Authenticator Provided Authorization Constraints

[everettraven]

Enhancement Description

• One-line enhancement description (can be used as a release note): Adds a way for authenticators to specify constraints that should be enforced during authorization evaluation.
• Kubernetes Enhancement Proposal:
• Discussion Link:
  • Jan. 28th 2026 SIG auth bi-weekly: agenda/notes
  • Jan. 14th 2026 SIG Auth bi-weekly: agenda/notes
  • Dec. 3rd 2025 SIG Auth bi-weekly: agenda/notes
• PRs by stage and milestone:
  • Alpha - v1.xx
    • KEP (k/enhancements) update PR(s):
    • Code (k/k) update PR(s):
    • Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[everettraven]

/sig auth