Skip to content

Commit

Permalink
Merge pull request #46464 from neolit123/1.31-move-rootlss-cp-to-depr…
Browse files Browse the repository at this point in the history
…ecated

kubeadm: move the RootlessControlPlane FG to deprecated
  • Loading branch information
k8s-ci-robot authored May 29, 2024
2 parents e493f00 + 7f892d6 commit 096a265
Showing 1 changed file with 16 additions and 7 deletions.
23 changes: 16 additions & 7 deletions content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md
Original file line number Diff line number Diff line change
Expand Up @@ -157,7 +157,6 @@ Feature | Default | Alpha | Beta | GA
:-------|:--------|:------|:-----|:----
`EtcdLearnerMode` | `true` | 1.27 | 1.29 | -
`PublicKeysECDSA` | `false` | 1.19 | - | -
`RootlessControlPlane` | `false` | 1.22 | - | -
`WaitForAllControlPlaneComponents` | `false` | 1.30 | - | -
{{< /table >}}

Expand All @@ -176,12 +175,6 @@ as a learner and promoted to a voting member only after the etcd data are fully
Renewal of existing ECDSA certificates is also supported using `kubeadm certs renew`, but you cannot
switch between the RSA and ECDSA algorithms on the fly or during upgrades.

`RootlessControlPlane`
: Setting this flag configures the kubeadm deployed control plane component static Pod containers
for `kube-apiserver`, `kube-controller-manager`, `kube-scheduler` and `etcd` to run as non-root users.
If the flag is not set, those components run as root. You can change the value of this feature gate before
you upgrade to a newer version of Kubernetes.

`WaitForAllControlPlaneComponents`
: With this feature gate enabled kubeadm will wait for all control plane components (kube-apiserver,
kube-controller-manager, kube-scheduler) on a control plane node to report status 200 on their `/healthz`
Expand All @@ -192,6 +185,22 @@ on a control plane node to become ready. The wait process starts right after the
is started by kubeadm. You are advised to enable this feature gate in case you wish to observe a ready
state from all control plane components during the `kubeadm init` or `kubeadm join` command execution.

List of deprecated feature gates:

{{< table caption="kubeadm deprecated feature gates" >}}
Feature | Default | Alpha | Beta | GA | Deprecated
:-------|:--------|:------|:-----|:---|:----------
`RootlessControlPlane` | `false` | 1.22 | - | - | 1.31
{{< /table >}}

Feature gate descriptions:

`RootlessControlPlane`
: Setting this flag configures the kubeadm deployed control plane component static Pod containers
for `kube-apiserver`, `kube-controller-manager`, `kube-scheduler` and `etcd` to run as non-root users.
If the flag is not set, those components run as root. You can change the value of this feature gate before
you upgrade to a newer version of Kubernetes.

List of removed feature gates:

{{< table caption="kubeadm removed feature gates" >}}
Expand Down

0 comments on commit 096a265

Please sign in to comment.