SIG Auth 2021 Annual Report #5740
Conversation
Signed-off-by: Rita Zhang <[email protected]>
k8s-ci-robot
added
cncf-cla: yes
k8s-ci-robot
added
the
sig/auth
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: ritazh The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
k8s-ci-robot
added
the
approved
| **What areas and/or subprojects does the group need the most help with?** | ||
|
|
||
| - PSP v2 | ||
| - Audit Logging |
There was a problem hiding this comment.
There are some smaller feature requests & issues related to audit logging, but I'm not sure how much work the core auditing system needs right now. I'd still be interested in seeing an out-of-tree implementation of dynamic auditing or a namespaced audit server.
There was a problem hiding this comment.
Thanks @tallclair! Do you have a link so people who may want to help out will know where to start? How about these: https://github.com/kubernetes/kubernetes/issues?q=is%3Aopen+is%3Aissue+label%3Asig%2Fauth+%22audit+logging%22
There was a problem hiding this comment.
I would explicitly highlight kubernetes/kubernetes#82295, as it's something I really want to see.
Then generally: https://github.com/kubernetes/kubernetes/issues?q=is%3Aopen+is%3Aissue+label%3Aarea%2Faudit+
| - PSP v2 | ||
| - Audit Logging | ||
| - Audit ID | ||
| - Testing |
There was a problem hiding this comment.
Do we have any issues we can link here that outline what is missing today? @tallclair @mikedanese @liggitt @enj
There was a problem hiding this comment.
The main thing I am aware of is the testing work that @ankeesler has been doing for client-go auth plugins.
There was a problem hiding this comment.
Ya, the mature surface is pretty well covered. Maybe kubelet auth in e2e tests?
Signed-off-by: Rita Zhang <[email protected]>
| - PSP v2 | ||
| - Audit Logging | ||
| - Audit ID | ||
| - Testing |
There was a problem hiding this comment.
The main thing I am aware of is the testing work that @ankeesler has been doing for client-go auth plugins.
| **What areas and/or subprojects does the group need the most help with?** | ||
|
|
||
| - PSP v2 | ||
| - Audit Logging |
There was a problem hiding this comment.
I would explicitly highlight kubernetes/kubernetes#82295, as it's something I really want to see.
Then generally: https://github.com/kubernetes/kubernetes/issues?q=is%3Aopen+is%3Aissue+label%3Aarea%2Faudit+
Signed-off-by: Rita Zhang <[email protected]>
k8s-ci-robot
added
the
lgtm
|
/hold |
k8s-ci-robot
added
the
do-not-merge/hold
|
/lgtm |
Signed-off-by: Rita Zhang <[email protected]>
k8s-ci-robot
removed
the
lgtm
|
/lgtm |
k8s-ci-robot
added
lgtm
Which issue(s) this PR fixes:
Fixes #5497
/assign @enj @mikedanese @liggitt @deads2k @tallclair