Add the ability for KRM functions to be run in pods/jobs.

[coillteoir]

Eschewed features

• This issue is not requesting templating, unstuctured edits, build-time side-effects from args or env vars, or any other eschewed feature.

What would you like to have added?

KRM functions can be run in the shell, or as containers when using Kustomize. To grant users more flexibility, could we look into running KRM functions in Kubernetes as a Pod.

Why is this needed?

It allows us to schedule kustomize workloads more effectively, when running in a kubernetes cluster. It also reduces the attack surface since kustomize does not need to mount the cgroups of the node.

Can you accomplish the motivating task without this feature, and if so, how?

Yes, by mounting the cgroups.

What other solutions have you considered?

N/A

Anything else we should know?

No response

Feature ownership

• I am interested in contributing this feature myself! 🎉

[isumitsolanki]

/assign

[koba1t]

/triage duplicated

[k8s-ci-robot]

@koba1t: The label(s) triage/duplicated cannot be applied, because the repository doesn't have them.

Details

In response to this:

/triage duplicated

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[koba1t]

/triage duplicate