Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-58205

Reconcile jobs only in opt-in namespaces

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.19
    • Node / Kueue
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • Done
    • Known Issue
    • Hide
      * There is a known issue where {product-title} allows reconciliation of `Job` resources that have the `kueue.x-k8s.io/queue-name` label, even if these resources are in namespaces which are not configured to opt in to being managed by {product-title}. This is inconsistent with the behavior for other core integrations like pods, deployments, and stateful sets, which are only reconciled if they are in namespaces which have been configured to opt in to being managed by {product-title} by adding the `kueue.openshift.io/managed=true`. (link:https://issues.redhat.com/browse/OCPBUGS-58205[OCPBUGS-58205])
      Show
      * There is a known issue where {product-title} allows reconciliation of `Job` resources that have the `kueue.x-k8s.io/queue-name` label, even if these resources are in namespaces which are not configured to opt in to being managed by {product-title}. This is inconsistent with the behavior for other core integrations like pods, deployments, and stateful sets, which are only reconciled if they are in namespaces which have been configured to opt in to being managed by {product-title} by adding the `kueue.openshift.io/managed=true`. (link: https://issues.redhat.com/browse/OCPBUGS-58205 [ OCPBUGS-58205 ])
    • None
    • None
    • None
    • None

      Kueue provides the managedJobsNamespaceSelector configuration field, which allows administrators to opt in only certain namespaces to be managed by Kueue. This opt-in behavior ensures that jobs in system or third-party namespaces are left untouched, while selected namespaces benefit from Kueue's scheduling features. 
      The current behavior in Kueue allows reconciliation of Job resources that have the kueue.x-k8s.io/queue-name label, even when they are created in namespaces that are not explicitly opted-in via the managedJobsNamespaceSelector. This is inconsistent with the behavior for other core integrations like Pods, Deployments, and StatefulSets, which are only reconciled when the managed namespaces

      There is ongoing upstream work https://github.com/kubernetes-sigs/kueue/pull/5638 which updates the behavior so that Jobs with queue-name labels will also be ignored unless their namespace matches the managedJobsNamespaceSelector. This change makes Kueue’s behavior consistent across all its integrations.

              rh-ee-pbhojara Pannaga Rao Bhoja Ramamanohara
              rh-ee-pbhojara Pannaga Rao Bhoja Ramamanohara
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: