@@ -472,7 +472,6 @@ Labels {along with possible values}:
472
472
473
473
- ` name`
474
474
- ` code` {"incomplete_request", "bad_response"}
475
- - ` decision` {NoOpinion}
476
475
477
476
5. `apiserver_authorization_configuration_reload_last_timestamp_seconds`
478
477
@@ -595,6 +594,13 @@ The behaviour is the same as when the feature is enabled for the first time.
595
594
We will have extensive unit tests during feature implementation. There would be tests
596
595
for the Authorizer chain in both the old and new configuration scenarios.
597
596
597
+ We will add integration tests to validate the enablement/disablement flow.
598
+ - When the feature is disabled, only the existing command line flag `--authorization-webhook-*`
599
+ based mode is allowed.
600
+ - When the feature is enable, setting both `--authorization-config-file` and
601
+ configuring an authorization webhook using the `--authorization-webhook-*`
602
+ command line flags should return an error.
603
+
598
604
# ## Rollout, Upgrade and Rollback Planning
599
605
600
606
> Note: This section is required when targeting Beta to a release.
690
696
691
697
# ## Scalability
692
698
693
- > Note: This section is good-to-have to Alpha.
699
+ > Note: This section is good-to-have for Alpha.
694
700
695
701
# ##### Will enabling / using this feature result in any new API calls?
696
702
@@ -731,7 +737,7 @@ This through this both in small and large cases, again with respect to the
731
737
[supported limits] : https://git.k8s.io/community//sig-scalability/configs-and-limits/thresholds.md
732
738
-->
733
739
734
- There would a very small addition to the memory used by the API Server and
740
+ No. There would be very minimal addition to the memory used by the API Server and
735
741
number of log entries written to the disk. During the Alpha implementation,
736
742
the small impact will be measured and rationalized to keep the addition
737
743
minimal. The addition would be well within the scalability limits and
0 commit comments