Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KEP-3169: Fine-grained SupplementalGroups control #3620

Merged

Commits on Feb 9, 2023

  1. First draft of KEP-3169: Fine-grained SupplementalGroups control

    This KEP roughly introduces belows in Kubernetes API:
    - 'PodSecurityContext.SupplementalGroupsPolicy' to control which groups are attached to the container process, and
    - 'ContainerStatus.User' so that user know which identities(uid, gid, supplemental groups) are ACTUALLY attached to the container process.
    The corresponding changes are also proposed in CRI.
    
    Co-authored-by: Sergey Kanzhelev <[email protected]>
    everpeace and SergeyKanzhelev committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    ba195b6 View commit details
    Browse the repository at this point in the history
  2. add PRR approval request file and filled out PRR questionnaire just f…

    …or alpha relevant sections.
    everpeace committed Feb 9, 2023
    Configuration menu
    Copy the full SHA
    b598ea5 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    731465c View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    a8478a6 View commit details
    Browse the repository at this point in the history