Enhancement Description

• One-line enhancement description (can be used as a release note):

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/4265-proc-mount

• Discussion Link:

• Primary contact (assignee): @sohankunkerkar @haircommander

• Responsible SIGs: node

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): 1.12
  • Beta release target (x.y): 1.31(off by default); 1.33(on by default)
  • Stable release target (x.y): 1.36

• Alpha

  • KEP (k/enhancements) update PR(s):
    • add ProcMount option community#1934
    • Add restrospetive KEP for ProcMount and target at Beta #4266
  • Code (k/k) update PR(s):
    • Add a ProcMount option to the SecurityContext & AllowedProcMountTypes to PodSecurityPolicy kubernetes#64283
    • KEP-4265: Update Unmasked ProcMountType to fail validation without a pod level user namespace kubernetes#123520
  • Docs (k/website) update PR(s):
    • ProcMount 1.30 update website#45152

• Beta

  • KEP (k/enhancements) update PR(s):
    • 1.31 KEP-4265: promote ProcMount option to beta #4679
    • 1.33 KEP-4265: move to on by default beta #5120
  • Code (k/k) update PR(s):
    • 1.31 KEP-4265: add e2e tests for ProcMountType kubernetes#123303
    • 1.31 [KEP-4265] promote ProcMountType feature gate to beta kubernetes#125259
    • 1.33 [KEP-4265]: features: bump proc mount to on by default beta kubernetes#130798
  • Docs (k/website) update(s):
    • draft 4265 update website#49894

• Stable

  • KEP (k/enhancements) update PR(s): KEP-4265: promote to stable #5853
  • Code (k/k) update PR(s): KEP-4265: feature: promote ProcMountType to GA kubernetes#137454
  • Docs (k/website) update(s): 4265: promote ProcMountType to GA website#54650

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.