Deletion Protection

[Daniel Smith]

Hi SIGs Arch, CLI, and API Machinery--

Please take a look at this proposed KEP: https://github.com/kubernetes/enhancements/pull/2840/files

We're looking for feedback on:

1) is the set of use cases complete enough?

2) is the mechanism acceptable?

3) (assuming yes) Do we need to launch with a "liens" subresource (to facilitate separation of permissions) or can that come in a follow-up release?

Thank you!

[David Eads]

Regarding number 3.

The power to create and remove liens does not imply the power to change the intent of a resource (spec) or the power to change the current state of reporting (status).  We just had another parallel question about this in apimachinery slack this week for finalizers.  Given our previous track record at "add a subresource later" (see finalizers again), I think it makes more sense to start the feature with that in mind.  It will also make it possible to write controllers that leverage the feature without having to rewrite said controllers later.

--
You received this message because you are subscribed to the Google Groups "kubernetes-sig-architecture" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-arch...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-architecture/CAB_J3batJY5tG5AXpdobXgVTTQfKgkzGJ0sTaMhFzLDVaM%2BYZQ%40mail.gmail.com.