What is ReadWriteOncePod?
ReadWriteOncePod is a new access mode for PersistentVolumes (PVs) and PersistentVolumeClaims (PVCs) introduced in Kubernetes v1.22.This access mode enables you to restrict volume access to a single pod in the cluster, ensuring that only one pod can write to the volume at a time.Author: Jan Šafránek (Red Hat)
The problem
On Linux with Security-Enhanced Linux (SELinux) enabled, it's
traditionally the container runtime that applies SELinux labels to
a Pod and all its volumes.Kubernetes only passes the SELinux label
from a Pod's securityContext
fields to the container
runtime.
The container runtime then recursively changes SELinux label on all files that are visible to the Pod's containers.This can be time-consuming if there are many files on the volume, especially when the volume is on a remote filesystem.
Note
If aAuthors: Alex Wang (Shopee), Kante Yin (DaoCloud), Kensei Nakada (Mercari)
In Kubernetes v1.19, Pod topology spread constraints went to general availability (GA).
As time passed, we - SIG Scheduling - received feedback from users, and, as a result, we're actively working on improving the Topology Spread feature via three KEPs.All of these features have reached beta in Kubernetes v1.27 and are enabled by default.
This blog post introduces each feature and the use case behind each of them.
KEP-3022:Release theme and logo
Kubernetes v1.27:Chill Vibes The theme for Kubernetes v1.27 is Chill Vibes.
Weitere Beiträge ...
Seite 3 von 19