Blog: Kubernetes v1.26: GA Support for Kubelet Credential Providers #37647

andrewsykim · 2022-11-01T13:18:55Z

Signed-off-by: Andrew Sy Kim [email protected]

Placeholder feature blog post for KEP-2133

netlify · 2022-11-01T13:31:06Z

✅ Pull request preview available for checking

Built without sensitive environment variables

Name	Link
🔨 Latest commit	`655d4f3`
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-io-main-staging/deploys/6391f94dc7c0260008d51cf0
😎 Deploy Preview	https://deploy-preview-37647--kubernetes-io-main-staging.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

katmutua · 2022-11-15T18:51:01Z

Hi @andrewsykim , Thank you for the draft doc PR #37647, Please update to Ready for Review, the deadline it's on Tuesday 15th November 2022. Thank you!

andrewsykim · 2022-11-15T18:59:12Z

@katmutua do feature blogs need to be ready by today as well?

davidmirror-ops · 2022-11-16T10:17:32Z

HI @andrewsykim, Comms Shadow for the 1.26 release here. This feature blog is tracked for release, the deadline for submitting the draft is November 29 . Considering editorial review times, the sooner you can send the draft the better.
Any doubt, me and the Comms team are here to help!
cc @fsmunoz

fsmunoz · 2022-11-24T23:31:39Z

Hello @andrewsykim , we're doing a global reminder about submitting a draft for review for all opted-in feature blogs. If it's at all possible, it is very helpful for the release team to have drafts submitted for review before the hard deadline date, to better plan the release dates and avoid missing out. Thank you!

andrewsykim · 2022-11-28T15:12:30Z

@fsmunoz I have a working draft in a google doc, I'll have it copied over here sometime today or tomorrow

sftim · 2022-11-28T21:58:17Z

If you can let the blog team have sight of the Google Doc, we can give you suggestions on that. Google Docs is great for early feedback. However, the deadline for being part of the post-release article series is super imminent now.

andrewsykim · 2022-11-29T03:04:41Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+the Kubelet to dynamically authenticate and pull images for any container registry service.
+In Kubernetes v1.26, this feature is now GA.
+
+{{< figure src="kubelet-credential-providers-plugin.png" alt="Figure 2: Kubelet Credential Provider Overview" >}}


@sftim is there a way to add description text for figures?

See https://gohugo.io/content-management/shortcodes/#figure

There are a few options.

andrewsykim · 2022-11-29T03:09:14Z

(I intend to replace the images, just used placeholder ones for now to see the blog preview)

sftim · 2022-11-29T18:54:20Z

If you want to preview locally, see https://kubernetes.io/docs/contribute/new-content/open-a-pr/#preview-locally

sftim · 2022-11-29T19:00:00Z

/hold

OK to unhold once this has a publication date assigned and the commits match up with that.

fsmunoz · 2022-12-07T15:40:13Z

@divya-mohan0209 I'm keeping this as not ready for publication pending your input, thanks! As far as I could see the rest is done, including tech review.

sftim

@andrewsykim you need to fix the article date, see inline feedback.

Other inline feedback is relevant, but less important than the date issue.

We'd love to get these images into SVG format so that people can zoom in on them if needed. If you have editable source that you can turn into PDF or SVG, we can help you convert them.

sftim · 2022-12-07T22:40:58Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+---
+layout: blog
+title: 'Kubernetes v1.26: GA Support for Kubelet Credential Providers'
+date: 2022-11-28


Suggested change

date: 2022-11-28

date: 2022-12-22

Please update the path content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md to match.

sftim · 2022-12-07T22:41:15Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+The new plugin mechanism can be used in any cluster, and lets you authenticate to new registries without
+any changes to Kubernetes itself. Any cloud provider or vendor can publish a plugin that lets you authenticate with their image registry.
+
+## How it Works


(nit)

Suggested change

## How it Works

## How it works

sftim · 2022-12-07T22:42:18Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+      "username": "“user”",
+      "password": "“token12345”"


Is this right:

Suggested change

"username": "“user”",

"password": "“token12345”"

"username": "exampleuser",

"password": "token12345"

?

oops, good catch, thank you

sftim · 2022-12-07T22:43:03Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+* `--image-credential-provider-bin-dir`: the path to the directory where credential provider plugin binaries are located.
+
+The configuration file passed into `--image-credential-provider-config` is read by the kubelet to determine which exec plugins should be invoked for a container image used by a Pod.
+Note that the name of each "provider" must match the name of the binary located in the local directry specified in `--image-credential-provider-bin-dir`, otherwise the Kubelet


Suggested change

Note that the name of each "provider" must match the name of the binary located in the local directry specified in `--image-credential-provider-bin-dir`, otherwise the Kubelet

Note that the name of each _provider_ must match the name of the binary located in the local

directory specified in `--image-credential-provider-bin-dir`, otherwise the kubelet

“directry” was a typo, and I made other style fixes

divya-mohan0209

Left some suggestions. Hope you find them useful.

divya-mohan0209 · 2022-12-08T01:20:40Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+
+**Authors:** Andrew Sy Kim (Google), Dixita Narang (Google)
+
+Kubernetes v1.26 introduced generally available (GA) support for _kubelet credential


Do we want to link the docs here? i.e. /docs/tasks/kubelet-credential-provider/kubelet-credential-provider/

Suggested change

Kubernetes v1.26 introduced generally available (GA) support for _kubelet credential

Kubernetes v1.26 introduced generally available (GA) support for _kubelet credential

divya-mohan0209 · 2022-12-08T01:20:55Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+{{< figure src="kubelet-credential-providers-in-tree.png" caption="Figure 1: Kubelet built-in credential provider support for Amazon Elastic Container Registry, Azure Container Registry, and Google Cloud Container Registry." >}}
+
+Kubernetes v1.20 introduced alpha support for kubelet credential providers plugins,
+which provide a mechanism for the kubelet to dynamically authenticate and pull images


Spelling nit

Suggested change

which provide a mechanism for the kubelet to dynamically authenticate and pull images

which provides a mechanism for the kubelet to dynamically authenticate and pull images

divya-mohan0209 · 2022-12-08T01:25:17Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+
+## How it Works
+
+The kubelet and the credential provider plugin binary communicate through stdio (stdin, stdout, and stderr) by sending and receiving


I'm not sure if you're referring to the same thing with the terms exec plugin & credential provider plugin binary. In the docs, the exec plugin term is used currently.

Suggested change

The kubelet and the credential provider plugin binary communicate through stdio (stdin, stdout, and stderr) by sending and receiving

The kubelet and the exec plugin communicate through stdio (stdin, stdout, and stderr) by sending and receiving

divya-mohan0209 · 2022-12-08T01:27:00Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+
+The kubelet and the credential provider plugin binary communicate through stdio (stdin, stdout, and stderr) by sending and receiving
+json-serialized api-versioned types. If the exec plugin is enabled and the kubelet requires authentication information for an image
+that matches against a plugin, the kubelet will exec the plugin binary, passing the `CredentialProviderRequest` API via stdin. Then


Since it is a verb, I think it should be written completely.

Suggested change

that matches against a plugin, the kubelet will exec the plugin binary, passing the `CredentialProviderRequest` API via stdin. Then

that matches against a plugin, the kubelet will execute the plugin binary, passing the `CredentialProviderRequest` API via stdin. Then

divya-mohan0209 · 2022-12-08T01:27:56Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+
+{{< figure src="kubelet-credential-providers-how-it-works.png" caption="Figure 3: Kubelet credential provider plugin flow" >}}
+
+On receiving credentials from the Kubelet, the plugin can also indicate how long credentials can be cached for, to prevent unecessary


Capitalization of kubelet not required.

Suggested change

On receiving credentials from the Kubelet, the plugin can also indicate how long credentials can be cached for, to prevent unecessary

On receiving credentials from the kubelet, the plugin can also indicate how long credentials can be cached for, to prevent unnecessary

divya-mohan0209 · 2022-12-08T01:28:07Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+{{< figure src="kubelet-credential-providers-how-it-works.png" caption="Figure 3: Kubelet credential provider plugin flow" >}}
+
+On receiving credentials from the Kubelet, the plugin can also indicate how long credentials can be cached for, to prevent unecessary
+execution of the plugin by the Kubelet for subsequent image pull requests to the same registry. In cases where the cache duration


Suggested change

execution of the plugin by the Kubelet for subsequent image pull requests to the same registry. In cases where the cache duration

execution of the plugin by the kubelet for subsequent image pull requests to the same registry. In cases where the cache duration

divya-mohan0209 · 2022-12-08T01:33:01Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+
+In addition, the plugin can specify the scope in which cached credentials are valid for. This is specified through the `cacheKeyType` field
+in `CredentialProviderResponse`. When the value is `Image`, the kubelet will only use cached credentials for future image pulls that exactly
+match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls


For the Registry value, do we mean to say that the kubelet uses cached credentials for image pulls from the same registry host? Adding the verb originate here could confuse the audience because they might assume that the image-pulling action originates at the registry host end.

Suggested change

match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls

match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls

divya-mohan0209 · 2022-12-08T01:36:15Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+In addition, the plugin can specify the scope in which cached credentials are valid for. This is specified through the `cacheKeyType` field
+in `CredentialProviderResponse`. When the value is `Image`, the kubelet will only use cached credentials for future image pulls that exactly
+match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls
+that originate from the same registry host, but using different paths (e.g. `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images


Suggested change

that originate from the same registry host, but using different paths (e.g. `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

from the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

divya-mohan0209 · 2022-12-08T01:36:33Z

content/en/blog/_posts/2022-11-28-kubelet-credential-providers/index.md

+in `CredentialProviderResponse`. When the value is `Image`, the kubelet will only use cached credentials for future image pulls that exactly
+match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls
+that originate from the same registry host, but using different paths (e.g. `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images
+from the same registry). And lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against


Suggested change

from the same registry). And lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against

from the same registry).

Lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against

Signed-off-by: Andrew Sy Kim <[email protected]>

andrewsykim · 2022-12-08T04:19:46Z

I think I addressed all your comments @divya-mohan0209, please take another look!

divya-mohan0209

Small nits. But otherwise LGTM!

Thank you @andrewsykim !

divya-mohan0209 · 2022-12-08T04:26:24Z

content/en/blog/_posts/2022-12-22-kubelet-credential-providers/index.md

+In addition, the plugin can specify the scope in which cached credentials are valid for. This is specified through the `cacheKeyType` field
+in `CredentialProviderResponse`. When the value is `Image`, the kubelet will only use cached credentials for future image pulls that exactly
+match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls
+destined for the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images


I changed using by use erroneously earlier on. Sorry about that.

Suggested change

destined for the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

destined for the same registry host but using different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

divya-mohan0209 · 2022-12-08T04:27:31Z

content/en/blog/_posts/2022-12-22-kubelet-credential-providers/index.md

+match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls
+destined for the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images
+from the same registry). Lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against
+the plugin, including images that can map to different registry hosts (e.g. gcr.io vs k8s.gcr.io). The `cacheKeyType` field is required by plugin


nit.

Suggested change

the plugin, including images that can map to different registry hosts (e.g. gcr.io vs k8s.gcr.io). The `cacheKeyType` field is required by plugin

the plugin, including images that can map to different registry hosts (for example, gcr.io vs k8s.gcr.io). The `cacheKeyType` field is required by the plugin

divya-mohan0209 · 2022-12-08T04:28:01Z

content/en/blog/_posts/2022-12-22-kubelet-credential-providers/index.md

+* `--image-credential-provider-bin-dir`: the path to the directory where credential provider plugin binaries are located.
+
+The configuration file passed into `--image-credential-provider-config` is read by the kubelet to determine which exec plugins should be invoked for a container image used by a Pod.
+Note that the name of each _provider_ must match the name of the binary located in the local directory specified in `--image-credential-provider-bin-dir`, otherwise the Kubelet


nit.

Suggested change

Note that the name of each _provider_ must match the name of the binary located in the local directory specified in `--image-credential-provider-bin-dir`, otherwise the Kubelet

Note that the name of each _provider_ must match the name of the binary located in the local directory specified in `--image-credential-provider-bin-dir`, otherwise the kubelet

sftim · 2022-12-08T10:07:15Z

/lgtm
/approve

k8s-ci-robot · 2022-12-08T10:07:22Z

LGTM label has been added.

Git tree hash: e63de64cfee63f69f886792bcb7735245b988167

k8s-ci-robot · 2022-12-08T10:07:25Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sftim

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~content/en/blog/OWNERS~~ [sftim]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

sftim · 2022-12-08T10:08:05Z

content/en/blog/_posts/2022-12-22-kubelet-credential-providers/index.md

+      "username": "“user”",
+      "password": "“token12345”"


Suggested change

"username": "“user”",

"password": "“token12345”"

"username": "exampleuser",

"password": "token12345"

If you can fix the images to match, that's even better.

Fixed this part and the image, thanks!

sftim · 2022-12-08T14:38:37Z

/lgtm

k8s-ci-robot · 2022-12-08T14:38:43Z

LGTM label has been added.

Git tree hash: aff2c2712d4cbd2b897d28640d9a5fd1fe32e00c

Signed-off-by: Andrew Sy Kim <[email protected]>

andrewsykim · 2022-12-08T14:49:04Z

Sorry, I missed the last review #37647 (review), updated to address those nits

sftim · 2022-12-08T19:11:14Z

Also LGTM

/lgtm

k8s-ci-robot · 2022-12-08T19:11:19Z

LGTM label has been added.

Git tree hash: 00174437c2bb545fb1a2d6beb55e4eb03cbaa6b5

andrewsykim · 2022-12-12T20:46:22Z

/hold cancel

k8s-ci-robot requested review from nate-double-u and sftim November 1, 2022 13:19

k8s-ci-robot added language/en Issues or PRs related to English language sig/docs Categorizes an issue or PR as relevant to SIG Docs. labels Nov 1, 2022

ruiwen-zhao mentioned this pull request Nov 10, 2022

Kubelet Credential Provider kubernetes/enhancements#2133

Closed

4 tasks

andrewsykim force-pushed the blog-kep-2133 branch from 99fd644 to 2b87350 Compare November 29, 2022 02:45

k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Nov 29, 2022

andrewsykim changed the title ~~[WIP] Add placeholder blog post for KEP-2133~~ Blog: Kubernetes v1.26: GA Support for Kubelet Registry Credential Providers Nov 29, 2022

k8s-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Nov 29, 2022

andrewsykim force-pushed the blog-kep-2133 branch from 2b87350 to e07b45c Compare November 29, 2022 02:49

andrewsykim commented Nov 29, 2022

View reviewed changes

andrewsykim force-pushed the blog-kep-2133 branch 2 times, most recently from d3dec40 to ae02bec Compare November 29, 2022 17:30

k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Nov 29, 2022

andrewsykim force-pushed the blog-kep-2133 branch from ae02bec to d6c6c3e Compare November 30, 2022 02:31

sftim reviewed Dec 7, 2022

View reviewed changes

divya-mohan0209 reviewed Dec 8, 2022

View reviewed changes

update publication date to 2022-12-22

a8929d8

Signed-off-by: Andrew Sy Kim <[email protected]>

divya-mohan0209 reviewed Dec 8, 2022

View reviewed changes

k8s-ci-robot assigned sftim Dec 8, 2022

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 8, 2022

k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Dec 8, 2022

sftim reviewed Dec 8, 2022

View reviewed changes

andrewsykim force-pushed the blog-kep-2133 branch from 835d1be to 72be85d Compare December 8, 2022 14:28

k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 8, 2022

k8s-ci-robot requested review from divya-mohan0209 and sftim December 8, 2022 14:29

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 8, 2022

address review comments for minor fixes

655d4f3

Signed-off-by: Andrew Sy Kim <[email protected]>

andrewsykim force-pushed the blog-kep-2133 branch from 72be85d to 655d4f3 Compare December 8, 2022 14:48

k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 8, 2022

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 8, 2022

k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Dec 12, 2022

k8s-ci-robot merged commit 19a22d4 into kubernetes:main Dec 12, 2022

	Note that the name of each "provider" must match the name of the binary located in the local directry specified in `--image-credential-provider-bin-dir`, otherwise the Kubelet
	Note that the name of each _provider_ must match the name of the binary located in the local
	directory specified in `--image-credential-provider-bin-dir`, otherwise the kubelet


		Authors: Andrew Sy Kim (Google), Dixita Narang (Google)

		Kubernetes v1.26 introduced generally available (GA) support for _kubelet credential

	which provide a mechanism for the kubelet to dynamically authenticate and pull images
	which provides a mechanism for the kubelet to dynamically authenticate and pull images


		## How it Works

		The kubelet and the credential provider plugin binary communicate through stdio (stdin, stdout, and stderr) by sending and receiving

	The kubelet and the credential provider plugin binary communicate through stdio (stdin, stdout, and stderr) by sending and receiving
	The kubelet and the exec plugin communicate through stdio (stdin, stdout, and stderr) by sending and receiving

	that matches against a plugin, the kubelet will exec the plugin binary, passing the `CredentialProviderRequest` API via stdin. Then
	that matches against a plugin, the kubelet will execute the plugin binary, passing the `CredentialProviderRequest` API via stdin. Then


		{{< figure src="kubelet-credential-providers-how-it-works.png" caption="Figure 3: Kubelet credential provider plugin flow" >}}

		On receiving credentials from the Kubelet, the plugin can also indicate how long credentials can be cached for, to prevent unecessary

	execution of the plugin by the Kubelet for subsequent image pull requests to the same registry. In cases where the cache duration
	execution of the plugin by the kubelet for subsequent image pull requests to the same registry. In cases where the cache duration

	match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls
	match the image of the first request. When the value is `Registry`, the kubelet will use cached credentials for any subsequent image pulls

	that originate from the same registry host, but using different paths (e.g. `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images
	from the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

	from the same registry). And lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against
	from the same registry).
	Lastly, when the value is `Global`, the kubelet will use returned credentials for all images that match against

	destined for the same registry host, but use different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images
	destined for the same registry host but using different paths (for example, `gcr.io/foo/bar` and `gcr.io/bar/foo` refer to different images

	the plugin, including images that can map to different registry hosts (e.g. gcr.io vs k8s.gcr.io). The `cacheKeyType` field is required by plugin
	the plugin, including images that can map to different registry hosts (for example, gcr.io vs k8s.gcr.io). The `cacheKeyType` field is required by the plugin

Blog: Kubernetes v1.26: GA Support for Kubelet Credential Providers #37647

Blog: Kubernetes v1.26: GA Support for Kubelet Credential Providers #37647

Conversation

andrewsykim commented Nov 1, 2022

netlify bot commented Nov 1, 2022 • edited Loading

✅ Pull request preview available for checking

katmutua commented Nov 15, 2022

andrewsykim commented Nov 15, 2022

davidmirror-ops commented Nov 16, 2022

fsmunoz commented Nov 24, 2022

andrewsykim commented Nov 28, 2022

sftim commented Nov 28, 2022

Choose a reason for hiding this comment

Choose a reason for hiding this comment

andrewsykim commented Nov 29, 2022

sftim commented Nov 29, 2022

sftim commented Nov 29, 2022

fsmunoz commented Dec 7, 2022

sftim left a comment

Choose a reason for hiding this comment

sftim Dec 7, 2022 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sftim Dec 7, 2022 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

divya-mohan0209 left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

andrewsykim commented Dec 8, 2022

divya-mohan0209 left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sftim commented Dec 8, 2022

k8s-ci-robot commented Dec 8, 2022

k8s-ci-robot commented Dec 8, 2022

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sftim commented Dec 8, 2022

k8s-ci-robot commented Dec 8, 2022

andrewsykim commented Dec 8, 2022

sftim commented Dec 8, 2022

k8s-ci-robot commented Dec 8, 2022

andrewsykim commented Dec 12, 2022

netlify bot commented Nov 1, 2022 •

edited

Loading

sftim Dec 7, 2022 •

edited

Loading

sftim Dec 7, 2022 •

edited

Loading