Kubernetes SIG/Meetings/2024-05-28

Agenda:

• Introductions for new members (if any):
• SIG administrivia:
• Misc:
  • Tobias Klausmann New partman recipe overlay for larger kubelet partitions on ML k8s workers
  • Luca Toscano Use of privileged/capabilities/etc.. in charts that we are importing (see https://phabricator.wikimedia.org/T364472#9829888)
    • Discussion around privileged true and CAP_SYS_ADMIN, noting that calico runs with privileged=true and it makes sense for specific cases like CSI and GPU drivers. Just in kube-system and a whitelist of workloads like the ones above. Action item for Luca to document this.
  • Luca Toscano Kubernetes workers on Bookworm (see https://phabricator.wikimedia.org/T365253 )
• Topic:
• Action Items: