Skip to content

Update exec credential provider KEP with feedback from cluster info PR#1927

Merged
k8s-ci-robot merged 2 commits intokubernetes:masterfrom
ankeesler:exec-cluster-info-updates
Sep 22, 2020
Merged

Update exec credential provider KEP with feedback from cluster info PR#1927
k8s-ci-robot merged 2 commits intokubernetes:masterfrom
ankeesler:exec-cluster-info-updates

Conversation

@ankeesler
Copy link
Copy Markdown
Contributor

@ankeesler ankeesler commented Aug 6, 2020

Signed-off-by: Andrew Keesler akeesler@vmware.com

@liggitt - would you be willing to submit your opinion about these updates? I reach out to you because you and @enj discussed a proper superset of these changes in kubernetes/kubernetes#91192. I understand this is not the whole set of changes that you requested in that PR, but I tried to take the intersection of you and @enj's proposals and present them here as a starting place. My hope is that we can 1) tie off the cluster info design in this KEP, 2) update the implementation, 3) get the implementation approved, and 4) get the implementation merged.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Aug 6, 2020
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Hi @ankeesler. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@k8s-ci-robot k8s-ci-robot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Aug 6, 2020
@k8s-ci-robot k8s-ci-robot requested review from deads2k and enj August 6, 2020 17:48
@k8s-ci-robot k8s-ci-robot added kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory sig/architecture Categorizes an issue or PR as relevant to SIG Architecture. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. sig/auth Categorizes an issue or PR as relevant to SIG Auth. labels Aug 6, 2020
@ankeesler
Copy link
Copy Markdown
Contributor Author

@liggitt - do you have time/willingness to take a look at this this week?

@liggitt
Copy link
Copy Markdown
Member

liggitt commented Sep 16, 2020

apologies, this got lost in 1.19 closing / 1.20 reopening... let's set up a time to talk through the changes over VC, that'll be probably be faster. I'll reach out to work out a time

Copy link
Copy Markdown
Member

@liggitt liggitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

certificate-authority: "/etc/kubernetes/ca.pem"
extensions:
- name: exec # reserved extension name for per cluster exec config
- name: client.authentication.k8s.io/exec # reserved extension name for per cluster exec config
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes sense, lgtm

// ProxyURL is the URL to the proxy to be used for all requests to this
// cluster.
// +optional
ProxyURL string `json:"proxy-url,omitempty"`
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, matches reality

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Sep 22, 2020
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ankeesler, liggitt

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 22, 2020
@k8s-ci-robot k8s-ci-robot merged commit 21642d5 into kubernetes:master Sep 22, 2020
@k8s-ci-robot k8s-ci-robot added this to the v1.20 milestone Sep 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/kep Categorizes KEP tracking issues and PRs modifying the KEP directory lgtm "Looks good to me", indicates that a PR is ready to be merged. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. sig/architecture Categorizes an issue or PR as relevant to SIG Architecture. sig/auth Categorizes an issue or PR as relevant to SIG Auth. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants