Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

userns KEP followup #5

Merged
merged 3 commits into from
Feb 3, 2022
Merged

Conversation

giuseppe
Copy link
Collaborator

address some comments we got on PR#3065

@giuseppe
Copy link
Collaborator Author

@rata we can discuss them further before pushing to upstream PR

Copy link
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@giuseppe thanks! Sorry again I missed the notification :(

Added some comments. Also, IIUC the typos mrunal commented on are missing

keps/sig-node/127-user-namespaces/README.md Show resolved Hide resolved
keps/sig-node/127-user-namespaces/README.md Show resolved Hide resolved
keps/sig-node/127-user-namespaces/README.md Outdated Show resolved Hide resolved
keps/sig-node/127-user-namespaces/README.md Outdated Show resolved Hide resolved
keps/sig-node/127-user-namespaces/README.md Outdated Show resolved Hide resolved
Copy link
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One silly comment. I think we still need to fix the typos mrunal found. Will have a look at the complete doc now, not just the diff, just in case

keps/sig-node/127-user-namespaces/README.md Outdated Show resolved Hide resolved
Signed-off-by: Giuseppe Scrivano <[email protected]>
@rata rata merged commit 6b4562b into kinvolk:rata/userns Feb 3, 2022
rata pushed a commit that referenced this pull request Aug 9, 2022
rata pushed a commit that referenced this pull request Aug 7, 2023
…ategy (kubernetes#3661)

* Initial KEP for improving pruning in kubectl apply

* Add design details

Co-authored-by: Katrina Verey <[email protected]>

* Add another open question

* Links, clarifications, ownerRef and GKNN explanations

* Follow-on to initial feedback, address some unresolved blocks

* Fix lint errors

* Add more detail about reference implementation (#2)

* Apply prune jan25 (#3)

* More clearly delineate specification vs kubectl details

* Move design details of spec to Design Details section

* Updates from synchronous conversation

* Remove leftover paragraph (#5)

Not an alternative rejected any more, given applyset.k8s.io/inventory

* Justin has always been coauthor

* KEP-3659: production readiness etc (#4)

Fill in the testing/ PRR sections.

* Fix test failures

* Prune: document confused deputy attack and mitigations

Likely pushes us to GKNN-derived IDs.

* Constrain applyset id

We just choose the constrained applyset id to prevent "applyset ID
impersonation".

* Update KEP and PRR metadata

* Enhance testing description

* ID vs name fixes

* Fixes from soltysh's review

---------

Co-authored-by: Justin Santa Barbara <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants