Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only allow anonymous auth for configured endpoints. #4633

Open
6 tasks
vinayakankugoyal opened this issue May 13, 2024 · 7 comments
Open
6 tasks

Only allow anonymous auth for configured endpoints. #4633

vinayakankugoyal opened this issue May 13, 2024 · 7 comments
Assignees
Labels
lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status
Milestone

Comments

@vinayakankugoyal
Copy link
Contributor

vinayakankugoyal commented May 13, 2024

Enhancement Description

Allow users to specify which endpoints are allowed for anonymous requests. This allows the admin to only allow access to health endpoints like healthz, livez and readyz anonymously while making sure other cluster endpoints or resources cannot be access anonymously even if a user misconfigures RBAC.

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

@k8s-ci-robot k8s-ci-robot added the needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. label May 13, 2024
@vinayakankugoyal vinayakankugoyal changed the title Only allow anonymous auth for healthz. Only allow anonymous auth for health endpoints. May 13, 2024
@vinayakankugoyal
Copy link
Contributor Author

/sig auth

@k8s-ci-robot k8s-ci-robot added sig/auth Categorizes an issue or PR as relevant to SIG Auth. and removed needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. labels May 13, 2024
@vinayakankugoyal
Copy link
Contributor Author

/cc @liggitt @destijl

@vinayakankugoyal
Copy link
Contributor Author

/milestone v1.31

@k8s-ci-robot
Copy link
Contributor

@vinayakankugoyal: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your Milestone Maintainers Team and have them propose you as an additional delegate for this responsibility.

In response to this:

/milestone v1.31

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@liggitt
Copy link
Member

liggitt commented May 15, 2024

/milestone v1.31
/label lead-opted-in

@k8s-ci-robot k8s-ci-robot added this to the v1.31 milestone May 15, 2024
@liggitt liggitt added the stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status label May 15, 2024
@k8s-ci-robot k8s-ci-robot added the lead-opted-in Denotes that an issue has been opted in to a release label May 15, 2024
@vinayakankugoyal
Copy link
Contributor Author

PRR Approver

/assign @jpbetz

@sftim
Copy link
Contributor

sftim commented May 24, 2024

/retitle Only allow anonymous auth for health endpoints

@k8s-ci-robot k8s-ci-robot changed the title Only allow anonymous auth for health endpoints. Only allow anonymous auth for health endpoints May 24, 2024
@vinayakankugoyal vinayakankugoyal changed the title Only allow anonymous auth for health endpoints Only allow anonymous auth for configured endpoints. May 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
lead-opted-in Denotes that an issue has been opted in to a release sig/auth Categorizes an issue or PR as relevant to SIG Auth. stage/alpha Denotes an issue tracking an enhancement targeted for Alpha status
Projects
Status: No status
Status: In Review
Development

No branches or pull requests

5 participants