Security WG roadmap for KF 1.9

[rimolive]

• oauth2-proxy with istio mesh config and m2m bearer tokens #2544
• Add tests for rootless containers #2546
• Proposal for rootless Kubeflow #2527
• Move networkpolicies out of /contrib into /common (#2385) #2457
• Update 20220926-contrib-component-guidelines.md #2329
• Update extract_images.sh #2658
• Create security scan script #2731
• Convert trivy_scan.sh into python #2758
• [backend] Security exploit in mlpipeline-UI pipelines#9889
• Add extra namespace labels option kubeflow#7325

[StefanoFioravanzo]

Hello @akgraner @juliusvonkohout, this is a kind reminder that Monday, March 4th will be our Kubeflow 1.9 release development checkpoint, we will be halfway through our dev cycle, and we expect most of the work to be well underway (reminder: code freeze is scheduled for Apr 15th)

Can you please acknowledge your status with respect to your roadmap, comment on the progress made so far, and provide an assessment of the work that remains?

Does the comment above reflect the work that will be delivered as part of Kubeflow 1.9? Is it up to date?

[juliusvonkohout]

@StefanoFioravanzo i updated the top post with information.

[StefanoFioravanzo]

@juliusvonkohout Why do you say a merged PR (first one) is in progress? Merged PR should mean "checked" box I guess. If that's not valid, what else needs to be done?

[juliusvonkohout]

I checked the boxes for you :-D

[rimolive]

This is done