Intro: Auth SIG
summary
SIG outlines concrete progress: the CSR API has been beta for three years and teams push several long‑stalled APIs toward beta/GA, notably token request API plus token projection volumes to deliver short‑lived pod tokens; node self‑delete permissions are being phased out with node restriction work targeted around 1.17; work on external service account signer uses a gRPC unix socket so API servers avoid restarts for key rotation; bound service account tokens aim to migrate controllers to ephemeral credentials; triage and biweekly meetings drive followups and contributions.
AI-written summary · about
chapters (8)
- 0:00Intro
- 2:10What have we been working on
- 7:10Dynamic Audit
- 11:30Hardening
- 16:55Triaging
- 18:35Meetings
- 19:35Wrapup
- 20:20Future plans
related talks
01h 32mSIG Auth Update and Deep Dive
36mSIG Auth Deep Dive
31mIntro to Kubernetes Sig-Architecture Subprojects
30mSIG API Machinery: Project Updates and Release Planning
33mMeet the Gears Behind Kubernetes APIs: Introduction to SIG API-Machinery
33mSIG Architecture Intro and Update
38mSIG Release Deep Dive
33mSIG Release Intro