KEP-3619: Fine-grained SupplementalGroups control#117842

Merged

k8s-ci-robot merged 11 commits intokubernetes:masterfrom everpeace:kep-3619-SupplementalGroupsPolicy

May 29, 2024

+4,782-1,801

Commits on May 23, 2024

Add Linux{Sandbox,Container}SecurityContext.SupplementalGroupsPolicy and ContainerStatus.user in cri-api
everpeace
committed
Add PodSecurityContext.SupplementalGroupsPolicy, ContainerStatus.User and its featuregate
everpeace
committed
Implement DropDisabledPodFields for PodSecurityContext.SupplementalGroupsPolicy and ContainerStatus.User fields
everpeace
committed
Implement kubelet so to wire between SecurityContext.SupplementalGroupsPolicy/ContainerStatus.User and cri-api in kubelet
everpeace
committed
Clarify SupplementalGroupsPolicy is an OS depdendent field.
everpeace
committed
Make ContainerStatus.User is initially attached user identity to the first process in the ContainerStatus
everpeace
committed
Rewording suggestion applied
everpeace
committed
Add TODO comment for updating SupplementalGroupsPolicy default value in v1.34
everpeace
committed
Added validations for SupplementalGroupsPolicy and ContainerUser
everpeace
committed
No need featuregate check in validation when adding new field with no default value
everpeace
committed

Commits on May 29, 2024

fix typo: identitiy -> identity
everpeace
committed