github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-30 15:05:27 +00:00
Code Issues Projects Releases Wiki Activity
Production-Grade Container Scheduling and Management
128,037 Commits 42 Branches 7,905 Tags 1.3 GiB
Go 97%
Shell 2.6%
PowerShell 0.2%
7deb49e3a6
Go to file
Rodrigo Campos 7deb49e3a6 Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" 
This reverts commit 8597b343fa.

I wrote in the Kubernetes documentation:

	In practice this means you need at least Linux 6.3, as tmpfs started
	supporting idmap mounts in that version. This is usually needed as
	several Kubernetes features use tmpfs (the service account token that is
	mounted by default uses a tmpfs, Secrets use a tmpfs, etc.)

The check is wrong for several reasons:
	* Pods can use userns before 6.3, they will just need to be
	  careful to not use a tmpfs (like a serviceaccount). MOST users
	  will probably need 6.3, but it is possible to use earlier kernel
	  versions. 5.19 probably works fine and with improvements in
          the runtime 5.12 can probably be supported too.
	* Several distros backport changes and the recommended way is
	  usually to try the syscall instead of testing kernel versions.
	  I expect support for simple fs like tmpfs will be backported
	  in several distros, but with this check it can generate confusion.
	* Today a clear error is shown when the pod is created, so it's
	  unlikely a user will not understand why it fails.
	* Returning an error if utilkernel fails to understand what
	  kernel version is running is also too strict (as we are
	  logging a warning even if it is not the expected version)
	* We are switching to enabled by default, which will log a
	  warning on every user that runs on an older than 6.3 kernel,
	  adding noise to the logs.

For there reasons, let's just remove the hardcoded kernel version check.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-02-18 17:24:50 +01:00
.github
api Merge pull request #129560 from bart0sh/PR168-DRA-fix-All-allocation-mode 2025-02-05 00:38:16 -08:00
build Update build/pause/Makefile 2025-02-11 16:55:05 -08:00
CHANGELOG CHANGELOG: Update directory for v1.32.2 release 2025-02-13 09:39:00 +00:00
cluster Merge pull request #129776 from saschagrunert/cni-plugins-1.6.2 2025-01-28 07:29:26 -08:00
cmd Merge pull request #130067 from kerthcet/fix/readyz 2025-02-11 07:48:07 -08:00
docs
hack Merge pull request #129875 from pohly/golangci-lint-strict-removal 2025-02-12 20:26:20 -08:00
LICENSES update github.com/coreos/go-oidc to v2.3.0 2025-01-22 15:27:54 -05:00
logo
pkg Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" 2025-02-18 17:24:50 +01:00
plugin node audience restriction: use csi translator to convert intree inline_vol/pv to csi 2025-02-06 13:17:16 -06:00
staging Merge pull request #130039 from p0lyn0mial/upstream-fake-client-improve-unit-test 2025-02-12 15:16:27 -08:00
test Merge pull request #129489 from elizabeth-dev/replace-network-e2e-replicationcontrollers 2025-02-13 05:58:22 -08:00
third_party Revert "tests: include stdout of failed commands in JUnit" 2025-01-22 23:36:50 +01:00
vendor bump netlink 2025-02-07 15:35:26 +05:30
.generated_files
.gitattributes Mark api/openapi-spec/**/*.json as generated files 2024-10-28 13:33:50 -07:00
.gitignore
.go-version Bump images, dependencies and versions to go 1.23.6 and distroless iptables 2025-02-10 14:04:37 -06:00
CHANGELOG.md
code-of-conduct.md
CONTRIBUTING.md
go.mod bump netlink 2025-02-07 15:35:26 +05:30
go.sum bump netlink 2025-02-07 15:35:26 +05:30
go.work Drop use of winreadlinkvolume godebug option 2024-12-06 02:43:45 -05:00
go.work.sum Update to latest kustomize/v5.6.0 2025-01-14 13:12:48 -05:00
LICENSE
Makefile
OWNERS
OWNERS_ALIASES update sig cl owners in k/k 2025-02-12 11:04:11 +02:00
README.md Fix Borg pub link in README 2024-12-23 00:15:17 +03:30
SECURITY_CONTACTS
SUPPORT.md

README.md

Kubernetes (K8s)

CII Best Practices Go Report Card GitHub release (latest SemVer)

Kubernetes, also known as K8s, is an open source system for managing containerized applications across multiple hosts. It provides basic mechanisms for the deployment, maintenance, and scaling of applications.

Kubernetes builds upon a decade and a half of experience at Google running production workloads at scale using a system called Borg, combined with best-of-breed ideas and practices from the community.

Kubernetes is hosted by the Cloud Native Computing Foundation (CNCF). If your company wants to help shape the evolution of technologies that are container-packaged, dynamically scheduled, and microservices-oriented, consider joining the CNCF. For details about who's involved and how Kubernetes plays a role, read the CNCF announcement.

To start using K8s

See our documentation on kubernetes.io.

Take a free course on Scalable Microservices with Kubernetes.

To use Kubernetes code as a library in other applications, see the list of published components. Use of the k8s.io/kubernetes module or k8s.io/kubernetes/... packages as libraries is not supported.

To start developing K8s

The community repository hosts all information about building Kubernetes from source, how to contribute code and documentation, who to contact about what, etc.

If you want to build Kubernetes right away there are two options:

You have a working Go environment.
git clone https://github.com/kubernetes/kubernetes
cd kubernetes
make
You have a working Docker environment.
git clone https://github.com/kubernetes/kubernetes
cd kubernetes
make quick-release

For the full story, head over to the developer's documentation.

Support

If you need support, start with the troubleshooting guide, and work your way through the process that we've outlined.

That said, if you have questions, reach out to us one way or another.

Community Meetings

The Calendar has the list of all the meetings in the Kubernetes community in a single location.

Adopters

The User Case Studies website has real-world use cases of organizations across industries that are deploying/migrating to Kubernetes.

Governance

Kubernetes project is governed by a framework of principles, values, policies and processes to help our community and constituents towards our shared goals.

The Kubernetes Community is the launching point for learning about how we organize ourselves.

The Kubernetes Steering community repo is used by the Kubernetes Steering Committee, which oversees governance of the Kubernetes project.

Roadmap

The Kubernetes Enhancements repo provides information about Kubernetes releases, as well as feature tracking and backlogs.