Skip to content

Commit 50cb8a1

Browse files
authored
Merge pull request #4730 from deads2k/selector-criteria
KEP-4601: add graduation criteria for selector based authorization
2 parents da4dde0 + 365d236 commit 50cb8a1

File tree

1 file changed

+11
-24
lines changed
  • keps/sig-auth/4601-authorize-with-selectors

1 file changed

+11
-24
lines changed

keps/sig-auth/4601-authorize-with-selectors/README.md

Lines changed: 11 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,9 @@
2727
- [Integration tests](#integration-tests)
2828
- [e2e tests](#e2e-tests)
2929
- [Graduation Criteria](#graduation-criteria)
30+
- [Alpha](#alpha)
31+
- [Beta](#beta)
32+
- [GA](#ga)
3033
- [Upgrade / Downgrade Strategy](#upgrade--downgrade-strategy)
3134
- [Version Skew Strategy](#version-skew-strategy)
3235
- [New kube-apiserver, old webhook authorizer](#new-kube-apiserver-old-webhook-authorizer)
@@ -458,41 +461,25 @@ functionality is accessed.
458461
[deprecation-policy]: https://kubernetes.io/docs/reference/using-api/deprecation-policy/
459462
460463
Below are some examples to consider, in addition to the aforementioned [maturity levels][maturity-levels].
464+
-->
461465

462466
#### Alpha
463467

464468
- Feature implemented behind a feature flag
465-
- Initial e2e tests completed and enabled
469+
- Unit tests demonstrating wiring and fallback
470+
- E2E test demonstrating node authorizer uses the field selector
471+
- Integration test demonstrating field selector wiring
472+
- must include fallback on parsing error as well
466473

467474
#### Beta
468475

469-
- Gather feedback from developers and surveys
470-
- Complete features A, B, C
471-
- Additional tests are in Testgrid and linked in KEP
476+
- Determine if additional tests are necessary
477+
- Ensure reliability of existing tests
472478

473479
#### GA
474480

475-
- N examples of real-world usage
476-
- N installs
477-
- More rigorous forms of testing—e.g., downgrade tests and scalability tests
478-
- Allowing time for feedback
479-
480-
**Note:** Generally we also wait at least two releases between beta and
481-
GA/stable, because there's no opportunity for user feedback, or even bug reports,
482-
in back-to-back releases.
483-
484-
**For non-optional features moving to GA, the graduation criteria must include
485-
[conformance tests].**
481+
- All bugs resolved and no new bugs requiring code change since the previous shipped release
486482

487-
[conformance tests]: https://git.k8s.io/community/contributors/devel/sig-architecture/conformance-tests.md
488-
489-
#### Deprecation
490-
491-
- Announce deprecation and support policy of the existing flag
492-
- Two versions passed since introducing the functionality that deprecates the flag (to address version skew)
493-
- Address feedback on usage/changed behavior, provided on GitHub issues
494-
- Deprecate the flag
495-
-->
496483

497484
### Upgrade / Downgrade Strategy
498485

0 commit comments

Comments
 (0)