Enhancement name: Exec Session Identity Propagation
Enhancement status: Alpha
SIG: SIG-Node
k/enhancements repo issue #: https://github.com/kubernetes/enhancements/issues/6035PR #'s: https://github.com/kubernetes/enhancements/pull/6036Additional time needed: 3 days (AoE Time) as we are waiting for reviews and there are no action items pending from our end.
Reason this enhancement is critical for this milestone: Delay caused by consolidating two KEPs into one. Requires CRI protobuf changes, so runtime implementers need adequate runway. Deferring slips the feature a full release cycle.
Risks from adding code late: Low. Alpha, off by default. CRI proto change is purely additive; runtimes that have not implemented it yet silently ignore it.
Risks from cutting enhancement: Exec session auditing gap stays open. No upstream mechanism to correlate who ran what inside an exec session, exploitable by privileged insiders. Deferring also delays runtime implementers from picking up the CRI changes.
Thanks,
Dhanush