kubernetes / enhancements

Enhancements tracking repo for Kubernetes
Apache License 2.0
3.4k stars 1.46k forks source link

Fine grained Kubelet API authorization #2862

Open pacoxu opened 3 years ago

pacoxu commented 3 years ago

Enhancement Description

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

pacoxu commented 3 years ago

/sig auth /sig node /kind feature /area kubelet-api /priority important-longterm

See also:

k8s-ci-robot commented 3 years ago

@pacoxu: The label(s) area/kubelet-api cannot be applied, because the repository doesn't have them.

In response to [this](https://github.com/kubernetes/enhancements/issues/2862#issuecomment-899353827): >/sig auth >/sig node >/kind feature >/area kubelet-api >/priority important-longterm > >See also: >- https://github.com/kubernetes/kubernetes/issues/12968 >- https://github.com/kubernetes/kubernetes/issues/28138 >- https://github.com/kubernetes/kubernetes/issues/2098 Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
pacoxu commented 3 years ago

/assign I will start to work on the KEP.

k8s-triage-robot commented 2 years ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

enj commented 2 years ago

/remove-lifecycle stale

k8s-triage-robot commented 2 years ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

pacoxu commented 2 years ago

/remove-lifecycle stale still have no enough time to work on this.

k8s-triage-robot commented 2 years ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

tallclair commented 2 years ago

/lifecycle frozen

vinayakankugoyal commented 2 months ago

/assign @vinayakankugoyal

vinayakankugoyal commented 2 months ago

@tallclair - I started a KEP for this one. Would you be able to take a look? https://github.com/kubernetes/enhancements/pull/4760

sftim commented 2 months ago

In a sense this is the KEP; #4760 is a PR to add the details.

vinayakankugoyal commented 2 months ago

Ok thanks 🙏

SergeyKanzhelev commented 5 days ago

/milestone v1.32 /label lead-opted-in

SergeyKanzhelev commented 5 days ago

/stage alpha

dipesh-rawat commented 5 days ago

Hello @vinayakankugoyal @pacoxu 👋, v1.32 Enhancements team here.

Just checking in as we approach enhancements freeze on 02:00 UTC Friday 11th October 2024 / 19:00 PDT Thursday 10th October 2024.

This enhancement is targeting for stage alpha for v1.32 (correct me, if otherwise)

Here's where this enhancement currently stands:

For this KEP, we would need to update the following:

The status of this enhancement is marked as at risk for enhancement freeze. Please keep the issue description up-to-date with appropriate stages as well. Thank you!

If you anticipate missing enhancements freeze, you can file an exception request in advance. Thank you!

vinayakankugoyal commented 1 day ago

@dipesh-rawat

Here's where this enhancement currently stands:

Please let me know if I missed something. Thanks!

dipesh-rawat commented 1 day ago

Hello @vinayakankugoyal 👋, v1.32 Enhancements team here,

Now that PR https://github.com/kubernetes/enhancements/pull/4760 has been merged, all the KEP requirements are in place and merged into k/enhancements.

Before the enhancement freeze, it would be appreciated if following nits could be addressed:

Aside from the minor nit mentioned above, this enhancement is all good for the upcoming enhancements freeze. 🚀

The status of this enhancement is now marked as tracked for enhancement freeze. Please keep the issue description up-to-date with appropriate stages as well. Thank you!

vinayakankugoyal commented 1 day ago

@dipesh-rawat I don't seem to have permissions to edit the issue description. @pacoxu could you do it?

pacoxu commented 1 day ago

@dipesh-rawat I don't seem to have permissions to edit the issue description. @pacoxu could you do it?

Updated.