Provide OIDC discovery for service account token issuer #1393

mtaufen · 2019-12-05T19:30:07Z

mtaufen · 2019-12-05T19:30:15Z

/sig auth

mtaufen · 2019-12-05T19:30:27Z

mtaufen · 2019-12-05T19:30:33Z

/milestone 1.18

k8s-ci-robot · 2019-12-05T19:30:35Z

@mtaufen: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/milestone 1.18

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

helayoty · 2020-01-15T01:43:10Z

Hey there @mtaufen -- 1.18 Enhancements shadow here. I wanted to check in and see if you think this Enhancement will be graduating to alpha in 1.18 or having a major change in its current level?

The current release schedule is:

Tuesday, January 28th EOD PST - Enhancements Freeze
Thursday, March 5th, EOD PST - Code Freeze
Monday, March 16th - Docs must be completed and reviewed
Tuesday, March 24th - Kubernetes 1.18.0 Released

To be included in the release, this enhancement must have a merged KEP in the implementable status.

The KEP must also have graduation criteria and a Test Plan defined.

If you would like to include this enhancement, once coding begins please list all relevant k/k PRs in this issue so they can be tracked properly. 👍

Thanks!

mtaufen · 2020-01-16T01:29:11Z

It is planned to graduate to alpha in 1.18. Thanks for checking in.

…

On Tue, Jan 14, 2020 at 5:43 PM Heba Elayoty ***@***.***> wrote: Hey there @mtaufen <https://github.com/mtaufen> -- 1.18 Enhancements shadow here. I wanted to check in and see if you think this Enhancement will be graduating to alpha in 1.18 or having a major change in its current level? The current release schedule is: Tuesday, January 28th EOD PST - Enhancements Freeze Thursday, March 5th, EOD PST - Code Freeze Monday, March 16th - Docs must be completed and reviewed Tuesday, March 24th - Kubernetes 1.18.0 Released To be included in the release, this enhancement must have a merged KEP in the *implementable* status. The KEP must also have graduation criteria and a Test Plan defined. If you would like to include this enhancement, once coding begins please list all relevant k/k PRs in this issue so they can be tracked properly. 👍 Thanks! — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#1393?email_source=notifications&email_token=AAG4TQKSKWK5DEGHBUJUJBDQ5ZS25A5CNFSM4JV6YP3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI6YERQ#issuecomment-574456390>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG4TQJDEF4T4TCXMVE7VBTQ5ZS25ANCNFSM4JV6YP3A> .

-- Michael Taufen Google SWE

mtaufen · 2020-01-16T01:29:45Z

I'll double-check to see if the KEP had a test plan.

…

On Wed, Jan 15, 2020 at 5:28 PM Michael Taufen ***@***.***> wrote: It is planned to graduate to alpha in 1.18. Thanks for checking in. On Tue, Jan 14, 2020 at 5:43 PM Heba Elayoty ***@***.***> wrote: > Hey there @mtaufen <https://github.com/mtaufen> -- 1.18 Enhancements > shadow here. I wanted to check in and see if you think this Enhancement > will be graduating to alpha in 1.18 or having a major change in its current > level? > > The current release schedule is: > > Tuesday, January 28th EOD PST - Enhancements Freeze > Thursday, March 5th, EOD PST - Code Freeze > Monday, March 16th - Docs must be completed and reviewed > Tuesday, March 24th - Kubernetes 1.18.0 Released > > To be included in the release, this enhancement must have a merged KEP in > the *implementable* status. > > The KEP must also have graduation criteria and a Test Plan defined. > > If you would like to include this enhancement, once coding begins please > list all relevant k/k PRs in this issue so they can be tracked properly. > 👍 > > Thanks! > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <#1393?email_source=notifications&email_token=AAG4TQKSKWK5DEGHBUJUJBDQ5ZS25A5CNFSM4JV6YP3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEI6YERQ#issuecomment-574456390>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AAG4TQJDEF4T4TCXMVE7VBTQ5ZS25ANCNFSM4JV6YP3A> > . > -- Michael Taufen Google SWE

-- Michael Taufen Google SWE

helayoty · 2020-01-16T01:37:26Z

@mtaufen Thanks for the update. I'd appreciate having the updated KEP in an implementable status along with all relevant k/k PRs in the issue.

helayoty · 2020-01-16T01:37:33Z

/milestone v1.18

mtaufen · 2020-01-29T21:10:04Z

KEP is merged as implementable as of yesterday.

VineethReddy02 · 2020-02-05T20:10:04Z

Hello, @mtaufen, I'm 1.18 docs lead.
Does this enhancement work planned for 1.18 require any new docs (or modifications to existing docs)? If not, can you please update the 1.18 Enhancement Tracker Sheet (or let me know and I'll do so)
If so, just a friendly reminder we're looking for a PR against k/website (branch dev-1.18) due by Friday, Feb 28th, it can just be a placeholder PR at this time. Let me know if you have any questions!

mtaufen · 2020-02-06T18:02:56Z

It will require either new user-facing docs or updates to existing docs. Thanks for the heads up regarding the deadline.

…

On Wed, Feb 5, 2020 at 12:10 PM Vineeth Pothulapati < ***@***.***> wrote: Hello, @mtaufen <https://github.com/mtaufen>, I'm 1.18 docs lead. Does this enhancement work planned for 1.18 require any new docs (or modifications to existing docs)? If not, can you please update the 1.18 Enhancement Tracker Sheet (or let me know and I'll do so) If so, just a friendly reminder we're looking for a PR against k/website (branch dev-1.18) due by Friday, Feb 28th, it can just be a placeholder PR at this time. Let me know if you have any questions! — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#1393?email_source=notifications&email_token=AAG4TQOUZILZSOILPLT6PNLRBMMJ3A5CNFSM4JV6YP3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEK4ZYOY#issuecomment-582589499>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG4TQKDA6ILY2FCVLAIY6DRBMMJ3ANCNFSM4JV6YP3A> .

-- Michael Taufen Google SWE

VineethReddy02 · 2020-02-21T13:38:46Z

Hello @mtaufen
We are close to the docs placeholder PR deadline i.e less than week left for docs placeholder PR against the dev-1.18 branch. Having a placeholder PR in place will definitely help us in tracking enhnacements much better.

Thanks! :)

jeremyrickard · 2020-02-24T16:26:37Z

@mtaufen

We are getting pretty close to the code freeze deadline of 05 March 2020.

Can you please link to any k/k PRs for us so we can better track this?

mtaufen · 2020-02-24T19:40:47Z

@jeremyrickard all associated PRs are linked in the issue description.

@VineethReddy02 I plan to have a placeholder PR up by the end of this week, thanks!

VineethReddy02 · 2020-02-24T19:44:51Z

Hi @mtaufen
The deadline for the placeholder PR is 28th Feb we are close to the deadline. It would be great if we can have placeholder PR in place sooner than later.

mtaufen · 2020-02-26T17:24:06Z

Docs PR: kubernetes/website#19328

helayoty · 2020-03-04T15:39:39Z

Hi @mtaufen We're only a few days out from code freeze now. It does not look like your PR has merged yet, are you still feeling like you're on track for code freeze for this enhancement? Do you want to defer this to 1.19 based on the reviewer bandwidth? Or try and make a push?

helayoty · 2020-03-05T21:23:16Z

/milestone clear

liggitt · 2021-02-01T19:49:39Z

added to tracking spreadsheet for 1.21

mvortizr · 2021-02-20T02:36:31Z

/milestone 1.21

k8s-ci-robot · 2021-02-20T02:36:32Z

@mvortizr: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/milestone 1.21

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

mvortizr · 2021-02-20T02:38:43Z

/assign

arunmk · 2021-02-20T03:49:26Z

Hi @mtaufen @mvortizr,

Since your Enhancement is scheduled to be in 1.21, please keep in mind the important upcoming dates:

Tuesday, March 9th: Week 9 - Code Freeze
Tuesday, March 16th: Week 10 - Docs Placeholder PR deadline
- If this enhancement requires new docs or modification to existing docs, please follow the steps in the Open a placeholder PR doc to open a PR against k/website repo.

As a reminder, please link all of your k/k PR(s) and k/website PR(s) to this issue so we can track them.

Thanks!

mtaufen · 2021-02-21T23:03:20Z

@arunmk thanks for reaching out. All work is linked and complete except for the pending docs PR (linked above).

mtaufen · 2021-02-25T21:59:21Z

All done 😄

arunmk · 2021-02-26T17:19:54Z

Thank you @mtaufen

arunmk · 2021-03-02T23:19:31Z

Hi @mtaufen,

Enhancements team is currently tracking the following PRs

Move ServiceAccountIssuerDiscovery test into main e2e suite kubernetes#98587 -- merged
Graduate ServiceAccountIssuerDiscovery to GA kubernetes#98553 -- merged
Promote ServiceAccountIssuerDiscovery test to conformance kubernetes#98586 -- merged

Since these PRs are merged, can we mark this enhancement complete for code freeze or do you have other PR(s) that are being worked on as part of the release?

Thanks

annajung · 2021-04-08T14:33:16Z

Hi @mtaufen 1.21 Enhancement Lead here.

Can you update the kep.yaml to reflect a status of implemented:

enhancements/keps/sig-auth/1393-oidc-discovery/kep.yaml

Line 25 in 29a891b

status: implementable

Once that merges, we can close out this issue.

The Enhancement is now GA: kubernetes#1393

mtaufen · 2021-04-19T13:53:59Z

Thanks for the reminder: #2637

liggitt · 2021-04-19T14:03:15Z

marked implemented

/close

k8s-ci-robot · 2021-04-19T14:03:25Z

@liggitt: Closing this issue.

In response to this:

marked implemented

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

k8s-ci-robot added the needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. label Dec 5, 2019

k8s-ci-robot added sig/auth Categorizes an issue or PR as relevant to SIG Auth. and removed needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. labels Dec 5, 2019

k8s-ci-robot assigned mtaufen Dec 5, 2019

mrbobbytables added the tracked/no Denotes an enhancement issue is NOT actively being tracked by the Release Team label Dec 10, 2019

k8s-ci-robot added this to the v1.18 milestone Jan 16, 2020

helayoty added tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team and removed tracked/no Denotes an enhancement issue is NOT actively being tracked by the Release Team labels Jan 16, 2020

liggitt added the kind/api-change Categorizes issue or PR as related to adding, removing, or otherwise changing an API label Jan 30, 2020

helayoty added tracked/no Denotes an enhancement issue is NOT actively being tracked by the Release Team and removed tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team labels Mar 5, 2020

annajung added the tracked/no Denotes an enhancement issue is NOT actively being tracked by the Release Team label Jan 13, 2021

k8s-ci-robot assigned mvortizr Feb 20, 2021

mtaufen mentioned this issue Feb 21, 2021

Update ServiceAccountIssuerDiscovery docs for GA kubernetes/website#26660

Merged

ritazh added this to KEP Backlog in SIG Auth Old Apr 9, 2021

mtaufen added a commit to mtaufen/enhancements that referenced this issue Apr 19, 2021

Mark ServiceAccountIssuerDiscovery KEP implemented

465d726

The Enhancement is now GA: kubernetes#1393

mtaufen mentioned this issue Apr 19, 2021

Mark ServiceAccountIssuerDiscovery KEP implemented #2637

Merged

k8s-ci-robot closed this as completed Apr 19, 2021

SIG Auth Old automation moved this from KEP Backlog to Closed / Done Apr 19, 2021

JamesLaverack added tracked/no Denotes an enhancement issue is NOT actively being tracked by the Release Team and removed tracked/yes Denotes an enhancement issue is actively being tracked by the Release Team labels Apr 25, 2021

mmiranda96 mentioned this issue Sep 16, 2021

Remove non-alpha features from job ci-kubernetes-e2e-gci-gce-alpha-features kubernetes/test-infra#23642

Closed

brandond mentioned this issue Dec 15, 2021

RKE2 support for IAM Roles for Service Accounts rancher/rke2#2269

Closed

hchen-tubi mentioned this issue May 10, 2022

RKE support for IAM Roles for Service Accounts rancher/rancher#37664

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Provide OIDC discovery for service account token issuer #1393

Provide OIDC discovery for service account token issuer #1393

mtaufen commented Dec 5, 2019 •

edited

mtaufen commented Dec 5, 2019

mtaufen commented Dec 5, 2019

mtaufen commented Dec 5, 2019

k8s-ci-robot commented Dec 5, 2019

helayoty commented Jan 15, 2020

mtaufen commented Jan 16, 2020 via email

mtaufen commented Jan 16, 2020 via email

helayoty commented Jan 16, 2020

helayoty commented Jan 16, 2020

mtaufen commented Jan 29, 2020

VineethReddy02 commented Feb 5, 2020

mtaufen commented Feb 6, 2020 via email

VineethReddy02 commented Feb 21, 2020

jeremyrickard commented Feb 24, 2020

mtaufen commented Feb 24, 2020

VineethReddy02 commented Feb 24, 2020

mtaufen commented Feb 26, 2020

helayoty commented Mar 4, 2020

helayoty commented Mar 5, 2020

liggitt commented Feb 1, 2021

mvortizr commented Feb 20, 2021

k8s-ci-robot commented Feb 20, 2021

mvortizr commented Feb 20, 2021

arunmk commented Feb 20, 2021

mtaufen commented Feb 21, 2021

mtaufen commented Feb 25, 2021

arunmk commented Feb 26, 2021

arunmk commented Mar 2, 2021 •

edited

annajung commented Apr 8, 2021

mtaufen commented Apr 19, 2021

liggitt commented Apr 19, 2021

k8s-ci-robot commented Apr 19, 2021

Provide OIDC discovery for service account token issuer #1393

Provide OIDC discovery for service account token issuer #1393

Comments

mtaufen commented Dec 5, 2019 • edited

Enhancement Description

mtaufen commented Dec 5, 2019

mtaufen commented Dec 5, 2019

mtaufen commented Dec 5, 2019

k8s-ci-robot commented Dec 5, 2019

helayoty commented Jan 15, 2020

mtaufen commented Jan 16, 2020 via email

mtaufen commented Jan 16, 2020 via email

helayoty commented Jan 16, 2020

helayoty commented Jan 16, 2020

mtaufen commented Jan 29, 2020

VineethReddy02 commented Feb 5, 2020

mtaufen commented Feb 6, 2020 via email

VineethReddy02 commented Feb 21, 2020

jeremyrickard commented Feb 24, 2020

mtaufen commented Feb 24, 2020

VineethReddy02 commented Feb 24, 2020

mtaufen commented Feb 26, 2020

helayoty commented Mar 4, 2020

helayoty commented Mar 5, 2020

liggitt commented Feb 1, 2021

mvortizr commented Feb 20, 2021

k8s-ci-robot commented Feb 20, 2021

mvortizr commented Feb 20, 2021

arunmk commented Feb 20, 2021

mtaufen commented Feb 21, 2021

mtaufen commented Feb 25, 2021

arunmk commented Feb 26, 2021

arunmk commented Mar 2, 2021 • edited

annajung commented Apr 8, 2021

mtaufen commented Apr 19, 2021

liggitt commented Apr 19, 2021

k8s-ci-robot commented Apr 19, 2021

mtaufen commented Dec 5, 2019 •

edited

arunmk commented Mar 2, 2021 •

edited