Auth API to get self user attributes

[nabokihms]

Enhancement Description

• One-line enhancement description (can be used as a release note): Auth API to get self user attributes

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/3325-self-subject-attributes-review-api/README.md

• Discussion Link:

  • Internal sig-auth Slack discussion https://kubernetes.slack.com/archives/C0EN96KUY/p1647544566605239
  • Sig-AUTH Bi-Weekly Meeting for 20220511 https://youtu.be/E4NJcGYTUis?t=120

• Primary contact (assignee): @nabokihms

• Responsible SIGs: sig-auth

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): v1.26
  • Beta release target (x.y): v1.27
  • Stable release target (x.y): v1.28

• Alpha

  • KEP (k/enhancements) update PR(s): KEP-3325: Auth API to get self user attributes #3326
  • Code (k/k) update PR(s): Add auth API to get self subject attributes kubernetes#111333
  • Docs (k/website) update PR(s): Add doc about how to get self subject attributes website#35385

• Beta

  • KEP (k/enhancements) update PR(s): KEP-3325: SelfSubjectReview API Beta graduation #3772
  • Code (k/k) update PR(s): KEP-3325: Promote SelfSubjectReview to Beta kubernetes#116274
  • Docs (k/website) update(s): KEP-3325: Promote SelfSubjectReview to Beta website#39794

• Stable

  • KEP (k/enhancements) update PR(s): KEP-3325: Promote SelfSubjectReview to Stable #3971
  • Code (k/k) update PR(s): KEP-3325: Promote SelfSubjectReview to GA kubernetes#117713
  • Docs (k/website) update(s): KEP-3325: Promote SelfSubjectReview to GA website#40956

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[nabokihms]

/sig auth

[Priyankasaggu11929]

Hello @nabokihms 👋, 1.25 Enhancements team here.

Just checking in as we approach enhancements freeze on 18:00 PT on Thursday June 23, 2022, which is just over 2 days from now.

For note, This enhancement is targeting for stage alpha for 1.25 (correct me, if otherwise)

Here's where this enhancement currently stands:

• KEP file using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable
• KEP has a updated detailed test plan section filled out
• KEP has up to date graduation criteria
• KEP has a production readiness review that has been completed and merged into k/enhancements.

Looks like for this one, we would require updating the open KEP PR #3326 for the following points & get it merged by the Enhancements Freeze:

• update the kep.yaml file to add status: implementable.
• update the Test Plan section as per the updated details listed here
• add a approved PRR for stage alpha

For note, the status of this enhancement is marked as at risk. Please keep the issue description up-to-date with appropriate stages as well. Thank you!

[enj]

@Priyankasaggu11929 I believe this is good for v1.25?

[Priyankasaggu11929]

Hello @enj @nabokihms, the PR addressed all the checklist items but missed updating the Test Plan section as per the updated details listed here.

Could you please update that as well. Thank you so much! 🙂

[nabokihms]

@Priyankasaggu11929 I opened a PR to update the Test Plan section #3423. Thank you for the review!

[Priyankasaggu11929]

Thanks so much @nabokihms. 🙂

[Priyankasaggu11929]

With the PR #3423 merged, the enhancement is ready for 1.25 Enhancements Freeze.

For note, the status is now marked as tracked. Thank you!

[Atharva-Shinde]

Hi @nabokihms, Enhancements team here again 👋

Checking in as we approach Code Freeze at 01:00 UTC on Wednesday, 3rd August 2022.

Please ensure that the following items are completed before the code-freeze:

• All PRs to the Kubernetes repo that are related to your enhancement are linked in the above issue description (for tracking purposes).
• All PRs are fully merged by the code freeze deadline.

Currently, the status of the enhancement is marked as at-risk

Thanks :)

[Atharva-Shinde]

Hey @nabokihms reaching out again as we approach Code Freeze at 01:00 UTC on this Wednesday i.e 3rd August 2022.
Try to get this PR kubernetes/kubernetes#111333 merged before the code-freeze :)
The status of the enhancement is still marked as at-risk

[Priyankasaggu11929]

Hello 👋, 1.25 Enhancements Lead here.

Unfortunately, this enhancement did not meet the code freeze criteria because there are still unmerged k/k code PRs.

If you still wish to progress this enhancement in v1.25, please file an exception request. Thank you so much!

/milestone clear

[liggitt]

Retargeted alpha for 1.26

[liggitt]

all k/k PRs are merged, this is complete for code freeze

[mickeyboxell]

@liggitt @nabokihms @deads2k was there a Docs PR opened against dev-1.27 branch in the k/website repo?

If not, please take a look at Documenting for a release - PR Ready for Review to get your PR ready for review as soon as possible. 01:00 UTC Wednesday 22nd March 2023 / 17:00 PDT Tuesday 21st March 2023 is the official deadline.

This PR will need a doc review by Tuesday 4th April 2023 to get this into the release. Please reach out to required SIGs to get their review. Thank you!

[nabokihms]

@mickeyboxell PR is opened, yet not merged
kubernetes/website#39794

[Atharva-Shinde]

Hello @nabokihms 👋, Enhancements team here.

Just checking in as we approach enhancements freeze on Thursday, 16th June 2023.

Looks like this enhancement is targeting for stage stable for v1.28

Here's where this enhancement currently stands:

• KEP readme using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable for latest-milestone:v1.28
• KEP readme has a updated detailed test plan section filled out
• KEP readme has up to date graduation criteria
• KEP has a production readiness review that has been completed and merged into k/enhancements.

For this KEP, we would simply need to update the following:

• Add response for this question in the Scalability questionnaire of the KEP readme.
• Get approval from the PRR authors.

The status of this enhancement is marked as at risk. Please keep the issue description up-to-date with appropriate stages as well. Thank you :)

[nabokihms]

@Atharva-Shinde, I thought this should be enough #3971 (comment) If not, what am I missing?

[Atharva-Shinde]

As this enhancement is targeting stage stable this KEP should have the new question addressed which is not currently as mentioned in my comment above, but as the PRR team seems fine with this I'll mark status of the enhancement as tracked :)

[Atharva-Shinde]

Hey again @nabokihms 👋

Just checking in as we approach Code freeze at 01:00 UTC Friday, 19th July 2023 .

Here’s the enhancement’s state for the upcoming code freeze:

• All the PRs that are related to your enhancement are linked in the above issue description (for tracking purposes). This includes code, tests, and documentation related PR/s.
• All code related PR/s are merged or are in merge-ready state ( i.e they have approved and lgtm labels applied) by the code freeze deadline. This includes any tests related PR/s too.

This is the code related PR that I found on this KEP issue:

• KEP-3325: Promote SelfSubjectReview to GA kubernetes#117713

Please keep the issue description up-to-date with all the PR/s that are associated with this KEP and let me know if there are other PR/s in k/k we should be tracking for this KEP.

As always, we are here to help if any questions come up. Thanks!

[Atharva-Shinde]

Hey @nabokihms 👋 Enhancements Lead here,
With kubernetes/kubernetes#117713 merged as per the issue description, this enhancement is now tracked for v1.28 Code Freeze!

[enj]

@nabokihms what work is left for this feature?

[nabokihms]

@enj the implementation is finished. What is left:

• Remove feature gate
• Mark deprecated and remove alpha and beta APIs

[npolshakova]

/remove-label lead-opted-in

[liggitt]

This was completed in 1.28 and can be resolved

[enj]

@enj the implementation is finished. What is left:

* Remove feature gate
* Mark deprecated and remove alpha and beta APIs

I have opened kubernetes/kubernetes#120315 to track the post GA work. Closing this issue as complete now that the feature is GA.