Enhancement Description
Allow users to specify which endpoints are allowed for anonymous requests. This allows the admin to only allow access to health endpoints like healthz, livez and readyz anonymously while making sure other cluster endpoints or resources cannot be access anonymously even if a user misconfigures RBAC.
Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.
Enhancement Description
Allow users to specify which endpoints are allowed for anonymous requests. This allows the admin to only allow access to health endpoints like
healthz,livezandreadyzanonymously while making sure other cluster endpoints or resources cannot be access anonymously even if a user misconfigures RBAC.One-line enhancement description (can be used as a release note): Only allow anonymous auth for health endpoints.
Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4633-anonymous-auth-configurable-endpoints/README.md
Discussion Link: https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit#bookmark=id.ehlt47tezzsk
Primary contact (assignee): @vinayakankugoyal
Responsible SIGs: sig-auth
Enhancement target (which target equals to which milestone):
Alpha
k/enhancements) update PR(s):k/k) update PR(s):k/website) update PR(s):Beta
k/enhancements) update PR(s):k/k) update PR(s):k/website) update(s):Stable
k/enhancements) update PR(s):k/k) update PR(s):k/website) update(s):Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.