CSI Drivers in Windows as HostProcess Pods

[mauriciopoppe]

Enhancement Description

• One-line enhancement description (can be used as a release note): CSI Drivers in Windows as HostProcess Pods
• Kubernetes Enhancement Proposal:
• Discussion Link: https://docs.google.com/document/d/1_WtQUnnlXE_M-YzYVrPZbjEgSxMvY9EYFwl61MC2i5I/edit#bookmark=id.m6yzw8n3okss
• Primary contact (assignee): @mauriciopoppe
• Responsible SIGs: sig-storage
• Enhancement target (which target equals to which milestone): This enhancement is for an out of tree component, as such, its development is not tied to a Kubernetes release, @msau42 suggested creating a KEP to track the change because it's a big refactor that all CSI Drivers need to do and the design superseeds the CSI Proxy design added in https://github.com/kubernetes/enhancements/blob/master/keps/sig-windows/1122-windows-csi-support/README.md.
• [ ] Alpha
  • [ ] KEP (k/enhancements) update PR(s): https://github.com/kubernetes/enhancements/pull/3641
  • [ ] Code (k/k) update PR(s): (This is an out of tree component and doesn't need changes in k/k)
    • [ ] CSI Proxy tracking issue: https://github.com/kubernetes-csi/csi-proxy/issues/217
  • [ ] Docs (k/website) update PR(s):
    • [ ] Updating [Windows Storage](https://kubernetes.io/docs/concepts/storage/windows-storage/ storage) docs: TBD
    • [ ] Blogpost: TBD

[mauriciopoppe]

/sig storage

[mauriciopoppe]

/sig windows

[marosset]

/cc

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[alexander-ding]

/remove-lifecycle stale

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[mauriciopoppe]

/remove-lifecycle stale

[jayunit100]

what ever happened to this one?

[mauriciopoppe]

hey @jayunit100, I captured the current state of the integration at https://docs.google.com/document/d/1_WtQUnnlXE_M-YzYVrPZbjEgSxMvY9EYFwl61MC2i5I/edit#bookmark=id.ww7xe8kiazif.

From a development point of view I think we're done (thanks to @alexander-ding), there were a few problems about the integration with GKE:

• security: GKE autopilot and the privilege level of the DaemonSet
• node skew: on k8s upgrades we bump the control plane components first including DaemonSets, a concern we had is that we could end up in an scenario where the CP is upgraded to 1.X and the new DaemonSet deployed but the nodes are still 1.X-2. This was a problem before because the kubelet would be too old, I think that now if the scenario is CP 1.27, nodepools 1.25 then it works so this problem is not there anymore.

The node skew scenario is no longer a problem, the security scenario is a problem specific to GKE but I believe any CSI Driver which makes the component privileged would have this problem, I think I need to expand more on the suggestions.

Another problem is defining the graduation criteria, devs from AWS were trying to integrate this work, I think Azuredisk is already running the CSI Driver as a privileged container but without using the new version of CSI Proxy. Having more CSI Drivers using the library would help me define the graduation criteria e.g. "Graduation Criteria: At least 2 CSI Drivers are using the new version of CSI Proxy".

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[k8s-triage-robot]

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle rotten
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten

[k8s-triage-robot]

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs.

This bot triages issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Reopen this issue with /reopen
• Mark this issue as fresh with /remove-lifecycle rotten
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/close not-planned

[k8s-ci-robot]

@k8s-triage-robot: Closing this issue, marking it as "Not Planned".

In response to [this](https://github.com/kubernetes/enhancements/issues/3636#issuecomment-2020865611): >The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. > >This bot triages issues according to the following rules: >- After 90d of inactivity, `lifecycle/stale` is applied >- After 30d of inactivity since `lifecycle/stale` was applied, `lifecycle/rotten` is applied >- After 30d of inactivity since `lifecycle/rotten` was applied, the issue is closed > >You can: >- Reopen this issue with `/reopen` >- Mark this issue as fresh with `/remove-lifecycle rotten` >- Offer to help out with [Issue Triage][1] > >Please send feedback to sig-contributor-experience at [kubernetes/community](https://github.com/kubernetes/community). > >/close not-planned > >[1]: https://www.kubernetes.dev/docs/guide/issue-triage/ Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.

[mauriciopoppe]

/reopen

[k8s-ci-robot]

@mauriciopoppe: Reopened this issue.

In response to [this](https://github.com/kubernetes/enhancements/issues/3636#issuecomment-2419993657): >/reopen Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.

[mauriciopoppe]

/remove-lifecycle rotten