Kubernetes

Term 3 · Sep-Nov · 3 projects

• Expand Declarative Validation (DV) in Kubernetes

  LFX Mentorship · Listed in the official cohort

  @lalitc375Source IssueLFX portal

  This mentorship project focuses on advancing the Declarative Validation (DV) framework across the Kubernetes codebase. The project aims to reduce technical debt, improve API validation safety, and streamline schema migrations. The mentee will work closely with maintainers to migrate existing handwritten validations of Pod and ObjectMeta to DV, graduate beta declarative validations to stable, expand the validation tag catalog, and assist with reviewing incoming community PRs. This directly impacts core API Machinery infrastructure and helps accelerate new API development in Kubernetes.

  • Go
  • Kubernetes
  • API machinery
  • Code Generation

• Extract and enforce shared behaviors between resolvers

  LFX Mentorship · Listed in the official cohort

  @rexagodSource IssueLFX portal

  One of the most prominent selling points of kubernetes-sigs/resource-state-metrics is its extensibility, allowing it to support a number of DSLs as the community deems. At the moment, there are three resolvers supported in the subproject, in increasing order of their ability to deal with complex tasks: unstructured, CEL, and Starlark. Every resolver is required to implement a Resolver interface, with a single Resolve method, specifying a signature that helps set the same expectations when sending queries and receiving resolutions from these resolvers, so the same wrapper code can work with any Resolver implementation that is plugged into it. However, there is room for improvement for this particular interface. Essentially, we'd like for this to be broken down into methods that track the implementations on a much more granular level. Output resolution for various composite data-types, as well as unique traits such as underscore replacement for unsupported runes are eligible candidates for shared behaviors that should be abstracted. Ideally, the cover letter should detail the specifics of such gaps in the common behaviors between resolvers today that can be surfaced to the interface and how they will be addressed, for a much better onboarding experience for more resolvers in the future. Please note that we're actively looking for long-term contributors to the project (as it's relatively new, and still in BETA) through the means of the LFX project, and we'd like for someone with similar expectations to drive this task, who'd later be interested in joining the maintainer team as well, but this is not a requirement.

  • Go
  • Kubernetes
  • Observability

• Headlamp Project for Node-Readiness-Controller

  LFX Mentorship · Listed in the official cohort

  @AnuragThePathakSource IssueLFX portal

  As Kubernetes clusters grow, understanding why a node is not "Ready for workloads" (and which readiness rule, condition, or taint is holding it back) becomes complex. The node-readiness-controller (NRC) manages node readiness through NodeReadinessRule objects that gate scheduling with taints until node-level conditions are met. Today, this state is visible only through kubectl output, controller logs, and Prometheus metrics with a Grafana dashboard. This project delivers a plugin for Headlamp that surfaces NRC state directly in the dashboard where users can visualize the readiness rules, per-node evaluation status, gating taints, and failure reasons in their cluster. This is a continuation of the Term 2 observability project, which delivered the metrics foundation and Grafana dashboard.

  • TypeScript / React
  • Go
  • Kubernetes
  • Prometheus
  • LLM/AI fluency

Term 1 · Mar-May · 3 projects

• Add OpenTelemetry support

  LFX Mentorship · Listed in the official cohort

  @richardcaseSource IssueLFX portal

  Cluster API Provider AWS (CAPA) enables the creation of Kubernetes clusters in AWS with Cluster API. With increasing adoption of Cluster API (CAPI) in general and of CAPA we want to improve the supportability of CAPA, especially for production environments. The first part of this is to add telemetry/tracing using OpenTelemetry so that we can understand and visualize the flow of reconciliation within the provider. This will enable the project and its end users to understand the behavior of reconciliation (including API services called) and will help diagnose issues and performance problems.

  • Go
  • Kubernetes
  • AWS

• AI-Era Localization Automation for SIG Docs Contributors & Reviewers

  LFX Mentorship · Listed in the official cohort

  @ianychoiSource IssueLFX portal

  This project focuses on improving localization workflows in Kubernetes SIG Docs by strengthening visibility, prioritization, and traceability across English and localized documentation. The enhanced workflows will benefit to reducing review burden and coordination costs that arise in environments where upstream content changes and subsequent localization efforts occur asynchronously. The project also explores practical approaches to achieving measurable productivity gains by adopting AI-assisted tools within established human workflows. Mentees work with mentors in SIG Docs localization to improve existing localization review and coordination processes, such as label-based coordination and review signals implemented through Prow/CI. The project focuses on the following core areas: improving traceability between frequently changing English content and localized documentation, continuously tracking and notifying review priorities for translation updates, and maintaining visibility into localization coverage and prioritization based on document importance. All outcomes are designed to integrate naturally into existing SIG Docs GitHub workflows and practices while preserving and supporting human-led review and decision-making.

  • Basic understanding of Kubernetes documentation structure and contribution flow.
  • Git/GitHub workflows (issues
  • pull requests
  • review comments).
  • Familiarity with at least one programming or scripting language for automation (e.g.
  • Go
  • +10

• Improve AMI Publication and Maintenance

  LFX Mentorship · Listed in the official cohort

  @richardcaseSource IssueLFX portal

  Cluster API Provider AWS (CAPA) enables the creation of Kubernetes clusters in AWS with Cluster API. CAPA allows you create EKS and non-EKS based Kubernetes clusters. When creating a non-EKS cluster we must use AMIs for the nodes in the cluster. The project publishes some AMIs for non-production use. However, the process for publishing the AMIs needs improvment. Firstly we want to fully automate the publication of new AMIs when there is a new Kubernetes version available. Secondly, we need to implement the "AMI Publication Policy" for the project which will involve automated house keeping of AMIs. And thirdly we want to add back support for base operating systems that where temporarily dropped.

  • AWS
  • GitHub Actions
  • Packer
  • Ansible
  • Kubernetes

Term 3 · Sep-Nov · 1 project

• Improve Kubernetes Reference Docs Generator

  LFX Mentorship · Listed in the official cohort

  @katcosgroveSource IssueLFX portal

  The reference documentation for the Kubernetes API is generated at the end of every release cycle. Due to difficulties with the tools used to do this, and the state of that tool's documentation, intimate knowledge of how the tool works is required and generating the reference docs can only reliably be performed by one specific person. Currently, it is possible for the generator to fail at multiple points in the process. Many of these failures are entirely undocumented and without any error handling.

  • Go
  • Bash
  • Python
  • Technical Writing
  • Patience when faced with undocumented failure modes

Term 2 · Jun-Aug · 1 project

• Graduate the kubeadm feature gate WaitForAllControlPlaneComponents to GA

  LFX Mentorship · Listed in the official cohort

  @SataQiuSource IssueLFX portal

  The feature gate WaitForAllControlPlaneComponents is used to enhance the health checks performed by kubeadm on control plane node creation, to not only check the availability of the kube-apisever, but also check the kube-controller-manager and kube-scheduler. In kubeadm 1.33, the feature gate was promoted to Beta. As part of this LFX project it can be promoted to GA, by finalizing the remaining work, such as, code changes, documentation updates and e2e test updates.

  • Go
  • Kubernetes
  • kubeadm

Term 3 · Sep-Nov · 1 project

• Testeable documentation for the Pod Lifecycle events

  LFX Mentorship · Listed in the official cohort

  @SergeyKanzhelevSource IssueLFX portal

  Kubernetes Pods are the unit of execution. Pods's API surface is limited, but yet presenting many challenges for people authoring complex behaviors like proper graceful termination, probes, or advances initialization behaviors. Documentation and testing of those scenarios is limited. The misunderstanding of pod lifecycle and edge casesoften lead to reliability issues in Pods. Lately there were limited efforts to document and test those behaviors. Creating a skaffolding to document and test those behaviors will help temendously the Kubernetes project as well as end users.

  • familiarity with Golang
  • some knowledge about the K8s and containers
  • understanding of Hugo is a plus.

Term 2 · Jun-Aug · 1 project

• Update Image Signing to Meet New Infra Requirements

  LFX Mentorship · Listed in the official cohort

  @puercoSource IssueLFX portal

  The process that signs with Sigstore all container images released on community infra was designed for a different serving architecture. When the community moved to registry.k8s.io and increased 10x the number of registries, the replication of signatures broke due to rate limits imposed on the new registries. As part of the project, you will be instrumental in implementing the new signing process currently being designed by the Kubernetes Release Engineering team. This project will involve heavy rewrites and refactoring of parts of the Image Promoter, the tool that releases community images.

  • Go
  • strong container architecture and registry
  • fundamentals
  • familiarity with sigstore
  • go-containerregistry and infrastructure (GCP & AWS).

Term 3 · Sep-Nov · 1 project

• Build a Go library and CLI for interacting with OpenBuildService

  LFX Mentorship · Listed in the official cohort

  @cpanatoSource IssueLFX portal

  Kubernetes is set to start using OpenBuildService as a platform for building, publishing, and hosting Kubernetes system (Debian and RPM) packages. The current integration with the OpenBuildService platform assumes a lot of manual tasks and depending on osc command-line tool written in Python. At SIG Release, we're striving to automate as many tasks as possible. We want to build a library and CLI written in Go for interacting with the OpenBuildService APIs and platform that can be integrated with our existing release tooling (krel).

  • Go
  • working with APIs

Term 1 · Mar-May · 2 projects

• Add telemetry and profiling support

  LFX Mentorship · Listed in the official cohort

  @cpanatoSource IssueLFX portal

  Cluster API Provider GCP (CAPG) enables the creation of Kubernetes clusters in GCP with Cluster API. With increasing adoption of Cluster API (CAPI) in general and of CAPG we want to improve the supportability of CAPG, especially for production environments. The first part of this is to add telemetry/tracing using OpenTelemetry so that we can understand and visualize the flow of reconciliation within the provider. The next part is to add a pprof endpoint that can be optionally enabled to enable operations/support users to collect profiling information from a running instances of CAPG.

  • Go
  • Kubernetes

• Reimagining how we handle AWS account preparation

  LFX Mentorship · Listed in the official cohort

  @richardcaseSource IssueLFX portal

  Cluster API Provider AWS (CAPA) can create and manage the lifecycle of Kubernetes clusters in AWS (with the help of Cluster API in general). For each target AWS account where a user wants to create clusters it must be prepared for usage first. This is currently done using clusterawsadm which creates/updates a CloudFormation stack that in turn creates/updates IAM resources. This approach has caused issues as CloudFormation is region specific but IAM is global and users often run the tool in different regions which results in failed stacks that cannot easily be deleted. As a project we want to move away from using CloudFormation and instead use API calls (like the rest of CAPA). We also want to make the process idempotent so it doesn't matter if you run it against different regions. This account preparation is key to CAPA and with out it CAPA cannot run.

  • Go
  • Kubernetes

Term 0 · 2022 Summer (Jun-Aug) · 1 project

• Add GPU Support

  LFX Mentorship · Listed in the official cohort

  @cpanatoSource IssueLFX portal

  Cluster API Provider GCP (a.k.a. CAPG) enables the creation of Kubernetes clusters in GCP with Cluster API. Currently the clusters it creates do not support running workloads in them that take advantage of GPUs and so this rules out things like highly performant machine learning and computational heavy work workloads. We want to enhance CAPG so that it supports GPUs so that users can run these type of workloads. This will require creating a proposal for the change (i.e. design work) and then implementing the propsal which may include changes to the api/controllers, base images and driver installation.

  • Go
  • Kubernetes

Term 0 · 2022 Spring (Mar-May) · 6 projects

• Automation of AMI build/test/publish pipelines for Cluster API Provider AWS (CAPA)

  LFX Mentorship · Listed in the official cohort

  @sedefsavasSource IssueLFX portal

  Cluster API (CAPI) is a Kubernetes sub-project focused on providing declarative APIs and tooling to simplify lifecycle management of Kubernetes clusters. CAPA is the infrastructure provider that extends Cluster API to manage Kubernetes clusters on AWS. As a mentee, you will start with learning CAPI/CAPA concepts and then, will work on the main project which is to automate AMI build, test, and publish workflows using Prow, Github, and other Kubernetes automation tools.

  • Go
  • GitHub
  • Test
  • Automation
  • CI/CD pipelines

• Creating Katacoda Scenarios To Help New Contributors

  LFX Mentorship · Listed in the official cohort

  @DebanitrklSource IssueLFX portal

  There are various Katacoda scenarios available for diverse aspects of Kubernetes, but they focus on an end-user perspective. There is a need to create interactive tutorials to help folks interested in contributing to the project. As a first step, a Katacoda scenario to set up Kubernetes and run tests locally was created that can be found here. This internship involves improving the existing Katacoda scenario and adding new scenarios to further include aspects of contributing such as spinning up a kind cluster with the changes made and testing those changes out. Through the course of this internship, you will also learn how one can contribute to other projects of the Kubernetes community such as the Kubernetes website, and document these processes as Katacoda scenarios to help new contributors get started in their contribution journey.

  • Technical Writing
  • Kubernetes
  • Golang (preferred but not required)

• Documentation assessment (SIG-Network Gateway API)

  LFX Mentorship · Listed in the official cohort

  @youngnickSource IssueLFX portal

  Gateway API is an evolution of Kubernetes Ingress and Service networking that aims to upgrade and improve these APIs. This project is to have a docs assessment performed, to help us come with a plan for improving our documentaion. In particular, we're looking for someone to look at the content organization, the clarity of the language and concepts, and to make sure it's as readable as possible for both implementors and end users. You'll be working with the mentors and maintainers of the project, with a stretch goal being to make the changes you produce in the initial assessment. Please provide a writing sample with the application.

  • Technical Writing
  • Documentation
  • English
  • git/GitHub
  • Familiarity with Kubernetes and Ingress may also be helpful
  • but are not required.

• Elections Security Improvements

  LFX Mentorship · Listed in the official cohort

  @jberkusSource IssueLFX portal

  Elekto is a project for running preference elections for open source projects hosted by the CNCF. It is used for elections for the Kubernetes and Knative projects, and will soon be used by others. During the 2021 elections, a security audit identified several areas of improvement in both in the security and privacy of Elekto, and in the security of the Kubernetes deployment. The mentee for this project would be implementing those recommendations in order to make Elekto and Kubernetes elections more secure.

  • Python/Flask programming
  • Understand basic HTML/CSS
  • Moderate knowledge of SQL and database migrations
  • How to use basic cryptographic functions available in existing libraries

• Improvements to Kubernetes maintainers-related automation (SIG Contributor Experience)

  LFX Mentorship · Listed in the official cohort

  @nikhitaSource IssueLFX portal

  Kubernetes uses OWNERS files to delegate responsibility over different parts of the codebase. These files are also used in the code review process. Unfortunately, over time, there are lots of OWNERS files which have languished and have stale information. Since the velocity of a project is also determined by the number of people reviewing code, it is essential to keep the OWNERS files up-to-date. To ensure this, the maintainers project was created. This internship involves improving maintainers through adding new features and integrating the tool in suitable automation so that it is actively used by the community to signal out-of-date OWNERS files. A stretch goal would also be to improve similar automation tools used to handle github membership for the community.

  • golang (required)
  • experience with GitHub APIs (preferred but not required)

• Improvising unit test coverage(CAPV)

  LFX Mentorship · Listed in the official cohort

  @AnkitaswSource IssueLFX portal

  Cluster API (CAPI) is a Kubernetes sub-project focused on providing declarative APIs and tooling to simplify lifecycle management of Kubernetes clusters. CAPV is the infrastructure provider that extends Cluster API to manage Kubernetes clusters on vSphere. As a mentee, you will start with learning CAPI/CAPV concepts and then, will work on the main project which is to improve unit test coverage. The ideal percentage is 70%. This project aims to either achieve that or come close to it.

  • Go
  • GitHub
  • Test
  • Automation
  • CI/CD pipelines

Term 0 · 2021 Fall (Sep-Nov) · 3 projects

• Improve SIG-Node testing using Kubetest2

  LFX Mentorship · Listed in the official cohort

  @dimsSource LFX portal

  Kubernetes currently uses Kubetest as the interface for launching and running e2e tests. There is a new kubetest2 that is in the process of being developed and will need to be rolled out to various CI harnesses and jobs. As part of this project we will focus on SIG-Node related CI jobs. Here's how we currently test SIG-Node related code - e2e-node-tests.md. There will be a lot of interesting problems to solve and this work is critical to how we test kubernetes not just in GCP, but also across all the other cloud providers going forward.

  • Go
  • python
  • bash
  • unit and feature testing.

• Improvements to Cluster API provider for GCP (CAPG)

  LFX Mentorship · Listed in the official cohort

  @dimsSource IssueLFX portal

  The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management. CAPG provides this Kubernetes-native declarative infrastructure for GCP. The project would start with some help wanted issues around quick start and documentation, this will help with understanding mentee with CAPI/CAPG concepts and current implementation. Then we will move on to some long pending improvements documented in the issues link below.

  • Go
  • unit and feature testing.

• KubeArmor support for Policy Report CRD

  LFX Mentorship · Listed in the official cohort

  @JimBugwadiaSource IssueLFX portal

  This project will periodically generate or update a Policy Report Custom Resource (CR) based on events collected from KubeArmor. This could be implemented as a feature in KubeArmor or developed as an external adapter. The candidate will learn about Kubernetes controllers and various security topics.

  • Linux
  • Go
  • CLI
  • Kubernetes

Term 0 · 2021 Summer (Jun-Aug) · 3 projects

• Falco Adapter

  LFX Mentorship · Listed in the official cohort

  @JimBugwadiaSource IssueLFX portal

  This project will develop an adapter to run Falco in any Kubernetes cluster and periodically generate or update a Policy Report custom resource. The candidate will learn about Kubernetes controllers and various security topics.

  • Linux
  • Go
  • CLI
  • Kubernetes

• Image Scanner Adapter

  LFX Mentorship · Listed in the official cohort

  @JimBugwadiaSource IssueLFX portal

  This project will develop an adapter to run an image scanning tool (like Clair or Trivy) in any Kubernetes cluster and periodically generate or update a Policy Report custom resource. The candidate will learn about Kubernetes controllers, image security and management, and Kubernetes custom resources.

  • Linux
  • Go
  • CLI
  • Kubernetes

• Improvements to Cluster API provider for GCP (CAPG)

  LFX Mentorship · Proposed, acceptance not recorded

  @dimsSource Issue

  The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management. CAPG provides this Kubernetes-native declarative infrastructure for GCP. The project would start with some help wanted issues around quick start and documentation, this will help with understanding mentee with CAPI/CAPG concepts and current implementation. Then we will move on to some long pending improvements documented in the issues link below.

  • Go
  • unit and feature testing.

Term 0 · 2021 Spring (Mar-May) · 5 projects

• Add support for phases in "kubeadm upgrade apply"

  LFX Mentorship · Listed in the official cohort

  @neolit123Source IssueLFX portal

  Implement support for "phases" in the "upgrade apply" command of kubeadm. Phases act like subcommands and allow granular execution of functiodnality.

  • Go
  • CLI

• CIS Benchmarks Policy Report

  LFX Mentorship · Listed in the official cohort

  @JimBugwadiaSource IssueLFX portal

  Execute CIS benchmark checks and produce a Policy Report CRD.

  • Go
  • CLI
  • JSON

• Develop tools for evaluating dependency updates to Kubernetes

  LFX Mentorship · Listed in the official cohort

  @dimsSource IssueLFX portal

  Implement command line utilities that can help Kubernetes developers evaluate new dependencies by capturing statistics/metrics and estimating cost of adding something new. This will involve diving deep into golang dependency chains (transitive/shared dependencies) and coming up with new metrics to estimate how burdensome something new can be or how much we will save by getting rid of something so we can prioritize work and get more efficient from a developer workflow perspective.

  • Go
  • CLI

• Jobs-to-Be-Done study

  LFX Mentorship · Listed in the official cohort

  @morengabSource IssueLFX portal

  SIG Usability is conducting a Jobs-to-Be-Done study meant to identify the highest impact areas for improving Kubernetes UX. We are in the process of conducting user interviews and need some help going back through the transcribed recordings to annotate and pull out insights from the conversations. Overall, this is a great opportunity for someone who’s studied or engaged in UX/IA/Usability to get involved in open source.

  • User Research
  • UX
  • synthesis

• Kubernetes working group for CSI driver

  LFX Mentorship · Listed in the official cohort

  @andyzhangxSource IssueLFX portal

  SContainer Storage Interface (CSI) is a standard for exposing storage systems to containerized workloads on Kubernetes. The idea is to enhance a few CSI features(e.g. NFS, SMB) and also add e2e, sanity tests to cover those features, e.g. inline volume support, Windows support etc.

  • Go
  • Kubernetes

Term 0 · 2020 Q3–Q4 · 2 projects

• Create Application for Elections Authenticated by External Oauth

  CommunityBridge · Listed in the official cohort

  @jberkusSource IssueCommunityBridge

  Create a web-based voting application, with voting logic based on CIVS project, that allows use of external Oauth, such as Github, for voter authentication.

  • Go
  • Kubernetes

• Working group for CSI driver

  CommunityBridge · Listed in the official cohort

  @andyzhangxSource IssueCommunityBridge

  Container Storage Interface (CSI) is a standard for exposing storage systems to containerized workloads on Kubernetes. This project mainly focus on SMB CSI driver and NFS CSI driver: set up solid unit tests, test coverage data, e2e test pipeline first and then implement a few new CSI features, e.g. dynamc provisioning support, inline volume support, etc.

  • Go
  • Kubernetes
  • Python
  • JavaScript

Term 0 · 2020 Q2 · 3 projects

• Kubernetes Policy Working Group: Policy Violation CRD

  CommunityBridge · Proposed, acceptance not recorded

  @JimBugwadiaSource Issue

  The Kubernetes Policy Working Group is providing an overall architecture that describes both the current policy related implementations as well as future policy related proposals in Kubernetes. As part of this effort, the group is proposing a Kubernetes Custom Resources Definition (CRD) for policy violations and writing adapters to convert from various Kubernetes policy management tools such as OPA, Falco, Kyverno, kube-bench, etc. to report policy violations in a common format. The Policy Violation CRD can then be used by the Dashboard to show violations.

  • Go
  • Kubernetes

• Kubernetes working group for CSI driver

  CommunityBridge · Listed in the official cohort

  @andyzhangxSource IssueCommunityBridge

  Container Storage Interface (CSI) is a standard for exposing storage systems to containerized workloads on Kubernetes. The idea is to implement a few new CSI features and also e2e tests to cover those features, e.g. volume expansion, Windows support, inline volume support etc. Also, there are requirements to rewrite some flexvolume drivers(e.g. SMB CSI Driver) to CSI driver.

  • Go
  • Kubernetes

• Kubernetes working group for Multi-tenancy: Multi-tenancy benchmark project

  CommunityBridge · Listed in the official cohort

  @tashimiSource IssueCommunityBridge

  The Kubernetes Multi-Tenancy Working Group is chartered with exploring and defining multi-tenancy models for Kubernetes. An overview of working group activities can be found in this Kubernetes Multi-Tenancy Working Group . The Multitenancy Benchmarks effort focuses on measuring and validating the desired behaviors for multitenancy. Part of this effort is to automate behavioral and configuration checks on existing clusters, which will be the focus of this project. This automated test suit will help all Kubernetes users validate whether their clusters are setup correctly for multi-tenancy.

  • Go
  • Kubernetes

Term 0 · 2020 Q1 · 2 projects

• Integrating the Tenant Operator with the hierarchical namespace controller

  CommunityBridge · Listed in the official cohort

  Source

• Kubernetes working group for CSI driver

  CommunityBridge · Listed in the official cohort

  Source

Term 0 · 2019 Pilot · 2 projects

• CSI Driver for Azure Disk

  CommunityBridge · Listed in the official cohort

  Source

• Integrating kube-batch with pytorch-operator/mxnet-operator

  CommunityBridge · Listed in the official cohort

  Source