Kubelet Credential Provider

[andrewsykim]

Enhancement Description

• One-line enhancement description (can be used as a release note):

Support exec plugins to retrieve image pull credentials for the kubelet.

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2133-kubelet-credential-providers

• Discussion Link:

• Primary contact (assignee): @andrewsykim @adisky

• Responsible SIGs: cloud provider, node, auth

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): v1.20
  • Beta release target (x.y): v1.24
  • GA release target: v1.26

• Stable

  • KEP (k/enhancements) update PR(s):
  • Code (k/k) update PR(s):
    • Add job to run e2e test for KubeletCredentialProviders feature using GCE provider test-infra#27724
    • Move the Kubelet Credential Provider feature to GA and Update the Credential Provider API to GA kubernetes#111616
    • Configure and install out-of-tree gcp credential provider  kubernetes#111495
  • Docs (k/website) update(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[andrewsykim]

/sig cloud-provider

(but involves SIG node and SIG auth as well)

[kikisdeliveryservice]

Hi @andrewsykim

This was an exception that was conditionally approved on Nov6 (https://groups.google.com/g/kubernetes-sig-release/c/rYXqvvt4aDI/m/t1vL3HbsAwAJ) on updating the KEP the the new format. Please link once the PR is open.

Also please link all related PRs to this issue so that we can track it.

[kikisdeliveryservice]

PR addressing requested updates as per exception: #2151

[andrewsykim]

/sig node

[annajung]

Hi @andrewsykim,

For the enhancement to be included in the milestone, it must meet the following criteria:

• [DONE] The KEP must be merged in an implementable state
• The KEP must have test plans
• [DONE] The KEP must have graduation criteria
• The KEP must have a production readiness review

The test plan for beta is missing in the KEP, so please remember to update to include that.

Also starting 1.21, all KEP must include a production readiness review. Please make sure to take a look at the instructions and update the KEP to include answers to the questionnaires required for beta and a file under https://github.com/kubernetes/enhancements/tree/master/keps/prod-readiness/sig-node.

Thank you!

[annajung]

Hi @andrewsykim

Enhancements Freeze is 2 days away, Feb 9th EOD PST

Enhancements team is NOT tracking any open PR for a KEP update. Please make sure to work on missing requirements and get it merged before the freeze. For PRR related questions or to boost the PR for PRR review, please reach out in slack #prod-readiness

Any enhancements that do not complete the KEP requirements by the freeze will require an exception.

[ehashman]

#2457

[annajung]

With PR #2457 merged in, this enhancement has met all the criteria for the enhancements freeze 👍

[annajung]

Hi @andrewsykim

Since your Enhancement is scheduled to be in 1.21, please keep in mind the important upcoming dates:

• Tuesday, March 9th: Week 9 - Code Freeze
• Tuesday, March 16th: Week 10 - Docs Placeholder PR deadline
  • If this enhancement requires new docs or modification to existing docs, please follow the steps in the Open a placeholder PR doc to open a PR against k/website repo.

As a reminder, please link all of your k/k PR(s) and k/website PR(s) to this issue so we can track them.

Thanks!

[annajung]

Hi @andrewsykim

Enhancements team is marking this enhancement as "At Risk" for the upcoming code freeze due to not seeing any linked k/k PR(s) for this enhancement.

Please make sure to provide all k/k PR(s) and k/website PR(s) to this issue so it can be tracked by the release team.

[annajung]

Hey @andrewsykim

A friendly reminder that Code freeze is 5 days away, March 9th EOD PST

Any enhancements that are NOT code complete by the freeze will be removed from the milestone and will require an exception to be added back.

Please also keep in mind that if this enhancement requires new docs or modification to existing docs, you'll need to follow the steps in the Open a placeholder PR doc to open a PR against k/website repo by March 16th EOD PST

Thanks!

[annajung]

Hi @andrewsykim, with code freeze now in effect, we are removing this enhancement from 1.21 release due to no code PR being tracked for this enhancement.

If needed, feel free to file an exception to add this back into the release. thanks!

[parul5sahoo]

Hello @ruiwen-zhao 👋, 1.26 Enhancements team here.

Just checking in as we approach enhancements freeze on 18:00 PDT on Thursday 6th October 2022.

This enhancement is targeting for stage stable for 1.26 (correct me, if otherwise)

Here's where this enhancement currently stands:

• KEP readme using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable for latest-milestone: 1.26
• KEP readme has a updated detailed test plan section filled out
• KEP readme has up to date graduation criteria
• KEP has a production readiness review that has been completed and merged into k/enhancements.

For this KEP, we would just need to update the following before enhancements freeze:

• Update the milestone in kep.yaml to 1.26. which I see an open PR for so will be checked once it get merged.

The status of this enhancement is marked as at risk. Please keep the issue description up-to-date with appropriate stages as well. And let us know if you have any queries.
Thank you!

[ruiwen-zhao]

Hi @parul5sahoo , i believe the current README [1] is using the latest template and has detailed test plan section. Can you elaborate what's missing there?

[1] https://github.com/kubernetes/enhancements/blob/5d140818264fe0ade8ba326dc659ffae88e5f629/keps/sig-node/2133-kubelet-credential-providers/README.md

[parul5sahoo]

@ruiwen-zhao I probably missed the checked agreement on line 340. Sorry, my bad. So we will mark the enhancement tracked once the open PR for updating the milestone is merged.

[parul5sahoo]

Hello @ruiwen-zhao 👋, 1.26 Enhancements team here.

Just checking in as we approach enhancements freeze on 18:00 PDT on Thursday 6th October 2022.

This enhancement is targeting for stage stable for 1.26 (correct me, if otherwise)

Here’s where this enhancement currently stands:

• KEP readme using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable for latest-milestone: 1.26
• KEP readme has a updated detailed test plan section filled out
• KEP readme has up to date graduation criteria.
• KEP has a production readiness review that has been completed and merged into k/enhancements.

With all the KEP requirements in place and merged into k/enhancements, this enhancement is all good for the upcoming enhancements freeze. 🚀

The status of this enhancement is marked as tracked. Please keep the issue description up-to-date with appropriate stages as well. Thank you!

[parul5sahoo]

Hi @adisky, @andrewsykim and @ruiwen-zhao 👋,

Checking in once more as we approach 1.26 code freeze at 17:00 PDT on Tuesday 8th November 2022.

Please ensure the following items are completed:

• All PRs to the Kubernetes repo that are related to your enhancement are linked in the above issue description (for tracking purposes).
• All PRs are fully merged by the code freeze deadline.

For this enhancement, I could not locate any open k/k PRs. Please plan to get PRs out for all k/k code so it can be merged up by code freeze. If you do have k/k PRs open, please link them to this issue. Let me know if there aren't any further PRs that need to be created or merged for this enhancements, so that I can mark it as tracked for code freeze.

As always, we are here to help should questions come up. Thanks!

[katmutua]

Hello @andrewsykim ! 👋🏾,

@katmutua 1.26 Release Docs shadow here. This enhancement is marked as ‘Needs Docs’ for 1.26 release.

Please follow the steps detailed in the documentation to open a PR against dev-1.26 branch in the k/website repo. This PR can be just a placeholder at this time, and must be created by November 9.

Also, take a look at Documenting for a release to familiarize yourself with the docs requirement for the release.
As a reminder, please link all of your docs PR to this issue so we can easily track it.

[andrewsykim]

Updated the enhancement issue description with the merged PRs

[parul5sahoo]

Hey @andrewsykim ,

As the Code freeze is just a day away, just wanted to confirm that there are no open PRs in the K/K repo or any repo in general for this enhancement other than the ones outlined in the issue description? So that the enhancement can be marked tracked.

[ruiwen-zhao]

@parul5sahoo there are no open PRs for this enhancement other than the doc updates.

For GCP credential provider (https://github.com/kubernetes/cloud-provider-gcp ) we might need to update the api version used, but that is not in the scope of this enhancement.

[krol3]

Hello @andrewsykim and @ruiwen-zhao 👋, 1.26 Docs Lead here.
Today is the 1.26 Docs Placeholder PR Deadline.
If this enhancement requires any new docs or modification to existing docs, please follows the steps here to open a PR against dev-1.26 branch in the k/website repo. This PR can be just a placeholder at this time and must be created before the end of today.
Thank you

[ruiwen-zhao]

I believe @andrewsykim has created a PR already: kubernetes/website#37647

[krol3]

Hi @ruiwen-zhao and @andrewsykim the PR about documentation. Related to Feature gates for Alpha or Beta features table:
https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/#feature-gates-for-alpha-or-beta-features

cc: @katmutua

[andrewsykim]

Doc update: kubernetes/website#37920

[krol3]

@andrewsykim is this PR kubernetes/website#38139 the doc related 1.26 ?

[marosset]

Hi @andrewsykim, @adisky, and/or @ruiwen-zhao - since this enhancement has graduated to stable can you please update https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/2133-kubelet-credential-providers/kep.yaml setting the status to implemented and then close this issue.
Thanks!

[andrewsykim]

PR for marking this KEP implemented #3711