Merge pull request kubernetes#3828 from PushkarJ/kep-3203-alpha-beta

KEP-3203: Alpha->Beta Graduation Updates

Author: k8s-ci-robot

keps/prod-readiness/sig-security/3203.yaml

@@ -1,3 +1,5 @@
 kep-number: 3203
 alpha:
   approver: "@johnbelamaric"
+beta:
+  approver: "@johnbelamaric"

keps/sig-security/3203-auto-refreshing-official-cve-feed/README.md

@@ -99,6 +99,7 @@ tags, and then generate with `hack/update-toc.sh`.
   - [Test Plan](#test-plan)
   - [Graduation Criteria](#graduation-criteria)
     - [Alpha](#alpha)
+    - [Beta](#beta)
   - [Upgrade / Downgrade Strategy](#upgrade--downgrade-strategy)
   - [Version Skew Strategy](#version-skew-strategy)
 - [Production Readiness Review Questionnaire](#production-readiness-review-questionnaire)
@@ -249,6 +250,8 @@ provide it to users of my platform.
   Google Cloud Bucket)
 - Using Hugo and other tooling (such as Netlify), publish the list from this
   JSON blob on official k8s website during `k/website` build
+- Generate an RSS feed (atom format) with hugo templates using the generated
+  JSON blob
 
 ### Risks and Mitigations
 
@@ -305,6 +308,8 @@ The steps to implement this design will involve a prow job that:
 
 - A GCS bucket needs to be created. Example PR for this looks
   like [this](https://github.com/kubernetes/k8s.io/pull/2570/files)
+- Additional custom fields need to be added to make JSON feed compliant with 
+  https://validator.jsonfeed.org/ 
 
 ### Test Plan
 
@@ -326,7 +331,15 @@ This is a process KEP implemented using periodic prow job. This KEP is not imple
 
 #### Alpha
 
-- KEP implementation is still in alpha and will be moved to beta based on community feedback within the next couple of release cycles.
+- Feature implemented with working JSON feed and tabular list
+- Initial e2e testing completed and alerting setup for detecting failures
+
+#### Beta
+
+- Gather feedback from developers and end users
+- Make JSON feed compliant with `jsonfeed` spec
+- Add `RSS` feed for the CVE list
+- Add fields that signal freshness of the data
 
 <!--
 **Note:** *Not required until targeted at a release.*

keps/sig-security/3203-auto-refreshing-official-cve-feed/kep.yaml

@@ -25,13 +25,13 @@ see-also:
 
 #replaces: []
 #
-stage: alpha
+stage: beta
 
-latest-milestone: "v1.25"
+latest-milestone: "v1.27"
 
 milestone:
   alpha: "v1.25"
-  beta: "TBD"
+  beta: "v1.27"
   stable: "TBD"
 
 ## This KEP enhances Kubernetes testing.  It does not directly impact any component.