Skip to content

Commit e33055e

Browse files
committed
Addressed comments
1 parent 911cc21 commit e33055e

File tree

1 file changed

+17
-14
lines changed

1 file changed

+17
-14
lines changed

content/en/blog/_posts/XXXX-XX-XX-dra-134-update.md

Lines changed: 17 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -11,49 +11,52 @@ author: >
1111
Kubernetes 1.34 is here, and it brings a huge wave of enhancements for Dynamic Resource Allocation (DRA)! This
1212
release marks a major milestone with the Structured Parameters feature graduating to General Availability (GA),
1313
unlocking the full potential of how you manage devices on Kubernetes. On top of that, several key features have
14-
moved to beta, and a fresh batch of new alpha features promise even more expresiveness and flexibility.
14+
moved to beta, and a fresh batch of new alpha features promise even more expressiveness and flexibility.
1515

1616
Let's dive into what's new for DRA in Kubernetes 1.34!
1717

1818
### Structured Parameters is Now GA
19-
The headline feature for DRA in this release is the graduation of Structured Parameters to General Availability.
19+
The headline feature of the v1.34 release is that the core of DRA has graduated to General Availability.
2020

2121
Kubernetes Dynamic Resource Allocation (DRA) provides a flexible framework for managing specialized hardware
22-
resources such as GPUs and FPGAs. It provices a flexible API for letting workloads specify the properties of the
22+
and infrastructure resources, such as GPUs or FPGAs. DRA provides APIs that enable each workload to specify the properties of the
2323
devices it needs, but leaving it to the scheduler to allocate actual devices, allowing increased reliability and
2424
improved utilization of expensive hardware.
2525

2626
With the graduation to GA, DRA is stable and will be part of Kubernetes for the long run. The community can still
2727
expect a steady stream of new features being added to DRA over the next several Kubernetes releases, but they will
2828
not make any breaking changes to DRA. So users and developers of DRA drivers can start adopting DRA with confidence.
2929

30-
Starting with Kubernetes 1.34, DRA will be enabled by default, as will DRA features that have reached beta.
30+
Starting with Kubernetes 1.34, DRA is enabled by default; DRA features that have reached beta are also enabled by default.
31+
That's because the default API version for DRA is now the stable `v1` version, and not the earlier versions
32+
(eg: `v1beta1` or `v1beta2`) that needed explicit opt in.
3133

3234
### Features promoted to beta
3335
Several powerful features have been promoted to beta, adding more control, flexibility, and observability to resource
3436
management with DRA.
3537

36-
[Admin Access](/docs/concepts/scheduling-eviction/dynamic-resource-allocation/#admin-access) has been updated so that
37-
only users with access to a namespace with the resource.k8s.io/admin-access: "true" label are authorized to create
38-
ResourceClaim or ResourceClaimTemplates objects with the adminAccess field within the namespace. This grants
39-
administrators access to in-use devices and may enable additional permissions when making the device available in a
40-
container. This ensures that non-admin users cannot misuse the feature.
38+
[Admin access labelling](/docs/concepts/scheduling-eviction/dynamic-resource-allocation/#admin-access) has been updated.
39+
In v1.34, you can restrict device support to people (or software) authorized to use it. This is meant
40+
as a way to avoid privilege escalation through use of hardware devices that can bypass other security controls.
41+
The restriction works by ensuring that only users with access to a namespace with the
42+
`resource.k8s.io/admin-access: "true"` label are authorized to create
43+
ResourceClaim or ResourceClaimTemplates objects with the `adminAccess` field set to true. This ensures that non-admin users cannot misuse the feature.
4144

4245
[Prioritized List](/docs/concepts/scheduling-eviction/dynamic-resource-allocation/#prioritized-list) lets users specify
4346
a list of acceptable devices for their workloads, rather than just a single type of device. So while the workload
4447
might run best on a single high-performance GPU, it might also be able to run on 2 mid-level GPUs. The scheduler will
4548
attempt to satisfy the alternatives in the list in order, so the workload will be allocated the best set of devices
46-
available in the cluster.
49+
available on the node.
4750

48-
The PodResources API has been updated to include resources allocated through DRA. This allows node monitoring agents
51+
The kubelet's API has been updated to report on Pod resources allocated through DRA. This allows node monitoring agents
4952
to know the allocated DRA resources for Pods on a node and makes it possible to use the DRA information in the PodResources API
5053
to develop new features and integrations.
5154

5255
### New alpha features
5356
Kubernetes 1.34 also introduces several new alpha features that give us a glimpse into the future of resource management with DRA.
5457

55-
[Extended Resource](/docs/concepts/scheduling-eviction/dynamic-resource-allocation/#extended-resource) support in DRA allow
56-
cluster administrators to advertise DRA-managed resources as extended resources, allowing developers to consume them using
58+
[Extended resource mapping](/docs/concepts/scheduling-eviction/dynamic-resource-allocation/#extended-resource) support in DRA allows
59+
cluster administrators to advertise DRA-managed resources as _extended resources_, allowing developers to consume them using
5760
the familiar, simpler request syntax while still benefiting from dynamic allocation. This makes it possible for existing
5861
workloads to start using DRA without modifications, simplifying the transition to DRA for both application developers and
5962
cluster administrators.
@@ -76,7 +79,7 @@ unhealthy device and respond properly.
7679

7780
### What’s next?
7881

79-
While DRA got promoted to GA this cycle, the hard on DRA doesn't stop. There are several features in alpha and beta that
82+
While DRA got promoted to GA this cycle, the hard work on DRA doesn't stop. There are several features in alpha and beta that
8083
we plan to bring to GA in the next couple of releases and we are looking to continue to improve performance, scalability
8184
and reliability of DRA. So expect an equally ambitious set of features in DRA for 1.35.
8285

0 commit comments

Comments
 (0)