip_unprivileged_port_start. SIG Storage transitions leadership: Saad Ali stepped down, Hemant Kumar nominated as co-chair [3]. The release repo bumped step-security/harden-runner from 2.21.0 to 2.21.1 [4], and bumped google.golang.org/grpc to 1.83.1 [5], with the grpc patch 'Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected'. apimachinery fixes Quantity.String() dropping the suffix for DecimalSI values above 10^18 [6].
Action items
- → Upgrade grpc to 1.83.1 in environments using xds/rbac kubernetes/release [immediate]
- → Note PodSchedulingReadiness feature gate removal in manifests kubernetes/kubernetes [plan]
- → Review SIG Storage membership updates kubernetes/community [monitor]
References
- [1] Merge pull request #141741 from wasylkowski-a/remove-pod-scheduling-readiness ↗ kubernetes/kubernetes
- [2] e2e auth: use unprivileged container port in projected podcertificate test ↗ kubernetes/kubernetes
- [3] Kubernetes SIG Storage Co-Chair Transition ↗ kubernetes/community
- [4] Bump step-security/harden-runner from 2.21.0 to 2.21.1 in the actions group ↗ kubernetes/release
- [5] Bump google.golang.org/grpc from 1.83.0 to 1.83.1 ↗ kubernetes/release
- [6] Merge pull request #140459 from semx/fix-quantity-string-decimalsi-overflow ↗ kubernetes/apimachinery