Pod Certificates

[ahmedtd]

Enhancement Description

• One-line enhancement description (can be used as a release note): This proposal provides a built-in capability for pods to authenticate to kube-apiserver using mTLS. It's built from pieces that are easy for external projects to reuse to deliver additional functionality using X.509 certificates.
• Kubernetes Enhancement Proposal: link
• Discussion Link: SIG Auth meeting minutes
• Primary contact (assignee): @ahmedtd
• Responsible SIGs: SIG Auth
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y): 1.34
  • Beta release target (x.y):
  • Stable release target (x.y):
• Alpha
  • KEP (k/enhancements) update PR(s): KEP-4317: Pod Certificates #4318
  • Code (k/k) update PR(s):
    • Pod Certificates: Preliminary implementation of KEP-4317 kubernetes#128010
  • Docs (k/website) update PR(s):

[ahmedtd]

/sig auth

[enj]

/milestone v1.30
/label lead-opted-in

[enj]

/assign ahmedtd