Exception request: Configurable securityContext in Ephemeral Containers

[Lee Verberne]

• Enhancement name: Configurable securityContext in Ephemeral Containers

• Enhancement status: alpha

• SIG: auth, node

• k/enhancements repo issue: http://kep.k8s.io/277

• PR #’s: https://pr.k8s.io/99023

• Additional time needed (in days): 0 (PR is ready to merge)

• Reason this enhancement is critical for this milestone: Beta for Ephemeral Containers is planned for 1.23. Merging #99023 in 1.22 allows admission control plugin authors an extra release to plan for the API change while it's still disabled by default.

• Risks from adding code late: low risk - ephemeral containers are hidden by a feature flag, disabled by default and have test coverage. The important part of this change is in the API documentation.

• Risks from cutting enhancement: delaying until 1.23 gives users less time with the new API before it becomes enabled by default

[Monis Khan]

+1 from me

This is a small change with test coverage for alpha functionality that is disabled by default.

--
You received this message because you are subscribed to the Google Groups "kubernetes-sig-auth" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-auth/CAKo1Tahtz%3DONRKwZyyVS%3Dv1kaE7MYTYEtjXEk1BHsBZy6PF%2Big%40mail.gmail.com.

[Savitha Raghunathan]

Hi Lee,

Thanks for creating this exception request. Since we have the required approval and the k/k PR has approved/lgtm labels before the Code Freeze deadline, we are APPROVING this request. Please make sure to update the KEP to reflect the latest milestone as '1.22' and merge it by July 12th, 5 PM Pacific time. If you have any questions, please feel free to reach out to us in the #sig-release slack channel.

Have a great day!

Regards,

Savitha,

1.22 Release Team Lead

On Fri, Jul 9, 2021 at 12:18 PM 'Dawn Chen' via kubernetes-sig-release <kubernetes-...@googlegroups.com> wrote:

+1 from me. 

This was discussed at SIG Node long time ago, and the plan and changes were approved. 

You received this message because you are subscribed to the Google Groups "kubernetes-sig-release" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-re...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-release/a1e5ac8e-cca1-406e-a97c-d4dfb634f3c9n%40googlegroups.com.

[Lee Verberne]

Hi Savitha,

Thanks for the quick response and approval! :) I've opened #2816 with KEP milestone updates.

Have a great weekend,

You received this message because you are subscribed to the Google Groups "kubernetes-sig-node" group.

To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-node/CADTKTkQZeoQ3%2B5LD_1UX_1dkreROSzHxf5gzNePPqZM0FZSVbA%40mail.gmail.com.