Skip to content

Commit f059494

Browse files
committed
address comments
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
1 parent 4d27a7d commit f059494

File tree

1 file changed

+32
-29
lines changed

1 file changed

+32
-29
lines changed

keps/sig-auth/5018-dra-adminaccess/README.md

Lines changed: 32 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -44,13 +44,13 @@
4444
Items marked with (R) are required _prior to targeting to a milestone /
4545
release_.
4646

47-
- [ ] (R) Enhancement issue in release milestone, which links to KEP dir in
47+
- [x] (R) Enhancement issue in release milestone, which links to KEP dir in
4848
[kubernetes/enhancements] (not the initial KEP PR)
49-
- [ ] (R) KEP approvers have approved the KEP status as `implementable`
49+
- [x] (R) KEP approvers have approved the KEP status as `implementable`
5050
- [x] (R) Design details are appropriately documented
51-
- [ ] (R) Test plan is in place, giving consideration to SIG Architecture and
51+
- [x] (R) Test plan is in place, giving consideration to SIG Architecture and
5252
SIG Testing input (including test refactors)
53-
- [ ] e2e Tests for all Beta API Operations (endpoints)
53+
- [x] e2e Tests for all Beta API Operations (endpoints)
5454
- [ ] (R) Ensure GA e2e tests meet requirements for
5555
[Conformance Tests](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/conformance-tests.md)
5656
- [ ] (R) Minimum Two Week Window for GA e2e tests to prove flake free
@@ -59,12 +59,12 @@ release_.
5959
[all GA Endpoints](https://github.com/kubernetes/community/pull/1806)
6060
must be hit by
6161
[Conformance Tests](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/conformance-tests.md)
62-
- [ ] (R) Production readiness review completed
63-
- [ ] (R) Production readiness review approved
62+
- [x] (R) Production readiness review completed
63+
- [x] (R) Production readiness review approved
6464
- [x] "Implementation History" section is up-to-date for milestone
65-
- [ ] User-facing documentation has been created in [kubernetes/website], for
65+
- [x] User-facing documentation has been created in [kubernetes/website], for
6666
publication to [kubernetes.io]
67-
- [ ] Supporting documentation—e.g., additional design documents, links to
67+
- [x] Supporting documentation—e.g., additional design documents, links to
6868
mailing list discussions/SIG meetings, relevant PRs/issues, release notes
6969

7070
<!--
@@ -182,7 +182,7 @@ objects as privileged. This feature includes:
182182
resource.kubernetes.io/admin-access: "true"
183183
```
184184
185-
Note: This label has been updated from `resource.k8s.io/admin-access` while the feature was in alpha in v1.33.
185+
Note: This label has been updated from `resource.k8s.io/admin-access` while the feature was in alpha.
186186

187187
Assumptions:
188188

@@ -405,19 +405,15 @@ The scheduler plugin and resource claim controller are covered by the workloads
405405
in
406406
https://github.com/kubernetes/kubernetes/blob/master/test/integration/scheduler_perf/dra/performance-config.yaml
407407

408-
Those tests run in:
408+
Additional test cases have been added to `test/integration/scheduler_perf` to
409+
ensure `ResourceClaim` or `ResourceClaimTemplate` with `adminAccess: true`
410+
requests are only authorized if their namespace has the
411+
`resource.kubernetes.io/admin-access: "true"` label as described in this KEP.
409412
410-
- [pre-submit](https://testgrid.k8s.io/presubmits-kubernetes-blocking#pull-kubernetes-integration)
411-
and
412-
[periodic](https://testgrid.k8s.io/sig-release-master-blocking#integration-master)
413-
integration testing under
414-
`k8s.io/kubernetes/test/integration/scheduler_perf.scheduler_perf` and
415-
`k8s.io/kubernetes/test/integration/scheduler_perf.dra.dra` and the
416-
`DRAAdminAccess` feature gate is already enabled.
417-
- Additional test cases will be added to `test/integration/scheduler_perf` to
418-
ensure `ResourceClaim` or `ResourceClaimTemplate` with `adminAccess: true`
419-
requests are only authorized if their namespace has the
420-
`resource.kubernetes.io/admin-access: "true"` label as described in this KEP.
413+
These tests run as part of the following with the `DRAAdminAccess` feature gate enabled.
414+
415+
- `k8s.io/kubernetes/test/integration/scheduler_perf.scheduler_perf`: [pre-submit](https://testgrid.k8s.io/presubmits-kubernetes-blocking#pull-kubernetes-integration&include-filter-by-regex=scheduler_perf.scheduler_perf), [periodic](https://testgrid.k8s.io/sig-release-master-blocking#integration-master&include-filter-by-regex=scheduler_perf.scheduler_perf), [triage search](https://storage.googleapis.com/k8s-triage/index.html?test=scheduler_perf)
416+
- `k8s.io/kubernetes/test/integration/scheduler_perf.dra.dra`: [pre-submit](https://testgrid.k8s.io/presubmits-kubernetes-blocking#pull-kubernetes-integration&include-filter-by-regex=scheduler_perf.dra.dra),[periodic](https://testgrid.k8s.io/sig-release-master-blocking#integration-master&include-filter-by-regex=scheduler_perf.dra.dra), [triage search](https://storage.googleapis.com/k8s-triage/index.html?test=scheduler_perf)
421417

422418
##### e2e tests
423419

@@ -451,11 +447,8 @@ ResourceClaimTemplate and ResourceClaim for admin access
451447
[Feature:DRAAdminAccess] [FeatureGate:DRAAdminAccess] [Alpha]
452448
[FeatureGate:DynamicResourceAllocation] [Beta]
453449
454-
- AdminAccess related tests in
455-
https://github.com/kubernetes/kubernetes/blob/69ab91a5c59617872c9f48737c64409a9dec2957/test/e2e/dra/dra.go#L976
456-
and
457-
https://github.com/kubernetes/kubernetes/blob/69ab91a5c59617872c9f48737c64409a9dec2957/test/e2e/dra/dra.go#L1095
458-
will be updated.
450+
- `cluster validate ResourceClaimTemplate and ResourceClaim for admin access`, [SIG Node](https://testgrid.k8s.io/sig-node-dynamic-resource-allocation#pull-kubernetes-kind-dra-all), [triage search](https://storage.googleapis.com/k8s-triage/index.html?pr=1&test=admin%20access)
451+
- `cluster DaemonSet with admin access`, [SIG Node](https://testgrid.k8s.io/sig-node-dynamic-resource-allocation#pull-kubernetes-kind-dra-all), [triage search](https://storage.googleapis.com/k8s-triage/index.html?pr=1&test=admin%20access)
459452

460453
### Graduation Criteria
461454

@@ -466,13 +459,23 @@ ResourceClaimTemplate and ResourceClaim for admin access
466459

467460
#### Beta
468461

469-
- Gather feedback
462+
- Gather feedback from developers and surveys via implementations in the kubernetes-sigs/dra-example-driver: https://github.com/kubernetes-sigs/dra-example-driver/issues/97 and potentially other drivers
463+
- Complete feature AdminAccess
470464
- Additional tests are in Testgrid and linked in KEP
471-
- Implementations in the kubernetes-sigs/dra-example-driver: https://github.com/kubernetes-sigs/dra-example-driver/issues/97
465+
- More rigorous forms of testing—e.g., downgrade tests and scalability tests
466+
- All functionality completed
467+
- All security enforcement completed
468+
- All monitoring requirements completed
469+
- All testing requirements completed
470+
- All known pre-release issues and gaps resolved
471+
**Note:** Beta criteria must include all functional, security, monitoring, and testing requirements along with resolving all issues and gaps identified
472472

473-
#### GA
474473

474+
#### GA
475+
- 1 example of real-world usage
475476
- Allowing time for feedback
477+
- All issues and gaps identified as feedback during beta are resolved
478+
**Note:** GA criteria must not include any functional, security, monitoring, or testing requirements. Those must be beta requirements.
476479

477480
### Upgrade / Downgrade Strategy
478481

0 commit comments

Comments
 (0)