Groups
Groups
Sign in
Groups
Groups
kubernetes-sig-auth
Conversations
About
Send feedback
Help
kubernetes-sig-auth
Contact owners and managers
1–30 of 262
Mark all as read
Report group
0 selected
Peter Engelbert
Jun 1
Canceled: API Server Authentication to Webhooks
Jordan cannot make this time, will reschedule for another day.
unread,
Canceled: API Server Authentication to Webhooks
Jordan cannot make this time, will reschedule for another day.
Jun 1
Peter Engelbert
May 30
API Server Authentication to Webhooks
https://zoom.us/j/264572674?pwd=NHVXTm14VktMRi8zRmU0aUt1NE9uQT09
unread,
API Server Authentication to Webhooks
https://zoom.us/j/264572674?pwd=NHVXTm14VktMRi8zRmU0aUt1NE9uQT09
May 30
Mo Khan
Mar 18
Re: [EXTERNAL] [sig-node] [EXCEPTION REQUEST] DRA: Resource Claim Status with possible standardized network interface data
+1 from me, this is an important security gap to resolve before GA. From: Antonio Ojea <antonio.
unread,
Re: [EXTERNAL] [sig-node] [EXCEPTION REQUEST] DRA: Resource Claim Status with possible standardized network interface data
+1 from me, this is an important security gap to resolve before GA. From: Antonio Ojea <antonio.
Mar 18
Peter Engelbert
12/3/25
Possible removal of the apiserver_envelope_encryption_key_id_hash_total metric
Greetings SIG-Auth folks, During today's biweekly meeting, we discussed the possible deprecation
unread,
Possible removal of the apiserver_envelope_encryption_key_id_hash_total metric
Greetings SIG-Auth folks, During today's biweekly meeting, we discussed the possible deprecation
12/3/25
Peter Engelbert
, …
Jordan Liggitt
5
11/7/25
Release Exception for KEP-3104
I think the exception request is reasonable: impactful functionality to make available off-by-default
unread,
Release Exception for KEP-3104
I think the exception request is reasonable: impactful functionality to make available off-by-default
11/7/25
Micah Hausler
,
Davanum Srinivas
2
8/28/25
SIG-Auth: Conditional Authorization Technical Deep Dive
Nice! Also Micah, can we get this added to the sig-auth calendar? On Thu, Aug 28, 2025 at 3:45 PM
unread,
SIG-Auth: Conditional Authorization Technical Deep Dive
Nice! Also Micah, can we get this added to the sig-auth calendar? On Thu, Aug 28, 2025 at 3:45 PM
8/28/25
Taahir Ahmed
, …
Sergey Kanzhelev
3
7/29/25
Enhancements exception request for KEP-4317 PR #133242
approve from sig node. Making the feature fully functionalu is important for alpha validation and the
unread,
Enhancements exception request for KEP-4317 PR #133242
approve from sig node. Making the feature fully functionalu is important for alpha validation and the
7/29/25
Miguel Martinho
3/27/25
RBAC++
Hello, I recently watched the presentation regarding RBAC++ (https://www.youtube.com/watch?v=pIrJRPv-
unread,
RBAC++
Hello, I recently watched the presentation regarding RBAC++ (https://www.youtube.com/watch?v=pIrJRPv-
3/27/25
Mike Danese
, …
Monis Khan
5
3/20/25
SIG Auth Leadership Changes
We are past the lazy consensus period so I will start making the PRs to make these changes official.
unread,
SIG Auth Leadership Changes
We are past the lazy consensus period so I will start making the PRs to make these changes official.
3/20/25
Jian Qiu
3/10/25
acting-as rather than impersonate
Hi Sig-Auth, I would like to discuss the possibility of implementing acting-as which was described in
unread,
acting-as rather than impersonate
Hi Sig-Auth, I would like to discuss the possibility of implementing acting-as which was described in
3/10/25
xinli li
,
Monis Khan
2
2/20/25
how to raise issue on sig-auth/4633-anonymous-auth-configurable-endpoints
I have moved the issue to https://github.com/kubernetes/kubernetes/issues/130318 On Thursday,
unread,
how to raise issue on sig-auth/4633-anonymous-auth-configurable-endpoints
I have moved the issue to https://github.com/kubernetes/kubernetes/issues/130318 On Thursday,
2/20/25
Micah Hausler
10/30/24
Cedar for Kubernetes
Hey SIG Auth friends, I mentioned in last week's SIG Auth that I'd been working on similar
unread,
Cedar for Kubernetes
Hey SIG Auth friends, I mentioned in last week's SIG Auth that I'd been working on similar
10/30/24
Harshal Neelkamal
, …
Davanum Srinivas
5
10/15/24
Requesting approval for a new staging repo (externaljwt)
Sorry, I missed the "staging" part in the subject line. makes sense. kubernetes/externaljwt
unread,
Requesting approval for a new staging repo (externaljwt)
Sorry, I missed the "staging" part in the subject line. makes sense. kubernetes/externaljwt
10/15/24
Taahir Ahmed
7/17/24
Standardizing credential IDs for X.509 client certificates
Hi SIG Auth / SIG Security, Today, Kubernetes audit logs contain "credential ID" that
unread,
Standardizing credential IDs for X.509 client certificates
Hi SIG Auth / SIG Security, Today, Kubernetes audit logs contain "credential ID" that
7/17/24
Antonio Ojea
, …
Michael McCune
8
7/9/24
Re: [k8s-sig-net] Kubelet Node Addresses and External Cloud Providers [Revisited][Important]
On Mon, Jul 8, 2024 at 10:25 AM Dan Winship <danwi...@redhat.com> wrote: On 7/8/24 05:41,
unread,
Re: [k8s-sig-net] Kubelet Node Addresses and External Cloud Providers [Revisited][Important]
On Mon, Jul 8, 2024 at 10:25 AM Dan Winship <danwi...@redhat.com> wrote: On 7/8/24 05:41,
7/9/24
Rob Scott
2/21/24
Request for new repo: sigs.k8s.io/referencegrant-poc
Hey Everyone, As we've been working to upstream ReferenceGrant with a new set of SIG-Auth APIs,
unread,
Request for new repo: sigs.k8s.io/referencegrant-poc
Hey Everyone, As we've been working to upstream ReferenceGrant with a new set of SIG-Auth APIs,
2/21/24
Taahir Ahmed
,
Priyanka Saggu
3
11/1/23
Release exception for KEP-3257
Hi all, Following discussion in Slack, the release team is APPROVING this exception request. Your
unread,
Release exception for KEP-3257
Hi all, Following discussion in Slack, the release team is APPROVING this exception request. Your
11/1/23
Mike Danese
, …
Jordan Liggitt
10
10/30/23
SIG Auth Leadership updates
Following up, opened https://github.com/kubernetes/community/pull/7590 to make the switch. On Sat,
unread,
SIG Auth Leadership updates
Following up, opened https://github.com/kubernetes/community/pull/7590 to make the switch. On Sat,
10/30/23
Mo Khan
,
Grace Nguyen
2
7/18/23
Extension request: KMS v2
Hi all, Following Slack discussion, his exception request has been APPROVED to be due on Monday, July
unread,
Extension request: KMS v2
Hi all, Following Slack discussion, his exception request has been APPROVED to be due on Monday, July
7/18/23
Jimmy Shen
,
Jordan Liggitt
3
7/17/23
Question about version in PSA labels
Cool, that make a lot sense! Thank you so much for the quick response! On Monday, July 17, 2023 at 2:
unread,
Question about version in PSA labels
Cool, that make a lot sense! Thank you so much for the quick response! On Monday, July 17, 2023 at 2:
7/17/23
kubernetes-sig-auth
7/5/23
CANCELED: SIG-Auth 2023-07-05
Due to an empty agenda, we have canceled the sig-auth meeting for this week (July 5, 2023).
unread,
CANCELED: SIG-Auth 2023-07-05
Due to an empty agenda, we have canceled the sig-auth meeting for this week (July 5, 2023).
7/5/23
Taahir Ahmed
, …
Mo Khan
4
3/16/23
Re: Exception request for ClusterTrustBundles (Alpha, feature-gated)
I am in favor as well. From: 'Jordan Liggitt' via kubernetes-sig-auth <kubernetes-sig-auth
unread,
Re: Exception request for ClusterTrustBundles (Alpha, feature-gated)
I am in favor as well. From: 'Jordan Liggitt' via kubernetes-sig-auth <kubernetes-sig-auth
3/16/23
Rob Scott
, …
Nick Young
8
1/23/23
ReferenceGrant KEP
Thanks everyone for the great feedback! Nick and I have started a KEP PR here: https://github.com/
unread,
ReferenceGrant KEP
Thanks everyone for the great feedback! Nick and I have started a KEP PR here: https://github.com/
1/23/23
Igor Velichkovich
,
Mo Khan
3
12/7/22
KEP-740 External Signing of Service Account Tokens
My recommendation would be to create a new tracking issue and a new KEP using the latest template in
unread,
KEP-740 External Signing of Service Account Tokens
My recommendation would be to create a new tracking issue and a new KEP using the latest template in
12/7/22
Igor Velichkovich (via Google Docs)
11/10/22
Document shared with you: "External Signing of Service Account Tokens"
Igor Velichkovich shared a document Igor Velichkovich (igor.veli...@gmail.com) has invited you
unread,
Document shared with you: "External Signing of Service Account Tokens"
Igor Velichkovich shared a document Igor Velichkovich (igor.veli...@gmail.com) has invited you
11/10/22
kubernetes-sig-auth
10/12/22
CANCELED: SIG-Auth 2022-10-12 and 2022-10-26
Due to an empty agenda, we have canceled the sig-auth meeting for this week (Oct 12, 2022). Due to
unread,
CANCELED: SIG-Auth 2022-10-12 and 2022-10-26
Due to an empty agenda, we have canceled the sig-auth meeting for this week (Oct 12, 2022). Due to
10/12/22
Daniel Smith
,
Abdullah Gharaibeh
3
9/28/22
subresources -> fine grained permissions? (Unblocking keps 2840 & 3286)
This has been through both SIGs now (thanks for discussion) and the feedback I got is that it'd
unread,
subresources -> fine grained permissions? (Unblocking keps 2840 & 3286)
This has been through both SIGs now (thanks for discussion) and the feedback I got is that it'd
9/28/22
Rob Scott
, …
Tim Hockin
3
9/28/22
ReferenceGrant on sig-auth agenda tomorrow
I will try to make the 2nd half of meeting On Tue, Sep 27, 2022 at 8:31 PM Rob Scott <robertjscott
unread,
ReferenceGrant on sig-auth agenda tomorrow
I will try to make the 2nd half of meeting On Tue, Sep 27, 2022 at 8:31 PM Rob Scott <robertjscott
9/28/22
Taahir Ahmed
6/8/22
Re: Review for aspects of KEP-3257 (Trust Anchor Sets)
+kubernete...@googlegroups.com On Wed, Jun 8, 2022 at 12:46 PM Taahir Ahmed <taahm@google.
unread,
Re: Review for aspects of KEP-3257 (Trust Anchor Sets)
+kubernete...@googlegroups.com On Wed, Jun 8, 2022 at 12:46 PM Taahir Ahmed <taahm@google.
6/8/22
Sam Stoelinga
6/1/22
Request for +1/-1 for pspmigrator repo under k8s-sigs org
Hi sig-auth folks, Could you please review the request to create the pspmigrator repo under the k8s-
unread,
Request for +1/-1 for pspmigrator repo under k8s-sigs org
Hi sig-auth folks, Could you please review the request to create the pspmigrator repo under the k8s-
6/1/22