this-week: 2024-03-29

Author: dhellmann

this-week/2024-03-29.md

@@ -0,0 +1,157 @@
+# This Week in Enhancements - 2024-03-29
+
+*Updates since 2024-03-15*
+
+
+## Enhancements
+
+### Merged Changes
+
+*<PR ID>: (activity this week / total activity) summary*
+
+There were 7 Merged pull requests:
+
+- [1496](https://github.com/openshift/enhancements/pull/1496): (8/374) machine-config: Managing boot images via the MCO (djoshy)
+
+  > This is a proposal to manage bootimages via the `Machine Config Operator`(MCO), leveraging some of the [pre-work](https://github.com/openshift/installer/pull/4760) done as a result of the discussion in [#201](https://github.com/openshift/enhancements/pull/201). This feature will only target standalone OCP installs. It will also be user opt-in and is planned to be released behind a feature
+  > gate.
+  >
+  > For `MachineSet` managed clusters, the end goal is to create an automated mechanism that can:
+  > - update the boot images references in `MachineSets` to the latest in the payload image
+  > - ensure stub Ignition config referenced in each `Machinesets` is in spec 3 format
+  >
+  > For clusters that are not managed by `MachineSets`, the end goal is to create a document(KB or otherwise) that a cluster admin would follow to update their boot images.
+
+- [1540](https://github.com/openshift/enhancements/pull/1540): (5/98) cluster-logging: Performance-Tuning enhancement proposal. (alanconway) ([OBSDA-549](https://issues.redhat.com/browse/OBSDA-549))
+
+  > A _performance tuning_ API to control performance, reliability and special protocol features of an output,
+  > without exposing the complexity of the underlying collector configuration.
+  >
+  > **Note**
+  > - Only vector is be supported initial, there are no current plans to back-port to fluentd.
+  > - Existing `output[].limits` rate limiting feature is separate from this proposal. The implementations may interact.
+
+- [1541](https://github.com/openshift/enhancements/pull/1541): (36/317) microshift: USHIFT-2188: introduce microshift API Custom certs (eslutsky) ([USHIFT-2101](https://issues.redhat.com/browse/USHIFT-2101))
+
+  > This enhancement extends the Microshift apiserver Certs to allow the user to
+  > provide additional custom certificates (e.g. signed by a 3rd party CA) for API server SSL handshake and external authentication.
+  >
+  >
+  > > Anytime the document mentions API server, it refers to kube API server.
+
+- [1546](https://github.com/openshift/enhancements/pull/1546): (10/37) workload-partitioning: OCPEDGE-808: feat: add ep for cpu limits with workload partitioning (eggfoobar) ([OCPEDGE-57](https://issues.redhat.com/browse/OCPEDGE-57))
+
+  > This enhancements builds on top of the [Management Workload
+  > Partitioning](management-workload-partitioning.md) enhancement to provide the
+  > ability for workload partitioning to take into account CPU limits during Pod
+  > admission. Currently only CPU requests are used during Pod admission and any Pod
+  > that uses CPU limits is ignored. With this change the Pod admission webhook will
+  > take into account CPU limits and use the existing mechanism to pass the CPU
+  > limits information to the underlying container runtime.
+
+- [1582](https://github.com/openshift/enhancements/pull/1582): (3/5) dev-guide: Add explanation of how component-readiness gates .0 releases (deads2k)
+
+  > Explains information available, how we will use that information, and who can approve exceptions.
+
+- [1596](https://github.com/openshift/enhancements/pull/1596): (40/65) oc: WRKLDS-875: Add oc login external OIDC issuer integration enhancement (ardaguclu) ([WRKLDS-875](https://issues.redhat.com/browse/WRKLDS-875))
+
+  > This enhancement proposal describes the mechanism for how users can log in to the cluster which relies on external OIDC issuer for authentication in lieu of
+  > internal OAuth provided by OCP via `oc login`. In order to achieve this, this enhancement proposal adds new command, namely `get-token`, in oc that will serve
+  > as the built-in credentials exec plugin and additionally OIDC specific flags in `oc login` to support this functionality.
+
+
+#### Merged Pull Requests Modifying Existing Documents
+
+- [1589](https://github.com/openshift/enhancements/pull/1589): (3/7) cluster-logging: LOG-5190: Update log forwarding input selector api (jcantrill)
+
+### New Changes
+
+*<PR ID>: (activity this week / total activity) summary*
+
+There were 3 New pull requests:
+
+- [1600](https://github.com/openshift/enhancements/pull/1600): (17/17) node: OCPNODE-2205: Lazy image pull support (harche)
+
+  `jira/valid-reference`
+
+  > This enhancement proposes integrating support for lazy image pulling in OpenShift using [Stargz Store plugin](https://github.com/containerd/stargz-snapshotter). This will provide the ability to lazy-pull compatible container images, significantly reducing container startup times for the specific workloads that can benefit from it.
+
+- [1601](https://github.com/openshift/enhancements/pull/1601): (34/34) microshift: OCPEDGE-919: MicroShift: Replacing upstream TopoLVM with a minified version of LVMS (jakobmoellerdev) ([OCPEDGE-919](https://issues.redhat.com/browse/OCPEDGE-919))
+
+  `jira/valid-reference`
+
+  > This enhancement describes the proposed strategy to move from repackaged
+  > upstream TopoLVM to a minified version of LVMS in MicroShift starting with 4.17.
+
+
+#### New Pull Requests Modifying Existing Documents
+
+- [1599](https://github.com/openshift/enhancements/pull/1599): (44/44) machine-config: enhancements/machine-config: add updates to PinnedImageSet (hexfusion) ([RFE-4482](https://issues.redhat.com/browse/RFE-4482))
+
+### Active Changes
+
+*<PR ID>: (activity this week / total activity) summary*
+
+There were 18 Active pull requests:
+
+- [1465](https://github.com/openshift/enhancements/pull/1465): (80/373) machine-api: OCPCLOUD-1578: Add enhancement for converting Machine API resource to Cluster API (JoelSpeed) ([OCPCLOUD-1578](https://issues.redhat.com/browse/OCPCLOUD-1578))
+- [1597](https://github.com/openshift/enhancements/pull/1597): (51/54) node-tuning: PSAP-1236: Containerize Tuned (yanirq) ([PSAP-1236](https://issues.redhat.com/browse/PSAP-1236))
+- [1594](https://github.com/openshift/enhancements/pull/1594): (36/41) network: SDN-4604: Networking: egress IP per destination proposal (martinkennelly) ([SDN-4454](https://issues.redhat.com/browse/SDN-4454))
+- [1548](https://github.com/openshift/enhancements/pull/1548): (23/265) microshift: USHIFT-2089: Add router configuration options (pacevedom) ([OCPSTRAT-1069](https://issues.redhat.com/browse/OCPSTRAT-1069))
+- [1593](https://github.com/openshift/enhancements/pull/1593): (22/23) ingress: NE-1517: Set EIP for NLB Ingress controller. (miheer) ([NE-1274](https://issues.redhat.com/browse/NE-1274))
+- [1583](https://github.com/openshift/enhancements/pull/1583): (18/42) scheduling: WRKLDS-1060: Prevent User Workloads from being scheduled on Control Plane nodes (knelasevero) ([OCPSTRAT-790](https://issues.redhat.com/browse/OCPSTRAT-790)) ([WRKLDS-1015](https://issues.redhat.com/browse/WRKLDS-1015)) ([WRKLDS-1060](https://issues.redhat.com/browse/WRKLDS-1060))
+- [1595](https://github.com/openshift/enhancements/pull/1595): (8/11) ingress: NE-705: IngressController subnet selection in AWS (gcs278) ([NE-705](https://issues.redhat.com/browse/NE-705))
+- [1569](https://github.com/openshift/enhancements/pull/1569): (7/127) insights: Insights Rapid Recommendations proposal (tremes) ([CCXDEV-12213](https://issues.redhat.com/browse/CCXDEV-12213)) ([CCXDEV-12285](https://issues.redhat.com/browse/CCXDEV-12285))
+- [1584](https://github.com/openshift/enhancements/pull/1584): (6/29) insights: Insights Operator: Gather Workload Runtime Info From Containers (jmesnil)
+- [1537](https://github.com/openshift/enhancements/pull/1537): (5/41) cluster-logging: WIP LOG-4928: Cluster logging v2 APIs (jcantrill) ([OBSDA-550](https://issues.redhat.com/browse/OBSDA-550))
+- [1549](https://github.com/openshift/enhancements/pull/1549): (5/82) etcd: ETCD-514: Add etcd size tuning (dusk125) ([ETCD-514](https://issues.redhat.com/browse/ETCD-514))
+- [1578](https://github.com/openshift/enhancements/pull/1578): (4/22) api-review: Add ManagedClusterVersion CRD (2uasimojo) ([HIVE-2366](https://issues.redhat.com//browse/HIVE-2366))
+- [1525](https://github.com/openshift/enhancements/pull/1525): (3/129) machine-config: MCO-507: admin defined node disruption policy enhancement (yuqi-zhang) ([RFE-4079](https://issues.redhat.com/browse/RFE-4079))
+- [1528](https://github.com/openshift/enhancements/pull/1528): (2/384) installer: Bootstrapping Clusters with CAPI Infrastructure Providers (patrickdillon)
+- [1436](https://github.com/openshift/enhancements/pull/1436): (1/255) dns: NE-1325: External DNS Operator support for Shared VPCs (gcs278)
+
+#### Active Pull Requests Modifying Existing Documents
+
+- [1411](https://github.com/openshift/enhancements/pull/1411): (4/43) dev-guide: Add exception to pointer guidance for structs that must be omitted (JoelSpeed)
+- [1586](https://github.com/openshift/enhancements/pull/1586): (1/3) microshift: [NO-ISSUE] Specify kube-apiserver behavior when maxsize is 0 (copejon) ([USHIFT-2196](https://issues.redhat.com/browse/USHIFT-2196))
+- [1590](https://github.com/openshift/enhancements/pull/1590): (1/13) network: Enhance EgressQoS CR as a generic QoS entity (pperiyasamy) ([SDN-2097](https://issues.redhat.com/browse/SDN-2097)) ([SDN-3152](https://issues.redhat.com/browse/SDN-3152))
+
+### Idle (no comments for at least 14 days) Changes
+
+*<PR ID>: (activity this week / total activity) summary*
+
+There were 16 Idle (no comments for at least 14 days) pull requests:
+
+- [1415](https://github.com/openshift/enhancements/pull/1415): (0/413) ingress: NE-1129: Make ingress operator optional on HyperShift (alebedev87) ([NE-1129](https://issues.redhat.com/browse/NE-1129))
+- [1431](https://github.com/openshift/enhancements/pull/1431): (0/226) ingress: OCPSTRAT-139: Ingress operator dashboard (jotak) ([OCPSTRAT-139](https://issues.redhat.com/browse/OCPSTRAT-139)) ([NETOBSERV-1052](https://issues.redhat.com/browse/NETOBSERV-1052))
+- [1463](https://github.com/openshift/enhancements/pull/1463): (0/91) network: Mutable dual-stack VIPs (mkowalski) ([OCPSTRAT-178](https://issues.redhat.com/browse/OCPSTRAT-178)) ([OPNET-340](https://issues.redhat.com/browse/OPNET-340)) ([OPNET-80](https://issues.redhat.com/browse/OPNET-80))
+- [1502](https://github.com/openshift/enhancements/pull/1502): (0/82) security: Create tls-artifacts-registry enhancement (vrutkovs) ([API-1603](https://issues.redhat.com/browse/API-1603))
+- [1514](https://github.com/openshift/enhancements/pull/1514): (0/245) ingress: NE-761: Support for admin configured CA trust bundle in Ingress Operator (bharath-b-rh) ([RFE-2182](https://issues.redhat.com/browse/RFE-2182)) ([OCPSTRAT-431](https://issues.redhat.com/browse/OCPSTRAT-431)) ([NE-761](https://issues.redhat.com/browse/NE-761))
+- [1515](https://github.com/openshift/enhancements/pull/1515): (0/95) machine-config: on-cluster builds enhancement (cheesesashimi) ([MCO-834](https://issues.redhat.com/browse/MCO-834))
+- [1524](https://github.com/openshift/enhancements/pull/1524): (0/41) observability: Add multi-cluster-observability-addon proposal (periklis) ([OBSDA-356](https://issues.redhat.com/browse/OBSDA-356)) ([OBSDA-393](https://issues.redhat.com/browse/OBSDA-393)) ([LOG-4539](https://issues.redhat.com/browse/LOG-4539)) ([OBSDA-489](https://issues.redhat.com/browse/OBSDA-489))
+- [1553](https://github.com/openshift/enhancements/pull/1553): (0/142) general: HOSTEDCP-1416: Hosted Control Planes ETCD Backup API (jparrill) ([HOSTEDCP-1370](https://issues.redhat.com/browse/HOSTEDCP-1370))
+- [1556](https://github.com/openshift/enhancements/pull/1556): (0/7) general: OCP cluster pre-upgrades with Leapp (Monnte) ([OAMG-10748](https://issues.redhat.com/browse/OAMG-10748))
+- [1559](https://github.com/openshift/enhancements/pull/1559): (0/50) update: OTA-1209: enhancements/update/channel-rename-generally-available: New enhancement (wking) ([OCPSTRAT-1153](https://issues.redhat.com/browse/OCPSTRAT-1153))
+- [1566](https://github.com/openshift/enhancements/pull/1566): (0/42) general: observability: Add logging-stack with UI and korrel8r integration (periklis) ([LOG-5114](https://issues.redhat.com/browse/LOG-5114))
+- [1571](https://github.com/openshift/enhancements/pull/1571): (0/74) update: Add Change Management and Maintenance Schedules (jupierce)
+- [1572](https://github.com/openshift/enhancements/pull/1572): (0/9) storage: STOR-1764: Add enhancement for CSI fixes in cloud-provider-azure code (bertinatto) ([STOR-1764](https://issues.redhat.com/browse/STOR-1764))
+- [1574](https://github.com/openshift/enhancements/pull/1574): (0/3) image-registry: Use Bound Tokens for Integrated Image Registry Authentication (sanchezl)
+- [1585](https://github.com/openshift/enhancements/pull/1585): (0/41) network: SDN-4433: Configurable network diagnostics pod placement (kyrtapz) ([SDN-4433](https://issues.redhat.com/browse/SDN-4433))
+- [1588](https://github.com/openshift/enhancements/pull/1588): (0/29) network: Add proposal: communication ingress flows matrix (sabinaaledort) ([TELCOSTRAT-77](https://issues.redhat.com/browse/TELCOSTRAT-77))
+
+### With lifecycle/stale or lifecycle/rotten Changes
+
+*<PR ID>: (activity this week / total activity) summary*
+
+There were 7 With lifecycle/stale or lifecycle/rotten pull requests:
+
+- [1267](https://github.com/openshift/enhancements/pull/1267): (1/242) network: vSphere IPI Support for Static IPs (rvanderp3) ([OCPPLAN-9654](https://issues.redhat.com/browse/OCPPLAN-9654))
+- [1368](https://github.com/openshift/enhancements/pull/1368): (4/69) machine-config: OCPNODE-1525: Support Evented PLEG in Openshift (sairameshv) ([OCPNODE-1525](https://issues.redhat.com/browse/OCPNODE-1525))
+- [1440](https://github.com/openshift/enhancements/pull/1440): (1/116) network: OPNET-268: Configure-ovs Alternative (cybertron)
+- [1506](https://github.com/openshift/enhancements/pull/1506): (1/159) machine-api: [OSD-15261] CPMS: allow automatic vertical scaling. (bergmannf) ([OSD-15261](https://issues.redhat.com/browse/OSD-15261))
+- [1577](https://github.com/openshift/enhancements/pull/1577): (1/4) machine-config: MCO-1049: Introduces On-Cluster-Build API, machineOSBuild, and machineOSImage (cdoern) ([MCO-665](https://issues.redhat.com/browse/MCO-665))
+
+#### With lifecycle/stale or lifecycle/rotten Pull Requests Modifying Existing Documents
+
+- [1561](https://github.com/openshift/enhancements/pull/1561): (1/14) guidelines: template: add operating at scale specific considerations (jcaamano)
+- [1573](https://github.com/openshift/enhancements/pull/1573): (1/9) general: Add a section regarding probes, in particular startupProbe (sdodson)