Kubelet Credential Provider

[andrewsykim]

Enhancement Description

• One-line enhancement description (can be used as a release note):

Support exec plugins to retrieve image pull credentials for the kubelet.

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2133-kubelet-credential-providers

• Discussion Link:

• Primary contact (assignee): @andrewsykim @adisky

• Responsible SIGs: cloud provider, node, auth

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): v1.20
  • Beta release target (x.y): v1.24
  • GA release target: v1.26

• Stable

  • KEP (k/enhancements) update PR(s):
  • Code (k/k) update PR(s):
    • Add job to run e2e test for KubeletCredentialProviders feature using GCE provider test-infra#27724
    • Move the Kubelet Credential Provider feature to GA and Update the Credential Provider API to GA kubernetes#111616
    • Configure and install out-of-tree gcp credential provider  kubernetes#111495
  • Docs (k/website) update(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[andrewsykim]

/sig cloud-provider

(but involves SIG node and SIG auth as well)

[kikisdeliveryservice]

Hi @andrewsykim

This was an exception that was conditionally approved on Nov6 (https://groups.google.com/g/kubernetes-sig-release/c/rYXqvvt4aDI/m/t1vL3HbsAwAJ) on updating the KEP the the new format. Please link once the PR is open.

Also please link all related PRs to this issue so that we can track it.

[kikisdeliveryservice]

PR addressing requested updates as per exception: #2151

[andrewsykim]

/sig node