Dan Winship

maybe-related work: https://github.com/kubernetes/enhancements/pull/3064

> ### GC > > Pass a plugin the entire list of known attachments. Any other attachments can be cleaned up. Maybe this should be more "SYNC", with the expectation...

> In general, I think it's more common to want a different CNI for each app that's installed rather than to share. Yes, exactly this. The CNI spec imagines a...

We're encountering some problem in OpenShift where the host-local IPAM plugin is slowly leaking addresses (like, a few per month on the multi-thousand-user OpenShift Online free starter tier). Clearly this...

The distinction isn't quite a "diff". Eg, if 1 rule in a chain changes, we have to send the whole chain, not just the single changed rule. We could compare...

/retest-required

> Do you think I am being over-paranoid? No. I can do a KEP. I agree the PRR stuff is good to think about even if the more "feature"-y bits...

If we're going to feature gate this, then 1. could we possibly still get this into 1.25 as disabled-by-default? All of the heavy lifting was done by PRs that already...

See https://github.com/kubernetes/enhancements/pull/3454

latest push shows what it would look like with a feature gate protecting both this and https://github.com/kubernetes/kubernetes/pull/110334. I can revert some or all of that.