|
7 | 7 | - [Goals](#goals)
|
8 | 8 | - [Non-Goals](#non-goals)
|
9 | 9 | - [Proposal](#proposal)
|
10 |
| - - [User Stories](#user-stories) |
| 10 | + - [User Stories (Optional)](#user-stories-optional) |
11 | 11 | - [Story 1](#story-1)
|
12 | 12 | - [Story 2](#story-2)
|
13 | 13 | - [Story 3](#story-3)
|
14 | 14 | - [Story 4](#story-4)
|
15 | 15 | - [Story 5](#story-5)
|
16 |
| - - [Notes/Constraints/Caveats](#notesconstraintscaveats) |
| 16 | + - [Notes/Constraints/Caveats (Optional)](#notesconstraintscaveats-optional) |
17 | 17 | - [Risks and Mitigations](#risks-and-mitigations)
|
18 | 18 | - [Design Details](#design-details)
|
19 | 19 | - [Pod.spec changes](#podspec-changes)
|
@@ -64,10 +64,14 @@ Items marked with (R) are required *prior to targeting to a milestone / release*
|
64 | 64 | - [X] (R) Enhancement issue in release milestone, which links to KEP dir in [kubernetes/enhancements] (not the initial KEP PR)
|
65 | 65 | - [X] (R) KEP approvers have approved the KEP status as `implementable`
|
66 | 66 | - [X] (R) Design details are appropriately documented
|
67 |
| -- [X] (R) Test plan is in place, giving consideration to SIG Architecture and SIG Testing input |
| 67 | +- [X] (R) Test plan is in place, giving consideration to SIG Architecture and SIG Testing input (including test refactors) |
| 68 | + - [X] e2e Tests for all Beta API Operations (endpoints) |
| 69 | + - [ ] (R) Ensure GA e2e tests meet requirements for [Conformance Tests](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/conformance-tests.md) |
| 70 | + - [ ] (R) Minimum Two Week Window for GA e2e tests to prove flake free |
68 | 71 | - [X] (R) Graduation criteria is in place
|
| 72 | + - [ ] (R) [all GA Endpoints](https://github.com/kubernetes/community/pull/1806) must be hit by [Conformance Tests](https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/conformance-tests.md) |
69 | 73 | - [X] (R) Production readiness review completed
|
70 |
| -- [X] Production readiness review approved |
| 74 | +- [X] (R) Production readiness review approved |
71 | 75 | - [X] "Implementation History" section is up-to-date for milestone
|
72 | 76 | - [ ] User-facing documentation has been created in [kubernetes/website], for publication to [kubernetes.io]
|
73 | 77 | - [ ] Supporting documentation—e.g., additional design documents, links to mailing list discussions/SIG meetings, relevant PRs/issues, release notes
|
@@ -156,7 +160,7 @@ This proposal aims to support running pods inside user namespaces.
|
156 | 160 |
|
157 | 161 | This mitigates all the vulnerabilities listed in the motivation section.
|
158 | 162 |
|
159 |
| -### User Stories |
| 163 | +### User Stories (Optional) |
160 | 164 |
|
161 | 165 | #### Story 1
|
162 | 166 |
|
@@ -190,7 +194,7 @@ As a cluster admin, I want to use different host UIDs/GIDs for pods running on
|
190 | 194 | the same node (whenever kernel/kube features allow it), so I can mitigate the
|
191 | 195 | impact a compromised pod can have on other pods and the node itself.
|
192 | 196 |
|
193 |
| -### Notes/Constraints/Caveats |
| 197 | +### Notes/Constraints/Caveats (Optional) |
194 | 198 |
|
195 | 199 | ### Risks and Mitigations
|
196 | 200 |
|
|
0 commit comments