Exception Request for KEP-3488

[Cici Huang]

Hello,

I would like to make an exception for release 1.28.

• Enhancement name: KEP 3488 - CEL for Admission Control
• Enhancement status (alpha/beta/stable): alpha promoting to beta
• SIG: sig-api machinery
• k/enhancements repo issue #: https://github.com/kubernetes/enhancements/issues/3488 
• PR #’s: API Change on adding support for namespacedParam (https://github.com/kubernetes/kubernetes/pull/119215), Improving type checking (https://github.com/kubernetes/kubernetes/pull/119109), and API graduate to beta (https://github.com/kubernetes/kubernetes/pull/118644)
• Additional time needed (in days): 4 day
• Reason this enhancement is critical for this milestone: The feature is hugely expected by multiple cloud providers which will address the largest concern on control plane failure. It will be great to get all API changes in for this release so the API could be tested and soaked longer.
• Risks from adding code late: (to k8s stability, testing, etc.) Very little risk as it is currently an alpha feature and have both API group and feature gate turned off. Even if we promote it to Beta, the API and feature gate will still be turned off by default. We have great test coverage across unit/integration/e2e tests.
• Risks from cutting enhancement: (partial implementation, critical customer usecase, etc.) This will provide an alternative to ValidatingWebhook which will address the big concern of control plane failure. See KEP 3488 for more motivation.

All the changes are ready and mainly blocked by API review bandwith earlier. Appreciate the review!

Best,

Cici

[Joe Betz]

I support this (as api-machinery TL) given that remaining PRs have been under review for an extended period of time and would merge in a healthy, well reviewed state if this exception is approved.

--
You received this message because you are subscribed to the Google Groups "kubernetes-sig-release" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-re...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-release/CAKNXMx5B9tXZAsT9%2Bejs1m3z4fnMOK3wYz%2Bt3xLG9AGx7HCTzQ%40mail.gmail.com.