### Enhancement Description - One-line enhancement description (can be used as a release note): Harden Kubelet Serving Certificate Validation in Kube-API server - Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4872-harden-kubelet-cert-validation/README.md - Discussion Link: [sig-auth meeting](https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit) on August 28th 2024, [implementation discussion on May 7th, 2025](https://docs.google.com/document/d/1RqhAkGov_coHsB3lbAo-qfQl1MOfYvgpPUjiGMJ_3PY) - Primary contact (assignee): @g-gaston - Responsible SIGs: sig-auth - Enhancement target (which target equals to which milestone): - Alpha release target (x.y): 1.34 - Beta release target (x.y): - Stable release target (x.y): - [ ] Alpha - [x] KEP (`k/enhancements`) update PR(s): https://github.com/kubernetes/enhancements/pull/4911 - [ ] Code (`k/k`) update PR(s): - https://github.com/kubernetes/kubernetes/pull/133947 - [ ] Docs (`k/website`) update PR(s): <!-- Uncomment these as you prepare the enhancement for the next stage - [ ] Beta - [ ] KEP (`k/enhancements`) update PR(s): - [ ] Code (`k/k`) update PR(s): - [ ] Docs (`k/website`) update(s): - [ ] Stable - [ ] KEP (`k/enhancements`) update PR(s): - [ ] Code (`k/k`) update PR(s): - [ ] Docs (`k/website`) update(s): --> _Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently._
Enhancement Description
k/enhancements) update PR(s): KEP-4872: Harden Kubelet serving cert validation #4911k/k) update PR(s):k/website) update PR(s):Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.