New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fine-grained SupplementalGroups control #3619
Comments
This comment was marked as off-topic.
This comment was marked as off-topic.
@everpeace: The label(s) In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
This comment was marked as off-topic.
This comment was marked as off-topic.
The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
/remove-lifecycle stale |
/milestone v1.27 let's see if we can start it in 1.27 |
/label lead-opted-in |
/stage alpha |
Hello @everpeace 👋, 1.27 Enhancements team here. Just checking in as we approach enhancements freeze on 18:00 PDT Thursday 9th February 2023. This enhancement is targeting for stage Here's where this enhancement currently stands:
It looks like #3620 will address most of these issues. The status of this enhancement is marked as |
@npolshakova, kep yaml has correct values for stage, milestone, etc:
This KEP updates to the latest template and covers testing section: #3862 PRR review completed: enhancements/keps/prod-readiness/sig-node/3619.yaml Lines 1 to 6 in 472a381
So once #3862 is merged, this KEP is ready for the milestone |
Great! Looks like #3862 went in so this enhancement as tracked for v1.27. /label tracked/yes |
@everpeace do you plan to continue working on this KEP in 1.28? |
@SergeyKanzhelev Yes, I will continue working on this KEP. As I wrote in #3620 (comment) , my cleanup PR in containerd took much time to merge than I expected. |
Memo: Tasklist to alpha(v1.28)
|
/milestone v1.28 |
Is this still hoping to land alpha in 1.28? |
/label lead-opted-in |
Hello @everpeace 👋, 1.28 Enhancements team here! Just checking in as we approach enhancements freeze on 18:00 PDT Thursday 9th February 2023. This enhancement is targeting for stage Here's where this enhancement currently stands:
For this KEP, we would just need to update the following:
The status of this enhancement is marked as |
this is done, KEP should be ok to be tracked |
With all the requirements fulfilled this enhancement is marked as |
Hello @everpeace 1.28 Docs Shadow here. Does this enhancement work planned for 1.28 require any new docs or modification to existing docs? If so, please follows the steps here to open a PR against dev-1.28 branch in the k/website repo. This PR can be just a placeholder at this time and must be created before Thursday 20th July 2023. Also, take a look at Documenting for a release to get yourself familiarize with the docs requirement for the release. Thank you! |
Hey again @everpeace 👋 Just checking in as we approach Code freeze at 01:00 UTC Friday, 19th July 2023 . Here’s the enhancement’s state for the upcoming code freeze:
Also please let me know if there are other PRs in k/k we should be tracking for this KEP. |
Hey @everpeace , could you please create a docs PR even if it is a draft PR with no content yet against dev-1.28 branch in the k/website repo. The deadline to create this draft PR is Thursday 20th July 2023. |
Hey @everpeace, Docs Shadow here! could you please create a docs PR even if it is a draft PR with no content yet against dev-1.28 branch in the k/website repo. The deadline to create this draft PR is Thursday 20th July 2023. |
Hello @everpeace 👋, 1.28 Enhancements Lead here. Unfortunately, the implementation (code related) PR associated with this enhancement was not in the merge-ready state by the code-freeze and hence this enhancement is now being removed from the v1.28 milestone. If you still wish to progress this enhancement in v1.28, please file an exception request. Thanks! /milestone clear |
@everpeace do you plan to keep working on this KEP for 1.29? |
/remove-label lead-opted-in while we are confirming the owner for the KEP |
@SergeyKanzhelev Sorry for my long absence. Yes, let me work on this for 1.29. |
Hello @everpeace, 1.29 Enhancements team here! Is this enhancement targeting 1.29? If it is, can you follow the instructions here to opt in the enhancement and make sure the |
Enhancement Description
PodSecurityContext.SupplementalGroups
by custom container image although PSP(or other policy engines) enforces the field kubernetes#112879k/enhancements
) update PR(s):k/k
) update PR(s): KEP-3619: Fine-grained SupplementalGroups control kubernetes#117842k/website
) update PR(s):Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.
/assign
/sig node
/kind feature
The text was updated successfully, but these errors were encountered: