kubernetes/enhancements on Hacker News

…that wouldn't have been possible if in addition to containers, they were also using user namespaces https://github.com/kubernetes/enhancements/tree/217d790720c5... . The first example talks about "CVE-2019-5736: Host runc binary can be…

comment by dunder_cat · 2026-05-09 · in "Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days

…https://www.industrialempathy.com/posts/design-docs-at-googl... - https://github.com/rust-lang/rfcs - https://github.com/kubernetes/enhancements/blob/master/keps/... - https://blog.pragmaticengineer.com/rfcs-and-design-docs/ Hint: tailor…

comment by nrvn · 2025-08-04 · in Writing a good design document

…memory but also never gets killed. See all the details that Kubernetes had with introducing this https://github.com/kubernetes/enhancements/issues/2570

comment by arianvanp · 2025-07-08 · in Memstop: Use LD_PRELOAD to delay process execution when low on memory

…for pod to pod mTLS are slowly being brought into the main Kubernetes project. Take a look at https://github.com/kubernetes/enhancements/tree/master/keps/... , which is hopefully landing as alpha in Kubernetes 1.34. It lets you run a…

comment by ahmedtd · 2025-06-19 · in What would a Kubernetes 2.0 look like

…pod certificates, identifying a service account . It looks like this is progressing in mainline - https://github.com/kubernetes/enhancements/issues/4317 - albeit very slowly.

comment by GauntletWizard · 2025-05-18 · in Ending TLS Client Authentication Certificate Support in 2026

Might be noteworthy that in recent enough k8s lifecycle.preStop.sleep.seconds is implemented https://github.com/kubernetes/enhancements/blob/master/keps/... so no longer any need to run an external sleep command.

comment by gurrone · 2025-03-11 · in Zero-Downtime Kubernetes Deployments on AWS with EKS

…of the embedded kustomize will proceed, given the compatibility implications. See discussion at https://github.com/kubernetes/enhancements/issues/4706#issue... and following.

comment by liggitt · 2024-08-02 · in A skeptic's first contact with Kubernetes

…will drop a lot of existing, already deprecated support for AWS & others from Kubernetes proper. https://github.com/kubernetes/enhancements/blob/master/keps/... There's some plan to make this non-dosruptive to users but I haven followed it…

comment by jauntywundrkind · 2024-07-28 · in A skeptic's first contact with Kubernetes

Thanks for these links! I picked out one at random just to check if my skeptical reaction is fair: https://github.com/kubernetes/enhancements/tree/master/keps/... - OK, this is actually a really good and useful doc! - However, it's not an…

comment by iainmerrick · 2024-05-07 · in Design docs at Google (2020)

Chromium: https://www.chromium.org/developers/design-documents/ Kubernetes: https://github.com/kubernetes/enhancements/tree/master/keps

comment by faizshah · 2024-05-07 · in Design docs at Google (2020)

…it handles non-root container users specified in a pod manifest, detailed in a (long-dormant) KEP: https://github.com/kubernetes/enhancements/blob/master/keps/... (tl;dr: Kubernetes runs the container process as root, with the specified…

comment by kensey · 2024-04-25 · in IBM to buy HashiCorp in $6.4B deal

…Kubelet makes a best effort to keep them alive and running while other containers are running. [1] https://github.com/kubernetes/enhancements/tree/master/keps/...

comment by chdefrene · 2023-07-10 · in Kubernetes SidecarContainers feature is merged

…KEP [0]. Check it out, and there you'll find its motivation and several interesting examples. 0: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/753-sidecar-containers Edit: corrected syntax

comment by tecleandor · 2023-07-10 · in Kubernetes SidecarContainers feature is merged

KEP: https://github.com/kubernetes/enhancements/tree/master/keps/... TLDR: Introduce a restartPolicy field to init containers and use it to indicate that an init container is a sidecar container. Kubelet will start init containers with…

comment by xdasf · 2023-07-10 · in Kubernetes SidecarContainers feature is merged

…Key", and make it easy to extract the public key from many of those to form a list of CAs. [1] https://github.com/kubernetes/enhancements/pull/3258 [2] https://spiffe.io/docs/latest/spiffe-about/spiffe-concepts/ [3] The actual Java…

comment by GauntletWizard · 2022-12-06 · in Linux Certificate Authority root stores have a too simple view of 'trust'

There's a pending pull request that solves this problem since end of June. https://github.com/kubernetes/enhancements/pull/3412

comment by de6u99er · 2022-08-12 · in Kubernetes StatefulSets are Broken

…was changing relatively often. But that was addressed by moving heartbeats to a different object: https://github.com/kubernetes/enhancements/issues/589

comment by justinsb · 2022-08-01 · in Ask HN: Have You Left Kubernetes?

https://github.com/kubernetes/enhancements/issues/2400

comment by kube-system · 2022-07-07 · in Solving Out of Memory Issues in Linux at Redpanda

…In 1.22 onwards there's a new ExpirationSeconds field when creating a certificate signing request: https://github.com/kubernetes/enhancements/issues/2784 . I imagine this will be supported by all the hosted Kubernetes services - we've been…

comment by jmorgan · 2022-05-17 · in Launch HN: Infra (YC W21) – Open-source access management for Kubernetes

…Note that Kubernetes now has code to work with swap, although some work remains. Tracking issue: https://github.com/kubernetes/enhancements/issues/2400 There is a lengthy conversation in this issue, with some deep insights (and a lot of…

comment by bboreham · 2022-04-21 · in In defense of swap: common misconceptions (2018)

…k8s doesn't support user namespaces let alone user mount namespaces. Here is the open issue. https://github.com/kubernetes/enhancements/issues/127 The point being that for k8s and docker, any role that allows you to create pods/containers…

comment by nyrikki · 2021-08-20 · in Why we run Data Pipelines as Containers

…ephemeral storage, vs. the current implementation, see the third point below. Also see KEP: https://github.com/kubernetes/enhancements/tree/master/keps/... The second is a tracking issue for a KEP that has been implemented but is still in…

comment by q3k · 2021-06-30 · in Treat Kubernetes clusters as cattle, not pets

…has the concept of limits, especially on ephemeral storage So... why are these issues open? https://github.com/kubernetes/enhancements/issues/1029 https://github.com/kubernetes/enhancements/issues/361 https://github.com/kubernetes/kubernete…

comment by dolni · 2021-06-30 · in Treat Kubernetes clusters as cattle, not pets

…been a new PR that will hopefully land soon to implement this in Kubernetes in a simplified manner: https://github.com/kubernetes/enhancements/issues/127 As for whether security policies prevent breakouts, it really depends on what the…

comment by encryptluks2 · 2021-06-12 · in Containers are tents

You may be interested in this API - https://github.com/kubernetes/enhancements/tree/master/keps/...

comment by harpratap · 2021-04-27 · in Karmada: Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration

…Kubernetes. Unfortunately, the Kubernetes Kubelet does not work with Docker and user namespaces ( https://github.com/kubernetes/enhancements/issues/127 ). There is still work being done in this area by folks like Kinvolk.

comment by sargun · 2020-12-23 · in Evolving Container Security with Linux User Namespaces

This link has a more thorough detail on what is actually happening and when - https://github.com/kubernetes/enhancements/tree/master/keps/... Bottom line I think is that using docker as a container runtime with K8S is going to be harder…

comment by blinkingled · 2020-12-03 · in Kubernetes is deprecating Docker runtime support

…automatic. Here's the KEP we're working on - still very much prealpha and open to feedback/ideas: https://github.com/kubernetes/enhancements/blob/master/keps/... .

comment by robscott · 2020-11-26 · in Topology-Aware Service Routing on Kubernetes with Linkerd

https://github.com/kubernetes/enhancements/blob/master/keps/...

comment by The_rationalist · 2020-11-23 · in Guide to OOMKill Alerting in Kubernetes Clusters

Just look at the amount of engineering effort and time that has gone into projects like kubernetes: https://github.com/kubernetes/enhancements/issues/508 That's just for IPv6 support, which is beta, and took years to get there. Dual Stack…

comment by linuxftw · 2020-10-20 · in AWS and their billions in IPv4 addresses

User namespaces remapping is still not supported in Kubernetes, see https://github.com/kubernetes/enhancements/issues/127

comment by kryps · 2020-07-14 · in LXD – next generation system container manager release 4.3

…https://docs.docker.com/engine/security/userns-remap/ Also, Kubernetes doesn't support it. https://github.com/kubernetes/enhancements/issues/127

comment by dharmab · 2020-05-04 · in Why strace doesn't work in Docker

https://github.com/kubernetes/enhancements/commit/c8b1f15359...

comment by techntoke · 2020-03-19 · in Containers Are Not the Future

…replace/contain Scheduler Extender). [1]: https://github.com/kubernetes/kubernetes/pull/13580 [2]: https://github.com/kubernetes/enhancements/blob/master/keps/... EDIT: formatting

comment by Summershard · 2020-01-14 · in Maybe You Don't Need Kubernetes (2019)

It does, in alpha. Soon to hit beta though: https://github.com/kubernetes/enhancements/issues/508 Most internal networks still run IPv4, and will continue to do so for a long time.

comment by the_duke · 2019-10-16 · in Kubernetes Networking: Behind the Scenes

…so what you can do is limited. Kubernetes also landed support for ephemeral containers in 1.16: https://github.com/kubernetes/enhancements/issues/277 . It still needs more work but the idea is that you will be able to attach a debug…

comment by andrewrynhard · 2019-09-25 · in Talos: OS for Kubernetes

That is completely untrue. Kubernetes has full support for IPv6. https://github.com/kubernetes/enhancements/issues/508

comment by linuxdude314 · 2019-08-20 · in GCP to introduce an additional charge for publicly addressed VM instances

sig-network is working hard to get dual stack support in. https://github.com/kubernetes/enhancements/issues/563 It was supposed to be targeting 1.16, but looks like it will be in 1.17 according to https://github.com/kubernetes/enhancements/…

comment by Rockjodd · 2019-08-20 · in GCP to introduce an additional charge for publicly addressed VM instances

…It doesn't actually appear to be documented there (yet). However this appears to be the KEP for it: https://github.com/kubernetes/enhancements/blob/master/keps/...

comment by Arnavion · 2019-06-20 · in Kubernetes 1.15: Extensibility and Continuous Improvement

…safety for any application you run on your own machine available with standardized tooling. [0]: https://github.com/kubernetes/enhancements/blob/master/keps/... [1]: https://github.com/kubernetes/community/blob/master/contribu... [2]:…

comment by hardwaresofton · 2018-12-27 · in The future of Kubernetes is virtual machines

Some newer candidates besides Terraform are Portable Service Definitions and Crossplane. https://github.com/kubernetes/enhancements/blob/master/keps/... https://crossplane.io

comment by alexeldeib · 2018-12-11 · in DigitalOcean launches its container service

This looks fairly similar to the new Kuberentes KEP for portable service definitions.... https://github.com/kubernetes/enhancements/blob/master/keps/...

comment by mfer · 2018-12-04 · in Crossplane – Open Source Multicloud Control Plane

…is "self-healing". Then they get on HN and blast anyone who dares to question that experience. [0] https://github.com/kubernetes/features/issues/121

comment by cookiecaper · 2018-05-01 · in Operator Framework: Building Apps on Kubernetes

…the 1.9 release [1]. The issue [2] has existed for over 3 years, so it's not a new suggestion. [1] https://github.com/kubernetes/features/issues/508 [2] https://github.com/kubernetes/kubernetes/issues/1443

comment by andrewstuart2 · 2017-12-05 · in IPvlan overlay-free Kubernetes Networking in AWS

…it is still underway[2]. [1]: https://github.com/destijl/community/blob/3418b4e4c6358f5dc7... [2]: https://github.com/kubernetes/features/issues/43

comment by philips · 2017-08-31 · in Bootstrapping Kubernetes Google Cloud Platform without scripts

That idea was proposed here: https://github.com/kubernetes/features/issues/246 ; there's a pretty thorough design doc linked to from the issue. The decision was made not to add it to the system for now (see the issue for discussion).

comment by davidopp_ · 2017-07-01 · in Kubernetes 1.7: Security Hardening, Stateful Application Updates and Extensibility

…it was not implemented, because no one stepped up to do it initially. But it'll be alpha in 1.7: https://github.com/kubernetes/features/issues/121

comment by pas · 2017-05-09 · in Kubernetes clusters for the hobbyist

…Here are just some of the influences of OpenShift on Kubernetes that I'm aware of: * RBAC model ( https://github.com/kubernetes/features/issues/2#issuecomment... ) * Kubernetes notion of namespaces was largely influenced by RedHat and Open…

comment by alexk · 2017-05-02 · in Red Hat OpenShift.io – Free, end-to-end, cloud-native development

…28, 2017, about two weeks ago. [1] Furthermore, the issue still bears the "stage/beta" tag. [0] https://github.com/kubernetes/features/issues/137#issuecomme... [1] https://github.com/kubernetes/kubernetes/releases/tag/v1.6.0

comment by cookiecaper · 2017-04-12 · in MySQL InnoDB Cluster GA

…is so depressing. [0] http://blog.kubernetes.io/2016/07/stateful-applications-in-c... [1] https://github.com/kubernetes/features/issues/137#issuecomme... [2] https://coreos.com/blog/introducing-operators.html

comment by cookiecaper · 2017-04-12 · in MySQL InnoDB Cluster GA