From 34dc6b2587050588bfb00e06456b58729d823170 Mon Sep 17 00:00:00 2001 From: Jan Safranek Date: Thu, 10 Mar 2022 11:29:45 +0100 Subject: [PATCH] Add SELinuxMountReadWriteOncePod feature gate --- pkg/features/kube_features.go | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go index 426f28b758a..884391f6353 100644 --- a/pkg/features/kube_features.go +++ b/pkg/features/kube_features.go @@ -860,6 +860,14 @@ const ( // Allow users to specify whether to take nodeAffinity/nodeTaint into consideration when // calculating pod topology spread skew. NodeInclusionPolicyInPodTopologySpread featuregate.Feature = "NodeInclusionPolicyInPodTopologySpread" + + // owner: @jsafrane + // kep: http://kep.k8s.io/1710 + // alpha: v1.25 + // Speed up container startup by mounting volumes with the correct SELinux label + // instead of changing each file on the volumes recursively. + // Initial implementation focused on ReadWriteOncePod volumes. + SELinuxMountReadWriteOncePod featuregate.Feature = "SELinuxMountReadWriteOncePod" ) func init() { @@ -1099,6 +1107,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS NodeInclusionPolicyInPodTopologySpread: {Default: false, PreRelease: featuregate.Alpha}, + SELinuxMountReadWriteOncePod: {Default: false, PreRelease: featuregate.Alpha}, + // inherited features from generic apiserver, relisted here to get a conflict if it is changed // unintentionally on either side: