kubernetes/pkg/util
Rodrigo Campos 1e53e59c3a Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature"
This reverts commit 8597b343fa.

I wrote in the Kubernetes documentation:

	In practice this means you need at least Linux 6.3, as tmpfs started
	supporting idmap mounts in that version. This is usually needed as
	several Kubernetes features use tmpfs (the service account token that is
	mounted by default uses a tmpfs, Secrets use a tmpfs, etc.)

The check is wrong for several reasons:
	* Pods can use userns before 6.3, they will just need to be
	  careful to not use a tmpfs (like a serviceaccount). MOST users
	  will probably need 6.3, but it is possible to use earlier kernel
	  versions. 5.19 probably works fine and with improvements in
          the runtime 5.12 can probably be supported too.
	* Several distros backport changes and the recommended way is
	  usually to try the syscall instead of testing kernel versions.
	  I expect support for simple fs like tmpfs will be backported
	  in several distros, but with this check it can generate confusion.
	* Today a clear error is shown when the pod is created, so it's
	  unlikely a user will not understand why it fails.
	* Returning an error if utilkernel fails to understand what
	  kernel version is running is also too strict (as we are
	  logging a warning even if it is not the expected version)
	* We are switching to enabled by default, which will log a
	  warning on every user that runs on an older than 6.3 kernel,
	  adding noise to the logs.

For there reasons, let's just remove the hardcoded kernel version check.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-15 12:27:10 +02:00
..
async fix wrong statement in unittest of BoundedFrequencyRunner 2022-11-15 17:36:26 +08:00
bandwidth delete unused functions in pkg/util directory 2023-01-16 17:22:35 +08:00
coverage pkg/util/coverage: update fakeTestDeps methods 2024-05-29 12:31:22 -03:00
env Replace os.Setenv with testing.T.Setenv in tests 2023-04-17 20:39:46 -05:00
filesystem Add funcs in pkg/filesystem/util that can actually set file permissiosn 2024-07-15 14:22:59 -07:00
flag fix:handle error and remove Redundant type conversion 2022-07-19 11:30:46 +08:00
flock generated: Run hack/update-gofmt.sh 2021-08-24 15:47:49 -04:00
goroutinemap fix:handle error and remove Redundant type conversion 2022-07-19 11:30:46 +08:00
hash replaced spew.Sprintf with a util pretty print function 2023-03-27 09:24:22 +08:00
interrupt delete unused functions in pkg/util directory 2023-01-16 17:22:35 +08:00
iptables Add doc.go file without any buildconstraint to run tests on non linux systems 2024-04-03 12:30:59 +05:30
kernel Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" 2025-05-15 12:27:10 +02:00
labels hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
node Move GetHostname() from k/k/pkg/util/node to k/component-helpers/node/util 2023-01-27 18:24:38 -05:00
oom refactor: replace the ioutil by the os and io 2022-10-20 15:13:28 +08:00
parsers adjust error message a bit 2023-08-31 21:53:43 -04:00
pod Do not revert the pod condition if there might be running containers, skip condition update instead. 2022-11-07 16:22:29 +01:00
procfs .*: fix lint errors 2024-07-15 15:03:15 +05:30
removeall Replaces path.Operation with filepath.Operation 2024-01-15 20:35:13 +00:00
rlimit generated: Run hack/update-gofmt.sh 2021-08-24 15:47:49 -04:00
slice add unit test coverage for pkg/util/slice 2022-06-30 15:21:37 +08:00
tail Move pkg/kubelet/kuberuntime/logs to k8s.io/cri-client staging 2024-05-30 15:13:22 +02:00
taints Improve test readability by fixing previous code variables that could easily be changed and 2022-09-16 17:23:35 +08:00
tolerations hack/update-bazel.sh 2021-02-28 15:17:29 -08:00