Skip to content

Issues: kubernetes/enhancements

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
28 Open 275 Closed
28 Open 275 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Harden Kubelet Serving Certificate Validation in Kube-API server sig/auth Categorizes an issue or PR as relevant to SIG Auth.
#4872 opened Sep 24, 2024 by g-gaston
4 tasks
2
update KEP 740 cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory ok-to-test Indicates a non-member PR verified by an org member that is safe to test. sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.
#4852 opened Sep 13, 2024 by HarshalNeelkamal Loading…
74
KEP-267: kubelet server certificate bootstrap and rotation cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
#4848 opened Sep 12, 2024 by aojea Loading…
@liggitt @deads2k
7
KEP-4412: Projected Service Account Tokens for Kubelet Image Credential Providers cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
#4846 opened Sep 12, 2024 by aramase Loading…
26
KEP-3331: update kep latest milestone to v1.32 cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
#4844 opened Sep 11, 2024 by aramase Loading…
@enj
1
KEP-3257: cluster trust bundles: add a new in-tree signer and its CTB cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
#4791 opened Aug 16, 2024 by stlaz Loading… v1.32
24
KEP-4742: Expose Node Labels via Downward API cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory ok-to-test Indicates a non-member PR verified by an org member that is safe to test. sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/node Categorizes an issue or PR as relevant to SIG Node. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.
#4747 opened Jul 1, 2024 by docandrew Loading…
@nilekhc @thockin
63
Only allow anonymous auth for configured endpoints. lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/beta Denotes an issue tracking an enhancement targeted for Beta status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team
#4633 opened May 13, 2024 by vinayakankugoyal
13 of 16 tasks
v1.32
@jpbetz @liggitt @vinayakankugoyal
22
Authorize with Field and Label Selectors lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/beta Denotes an issue tracking an enhancement targeted for Beta status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team
#4601 opened Apr 26, 2024 by deads2k
4 of 8 tasks
v1.32
19
KEP 4447: Promote PolicyReport API to Kubernetes SIG API cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. wg/policy Categorizes an issue or PR as relevant to WG Policy.
#4448 opened Jan 27, 2024 by anusha94 Loading…
@ritazh
26
Promote PolicyReport API to a Kubernetes SIG API sig/auth Categorizes an issue or PR as relevant to SIG Auth. wg/policy Categorizes an issue or PR as relevant to WG Policy.
#4447 opened Jan 27, 2024 by anusha94
4 tasks
@JimBugwadia @anusha94
10
Projected service account tokens for Kubelet image credential providers lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status
#4412 opened Jan 17, 2024 by aramase
2 of 4 tasks
v1.32
@enj @aramase
13
Changing ReferenceGrant KEP to broader Referential Authorization KEP cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. triage/accepted Indicates an issue or PR is ready to be actively worked on.
#4387 opened Jan 6, 2024 by robscott Loading…
@enj
158
KEP-4317: PodIdentity certificates, PodCertificate volumes, and in-cluster kube-apiserver client certificates api-review Categorizes an issue or PR as actively needing an API review. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
#4318 opened Oct 30, 2023 by ahmedtd Loading… v1.32
188
Pod Certificates lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth.
#4317 opened Oct 29, 2023 by ahmedtd
4 tasks
v1.32
@ahmedtd
13
add ProcMount option sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/node Categorizes an issue or PR as relevant to SIG Node. stage/beta Denotes an issue tracking an enhancement targeted for Beta status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team triage/accepted Indicates an issue or PR is ready to be actively worked on.
#4265 opened Oct 2, 2023 by haircommander
5 of 8 tasks
v1.31
@sohankunkerkar
42
Bound service account token improvements lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/stable Denotes an issue tracking an enhancement targeted for Stable/GA status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team
#4193 opened Sep 7, 2023 by enj
17 of 21 tasks
v1.32
@munnerz @liggitt @enj
53
Handling undecryptable resources sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. sig/auth Categorizes an issue or PR as relevant to SIG Auth.
#3926 opened Mar 27, 2023 by stlaz
1 of 4 tasks
v1.32
@stlaz
18
KEP: Referential Authorization sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/network Categorizes an issue or PR as relevant to SIG Network. sig/storage Categorizes an issue or PR as relevant to SIG Storage.
#3766 opened Jan 20, 2023 by robscott
8 tasks
@robscott @deads2k @youngnick
21
CEL for Admission Control sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/beta Denotes an issue tracking an enhancement targeted for Beta status
#3488 opened Sep 1, 2022 by jpbetz
16 tasks done
v1.30
@jpbetz @cici37
97
Structured Authentication Config lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/beta Denotes an issue tracking an enhancement targeted for Beta status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team
#3331 opened Jun 2, 2022 by nabokihms
36 tasks done
v1.32
@enj @aramase @nabokihms
51
ClusterTrustBundles (previously Trust Anchor Sets) lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/beta Denotes an issue tracking an enhancement targeted for Beta status
#3257 opened Mar 30, 2022 by ahmedtd
5 of 12 tasks
v1.32
@liggitt @ahmedtd
@mikedanese @enj
69
Structured Authorization Configuration lead-opted-in Denotes that an issue has been opted in to a release lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/stable Denotes an issue tracking an enhancement targeted for Stable/GA status
#3221 opened Feb 11, 2022 by palnabarun
25 of 29 tasks
v1.32
@liggitt @ritazh
@deads2k @palnabarun
59
Fine grained Kubelet API authorization kind/feature Categorizes issue or PR as related to a new feature. lead-opted-in Denotes that an issue has been opted in to a release lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/important-longterm Important over the long term, but may not be staffed and/or may need multiple releases to complete. sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/node Categorizes an issue or PR as relevant to SIG Node. stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status
#2862 opened Aug 16, 2021 by pacoxu
1 of 5 tasks
v1.32
@vinayakankugoyal
20
Ensure secret pulled images lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/node Categorizes an issue or PR as relevant to SIG Node. stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team
#2535 opened Feb 22, 2021 by adisky
4 of 11 tasks
v1.32
1
@pacoxu @haircommander @mikebrow
120
ProTip! no:milestone will show everything without a milestone.