You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: keps/sig-windows/2802-identify-windows-pods-apiserver-admission/README.md
+15-3Lines changed: 15 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -358,16 +358,28 @@ No
358
358
359
359
360
360
###### How does this feature react if the API server and/or etcd is unavailable?
361
-
361
+
The API validation would fail if API server and/or etcd is unavailable. The pod object won't be persisted to etcd.
362
362
363
363
###### What are other known failure modes?
364
-
364
+
- Windows Pod by passing windows specific validation and linux pods by passing linux specific validation even after `IdentifyPodOS` featuregate is enabled.
365
+
- Detection: Looking at `kube_pod_status_phase` metric
366
+
- Mitigations: Disable the `IdentifyPodOS` featuregate
367
+
- Diagnostics: Increasing the log-level of APIServer
368
+
- Testing: Yes, unit tests are already in place
369
+
- Both windows and linux pods are getting rejected when `IdentifyPodOS` featuregate is enabled.
370
+
- Detection: Looking at `apiserver_request_total` metric
371
+
- Mitigations: Disable the `IdentifyPodOS` featuregate
372
+
- Diagnostics: Increasing the log-level of APIServer
373
+
- Testing: Yes, unit tests are already in place
365
374
366
375
367
376
###### What steps should be taken if SLOs are not being met to determine the problem?
377
+
Disabling the `IdentifyPodOS` featuregate will help in determining the problem.
368
378
369
379
## Implementation History
370
-
380
+
- 2021-09-08: Initial KEP merged
381
+
- 2021-10-29: Initial implementation PR merged
382
+
- 2022-01-19: Graduate the feature to Beta proposed
0 commit comments